Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   weißer Bildschirm bei Windowsstart; abgesicherter Modus mit Eingabefunktion funktioniert nur noch (https://www.trojaner-board.de/135969-weisser-bildschirm-windowsstart-abgesicherter-modus-eingabefunktion-funktioniert-nur-noch.html)

henkelkrug 03.06.2013 10:43
weißer Bildschirm bei Windowsstart; abgesicherter Modus mit Eingabefunktion funktioniert nur noch
 
Hey Trojaner- Board Team,

mein Computer möchte nicht mehr so wie ich will:lmaa:.

Wie schon in der Überschrift gesagt, kommt beim normalem Starten nur noch ein weißer Bildschirm nachdem ich mich angemeldet habe. Im normalen abgesicherten Modus fährt er nach erfolgter anmeldung sofort wieder runter.
Im abgesicherten Modus mit Eingabefunktion habe ich den OTL-Scan durchgeführt. (die beiden txt. - Dateien anbei)
Betriebssystem: Windows 7 professional

Über Hilfestellung, wie ich das wieder bereinigen kann würde ich mich echt freuen!!!

grüße

markusg 03.06.2013 10:44
Hi,


otl fix

Fixen mit OTL

  • Starte bitte die OTL.exe.
  • Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:
:OTL
O20 - HKU\S-1-5-21-439004799-1684730875-2493318267-1000 Winlogon: Shell - (C:\Users\User\AppData\Roaming\skype.dat) - C:\Users\User\AppData\Roaming\skype.dat ()

[2013.06.03 08:25:28 | 000,000,004 | ---- | M] () -- C:\Users\User\AppData\Roaming\skype.ini
:files
:Commands
[emptytemp]
  • Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
  • Schließe bitte nun alle Programme.
  • Klicke nun bitte auf den Fix Button.
  • OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
  • Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
    ( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
    Kopiere nun den Inhalt hier in Deinen Thread


starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)

henkelkrug 03.06.2013 11:33
Super, danke schonmal für die schnelle Antwort.
Im normalen Modus kann ich jetzt wieder hochfahren. Die Zip-Datei hoffe ich richtig versand zu haben und hier kommt jetzt noch die txt-datei, die nach dem Hochfahren angezeigt wurde.


Code:
All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-439004799-1684730875-2493318267-1000\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Users\User\AppData\Roaming\skype.dat deleted successfully.
C:\Users\User\AppData\Roaming\skype.dat moved successfully.
C:\Users\User\AppData\Roaming\skype.ini moved successfully.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: User
->Temp folder emptied: 579968624 bytes
->Temporary Internet Files folder emptied: 850415225 bytes
->Java cache emptied: 16757950 bytes
->FireFox cache emptied: 472964531 bytes
->Opera cache emptied: 45138681 bytes
->Flash cache emptied: 3279579 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 200704 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 378972193 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36045936 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 2.273,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06032013_115933

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

markusg 03.06.2013 11:34
Danke fürs hochladen.
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

henkelkrug 03.06.2013 16:26
soweit hats auch geklappt :) er findet 4 threats, aber hier die log-datei:

Code:
17:15:22.0180 1976  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:15:22.0336 1976  ============================================================
17:15:22.0336 1976  Current date / time: 2013/06/03 17:15:22.0336
17:15:22.0336 1976  SystemInfo:
17:15:22.0336 1976 
17:15:22.0336 1976  OS Version: 6.1.7601 ServicePack: 1.0
17:15:22.0336 1976  Product type: Workstation
17:15:22.0336 1976  ComputerName: USER-PC
17:15:22.0336 1976  UserName: User
17:15:22.0336 1976  Windows directory: C:\Windows
17:15:22.0336 1976  System windows directory: C:\Windows
17:15:22.0336 1976  Running under WOW64
17:15:22.0336 1976  Processor architecture: Intel x64
17:15:22.0336 1976  Number of processors: 4
17:15:22.0336 1976  Page size: 0x1000
17:15:22.0336 1976  Boot type: Normal boot
17:15:22.0336 1976  ============================================================
17:15:23.0412 1976  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:15:23.0412 1976  Drive \Device\Harddisk1\DR1 - Size: 0x1D9BFFE00 (7.40 Gb), SectorSize: 0x200, Cylinders: 0x3C6, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
17:15:23.0412 1976  ============================================================
17:15:23.0412 1976  \Device\Harddisk0\DR0:
17:15:23.0428 1976  MBR partitions:
17:15:23.0428 1976  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A385000
17:15:23.0428 1976  \Device\Harddisk1\DR1:
17:15:23.0428 1976  MBR partitions:
17:15:23.0428 1976  \Device\Harddisk1\DR1\Partition1: MBR, Type 0xC, StartLBA 0x202B, BlocksNum 0xECBFD5
17:15:23.0428 1976  ============================================================
17:15:23.0444 1976  C: <-> \Device\Harddisk0\DR0\Partition1
17:15:23.0444 1976  ============================================================
17:15:23.0444 1976  Initialize success
17:15:23.0444 1976  ============================================================
17:15:34.0566 3740  ============================================================
17:15:34.0566 3740  Scan started
17:15:34.0566 3740  Mode: Manual; SigCheck; TDLFS;
17:15:34.0566 3740  ============================================================
17:15:34.0754 3740  ================ Scan system memory ========================
17:15:34.0754 3740  System memory - ok
17:15:34.0754 3740  ================ Scan services =============================
17:15:35.0081 3740  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
17:15:35.0206 3740  1394ohci - ok
17:15:35.0284 3740  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
17:15:35.0315 3740  ACPI - ok
17:15:35.0378 3740  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
17:15:35.0456 3740  AcpiPmi - ok
17:15:35.0549 3740  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:15:35.0580 3740  AdobeARMservice - ok
17:15:35.0752 3740  [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
17:15:35.0768 3740  AdobeFlashPlayerUpdateSvc - ok
17:15:35.0830 3740  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
17:15:35.0892 3740  adp94xx - ok
17:15:35.0939 3740  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
17:15:35.0970 3740  adpahci - ok
17:15:36.0002 3740  [ E109549C90F62FB570B9540C4B148E54 ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
17:15:36.0017 3740  adpu320 - ok
17:15:36.0033 3740  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
17:15:36.0189 3740  AeLookupSvc - ok
17:15:36.0236 3740  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD            C:\Windows\system32\drivers\afd.sys
17:15:36.0314 3740  AFD - ok
17:15:36.0345 3740  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
17:15:36.0360 3740  agp440 - ok
17:15:36.0407 3740  [ 3290D6946B5E30E70414990574883DDB ] ALG            C:\Windows\System32\alg.exe
17:15:36.0454 3740  ALG - ok
17:15:36.0501 3740  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
17:15:36.0516 3740  aliide - ok
17:15:36.0516 3740  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
17:15:36.0548 3740  amdide - ok
17:15:36.0579 3740  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
17:15:36.0641 3740  AmdK8 - ok
17:15:36.0672 3740  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
17:15:36.0719 3740  AmdPPM - ok
17:15:36.0750 3740  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
17:15:36.0782 3740  amdsata - ok
17:15:36.0828 3740  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
17:15:36.0860 3740  amdsbs - ok
17:15:36.0891 3740  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
17:15:36.0906 3740  amdxata - ok
17:15:36.0953 3740  [ 89A69C3F2F319B43379399547526D952 ] AppID          C:\Windows\system32\drivers\appid.sys
17:15:37.0172 3740  AppID - ok
17:15:37.0203 3740  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
17:15:37.0296 3740  AppIDSvc - ok
17:15:37.0343 3740  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo        C:\Windows\System32\appinfo.dll
17:15:37.0390 3740  Appinfo - ok
17:15:37.0468 3740  [ 018857EAD9A077A56AEDFC0E5EF7A24A ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:15:37.0484 3740  Apple Mobile Device - ok
17:15:37.0546 3740  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt        C:\Windows\System32\appmgmts.dll
17:15:37.0593 3740  AppMgmt - ok
17:15:37.0624 3740  [ C484F8CEB1717C540242531DB7845C4E ] arc            C:\Windows\system32\DRIVERS\arc.sys
17:15:37.0640 3740  arc - ok
17:15:37.0655 3740  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
17:15:37.0671 3740  arcsas - ok
17:15:37.0718 3740  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
17:15:37.0796 3740  AsyncMac - ok
17:15:37.0811 3740  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi          C:\Windows\system32\drivers\atapi.sys
17:15:37.0827 3740  atapi - ok
17:15:37.0889 3740  [ FC0E8778C000291CAF60EB88C011E931 ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
17:15:37.0936 3740  atksgt - ok
17:15:37.0998 3740  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:15:38.0123 3740  AudioEndpointBuilder - ok
17:15:38.0139 3740  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
17:15:38.0186 3740  AudioSrv - ok
17:15:38.0232 3740  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
17:15:38.0295 3740  AxInstSV - ok
17:15:38.0326 3740  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbda.sys
17:15:38.0373 3740  b06bdrv - ok
17:15:38.0420 3740  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
17:15:38.0466 3740  b57nd60a - ok
17:15:38.0576 3740  [ F48FEB7DA35821DA15E0B006DCB9A169 ] BBSvc          C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe
17:15:38.0607 3740  BBSvc - ok
17:15:38.0669 3740  [ 8E16F7A85441986FD2B9CE6C879524E4 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe
17:15:38.0700 3740  BBUpdate - ok
17:15:38.0716 3740  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
17:15:38.0763 3740  BDESVC - ok
17:15:38.0794 3740  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
17:15:38.0872 3740  Beep - ok
17:15:38.0934 3740  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE            C:\Windows\System32\bfe.dll
17:15:39.0028 3740  BFE - ok
17:15:39.0075 3740  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
17:15:39.0200 3740  BITS - ok
17:15:39.0231 3740  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
17:15:39.0262 3740  blbdrive - ok
17:15:39.0356 3740  [ F832F1505AD8B83474BD9A5B1B985E01 ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe
17:15:39.0387 3740  Bonjour Service - ok
17:15:39.0418 3740  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
17:15:39.0465 3740  bowser - ok
17:15:39.0496 3740  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
17:15:39.0574 3740  BrFiltLo - ok
17:15:39.0574 3740  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
17:15:39.0621 3740  BrFiltUp - ok
17:15:39.0668 3740  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser        C:\Windows\System32\browser.dll
17:15:39.0714 3740  Browser - ok
17:15:39.0746 3740  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
17:15:39.0792 3740  Brserid - ok
17:15:39.0824 3740  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
17:15:39.0855 3740  BrSerWdm - ok
17:15:39.0886 3740  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
17:15:39.0933 3740  BrUsbMdm - ok
17:15:39.0964 3740  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
17:15:39.0980 3740  BrUsbSer - ok
17:15:40.0042 3740  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum        C:\Windows\system32\drivers\BthEnum.sys
17:15:40.0089 3740  BthEnum - ok
17:15:40.0120 3740  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
17:15:40.0167 3740  BTHMODEM - ok
17:15:40.0198 3740  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
17:15:40.0229 3740  BthPan - ok
17:15:40.0276 3740  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT        C:\Windows\System32\Drivers\BTHport.sys
17:15:40.0354 3740  BTHPORT - ok
17:15:40.0385 3740  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv        C:\Windows\system32\bthserv.dll
17:15:40.0448 3740  bthserv - ok
17:15:40.0479 3740  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
17:15:40.0510 3740  BTHUSB - ok
17:15:40.0541 3740  [ 6BCFDC2B5B7F66D484486D4BD4B39A6B ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys
17:15:40.0557 3740  btwaudio - ok
17:15:40.0604 3740  [ 82DC8B7C626E526681C1BEBED2BC3FF9 ] btwavdt        C:\Windows\system32\DRIVERS\btwavdt.sys
17:15:40.0619 3740  btwavdt - ok
17:15:40.0713 3740  [ D65AA164ACD0F6706DBCFBBCC9731584 ] btwdins        c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
17:15:40.0775 3740  btwdins - ok
17:15:40.0822 3740  [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys
17:15:40.0822 3740  btwl2cap - ok
17:15:40.0853 3740  [ 28E105AD3B79F440BF94780F507BF66A ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys
17:15:40.0869 3740  btwrchid - ok
17:15:40.0931 3740  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
17:15:40.0994 3740  cdfs - ok
17:15:41.0025 3740  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom          C:\Windows\system32\drivers\cdrom.sys
17:15:41.0072 3740  cdrom - ok
17:15:41.0103 3740  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc    C:\Windows\System32\certprop.dll
17:15:41.0181 3740  CertPropSvc - ok
17:15:41.0196 3740  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
17:15:41.0243 3740  circlass - ok
17:15:41.0290 3740  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
17:15:41.0321 3740  CLFS - ok
17:15:41.0384 3740  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:15:41.0399 3740  clr_optimization_v2.0.50727_32 - ok
17:15:41.0462 3740  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:15:41.0477 3740  clr_optimization_v2.0.50727_64 - ok
17:15:41.0540 3740  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:15:41.0571 3740  clr_optimization_v4.0.30319_32 - ok
17:15:41.0633 3740  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:15:41.0664 3740  clr_optimization_v4.0.30319_64 - ok
17:15:41.0711 3740  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
17:15:41.0742 3740  CmBatt - ok
17:15:41.0774 3740  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
17:15:41.0805 3740  cmdide - ok
17:15:41.0852 3740  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG            C:\Windows\system32\Drivers\cng.sys
17:15:41.0898 3740  CNG - ok
17:15:41.0945 3740  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
17:15:41.0976 3740  Compbatt - ok
17:15:42.0023 3740  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
17:15:42.0070 3740  CompositeBus - ok
17:15:42.0086 3740  COMSysApp - ok
17:15:42.0117 3740  cpuz132 - ok
17:15:42.0132 3740  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
17:15:42.0164 3740  crcdisk - ok
17:15:42.0210 3740  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
17:15:42.0242 3740  CryptSvc - ok
17:15:42.0288 3740  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC            C:\Windows\system32\drivers\csc.sys
17:15:42.0382 3740  CSC - ok
17:15:42.0429 3740  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll
17:15:42.0491 3740  CscService - ok
17:15:42.0554 3740  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
17:15:42.0632 3740  DcomLaunch - ok
17:15:42.0694 3740  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc      C:\Windows\System32\defragsvc.dll
17:15:42.0788 3740  defragsvc - ok
17:15:42.0819 3740  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
17:15:42.0912 3740  DfsC - ok
17:15:42.0944 3740  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
17:15:42.0990 3740  Dhcp - ok
17:15:43.0022 3740  DIRECTIO - ok
17:15:43.0053 3740  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
17:15:43.0131 3740  discache - ok
17:15:43.0178 3740  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys
17:15:43.0193 3740  Disk - ok
17:15:43.0224 3740  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
17:15:43.0256 3740  Dnscache - ok
17:15:43.0302 3740  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc        C:\Windows\System32\dot3svc.dll
17:15:43.0380 3740  dot3svc - ok
17:15:43.0427 3740  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS            C:\Windows\system32\dps.dll
17:15:43.0505 3740  DPS - ok
17:15:43.0568 3740  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
17:15:43.0599 3740  drmkaud - ok
17:15:43.0646 3740  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
17:15:43.0661 3740  DXGKrnl - ok
17:15:43.0724 3740  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost        C:\Windows\System32\eapsvc.dll
17:15:43.0770 3740  EapHost - ok
17:15:43.0848 3740  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv          C:\Windows\system32\DRIVERS\evbda.sys
17:15:43.0973 3740  ebdrv - ok
17:15:44.0004 3740  [ C118A82CD78818C29AB228366EBF81C3 ] EFS            C:\Windows\System32\lsass.exe
17:15:44.0036 3740  EFS - ok
17:15:44.0098 3740  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
17:15:44.0160 3740  ehRecvr - ok
17:15:44.0192 3740  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched        C:\Windows\ehome\ehsched.exe
17:15:44.0223 3740  ehSched - ok
17:15:44.0270 3740  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
17:15:44.0316 3740  elxstor - ok
17:15:44.0332 3740  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
17:15:44.0363 3740  ErrDev - ok
17:15:44.0394 3740  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem    C:\Windows\system32\es.dll
17:15:44.0472 3740  EventSystem - ok
17:15:44.0566 3740  [ 7C1042CDA4E7151E91F1E66A4D9118B0 ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:15:44.0628 3740  EvtEng - ok
17:15:44.0675 3740  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat          C:\Windows\system32\drivers\exfat.sys
17:15:44.0722 3740  exfat - ok
17:15:44.0738 3740  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat        C:\Windows\system32\drivers\fastfat.sys
17:15:44.0800 3740  fastfat - ok
17:15:44.0847 3740  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax            C:\Windows\system32\fxssvc.exe
17:15:44.0909 3740  Fax - ok
17:15:44.0925 3740  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
17:15:44.0940 3740  fdc - ok
17:15:44.0972 3740  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost        C:\Windows\system32\fdPHost.dll
17:15:45.0018 3740  fdPHost - ok
17:15:45.0034 3740  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
17:15:45.0112 3740  FDResPub - ok
17:15:45.0143 3740  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
17:15:45.0174 3740  FileInfo - ok
17:15:45.0190 3740  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
17:15:45.0268 3740  Filetrace - ok
17:15:45.0284 3740  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
17:15:45.0330 3740  flpydisk - ok
17:15:45.0362 3740  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
17:15:45.0393 3740  FltMgr - ok
17:15:45.0440 3740  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache      C:\Windows\system32\FntCache.dll
17:15:45.0502 3740  FontCache - ok
17:15:45.0564 3740  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:15:45.0580 3740  FontCache3.0.0.0 - ok
17:15:45.0596 3740  [ D43703496149971890703B4B1B723EAC ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
17:15:45.0611 3740  FsDepends - ok
17:15:45.0658 3740  [ 00D0B14D81013F430C341526A40005DC ] fspad_wlh64    C:\Windows\system32\DRIVERS\fspad_wlh64.sys
17:15:45.0705 3740  fspad_wlh64 - ok
17:15:45.0767 3740  [ 00D0B14D81013F430C341526A40005DC ] fspad_xp64      C:\Windows\system32\DRIVERS\fspad_xp64.sys
17:15:45.0783 3740  fspad_xp64 - ok
17:15:45.0830 3740  [ 53DAB1791917A72738539AD25C4EED7F ] fssfltr        C:\Windows\system32\DRIVERS\fssfltr.sys
17:15:45.0845 3740  fssfltr - ok
17:15:45.0923 3740  [ 206AD9A89BF05DFA1621F1FC7B82592D ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
17:15:45.0970 3740  fsssvc - ok
17:15:46.0017 3740  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
17:15:46.0032 3740  Fs_Rec - ok
17:15:46.0095 3740  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
17:15:46.0126 3740  fvevol - ok
17:15:46.0173 3740  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
17:15:46.0188 3740  gagp30kx - ok
17:15:46.0251 3740  [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM    C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:15:46.0266 3740  GEARAspiWDM - ok
17:15:46.0313 3740  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc          C:\Windows\System32\gpsvc.dll
17:15:46.0422 3740  gpsvc - ok
17:15:46.0454 3740  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
17:15:46.0500 3740  hcw85cir - ok
17:15:46.0563 3740  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:15:46.0610 3740  HdAudAddService - ok
17:15:46.0641 3740  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
17:15:46.0688 3740  HDAudBus - ok
17:15:46.0703 3740  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
17:15:46.0750 3740  HidBatt - ok
17:15:46.0797 3740  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
17:15:46.0844 3740  HidBth - ok
17:15:46.0875 3740  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
17:15:46.0906 3740  HidIr - ok
17:15:46.0922 3740  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv        C:\Windows\system32\hidserv.dll
17:15:46.0968 3740  hidserv - ok
17:15:47.0015 3740  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
17:15:47.0062 3740  HidUsb - ok
17:15:47.0109 3740  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
17:15:47.0202 3740  hkmsvc - ok
17:15:47.0234 3740  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
17:15:47.0249 3740  HomeGroupListener - ok
17:15:47.0280 3740  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
17:15:47.0296 3740  HomeGroupProvider - ok
17:15:47.0327 3740  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
17:15:47.0343 3740  HpSAMD - ok
17:15:47.0390 3740  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
17:15:47.0499 3740  HTTP - ok
17:15:47.0546 3740  [ C8F3119AD72A507D12EF389DF4C266EF ] hwdatacard      C:\Windows\system32\DRIVERS\ewusbmdm.sys
17:15:47.0577 3740  hwdatacard - ok
17:15:47.0608 3740  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
17:15:47.0624 3740  hwpolicy - ok
17:15:47.0655 3740  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys
17:15:47.0670 3740  i8042prt - ok
17:15:47.0702 3740  [ 631FA8935163B01FC0C02966CB3ADB92 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
17:15:47.0717 3740  iaStor - ok
17:15:47.0780 3740  [ 7493EA4DE41348F7D3EDBF9DB298F56A ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
17:15:47.0795 3740  IAStorDataMgrSvc - ok
17:15:47.0842 3740  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
17:15:47.0889 3740  iaStorV - ok
17:15:47.0936 3740  [ 86B750CC384F3A8B8C1D12F3188307AE ] ICQ Service    C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
17:15:47.0936 3740  ICQ Service - ok
17:15:48.0045 3740  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
17:15:48.0060 3740  IDriverT ( UnsignedFile.Multi.Generic ) - warning
17:15:48.0060 3740  IDriverT - detected UnsignedFile.Multi.Generic (1)
17:15:48.0138 3740  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc          C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:15:48.0185 3740  idsvc - ok
17:15:48.0232 3740  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
17:15:48.0263 3740  iirsp - ok
17:15:48.0310 3740  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
17:15:48.0404 3740  IKEEXT - ok
17:15:48.0435 3740  [ 36FDF367A1DABFF903E2214023D71368 ] Impcd          C:\Windows\system32\DRIVERS\Impcd.sys
17:15:48.0466 3740  Impcd - ok
17:15:48.0575 3740  [ 9C1D5314D42B7F1BD6AD6FB1BA8870A8 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
17:15:48.0622 3740  IntcAzAudAddService - ok
17:15:48.0638 3740  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
17:15:48.0653 3740  intelide - ok
17:15:48.0700 3740  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
17:15:48.0747 3740  intelppm - ok
17:15:48.0794 3740  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
17:15:48.0872 3740  IPBusEnum - ok
17:15:48.0903 3740  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:15:48.0965 3740  IpFilterDriver - ok
17:15:49.0012 3740  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
17:15:49.0090 3740  iphlpsvc - ok
17:15:49.0137 3740  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
17:15:49.0168 3740  IPMIDRV - ok
17:15:49.0199 3740  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
17:15:49.0262 3740  IPNAT - ok
17:15:49.0340 3740  [ 9B812A3484D89EB934982D67FB7D9313 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
17:15:49.0402 3740  iPod Service - ok
17:15:49.0449 3740  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
17:15:49.0496 3740  IRENUM - ok
17:15:49.0511 3740  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
17:15:49.0527 3740  isapnp - ok
17:15:49.0558 3740  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
17:15:49.0574 3740  iScsiPrt - ok
17:15:49.0605 3740  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
17:15:49.0620 3740  kbdclass - ok
17:15:49.0652 3740  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
17:15:49.0698 3740  kbdhid - ok
17:15:49.0714 3740  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
17:15:49.0730 3740  KeyIso - ok
17:15:49.0761 3740  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
17:15:49.0792 3740  KSecDD - ok
17:15:49.0823 3740  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
17:15:49.0839 3740  KSecPkg - ok
17:15:49.0886 3740  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk        C:\Windows\system32\drivers\ksthunk.sys
17:15:49.0948 3740  ksthunk - ok
17:15:49.0979 3740  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm          C:\Windows\system32\msdtckrm.dll
17:15:50.0057 3740  KtmRm - ok
17:15:50.0088 3740  [ AE83CF1805DA082BCAD86FF7C3207B0D ] L1C            C:\Windows\system32\DRIVERS\L1C62x64.sys
17:15:50.0135 3740  L1C - ok
17:15:50.0182 3740  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
17:15:50.0260 3740  LanmanServer - ok
17:15:50.0291 3740  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:15:50.0338 3740  LanmanWorkstation - ok
17:15:50.0385 3740  [ 156AB2E56DC3CA0B582E3362E07CDED7 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
17:15:50.0400 3740  lirsgt - ok
17:15:50.0447 3740  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
17:15:50.0525 3740  lltdio - ok
17:15:50.0541 3740  [ C1185803384AB3FEED115F79F109427F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
17:15:50.0603 3740  lltdsvc - ok
17:15:50.0634 3740  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts        C:\Windows\System32\lmhsvc.dll
17:15:50.0681 3740  lmhosts - ok
17:15:50.0728 3740  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
17:15:50.0744 3740  LSI_FC - ok
17:15:50.0744 3740  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
17:15:50.0759 3740  LSI_SAS - ok
17:15:50.0775 3740  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
17:15:50.0790 3740  LSI_SAS2 - ok
17:15:50.0822 3740  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
17:15:50.0837 3740  LSI_SCSI - ok
17:15:50.0884 3740  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv          C:\Windows\system32\drivers\luafv.sys
17:15:50.0962 3740  luafv - ok
17:15:50.0993 3740  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
17:15:51.0009 3740  Mcx2Svc - ok
17:15:51.0118 3740  [ 7CF1B716372B89568AE4C0FE769F5869 ] MDM            C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
17:15:51.0134 3740  MDM ( UnsignedFile.Multi.Generic ) - warning
17:15:51.0134 3740  MDM - detected UnsignedFile.Multi.Generic (1)
17:15:51.0165 3740  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
17:15:51.0196 3740  megasas - ok
17:15:51.0227 3740  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
17:15:51.0258 3740  MegaSR - ok
17:15:51.0290 3740  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS          C:\Windows\system32\mmcss.dll
17:15:51.0352 3740  MMCSS - ok
17:15:51.0383 3740  [ 800BA92F7010378B09F9ED9270F07137 ] Modem          C:\Windows\system32\drivers\modem.sys
17:15:51.0461 3740  Modem - ok
17:15:51.0492 3740  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
17:15:51.0539 3740  monitor - ok
17:15:51.0570 3740  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\drivers\mouclass.sys
17:15:51.0586 3740  mouclass - ok
17:15:51.0633 3740  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
17:15:51.0680 3740  mouhid - ok
17:15:51.0726 3740  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
17:15:51.0742 3740  mountmgr - ok
17:15:51.0789 3740  [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:15:51.0820 3740  MozillaMaintenance - ok
17:15:51.0914 3740  [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys
17:15:51.0929 3740  MpFilter - ok
17:15:51.0960 3740  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
17:15:51.0976 3740  mpio - ok
17:15:51.0992 3740  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
17:15:52.0070 3740  mpsdrv - ok
17:15:52.0101 3740  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
17:15:52.0226 3740  MpsSvc - ok
17:15:52.0241 3740  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
17:15:52.0288 3740  MRxDAV - ok
17:15:52.0319 3740  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
17:15:52.0350 3740  mrxsmb - ok
17:15:52.0366 3740  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:15:52.0413 3740  mrxsmb10 - ok
17:15:52.0428 3740  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:15:52.0475 3740  mrxsmb20 - ok
17:15:52.0506 3740  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
17:15:52.0522 3740  msahci - ok
17:15:52.0538 3740  [ DB801A638D011B9633829EB6F663C900 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
17:15:52.0553 3740  msdsm - ok
17:15:52.0569 3740  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC          C:\Windows\System32\msdtc.exe
17:15:52.0584 3740  MSDTC - ok
17:15:52.0631 3740  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
17:15:52.0694 3740  Msfs - ok
17:15:52.0725 3740  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
17:15:52.0787 3740  mshidkmdf - ok
17:15:52.0803 3740  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
17:15:52.0818 3740  msisadrv - ok
17:15:52.0834 3740  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
17:15:52.0896 3740  MSiSCSI - ok
17:15:52.0896 3740  msiserver - ok
17:15:52.0959 3740  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
17:15:53.0021 3740  MSKSSRV - ok
17:15:53.0130 3740  [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc        c:\Program Files\Microsoft Security Client\MsMpEng.exe
17:15:53.0146 3740  MsMpSvc - ok
17:15:53.0193 3740  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
17:15:53.0255 3740  MSPCLOCK - ok
17:15:53.0271 3740  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
17:15:53.0333 3740  MSPQM - ok
17:15:53.0364 3740  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
17:15:53.0380 3740  MsRPC - ok
17:15:53.0411 3740  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
17:15:53.0427 3740  mssmbios - ok
17:15:53.0442 3740  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
17:15:53.0489 3740  MSTEE - ok
17:15:53.0520 3740  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
17:15:53.0536 3740  MTConfig - ok
17:15:53.0536 3740  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup            C:\Windows\system32\Drivers\mup.sys
17:15:53.0552 3740  Mup - ok
17:15:53.0598 3740  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
17:15:53.0692 3740  napagent - ok
17:15:53.0723 3740  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
17:15:53.0786 3740  NativeWifiP - ok
17:15:53.0817 3740  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
17:15:53.0895 3740  NDIS - ok
17:15:53.0926 3740  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
17:15:53.0973 3740  NdisCap - ok
17:15:54.0020 3740  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
17:15:54.0098 3740  NdisTapi - ok
17:15:54.0129 3740  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
17:15:54.0176 3740  Ndisuio - ok
17:15:54.0207 3740  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
17:15:54.0254 3740  NdisWan - ok
17:15:54.0300 3740  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
17:15:54.0332 3740  NDProxy - ok
17:15:54.0410 3740  [ 7D2633295EB6FF2B938185874884059D ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
17:15:54.0472 3740  Nero BackItUp Scheduler 4.0 - ok
17:15:54.0519 3740  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
17:15:54.0581 3740  NetBIOS - ok
17:15:54.0612 3740  [ 09594D1089C523423B32A4229263F068 ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
17:15:54.0675 3740  NetBT - ok
17:15:54.0690 3740  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
17:15:54.0706 3740  Netlogon - ok
17:15:54.0753 3740  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
17:15:54.0846 3740  Netman - ok
17:15:54.0878 3740  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
17:15:54.0940 3740  netprofm - ok
17:15:54.0971 3740  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:15:54.0987 3740  NetTcpPortSharing - ok
17:15:55.0143 3740  [ 39EDE676D17F37AF4573C2B33EC28ACA ] NETw5s64        C:\Windows\system32\DRIVERS\NETw5s64.sys
17:15:55.0392 3740  NETw5s64 - ok
17:15:55.0439 3740  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
17:15:55.0455 3740  nfrd960 - ok
17:15:55.0502 3740  [ 162100E0BC8377710F9D170631921C03 ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys
17:15:55.0533 3740  NisDrv - ok
17:15:55.0580 3740  [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe
17:15:55.0595 3740  NisSrv - ok
17:15:55.0626 3740  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
17:15:55.0673 3740  NlaSvc - ok
17:15:55.0689 3740  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
17:15:55.0736 3740  Npfs - ok
17:15:55.0751 3740  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi            C:\Windows\system32\nsisvc.dll
17:15:55.0798 3740  nsi - ok
17:15:55.0829 3740  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
17:15:55.0907 3740  nsiproxy - ok
17:15:55.0954 3740  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
17:15:56.0048 3740  Ntfs - ok
17:15:56.0079 3740  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
17:15:56.0126 3740  Null - ok
17:15:56.0188 3740  [ AD37248BD442D41C9A896E53EB8A85EE ] NVHDA          C:\Windows\system32\drivers\nvhda64v.sys
17:15:56.0204 3740  NVHDA - ok
17:15:56.0422 3740  [ DD0FCD1355D274D5D2D17030EE2A32F3 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:15:56.0609 3740  nvlddmkm - ok
17:15:56.0656 3740  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
17:15:56.0672 3740  nvraid - ok
17:15:56.0687 3740  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
17:15:56.0703 3740  nvstor - ok
17:15:56.0734 3740  [ 0E66D5C183EDF80E4F6DD5C3C6693BF5 ] nvsvc          C:\Windows\system32\nvvsvc.exe
17:15:56.0765 3740  nvsvc - ok
17:15:56.0781 3740  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
17:15:56.0812 3740  nv_agp - ok
17:15:56.0874 3740  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:15:56.0921 3740  odserv - ok
17:15:56.0952 3740  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
17:15:56.0999 3740  ohci1394 - ok
17:15:57.0030 3740  [ 5A432A042DAE460ABE7199B758E8606C ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:15:57.0062 3740  ose - ok
17:15:57.0077 3740  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
17:15:57.0124 3740  p2pimsvc - ok
17:15:57.0155 3740  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
17:15:57.0202 3740  p2psvc - ok
17:15:57.0233 3740  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport        C:\Windows\system32\DRIVERS\parport.sys
17:15:57.0249 3740  Parport - ok
17:15:57.0280 3740  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr        C:\Windows\system32\drivers\partmgr.sys
17:15:57.0296 3740  partmgr - ok
17:15:57.0327 3740  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
17:15:57.0358 3740  PcaSvc - ok
17:15:57.0405 3740  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci            C:\Windows\system32\drivers\pci.sys
17:15:57.0420 3740  pci - ok
17:15:57.0436 3740  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
17:15:57.0452 3740  pciide - ok
17:15:57.0483 3740  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
17:15:57.0498 3740  pcmcia - ok
17:15:57.0514 3740  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw            C:\Windows\system32\drivers\pcw.sys
17:15:57.0530 3740  pcw - ok
17:15:57.0545 3740  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
17:15:57.0670 3740  PEAUTH - ok
17:15:57.0732 3740  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc    C:\Windows\system32\peerdistsvc.dll
17:15:57.0826 3740  PeerDistSvc - ok
17:15:57.0920 3740  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
17:15:57.0966 3740  PerfHost - ok
17:15:58.0029 3740  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla            C:\Windows\system32\pla.dll
17:15:58.0154 3740  pla - ok
17:15:58.0216 3740  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
17:15:58.0247 3740  PlugPlay - ok
17:15:58.0278 3740  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
17:15:58.0325 3740  PNRPAutoReg - ok
17:15:58.0341 3740  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
17:15:58.0372 3740  PNRPsvc - ok
17:15:58.0419 3740  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
17:15:58.0497 3740  PolicyAgent - ok
17:15:58.0528 3740  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power          C:\Windows\system32\umpo.dll
17:15:58.0590 3740  Power - ok
17:15:58.0622 3740  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
17:15:58.0700 3740  PptpMiniport - ok
17:15:58.0715 3740  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor      C:\Windows\system32\DRIVERS\processr.sys
17:15:58.0762 3740  Processor - ok
17:15:58.0793 3740  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc        C:\Windows\system32\profsvc.dll
17:15:58.0824 3740  ProfSvc - ok
17:15:58.0840 3740  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
17:15:58.0871 3740  ProtectedStorage - ok
17:15:58.0902 3740  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
17:15:58.0965 3740  Psched - ok
17:15:59.0027 3740  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
17:15:59.0105 3740  ql2300 - ok
17:15:59.0121 3740  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
17:15:59.0136 3740  ql40xx - ok
17:15:59.0168 3740  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE          C:\Windows\system32\qwave.dll
17:15:59.0199 3740  QWAVE - ok
17:15:59.0214 3740  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
17:15:59.0261 3740  QWAVEdrv - ok
17:15:59.0277 3740  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
17:15:59.0324 3740  RasAcd - ok
17:15:59.0355 3740  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
17:15:59.0433 3740  RasAgileVpn - ok
17:15:59.0464 3740  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto        C:\Windows\System32\rasauto.dll
17:15:59.0526 3740  RasAuto - ok
17:15:59.0558 3740  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
17:15:59.0604 3740  Rasl2tp - ok
17:15:59.0651 3740  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
17:15:59.0714 3740  RasMan - ok
17:15:59.0745 3740  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
17:15:59.0792 3740  RasPppoe - ok
17:15:59.0807 3740  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
17:15:59.0870 3740  RasSstp - ok
17:15:59.0901 3740  [ 77F665941019A1594D887A74F301FA2F ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
17:15:59.0948 3740  rdbss - ok
17:15:59.0963 3740  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
17:15:59.0979 3740  rdpbus - ok
17:16:00.0026 3740  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
17:16:00.0088 3740  RDPCDD - ok
17:16:00.0119 3740  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR          C:\Windows\system32\drivers\rdpdr.sys
17:16:00.0150 3740  RDPDR - ok
17:16:00.0182 3740  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
17:16:00.0260 3740  RDPENCDD - ok
17:16:00.0275 3740  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
17:16:00.0306 3740  RDPREFMP - ok
17:16:00.0353 3740  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
17:16:00.0384 3740  RDPWD - ok
17:16:00.0431 3740  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
17:16:00.0447 3740  rdyboost - ok
17:16:00.0525 3740  [ 6108654C5EBEA28A606D6890B4DE6DE3 ] RegSrvc        C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:16:00.0572 3740  RegSrvc - ok
17:16:00.0587 3740  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
17:16:00.0650 3740  RemoteAccess - ok
17:16:00.0696 3740  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
17:16:00.0759 3740  RemoteRegistry - ok
17:16:00.0806 3740  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
17:16:00.0852 3740  RFCOMM - ok
17:16:00.0930 3740  [ 79E740644D8D5E6057A4429F0D19A2CB ] RichVideo      c:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
17:16:00.0962 3740  RichVideo - ok
17:16:00.0977 3740  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
17:16:01.0024 3740  RpcEptMapper - ok
17:16:01.0055 3740  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
17:16:01.0102 3740  RpcLocator - ok
17:16:01.0133 3740  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs          C:\Windows\system32\rpcss.dll
17:16:01.0196 3740  RpcSs - ok
17:16:01.0242 3740  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
17:16:01.0320 3740  rspndr - ok
17:16:01.0367 3740  [ 8C22F21C924413D4E109995F748E18BB ] RSUSBSTOR      C:\Windows\system32\Drivers\RtsUStor.sys
17:16:01.0383 3740  RSUSBSTOR - ok
17:16:01.0383 3740  RtsUIR - ok
17:16:01.0414 3740  [ E60C0A09F997826C7627B244195AB581 ] s3cap          C:\Windows\system32\drivers\vms3cap.sys
17:16:01.0430 3740  s3cap - ok
17:16:01.0445 3740  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs          C:\Windows\system32\lsass.exe
17:16:01.0461 3740  SamSs - ok
17:16:01.0476 3740  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
17:16:01.0492 3740  sbp2port - ok
17:16:01.0523 3740  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
17:16:01.0554 3740  SCardSvr - ok
17:16:01.0601 3740  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
17:16:01.0664 3740  scfilter - ok
17:16:01.0726 3740  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
17:16:01.0820 3740  Schedule - ok
17:16:01.0851 3740  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc    C:\Windows\System32\certprop.dll
17:16:01.0898 3740  SCPolicySvc - ok
17:16:01.0929 3740  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
17:16:01.0960 3740  SDRSVC - ok
17:16:02.0007 3740  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
17:16:02.0069 3740  secdrv - ok
17:16:02.0100 3740  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
17:16:02.0163 3740  seclogon - ok
17:16:02.0194 3740  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
17:16:02.0256 3740  SENS - ok
17:16:02.0272 3740  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
17:16:02.0303 3740  SensrSvc - ok
17:16:02.0334 3740  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
17:16:02.0350 3740  Serenum - ok
17:16:02.0381 3740  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys
17:16:02.0412 3740  Serial - ok
17:16:02.0428 3740  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
17:16:02.0444 3740  sermouse - ok
17:16:02.0490 3740  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
17:16:02.0537 3740  SessionEnv - ok
17:16:02.0568 3740  [ A554811BCD09279536440C964AE35BBF ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
17:16:02.0600 3740  sffdisk - ok
17:16:02.0615 3740  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
17:16:02.0631 3740  sffp_mmc - ok
17:16:02.0646 3740  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
17:16:02.0678 3740  sffp_sd - ok
17:16:02.0709 3740  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
17:16:02.0740 3740  sfloppy - ok
17:16:02.0771 3740  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
17:16:02.0834 3740  SharedAccess - ok
17:16:02.0865 3740  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:16:02.0927 3740  ShellHWDetection - ok
17:16:02.0943 3740  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
17:16:02.0958 3740  SiSRaid2 - ok
17:16:02.0958 3740  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
17:16:02.0974 3740  SiSRaid4 - ok
17:16:03.0036 3740  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
17:16:03.0052 3740  SkypeUpdate - ok
17:16:03.0099 3740  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
17:16:03.0177 3740  Smb - ok
17:16:03.0224 3740  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
17:16:03.0270 3740  SNMPTRAP - ok
17:16:03.0302 3740  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr          C:\Windows\system32\drivers\spldr.sys
17:16:03.0317 3740  spldr - ok
17:16:03.0364 3740  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler        C:\Windows\System32\spoolsv.exe
17:16:03.0426 3740  Spooler - ok
17:16:03.0520 3740  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
17:16:03.0645 3740  sppsvc - ok
17:16:03.0676 3740  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify    C:\Windows\system32\sppuinotify.dll
17:16:03.0723 3740  sppuinotify - ok
17:16:03.0785 3740  [ 602884696850C86434530790B110E8EB ] sptd            C:\Windows\system32\Drivers\sptd.sys
17:16:03.0785 3740  Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850C86434530790B110E8EB
17:16:03.0785 3740  sptd ( LockedFile.Multi.Generic ) - warning
17:16:03.0785 3740  sptd - detected LockedFile.Multi.Generic (1)
17:16:03.0832 3740  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv            C:\Windows\system32\DRIVERS\srv.sys
17:16:03.0910 3740  srv - ok
17:16:03.0941 3740  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
17:16:03.0988 3740  srv2 - ok
17:16:04.0019 3740  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
17:16:04.0035 3740  srvnet - ok
17:16:04.0082 3740  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
17:16:04.0175 3740  SSDPSRV - ok
17:16:04.0191 3740  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc        C:\Windows\system32\sstpsvc.dll
17:16:04.0253 3740  SstpSvc - ok
17:16:04.0300 3740  Steam Client Service - ok
17:16:04.0316 3740  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
17:16:04.0347 3740  stexstor - ok
17:16:04.0378 3740  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
17:16:04.0456 3740  stisvc - ok
17:16:04.0487 3740  [ 7785DC213270D2FC066538DAF94087E7 ] storflt        C:\Windows\system32\drivers\vmstorfl.sys
17:16:04.0487 3740  storflt - ok
17:16:04.0518 3740  [ C40841817EF57D491F22EB103DA587CC ] StorSvc        C:\Windows\system32\storsvc.dll
17:16:04.0550 3740  StorSvc - ok
17:16:04.0565 3740  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc        C:\Windows\system32\drivers\storvsc.sys
17:16:04.0581 3740  storvsc - ok
17:16:04.0596 3740  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys
17:16:04.0596 3740  swenum - ok
17:16:04.0628 3740  [ E08E46FDD841B7184194011CA1955A0B ] swprv          C:\Windows\System32\swprv.dll
17:16:04.0706 3740  swprv - ok
17:16:04.0768 3740  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain        C:\Windows\system32\sysmain.dll
17:16:04.0877 3740  SysMain - ok
17:16:04.0908 3740  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:16:04.0940 3740  TabletInputService - ok
17:16:04.0955 3740  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv        C:\Windows\System32\tapisrv.dll
17:16:05.0018 3740  TapiSrv - ok
17:16:05.0033 3740  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS            C:\Windows\System32\tbssvc.dll
17:16:05.0096 3740  TBS - ok
17:16:05.0158 3740  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
17:16:05.0252 3740  Tcpip - ok
17:16:05.0314 3740  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
17:16:05.0361 3740  TCPIP6 - ok
17:16:05.0408 3740  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
17:16:05.0439 3740  tcpipreg - ok
17:16:05.0470 3740  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
17:16:05.0486 3740  TDPIPE - ok
17:16:05.0517 3740  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
17:16:05.0548 3740  TDTCP - ok
17:16:05.0579 3740  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
17:16:05.0642 3740  tdx - ok
17:16:05.0673 3740  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys
17:16:05.0688 3740  TermDD - ok
17:16:05.0735 3740  [ 2E648163254233755035B46DD7B89123 ] TermService    C:\Windows\System32\termsrv.dll
17:16:05.0813 3740  TermService - ok
17:16:05.0844 3740  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
17:16:05.0891 3740  Themes - ok
17:16:05.0922 3740  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER    C:\Windows\system32\mmcss.dll
17:16:05.0969 3740  THREADORDER - ok
17:16:05.0969 3740  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
17:16:06.0032 3740  TrkWks - ok
17:16:06.0110 3740  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:16:06.0172 3740  TrustedInstaller - ok
17:16:06.0203 3740  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
17:16:06.0281 3740  tssecsrv - ok
17:16:06.0328 3740  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
17:16:06.0344 3740  TsUsbFlt - ok
17:16:06.0406 3740  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
17:16:06.0468 3740  tunnel - ok
17:16:06.0500 3740  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
17:16:06.0500 3740  uagp35 - ok
17:16:06.0546 3740  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
17:16:06.0640 3740  udfs - ok
17:16:06.0671 3740  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect      C:\Windows\system32\UI0Detect.exe
17:16:06.0687 3740  UI0Detect - ok
17:16:06.0702 3740  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
17:16:06.0718 3740  uliagpkx - ok
17:16:06.0765 3740  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus          C:\Windows\system32\drivers\umbus.sys
17:16:06.0812 3740  umbus - ok
17:16:06.0843 3740  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
17:16:06.0890 3740  UmPass - ok
17:16:06.0921 3740  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll
17:16:06.0952 3740  UmRdpService - ok
17:16:06.0999 3740  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
17:16:07.0061 3740  upnphost - ok
17:16:07.0108 3740  [ F724B03C3DFAACF08D17D38BF3333583 ] USBAAPL64      C:\Windows\system32\Drivers\usbaapl64.sys
17:16:07.0124 3740  USBAAPL64 - ok
17:16:07.0155 3740  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp        C:\Windows\system32\DRIVERS\usbccgp.sys
17:16:07.0170 3740  usbccgp - ok
17:16:07.0170 3740  USBCCID - ok
17:16:07.0217 3740  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
17:16:07.0264 3740  usbcir - ok
17:16:07.0280 3740  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci        C:\Windows\system32\drivers\usbehci.sys
17:16:07.0311 3740  usbehci - ok
17:16:07.0342 3740  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
17:16:07.0373 3740  usbhub - ok
17:16:07.0404 3740  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
17:16:07.0436 3740  usbohci - ok
17:16:07.0482 3740  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
17:16:07.0514 3740  usbprint - ok
17:16:07.0529 3740  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:16:07.0592 3740  USBSTOR - ok
17:16:07.0607 3740  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
17:16:07.0638 3740  usbuhci - ok
17:16:07.0685 3740  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
17:16:07.0732 3740  usbvideo - ok
17:16:07.0748 3740  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms          C:\Windows\System32\uxsms.dll
17:16:07.0826 3740  UxSms - ok
17:16:07.0841 3740  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
17:16:07.0841 3740  VaultSvc - ok
17:16:07.0872 3740  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
17:16:07.0888 3740  vdrvroot - ok
17:16:07.0919 3740  [ 8D6B481601D01A456E75C3210F1830BE ] vds            C:\Windows\System32\vds.exe
17:16:07.0997 3740  vds - ok
17:16:08.0044 3740  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
17:16:08.0075 3740  vga - ok
17:16:08.0075 3740  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave        C:\Windows\System32\drivers\vga.sys
17:16:08.0122 3740  VgaSave - ok
17:16:08.0169 3740  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
17:16:08.0184 3740  vhdmp - ok
17:16:08.0231 3740  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
17:16:08.0247 3740  viaide - ok
17:16:08.0262 3740  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus          C:\Windows\system32\drivers\vmbus.sys
17:16:08.0278 3740  vmbus - ok
17:16:08.0294 3740  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
17:16:08.0325 3740  VMBusHID - ok
17:16:08.0387 3740  [ 6E021D6DA429AD7288FE8322E2BBA96B ] VMCService      C:\Program Files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
17:16:08.0403 3740  VMCService ( UnsignedFile.Multi.Generic ) - warning
17:16:08.0403 3740  VMCService - detected UnsignedFile.Multi.Generic (1)
17:16:08.0418 3740  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
17:16:08.0434 3740  volmgr - ok
17:16:08.0465 3740  [ A255814907C89BE58B79EF2F189B843B ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
17:16:08.0496 3740  volmgrx - ok
17:16:08.0512 3740  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
17:16:08.0528 3740  volsnap - ok
17:16:08.0637 3740  [ D6653180D162CB3144FDBC8A651CEBB1 ] vpnagent        C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
17:16:08.0684 3740  vpnagent - ok
17:16:08.0730 3740  [ 13E6D95E7AC67ABB7A1196557EF8849F ] vpnva          C:\Windows\system32\DRIVERS\vpnva64.sys
17:16:08.0730 3740  vpnva - ok
17:16:08.0777 3740  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
17:16:08.0808 3740  vsmraid - ok
17:16:08.0871 3740  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS            C:\Windows\system32\vssvc.exe
17:16:08.0980 3740  VSS - ok
17:16:09.0011 3740  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
17:16:09.0027 3740  vwifibus - ok
17:16:09.0042 3740  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
17:16:09.0074 3740  vwififlt - ok
17:16:09.0105 3740  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp        C:\Windows\system32\DRIVERS\vwifimp.sys
17:16:09.0120 3740  vwifimp - ok
17:16:09.0183 3740  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time        C:\Windows\system32\w32time.dll
17:16:09.0245 3740  W32Time - ok
17:16:09.0261 3740  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
17:16:09.0292 3740  WacomPen - ok
17:16:09.0354 3740  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
17:16:09.0417 3740  WANARP - ok
17:16:09.0417 3740  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
17:16:09.0464 3740  Wanarpv6 - ok
17:16:09.0526 3740  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc    C:\Windows\system32\Wat\WatAdminSvc.exe
17:16:09.0604 3740  WatAdminSvc - ok
17:16:09.0651 3740  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
17:16:09.0760 3740  wbengine - ok
17:16:09.0791 3740  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
17:16:09.0838 3740  WbioSrvc - ok
17:16:09.0869 3740  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc        C:\Windows\System32\wcncsvc.dll
17:16:09.0932 3740  wcncsvc - ok
17:16:09.0963 3740  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:16:09.0994 3740  WcsPlugInService - ok
17:16:10.0025 3740  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys
17:16:10.0041 3740  Wd - ok
17:16:10.0103 3740  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
17:16:10.0166 3740  Wdf01000 - ok
17:16:10.0181 3740  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
17:16:10.0212 3740  WdiServiceHost - ok
17:16:10.0212 3740  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost  C:\Windows\system32\wdi.dll
17:16:10.0244 3740  WdiSystemHost - ok
17:16:10.0290 3740  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient      C:\Windows\System32\webclnt.dll
17:16:10.0322 3740  WebClient - ok
17:16:10.0353 3740  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
17:16:10.0415 3740  Wecsvc - ok
17:16:10.0446 3740  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
17:16:10.0493 3740  wercplsupport - ok
17:16:10.0524 3740  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
17:16:10.0556 3740  WerSvc - ok
17:16:10.0618 3740  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
17:16:10.0665 3740  WfpLwf - ok
17:16:10.0680 3740  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
17:16:10.0696 3740  WIMMount - ok
17:16:10.0712 3740  WinDefend - ok
17:16:10.0727 3740  WinHttpAutoProxySvc - ok
17:16:10.0758 3740  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
17:16:10.0821 3740  Winmgmt - ok
17:16:10.0899 3740  [ BCB1310604AA415C4508708975B3931E ] WinRM          C:\Windows\system32\WsmSvc.dll
17:16:11.0024 3740  WinRM - ok
17:16:11.0086 3740  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
17:16:11.0133 3740  WinUsb - ok
17:16:11.0164 3740  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc        C:\Windows\System32\wlansvc.dll
17:16:11.0226 3740  Wlansvc - ok
17:16:11.0351 3740  [ 98F138897EF4246381D197CB81846D62 ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:16:11.0460 3740  wlidsvc - ok
17:16:11.0492 3740  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
17:16:11.0507 3740  WmiAcpi - ok
17:16:11.0538 3740  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
17:16:11.0570 3740  wmiApSrv - ok
17:16:11.0601 3740  WMPNetworkSvc - ok
17:16:11.0632 3740  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
17:16:11.0663 3740  WPCSvc - ok
17:16:11.0694 3740  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
17:16:11.0710 3740  WPDBusEnum - ok
17:16:11.0741 3740  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
17:16:11.0788 3740  ws2ifsl - ok
17:16:11.0804 3740  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
17:16:11.0835 3740  wscsvc - ok
17:16:11.0835 3740  WSearch - ok
17:16:11.0913 3740  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
17:16:12.0022 3740  wuauserv - ok
17:16:12.0178 3740  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
17:16:12.0209 3740  WudfPf - ok
17:16:12.0240 3740  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
17:16:12.0256 3740  WUDFRd - ok
17:16:12.0303 3740  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
17:16:12.0334 3740  wudfsvc - ok
17:16:12.0365 3740  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc        C:\Windows\System32\wwansvc.dll
17:16:12.0396 3740  WwanSvc - ok
17:16:12.0428 3740  ================ Scan global ===============================
17:16:12.0443 3740  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
17:16:12.0490 3740  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
17:16:12.0506 3740  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
17:16:12.0537 3740  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
17:16:12.0568 3740  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
17:16:12.0568 3740  [Global] - ok
17:16:12.0568 3740  ================ Scan MBR ==================================
17:16:12.0584 3740  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:16:13.0020 3740  \Device\Harddisk0\DR0 - ok
17:16:13.0020 3740  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
17:16:13.0223 3740  \Device\Harddisk1\DR1 - ok
17:16:13.0223 3740  ================ Scan VBR ==================================
17:16:13.0254 3740  [ C00F3D27A0D705FE6D8BBB9A61F1C21D ] \Device\Harddisk0\DR0\Partition1
17:16:13.0254 3740  \Device\Harddisk0\DR0\Partition1 - ok
17:16:13.0254 3740  [ 5A7382AC54B9E53BAC1684DD296FA0AF ] \Device\Harddisk1\DR1\Partition1
17:16:13.0254 3740  \Device\Harddisk1\DR1\Partition1 - ok
17:16:13.0270 3740  ============================================================
17:16:13.0270 3740  Scan finished
17:16:13.0270 3740  ============================================================
17:16:13.0270 0708  Detected object count: 4
17:16:13.0270 0708  Actual detected object count: 4
17:16:35.0500 0708  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
17:16:35.0500 0708  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:16:35.0500 0708  MDM ( UnsignedFile.Multi.Generic ) - skipped by user
17:16:35.0500 0708  MDM ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:16:35.0500 0708  sptd ( LockedFile.Multi.Generic ) - skipped by user
17:16:35.0500 0708  sptd ( LockedFile.Multi.Generic ) - User select action: Skip
17:16:35.0500 0708  VMCService ( UnsignedFile.Multi.Generic ) - skipped by user
17:16:35.0500 0708  VMCService ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:18:22.0369 1668  Deinitialize success

markusg 03.06.2013 16:38
Passt.
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

henkelkrug 03.06.2013 17:09
nun ist ComboFix auch durchgelaufen. Echt klasse, dass hier so schnell geholfen wird :)!



Code:
ComboFix 13-06-03.05 - User 03.06.2013  17:53:41.1.4 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.4022.2614 [GMT 2:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Public\sdelevURL.tmp
c:\users\User\AppData\Local\TempDIR
c:\users\User\AppData\Local\TempDIR\root.der
c:\users\User\AppData\Local\TempDIR\SecureW2.INF
c:\users\User\AppData\Local\TempDIR\SecureW2_EAP_Suite_202.exe
c:\users\User\AppData\Local\TempDIR\uhhwpaanleitung.pdf
c:\users\User\AppData\Roaming\Help\coredb\storage
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-05-03 bis 2013-06-03  ))))))))))))))))))))))))))))))
.
.
2013-06-03 15:58 . 2013-06-03 15:58        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-06-03 10:14 . 2013-05-13 06:37        9460464        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{478C0EF3-9083-40E4-BF1A-92BF6B0ACFD3}\mpengine.dll
2013-06-02 06:27 . 2013-05-13 06:37        9460464        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-01 12:30 . 2013-06-01 12:30        --------        d-----w-        c:\users\User\AppData\Roaming\Auslogics
2013-06-01 12:30 . 2013-06-01 12:30        --------        d-----w-        c:\program files (x86)\Auslogics
2013-05-29 22:08 . 2013-05-29 22:08        --------        d-----w-        c:\users\User\AppData\Local\ElevatedDiagnostics
2013-05-21 09:15 . 2013-05-21 09:15        964552        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{554C890B-72EA-43D4-940E-49367218C292}\gapaengine.dll
2013-05-15 20:19 . 2013-05-05 21:36        17818624        ----a-w-        c:\windows\system32\mshtml.dll
2013-05-15 20:19 . 2013-05-05 21:16        2382848        ----a-w-        c:\windows\system32\mshtml.tlb
2013-05-15 20:19 . 2013-05-05 19:12        2382848        ----a-w-        c:\windows\SysWow64\mshtml.tlb
2013-05-15 05:15 . 2013-04-10 06:01        265064        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys
2013-05-11 10:37 . 2013-05-11 10:37        209472        ----a-w-        c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2013-05-08 12:24 . 2013-05-08 12:24        --------        d-----w-        c:\users\User\AppData\Roaming\cef-cache
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-15 20:25 . 2010-05-26 13:37        75016696        ----a-w-        c:\windows\system32\MRT.exe
2013-05-15 06:49 . 2012-09-23 19:04        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-15 06:49 . 2011-05-30 13:24        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-02 15:29 . 2010-05-26 13:38        278800        ------w-        c:\windows\system32\MpSigStub.exe
2013-04-24 14:39 . 2011-03-31 21:51        905296        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-04-19 14:44 . 2013-04-19 14:44        163504        ----a-w-        c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10144.bin
2013-04-13 05:49 . 2013-05-15 05:15        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 05:15        350208        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 05:15        308736        ----a-w-        c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 05:15        111104        ----a-w-        c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 05:15        474624        ----a-w-        c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 05:15        2176512        ----a-w-        c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 06:20        1656680        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2013-04-04 12:50 . 2012-01-09 16:25        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-03-21 23:52 . 2009-07-14 02:36        152576        ----a-w-        c:\windows\SysWow64\msclmd.dll
2013-03-21 23:52 . 2009-07-14 02:36        175616        ----a-w-        c:\windows\system32\msclmd.dll
2013-03-19 06:04 . 2013-04-11 12:31        5550424        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-11 12:31        43520        ----a-w-        c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-11 12:31        3968856        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-11 12:31        3913560        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-11 12:31        6656        ----a-w-        c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-11 12:31        112640        ----a-w-        c:\windows\system32\smss.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2013-03-29 1631144]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]
"HotKeyOSD"="c:\program files (x86)\Hotkey OSD Driver\HotKeyOSD.exe" [2009-12-17 232528]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-04-27 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2009-04-27 50472]
"MobileConnect"="c:\program files (x86)\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2008-07-04 2072576]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584]
CineForm Status.lnk - c:\program files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe [2012-10-28 152064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 DIRECTIO;DIRECTIO;c:\sysprep\BIT6\DirectIo.sys;c:\sysprep\BIT6\DirectIo.sys [x]
R3 fspad_xp64;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_xp64;c:\windows\system32\DRIVERS\fspad_xp64.sys;c:\windows\SYSNATIVE\DRIVERS\fspad_xp64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys;c:\windows\SYSNATIVE\DRIVERS\Rts516xIR.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [x]
S2 VMCService;Vodafone Mobile Connect Service;c:\program files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe;c:\program files (x86)\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [x]
S2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe;c:\program files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [x]
S3 fspad_wlh64;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_wlh64;c:\windows\system32\DRIVERS\fspad_wlh64.sys;c:\windows\SYSNATIVE\DRIVERS\fspad_wlh64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 06044206
*NewlyCreated* - 28372469
*Deregistered* - 06044206
*Deregistered* - 28372469
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-23 06:49]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-09-29 8123936]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-12-02 16414824]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://start.icq.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Free YouTube Download - c:\users\User\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1
DPF: CC679CB8-DC4B-458B-B817-D447B3B6AC31 - vpnweb.cab
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\id1oefot.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.1.6&q=
FF - prefs.js: network.proxy.type - 4
pref('extensions.shownSelectionUI',true); pref('extensions.autoDisableScopes',0);
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
Toolbar-Locked - (no file)
HKLM-Run-fspuip - c:\program files (x86)\FSP\fspuip.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Siedler3Deinstall - c:\windows\IsUn0407.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-03  18:00:57
ComboFix-quarantined-files.txt  2013-06-03 16:00
.
Vor Suchlauf: 16 Verzeichnis(se), 344.111.267.840 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 343.945.412.608 Bytes frei
.
- - End Of File - - 3EDF006DA3DBB8C1D9F84F6A27DB878B

markusg 03.06.2013 17:11
Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

henkelkrug 03.06.2013 18:22
also der hat jetzt nichts gefunden, stelle den Bericht trotzdem mal hier rein. Allerdings muss ich sagen, dass ich vor drei Tagen den hab mal durchlaufen lassen (hatte das Programm schon vorher) und da wurden zwei Sachen gefunden. Ich schau mal nach den log-Dateien. Soll ichdie auch hier dann einstellen?

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.06.01.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: USER-PC [Administrator]

03.06.2013 18:13:47
mbam-log-2013-06-03 (18-13-47).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 391546
Laufzeit: 1 Stunde(n), 3 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
das war der Quick-Scan vom 1.6.13

Code:
Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org

Datenbank Version: v2012.11.22.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: USER-PC [Administrator]

01.06.2013 14:07:36
mbam-log-2013-06-01 (14-07-36).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 210564
Laufzeit: 5 Minute(n), 29 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\User\AppData\Roaming\skype.dat (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\User\AppData\Local\Temp\hjbblol (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

markusg 03.06.2013 18:39
ok.

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

henkelkrug 03.06.2013 19:01
tut mir Leid, dass ich nicht zu allem weiß, ob das von mir benötigt wird oder nicht.

hier die Liste:
Code:
2007 Microsoft Office system        Microsoft Corporation        18.02.2012                12.0.6612.1000 notwendig
Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        15.05.2013        6,00MB        11.7.700.202 unbekannt
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        15.05.2013        6,00MB        11.7.700.202 unbekannt
Adobe Reader XI (11.0.03) - Deutsch        Adobe Systems Incorporated        14.05.2013        134MB        11.0.03 notwendig
Adobe Shockwave Player 11.5        Adobe Systems, Inc.        28.05.2010                11.5.1.601 unbekannt
ANNO 1404        Ubisoft        29.09.2010                1.02.0000 unnötig
ANNO 1602 Königs-Edition                24.07.2011                1.00 unnötig
Apple Application Support        Apple Inc.        25.12.2010        52,8MB        1.4.1 unbekannt
Apple Mobile Device Support        Apple Inc.        25.12.2010        22,3MB        3.3.0.69 unbekannt
Apple Software Update        Apple Inc.        25.12.2010        2,25MB        2.1.2.120 unbekannt
Assassin's Creed II        Ubisoft        29.09.2010                1.00 unnötig
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver        Atheros Communications Inc.        20.05.2010                1.0.0.15 unbekannt
Auslogics Disk Defrag        Auslogics Software Pty Ltd        01.06.2013        18,7MB        3.6 notwendig
Battlefield: Bad Company™ 2        Electronic Arts        29.09.2010        5,73GB        1.0.0.0 unnötig
Bing Bar        Microsoft Corporation        31.10.2012        464KB        7.1.391.0 unbekannt
Bonjour        Apple Inc.        25.12.2010        1,74MB        2.0.4.0 unbekannt
bwin Poker        bwin        17.01.2013                notwendig
bwin Poker        bwincom        08.05.2013                notwendig
CCleaner        Piriform        24.05.2013                4.02 notwendig
Cisco AnyConnect VPN Client        Cisco Systems, Inc.        30.01.2012        4,81MB        2.5.3054 notwendig
Counter-Strike        Valve        30.07.2010                                                                unnötig
CyberLink PowerDVD 9        CyberLink Corp.        20.05.2010        141MB        9.0.1719        unnötig
Divinity II - DKS        Focus        27.11.2010                (#version}                notwendig
DivX-Setup        DivX, Inc.        28.05.2010                1.0.1.5                        unbekannt
Fable - The Lost Chapters        Microsoft Game Studios        26.09.2011        2,76GB        1.00.0000                        notwendig
Finger Sensing Pad Driver        Sentelic        21.05.2010                8.5.6.2 notwendig
GoPro CineForm Studio 1.3.2        CineForm, Inc & GoPro, Inc.        27.12.2012                1.3.2 notwendig
Grand Theft Auto Vice City                16.10.2010                1.00.000                unnötig
Hotkey OSD Driver        Dritek System Inc.        26.05.2010                1.0.01                unbekannt
ICQ Toolbar        ICQ        28.06.2010                3.0.0        unnötig
ICQ7.2        ICQ        28.06.2010                7.2                unnötig
Intel(R) Control Center        Intel Corporation        20.05.2010                1.2.0.1006        unbekannt
Intel(R) PROSet/Wireless WiFi-Software        Intel Corporation        20.05.2010        111MB        13.01.1000 unbekannt
Intel(R) Rapid Storage Technology        Intel Corporation        20.05.2010                9.5.0.1037 unbekannt
Intel(R) Turbo Boost Technology Driver        Intel Corporation        20.05.2010                01.00.01.1002 unbekannt
iTunes        Apple Inc.        25.12.2010        145MB        10.1.1.4 notwendig
Java(TM) 6 Update 30        Sun Microsystems, Inc.        28.05.2010        96,8MB        6.0.300 unnötig
Mafia II                23.09.2010                                                unnötig       
Malwarebytes Anti-Malware Version 1.75.0.1300        Malwarebytes Corporation        01.06.2013        19,2MB        1.75.0.1300 notwendig
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        07.03.2011        38,8MB        4.0.30319 unbekannt
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        07.03.2011        2,93MB        4.0.30319 unbekannt
Microsoft Office Live Add-in 1.5        Microsoft Corporation        27.05.2010        508KB        2.0.4024.1 unbekannt
Microsoft Office Outlook Connector        Microsoft Corporation        20.05.2010        6,13MB        12.0.6423.1000 unbekannt
Microsoft Office Suite Activation Assistant        Microsoft Corporation        20.05.2010        8,36MB        2.9 unbekannt
Microsoft Security Essentials        Microsoft Corporation        13.02.2013                4.2.223.1 notwendig
Microsoft Silverlight        Microsoft Corporation        21.03.2013        50,6MB        5.1.20125.0 notwendig
Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        20.05.2010        1,72MB        3.1.0000 unbekannt
Microsoft Sync Framework Runtime Native v1.0 (x86)        Microsoft Corporation        20.05.2010        625KB        1.0.1215.0 unbekannt
Microsoft Sync Framework Services Native v1.0 (x86)        Microsoft Corporation        20.05.2010        1,44MB        1.0.1215.0 unbekannt
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        27.05.2010        252KB        8.0.50727.4053 unbekannt
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        15.06.2011        300KB        8.0.56336 unbekannt
Microsoft Visual C++ 2005 Redistributable (x64)        Microsoft Corporation        27.12.2012        700KB        8.0.61000 unbekannt
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148        Microsoft Corporation        28.11.2010        200KB        9.0.30729.4148 unbekannt
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        28.04.2011        598KB        9.0.30729.5570 unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        27.11.2010        596KB        9.0.30729 unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        15.06.2011        600KB        9.0.30729.6161 unbekannt
Mozilla Firefox 21.0 (x86 de)        Mozilla        17.05.2013        47,4MB        21.0 notwendig
Mozilla Maintenance Service        Mozilla        17.05.2013        333KB        21.0 unbekannt
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        28.05.2010        1,27MB        4.20.9870.0 unbekannt
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        28.05.2010        1,33MB        4.20.9876.0 unbekannt
Nero 9 Essentials        Nero AG        27.05.2010                notwendig
NVIDIA Drivers        NVIDIA Corporation        20.05.2010                1.9 unbekannt
NVIDIA PhysX        NVIDIA Corporation        23.09.2010        78,9MB        9.10.0513 unbekannt
Opera 12.15        Opera Software ASA        05.04.2013                12.15.1748 notwendig
PDFCreator        Frank Heindörfer, Philip Chinery        28.05.2010                0.9.9 notwendig
QuickTime        Apple Inc.        25.12.2010        73,6MB        7.69.80.9 unnötig
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        20.05.2010                6.0.1.5948 unbekannt
Realtek USB 2.0 Card Reader        Realtek Semiconductor Corp.        20.05.2010                6.1.7600.30101 unbekannt
Siedler3                16.05.2011                                                unnötig
Skype Toolbars        Skype Technologies S.A.        07.03.2011        7,09MB        5.0.4126 unbekannt
Skype™ 5.10        Skype Technologies S.A.        13.09.2012        19,4MB        5.10.116 notwendig
Steam        Valve Corporation        30.07.2010        1,49MB        1.0.0.0 notwendig
Tom Clancy's Splinter Cell Conviction        Ubisoft        29.09.2010                1.00.000 unnötig
Ubisoft Game Launcher        UBISOFT        29.09.2010                1.0.0.0 unnötig
Vodafone Mobile Connect Lite        Vodafone        20.09.2010        23,6MB        9.3.3.10523 unnötig
Warcraft III                18.07.2010                notwendig
Warcraft III: All Products                18.07.2010        unbekannt       
WIDCOMM Bluetooth Software        Broadcom Corporation        20.05.2010        144MB        6.2.0.9600 notwendig
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 )        GoPro        27.12.2012                03/07/2012 notwendig
Windows Live Essentials        Microsoft Corporation        20.05.2010                14.0.8089.0726 notwendig
Windows Live ID-Anmelde-Assistent        Microsoft Corporation        27.05.2010        10,0MB        6.500.3165.0 unbekannt
Windows Live Sync        Microsoft Corporation        20.05.2010        2,79MB        14.0.8089.726 unbekannt
Windows Live-Uploadtool        Microsoft Corporation        20.05.2010        224KB        14.0.8014.1029 unbekannt

markusg 03.06.2013 19:07
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:

Adobe Shockwave
ANNO : beide
Assassin's
Auslogics : brauchst du unter win7 nicht, kann windows schon allein gut genug :-)
Battlefield:
Bing
Counter-Strike
CyberLink
DivX
Grand
ICQ: beide
Java
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
deinstaliere:
Mafia
Siedler3
Skype Toolbars
Tom
Ubisoft
Vodafone

Öffne CCleaner, analysieren, starten, pc neustarten.
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

henkelkrug 03.06.2013 19:59
so das hätte ich jetzt auch durch :) den defragmentierer hab ich drin, weil der von windows nicht funktioniert ;)

Code:
# AdwCleaner v2.301 - Datei am 03/06/2013 um 20:51:32 erstellt
# Aktualisiert am 16/05/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : User - USER-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\User\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar
Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16483

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.icq.com/ --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (de)

-\\ Opera v12.15.1748.0

*************************

AdwCleaner[S1].txt - [1191 octets] - [03/06/2013 20:51:32]

########## EOF - C:\AdwCleaner[S1].txt - [1251 octets] ##########

markusg 03.06.2013 20:04
was heißt "nicht funktioniert" genau?
neustarten bitte.
Hitmanpro laden:
HitmanPro - Download - Filepony
doppelklicken, scan klicken.
nichts löschen, weiter klicken.
Log speichern unter, bzw als xml exportieren, dann posten, bzw packen und anhängen

henkelkrug 03.06.2013 20:26
ahhh, das Programm hat die beiden erkannten Cookies gelöscht, obwohl ich auf 'weiter' geklickt habe. Sorry.
Es startet einfach nicht die Defragmentierung, wenn man auf defragmentieren klickt. Find ich aber nicht so schlimm. Ist schon so seit ich den PC neu habe.


Code:
<?xml version="1.0"?>
-<Log filesProcessed="18699" timeSpentInSecs="313" date="2013-06-03T21:15:18" version="3.7.6.201" scan="Normal" windows="6.1.1.7601.X64/4" computer="USER-PC">-<Item status="Deleted" score="0.0" type="Cookie"><File path="C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\id1oefot.default\cookies.sqlite:apmebf.com"/></Item>-<Item status="Deleted" score="0.0" type="Cookie"><File path="C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\id1oefot.default\cookies.sqlite:doubleclick.net"/></Item></Log>


Alle Zeitangaben in WEZ +1. Es ist jetzt 02:27 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131