Trojaner-Board - Trojaner - Computer gesperrt, Meldung angeblich von der Bundespolizei

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Trojaner - Computer gesperrt, Meldung angeblich von der Bundespolizei (https://www.trojaner-board.de/139046-trojaner-computer-gesperrt-meldung-angeblich-bundespolizei.html)

Trojaner - Computer gesperrt, Meldung angeblich von der Bundespolizei

Liebe Helfer!
Gestern Abend hat sich mein Laptop einen Trojaner eingefangen. Der Computer wurde gesperrt, es kam eine Meldung angeblich vom BSI mit der Aufforderung 100 Euro zu bezahlen. Ich konnte den Rechner zunächst im gesicherten Modus neu starten und hab einen vollständigen Scan mit meinem Sophos-Antivirusprogramm durchgeführt. Zwei Dateien wurden gefunden und in Quarantäne verschoben: Troj/Zbot-EON und Troj/EncProc-M. Das Problem wurde dadurch natürlich nicht gelöst, der Rechner läuft immer noch nur im gesicherten Modus. Da ich null Ahnung von Computern habe und nichts auf eigene Faust unternehmen will, um das ganze nicht noch schlimmer zu machen, möchte ich Sie um Hilfe bitten. Mein System ist Win7 64bit.
Ich habe die Anweisungen im Forum befolgt und defogger, OTL, gmer laufen lassen. Ich weiss nur nicht, wie ich den OTL-Logfile hier poste (Anhang funktioniert nicht, da die Datei größer als erlaubt ist).
Ich wäre echt sehr dankbar, wenn Sie helfen könnten...
Gruss und danke im Voraus!

Hi, wenn du noch so gut wbit, und otl.txt anhängst :-)

Hi und danke schonmal für die schnelle Antwort!
Die Datei ist zu groß, ich versuch mal einfach den "Text" hier rein zu kopieren. Sorry, ich bin zum ersten Mal hier und weiß nicht, wie ich es richtig mache :(OTL Logfile:

Code:

OTL logfile created on: 30.07.2013 13:45:17 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Polly1701\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16635)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,68 Gb Total Physical Memory | 2,88 Gb Available Physical Memory | 78,27% Memory free

7,36 Gb Paging File | 6,58 Gb Available in Paging File | 89,46% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 457,09 Gb Total Space | 345,16 Gb Free Space | 75,51% Space Free | Partition Type: NTFS

Unable to calculate disk information.

 

Computer Name: POLLY | User Name: Polly1701 | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.07.30 13:44:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Polly1701\Desktop\OTL.exe

PRC - [2012.07.05 16:00:49 | 000,139,840 | ---- | M] (Sophos Limited) -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2011.01.29 06:36:18 | 000,259,192 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe -- (SampleCollector)

SRV - [2013.07.04 17:29:08 | 003,022,464 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Digital Trends Club\HI-epanel-Reporting.exe -- (HI-epanel-Reporting-Service)

SRV - [2013.07.04 17:29:04 | 001,377,920 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Digital Trends Club\HI-epanel-Updater.exe -- (HI-epanel-Update-Service)

SRV - [2013.04.29 12:46:20 | 004,233,088 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU)

SRV - [2013.03.26 15:43:42 | 001,359,408 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Update\VUAgent.exe -- (VUAgent)

SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012.12.04 18:12:26 | 002,869,824 | ---- | M] (Sophos Limited) [Auto | Stopped] -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe -- (swi_service)

SRV - [2012.12.04 18:12:20 | 000,216,640 | ---- | M] (Sophos Limited) [Auto | Stopped] -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe -- (SAVAdminService)

SRV - [2012.12.04 18:12:11 | 001,998,400 | ---- | M] (Sophos Limited) [Auto | Stopped] -- C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe -- (swi_update_64)

SRV - [2012.09.29 20:54:26 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2012.09.29 20:54:26 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2012.08.08 16:23:50 | 000,232,512 | ---- | M] (Sophos Limited) [Auto | Stopped] -- C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe -- (Sophos AutoUpdate Service)

SRV - [2012.07.17 15:14:44 | 002,292,480 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2012.07.05 16:00:49 | 000,139,840 | ---- | M] (Sophos Limited) [Auto | Running] -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe -- (SAVService)

SRV - [2012.05.09 18:30:02 | 000,357,400 | ---- | M] (Sophos Limited) [Auto | Stopped] -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe -- (Sophos Web Control Service)

SRV - [2011.05.27 16:57:30 | 000,562,592 | ---- | M] (Affinegy, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)

SRV - [2011.02.14 14:23:50 | 000,044,736 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Care\VCService.exe -- (VCService)

SRV - [2010.08.11 09:46:06 | 000,845,312 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Programme\Sony\VAIO Smart Network\VSNService.exe -- (VSNService)

SRV - [2010.05.28 11:14:24 | 000,205,168 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.03.18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)

SRV - [2010.02.19 19:19:28 | 000,115,568 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe -- (VcmXmlIfHelper)

SRV - [2010.02.19 19:19:24 | 000,529,776 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr)

SRV - [2010.01.09 21:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)

SRV - [2009.11.30 20:51:18 | 000,571,248 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VAIO Power Management\SPMService.exe -- (VAIO Power Management)

SRV - [2009.11.20 16:25:24 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)

SRV - [2009.11.15 20:31:04 | 000,050,688 | ---- | M] () [Auto | Stopped] -- C:\Programme\ShrewSoft\VPN Client\dtpd.exe -- (dtpd)

SRV - [2009.11.15 20:28:44 | 000,948,224 | ---- | M] () [Auto | Stopped] -- C:\Programme\ShrewSoft\VPN Client\iked.exe -- (iked)

SRV - [2009.11.15 20:26:26 | 000,690,688 | ---- | M] () [Auto | Stopped] -- C:\Programme\ShrewSoft\VPN Client\ipsecd.exe -- (ipsecd)

SRV - [2009.10.24 04:18:54 | 000,360,224 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider)

SRV - [2009.10.15 17:34:36 | 000,427,304 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe -- (SOHDms)

SRV - [2009.10.15 17:34:36 | 000,091,432 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe -- (SOHPlMgr)

SRV - [2009.10.15 17:34:36 | 000,075,048 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe -- (SOHDs)

SRV - [2009.10.15 17:34:34 | 000,120,104 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe -- (SOHCImp)

SRV - [2009.10.15 17:34:34 | 000,070,952 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe -- (SOHDBSvr)

SRV - [2009.10.01 05:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)

SRV - [2009.10.01 05:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)

SRV - [2009.09.21 17:24:40 | 001,420,560 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)

SRV - [2009.09.21 17:00:44 | 000,831,760 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)

SRV - [2009.09.14 20:24:08 | 000,206,336 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc)

SRV - [2009.09.14 20:24:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service)

SRV - [2009.09.14 19:53:48 | 000,642,416 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw)

SRV - [2009.09.04 23:35:12 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Programme\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)

SRV - [2009.09.01 22:42:00 | 000,361,840 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Programme\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe -- (VcmINSMgr)

SRV - [2009.08.31 02:59:30 | 000,362,992 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe -- (Roxio Upnp Server 10)

SRV - [2009.08.31 02:59:18 | 000,313,840 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe -- (Roxio UPnP Renderer 10)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2008.09.18 11:59:10 | 000,104,960 | ---- | M] (ArcSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe -- (uCamMonitor)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.02.05 22:06:06 | 000,057,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)

DRV:64bit: - [2012.11.26 20:32:50 | 000,244,736 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)

DRV:64bit: - [2012.11.26 20:32:40 | 007,841,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2012.09.29 20:54:26 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2012.05.09 18:29:49 | 000,144,672 | ---- | M] (Sophos Limited) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\savonaccess.sys -- (SAVOnAccess)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.06 15:06:31 | 000,036,640 | ---- | M] (Sophos Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdcfilter.sys -- (sdcfilter)

DRV:64bit: - [2011.11.15 04:12:10 | 000,111,216 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010.11.20 11:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2009.11.20 16:09:48 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009.11.19 02:06:22 | 000,020,992 | ---- | M] (Shrew Soft Inc) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vfilter.sys -- (vflt)

DRV:64bit: - [2009.11.19 02:06:20 | 000,012,800 | ---- | M] (Shrew Soft Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\virtualnet.sys -- (vnet)

DRV:64bit: - [2009.11.18 22:04:10 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)

DRV:64bit: - [2009.11.18 22:04:09 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)

DRV:64bit: - [2009.11.18 22:04:09 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)

DRV:64bit: - [2009.11.18 22:04:08 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt)

DRV:64bit: - [2009.11.18 22:03:38 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)

DRV:64bit: - [2009.11.11 04:05:01 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)

DRV:64bit: - [2009.11.09 22:05:19 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)

DRV:64bit: - [2009.11.09 22:04:24 | 000,084,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)

DRV:64bit: - [2009.11.02 03:47:16 | 000,293,936 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)

DRV:64bit: - [2009.10.29 22:09:32 | 000,076,800 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdsne64.sys -- (risdsnpe)

DRV:64bit: - [2009.10.29 22:09:23 | 000,093,696 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimssne64.sys -- (rimspci)

DRV:64bit: - [2009.09.17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)

DRV:64bit: - [2009.09.15 13:40:42 | 006,952,960 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64)

DRV:64bit: - [2009.08.19 22:09:21 | 000,011,392 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SFEP.sys -- (SFEP)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 22:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.28 22:03:08 | 000,025,120 | ---- | M] (Sony Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\shpf.sys -- (shpf)

DRV:64bit: - [2009.05.26 15:32:04 | 000,019,968 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter)

DRV:64bit: - [2009.05.20 12:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009.02.09 11:06:31 | 000,025,608 | ---- | M] (Sophos Plc) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\SophosBootDriver.sys -- (SophosBootDriver)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = about:blank

IE - HKLM\..\SearchScopes,DefaultScope = {95289393-33EA-4F8D-B952-483415B9C955}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{95289393-33EA-4F8D-B952-483415B9C955}: "URL" = hxxp://search.qip.ru/?query={searchTerms}

IE - HKLM\..\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}: "URL" = hxxp://search.qip.ru/?query={searchTerms}

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = QIP.RU: ?????, ?????, ???????, ??????????, ???? ? ???????????

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = QIP: ????? ? ?????????

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = QIP: ????? ? ?????????

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = about:blank

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = QIP: ????? ? ?????????

IE - HKCU\..\URLSearchHook:  - No CLSID value found

IE - HKCU\..\URLSearchHook: {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Polly1701\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)

IE - HKCU\..\URLSearchHook: {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - No CLSID value found

IE - HKCU\..\SearchScopes,DefaultScope = {919F170F-C56D-40E5-A6EF-6C1CDE3947DD}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.searchplusnetwork.com/?sp=st3&q={searchTerms}

IE - HKCU\..\SearchScopes\{06A3D848-9B7E-41E5-8E96-4F16F5A0079A}: "URL" = Shopping.com Deutschland - der große Produkt- und Preisvergleich

IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4E2D0023140A0581&affID=121563&tt=040713_xmlful&tsp=4935

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\..\SearchScopes\{919F170F-C56D-40E5-A6EF-6C1CDE3947DD}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SVEC_deDE367

IE - HKCU\..\SearchScopes\{95289393-33EA-4F8D-B952-483415B9C955}: "URL" = hxxp://search.qip.ru/?query={searchTerms}

IE - HKCU\..\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}: "URL" = hxxp://search.qip.ru/search?query={searchTerms}&from=IE

IE - HKCU\..\SearchScopes\{E29F7AB2-53BB-41DB-9E04-09D74ED371D6}: "URL" = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search

IE - HKCU\..\SearchScopes\{F0792148-D0C5-4D29-915F-5ACBEF50A9F1}: "URL" = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

 

 
 ========== FireFox ==========

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_135.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll ()

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10174.dll (Amazon.com, Inc.)

 

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\gacela2@nurago.com: [INSTALLDIR]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\gacela2@nurago.com: C:\Program Files (x86)\Digital Trends Club\ [2013.07.30 13:28:57 | 000,000,000 | ---D | M]

 

[2013.07.06 16:26:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (Digital Trends Club) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\Digital Trends Club\x64\Gacela2.dll (HI-epanel)

O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (Digital Trends Club) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\Digital Trends Club\Gacela2.dll (HI-epanel)

O2 - BHO: (QIPBHO Class) - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Users\Polly1701\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [PSQLLauncher] C:\Program Files\Protector Suite\launcher.exe (UPEK Inc.)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe File not found

O4:64bit: - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe File not found

O4 - HKLM..\Run: [cvYTlJojJpL.exe] C:\ProgramData\cvYTlJojJpL.exe File not found

O4 - HKLM..\Run: [Family Tree Builder Update] C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe (MyHeritage)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

O4 - HKLM..\Run: [InstaLAN] C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)

O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)

O4 - HKLM..\Run: [MarketingTools] C:\Program Files (x86)\SONY\Marketing Tools\MarketingTools.exe (Sony Corporation)

O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe (Sony Corporation)

O4 - HKLM..\Run: [Sophos AutoUpdate Monitor] C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Sophos Limited)

O4 - HKCU..\Run: [aSQw8ccL0] C:\Users\Polly1701\AppData\Local\JCmZFOv.exe (NCSOFT Company)

O4 - HKCU..\Run: [Java Auto Update] C:\Users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\jsheded.exe File not found

O4 - Startup: C:\Users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Polly1701\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8:64bit: - Extra context menu item: Add to &Evernote - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000 File not found

O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Add to &Evernote - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Ãœber Digital Trends Club - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\Digital Trends Club\x64\Gacela2.dll (HI-epanel)

O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Über Digital Trends Club - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\Digital Trends Club\Gacela2.dll (HI-epanel)

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O9 - Extra 'Tools' menuitem : Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp_64.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll (Sophos Limited)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)

O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab (20-20 3D Viewer for IKEA)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E37588F-0867-4D56-8CF9-459548D4F801}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4183AE89-854E-467C-9FCC-94DE00E792A2}: NameServer = 134.147.32.40,134.147.222.4

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C92FD408-5D15-42D8-B3D5-B8DBD2FF43E8}: DhcpNameServer = 192.168.2.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL) - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll (Sophos Limited)

O20 - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL) - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll (Sophos Limited)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O20:64bit: - Winlogon\Notify\psfus: DllName - (C:\Program Files\Protector Suite\psqlpwd.dll) - C:\Programme\Protector Suite\psqlpwd.dll (UPEK Inc.)

O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\SysWow64\VESWinlogon.dll (Sony Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O33 - MountPoints2\{303421e9-b2d1-11df-a27f-0024be65bd74}\Shell - "" = AutoRun

O33 - MountPoints2\{303421e9-b2d1-11df-a27f-0024be65bd74}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{30342201-b2d1-11df-a27f-0024be65bd74}\Shell - "" = AutoRun

O33 - MountPoints2\{30342201-b2d1-11df-a27f-0024be65bd74}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{a4b092e7-bc24-11df-8126-0024be65bd74}\Shell - "" = AutoRun

O33 - MountPoints2\{a4b092e7-bc24-11df-8126-0024be65bd74}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{f693946d-b92a-11df-a95e-0024be65bd74}\Shell - "" = AutoRun

O33 - MountPoints2\{f693946d-b92a-11df-a95e-0024be65bd74}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O33 - MountPoints2\{f6939485-b92a-11df-a95e-0024be65bd74}\Shell - "" = AutoRun

O33 - MountPoints2\{f6939485-b92a-11df-a95e-0024be65bd74}\Shell\AutoRun\command - "" = D:\AutoRun.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.07.30 13:44:18 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Polly1701\Desktop\OTL.exe

[2013.07.29 22:22:04 | 000,183,296 | ---- | C] (NCSOFT Company) -- C:\Users\Polly1701\AppData\Local\JCmZFOv.exe

[2013.07.23 20:11:44 | 000,000,000 | R--D | C] -- C:\Users\Polly1701\Dropbox

[2013.07.23 20:09:19 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

[2013.07.23 20:08:33 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\Dropbox

[2013.07.06 16:55:47 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\Tracing

[2013.07.06 16:53:48 | 000,000,000 | ---D | C] -- C:\Windows\en

[2013.07.06 16:53:32 | 000,000,000 | ---D | C] -- C:\Windows\de

[2013.07.06 16:43:29 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Local\Windows Live

[2013.07.06 16:38:03 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software

[2013.07.06 16:37:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCH Software

[2013.07.06 16:37:39 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\NCH Software

[2013.07.06 16:28:05 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\TuneUp Software

[2013.07.06 16:27:55 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software

[2013.07.06 16:27:48 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

[2013.07.06 16:27:48 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files

[2013.07.06 16:26:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2013.07.06 16:26:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon

[2013.07.06 16:26:35 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\Babylon

[2013.07.06 16:26:26 | 000,000,000 | ---D | C] -- C:\Users\Polly1701\AppData\Roaming\OpenCandy

[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.07.30 13:44:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Polly1701\Desktop\OTL.exe

[2013.07.30 13:42:45 | 000,000,000 | ---- | M] () -- C:\Users\Polly1701\defogger_reenable

[2013.07.30 13:41:34 | 000,050,477 | ---- | M] () -- C:\Users\Polly1701\Desktop\Defogger.exe

[2013.07.30 13:30:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.07.30 13:30:06 | 2962,395,136 | -HS- | M] () -- C:\hiberfil.sys

[2013.07.30 13:27:59 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013.07.29 22:40:56 | 000,010,096 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.07.29 22:40:56 | 000,010,096 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.07.29 22:22:07 | 000,181,452 | ---- | M] () -- C:\Users\Polly1701\AppData\Local\9f2c10a0-f56c-464d-b90f-23109eb5be53

[2013.07.29 22:22:01 | 000,183,296 | ---- | M] (NCSOFT Company) -- C:\Users\Polly1701\AppData\Local\JCmZFOv.exe

[2013.07.29 22:16:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013.07.29 13:46:53 | 000,150,662 | ---- | M] () -- C:\Users\Polly1701\Desktop\Muellmax_2013_20130725_22379.pdf

[2013.07.27 13:13:24 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.07.27 13:13:24 | 000,654,400 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.07.27 13:13:24 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.07.27 13:13:24 | 000,130,240 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.07.27 13:13:24 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.07.23 20:11:44 | 000,001,040 | ---- | M] () -- C:\Users\Polly1701\Desktop\Dropbox.lnk

[2013.07.23 20:09:30 | 000,001,050 | ---- | M] () -- C:\Users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2013.07.11 16:58:38 | 000,437,944 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.07.08 22:11:14 | 000,111,068 | ---- | M] () -- C:\test.xml

[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.07.30 13:42:45 | 000,000,000 | ---- | C] () -- C:\Users\Polly1701\defogger_reenable

[2013.07.30 13:41:34 | 000,050,477 | ---- | C] () -- C:\Users\Polly1701\Desktop\Defogger.exe

[2013.07.29 22:22:07 | 000,181,452 | ---- | C] () -- C:\Users\Polly1701\AppData\Local\9f2c10a0-f56c-464d-b90f-23109eb5be53

[2013.07.29 13:46:53 | 000,150,662 | ---- | C] () -- C:\Users\Polly1701\Desktop\Muellmax_2013_20130725_22379.pdf

[2013.07.23 20:11:44 | 000,001,040 | ---- | C] () -- C:\Users\Polly1701\Desktop\Dropbox.lnk

[2013.07.23 20:09:30 | 000,001,050 | ---- | C] () -- C:\Users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

[2013.07.06 16:53:30 | 000,001,265 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk

[2013.07.06 16:53:20 | 000,001,334 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

[2013.07.06 16:52:44 | 000,001,418 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

[2013.07.06 16:52:18 | 000,002,446 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk

[2012.11.26 20:32:41 | 000,051,068 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin

[2012.09.29 01:16:48 | 000,002,176 | ---- | C] () -- C:\Users\Polly1701\AppData\Local\recently-used.xbel

[2012.06.23 23:11:44 | 000,122,880 | ---- | C] () -- C:\Windows\UnGins.exe

[2012.05.25 01:59:10 | 001,523,712 | ---- | C] () -- C:\Windows\SysWow64\falsesetproxy.exe

[2011.12.30 20:59:21 | 000,000,444 | ---- | C] () -- C:\Windows\MyHeritage.INI

[2011.12.30 20:57:55 | 000,454,656 | ---- | C] () -- C:\Windows\SysWow64\PaintX.dll

[2011.12.13 01:46:54 | 000,000,129 | ---- | C] () -- C:\Windows\winamp.ini

[2011.10.27 00:34:51 | 000,000,000 | ---- | C] () -- C:\Users\Polly1701\AppData\Local\{B6B46446-11CD-4103-9CAF-718DFC697B12}

[2011.07.01 22:05:57 | 000,000,070 | ---- | C] () -- C:\Users\Polly1701\.bouml

[2011.07.01 22:04:53 | 000,000,052 | ---- | C] () -- C:\Users\Polly1701\.boumlrc

[2010.10.27 19:04:53 | 002,000,324 | ---- | C] () -- C:\Program Files (x86)\cdex_151.exe

[2010.05.04 17:20:06 | 000,000,016 | ---- | C] () -- C:\Users\Polly1701\persistent_state

[2010.02.01 21:43:04 | 000,028,672 | ---- | C] () -- C:\Users\Polly1701\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.02.01 20:48:43 | 000,000,221 | ---- | C] () -- C:\ProgramData\MusicStation.xml

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2013.03.02 06:05:31 | 000,000,000 | -HSD | M] -- C:\Users\Polly1701\AppData\Roaming\.#

[2013.03.13 13:58:20 | 000,000,000 | -HSD | M] -- C:\Users\Polly1701\AppData\Roaming\2DF42B

[2010.11.08 00:06:41 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Amazon

[2010.04.02 01:50:42 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Auslogics

[2013.07.06 16:26:35 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Babylon

[2013.07.06 16:35:34 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\DesktopIconForAmazon

[2013.07.30 00:24:37 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Dropbox

[2013.07.06 16:35:19 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\GinyasBrowserCompanion

[2013.03.13 00:31:09 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Java

[2011.12.30 21:11:23 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\MyHeritage

[2013.07.06 16:26:26 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\OpenCandy

[2010.05.07 00:40:35 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Opera

[2012.04.29 16:39:51 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Pixlromatic

[2010.02.01 12:56:22 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\Protector Suite

[2011.02.02 17:22:29 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\QIP

[2013.05.24 14:21:57 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\The Bat!

[2011.12.30 20:57:55 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\The Complete Genealogy Reporter - FTB

[2013.07.06 16:28:05 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\TuneUp Software

[2013.07.29 14:04:03 | 000,000,000 | ---D | M] -- C:\Users\Polly1701\AppData\Roaming\XnView

 
 ========== Purity Check ==========

 

 

 
 ========== Files - Unicode (All) ==========

[2011.07.30 02:49:34 | 000,016,165 | ---- | M] ()(C:\Users\Polly1701\Documents\????????_2011.docx) -- C:\Users\Polly1701\Documents\Беларусь_2011.docx

[2011.07.30 02:49:33 | 000,016,165 | ---- | C] ()(C:\Users\Polly1701\Documents\????????_2011.docx) -- C:\Users\Polly1701\Documents\Беларусь_2011.docx

[2010.06.18 14:16:53 | 000,026,112 | ---- | M] ()(C:\Users\Polly1701\Documents\? ? ? ? ? ? ? ? ? ? ? ?.doc) -- C:\Users\Polly1701\Documents\Д О В Е Р Е Н Н О С Т Ь.doc

[2010.06.18 14:16:53 | 000,026,112 | ---- | C] ()(C:\Users\Polly1701\Documents\? ? ? ? ? ? ? ? ? ? ? ?.doc) -- C:\Users\Polly1701\Documents\Д О В Е Р Е Н Н О С Т Ь.doc

[2010.04.30 11:29:53 | 000,030,720 | ---- | M] ()(C:\Users\Polly1701\Documents\?? ???????.doc) -- C:\Users\Polly1701\Documents\За туманам.doc

[2010.04.28 03:02:04 | 000,030,720 | ---- | C] ()(C:\Users\Polly1701\Documents\?? ???????.doc) -- C:\Users\Polly1701\Documents\За туманам.doc
 

< End of report >

--- --- ---

Hi,

otl fix

Fixen mit OTL

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

:OTL

O4 - HKCU..\Run: [aSQw8ccL0] C:\Users\Polly1701\AppData\Local\JCmZFOv.exe (NCSOFT Company)

[2013.07.29 22:16:00 | 000,001,124 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:files

:Commands

[emptytemp]

Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!

Drücke bitte die http://larusso.trojaner-board.de/Images/windows.jpg + E Taste.

Öffne dein Systemlaufwerk ( meistens C: )
Suche nun
folgenden Ordner: _OTL und öffne diesen.
Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
Dies wird eine Movedfiles.zip Datei in _OTL erstellen
Lade diese bitte in unseren Uploadchannel
hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus :)

OTL fix durchgeführt. Die Meldung ist schonmal veschwunden und der Rechner läuft im normalen Modus. Der Upload hat auch geklappt. Hier der Inhalt des Textdokuments:

All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\aSQw8ccL0 deleted successfully.
C:\Users\Polly1701\AppData\Local\JCmZFOv.exe moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 57472 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Polly1701
->Temp folder emptied: 1260326721 bytes
->Temporary Internet Files folder emptied: 12400058 bytes
->Java cache emptied: 63499290 bytes
->Opera cache emptied: 15524496 bytes
->Flash cache emptied: 59542 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1533519 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 734284864 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42979450 bytes
RecycleBin emptied: 828453332 bytes

Total Files Cleaned = 2.822,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 07302013_163026

Files\Folders moved on Reboot...
C:\Users\Polly1701\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Polly1701\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Sehr gut.
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Erledigt!
Allerdings bin ich mir nicht sicher, ob alles glatt verlaufen ist. Es kam in blauen combofix-fenster oft die Zeile "Zugriff verweigert" - lag vielleicht daran, dass ich Sophos nicht richtig deaktivieren konnte. Combofix ist trotzdem weiter gelaufen, anschließend hat es windows neu gestartet, ein Logfile wurde erstellt, jedoch nach der mehrfachen Meldung "die Datei "NircmdB.exe" konnte nicht gefunden werden". Beim Starten des Browsers kam dann die andere Fehlermeldung, auf die Sie hingewiesen haben. Hab den Rechner neu gestartet - jetzt funktioniert alles wieder. Hier ist die Log-Datei (hoffentlich klappt es jetzt mit den code-tags)
Combofix Logfile:

Code:

ComboFix 13-07-30.02 - Polly1701 30.07.2013  17:14:15.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3767.1894 [GMT 2:00]

ausgeführt von:: c:\users\Polly1701\Desktop\ComboFix.exe

AV: Sophos Anti-Virus *Enabled/Updated* {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}

SP: Sophos Anti-Virus *Enabled/Updated* {DE9A3984-B0E2-7A61-FD5D-409005EB0337}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\Install.exe

c:\program files (x86)\SecureW2

c:\program files (x86)\SecureW2\Uninstall.exe

c:\programdata\boost_interprocess\20130730163145.125599

c:\programdata\boost_interprocess\20130730163145.125599\Nobu64AgentService2.7.2.25

c:\programdata\boost_interprocess\20130730163145.125599\Nobu64TrayIcon2.7.2.25

c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2

c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2\TTLS Manager.lnk

c:\programdata\Microsoft\Windows\Start Menu\Programs\SecureW2\Uninstall.lnk

c:\users\POLLY1~1\AppData\Local\Temp\1.tmp\F_IN_BOX.dll

c:\users\Polly1701\AppData\Local\Temp\1.tmp\F_IN_BOX.dll

c:\users\Polly1701\AppData\Roaming\.#

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\check_update.bat

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\csrss.exe

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\diakgcn121016.cl

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\libeay32.dll

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\libidn-11.dll

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\libusb-1.0.dll

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\OpenCL.dll

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\phatk121016.cl

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\ssleay32.dll

c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\zlib1.dll

c:\users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SecureW2

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-06-28 bis 2013-07-30  ))))))))))))))))))))))))))))))

.

.

2013-07-30 14:40 . 2013-07-02 08:34        9460976        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{CDBB21A1-93C4-4911-9DAA-0BF040464269}\mpengine.dll

2013-07-30 14:30 . 2013-07-30 14:41        --------        d-----w-        C:\_OTL

2013-07-23 18:11 . 2013-07-30 14:35        --------        d-----r-        c:\users\Polly1701\Dropbox

2013-07-23 18:08 . 2013-07-30 14:35        --------        d-----w-        c:\users\Polly1701\AppData\Roaming\Dropbox

2013-07-10 11:07 . 2013-05-27 05:50        1011712        ----a-w-        c:\program files\Windows Defender\MpSvc.dll

2013-07-10 11:07 . 2013-05-27 05:50        571904        ----a-w-        c:\program files\Windows Defender\MpClient.dll

2013-07-10 11:07 . 2013-05-27 05:50        314880        ----a-w-        c:\program files\Windows Defender\MpCommu.dll

2013-07-10 11:07 . 2013-05-27 04:57        4608        ----a-w-        c:\program files (x86)\Windows Defender\MsMpLics.dll

2013-07-10 11:07 . 2013-05-27 04:57        54784        ----a-w-        c:\program files (x86)\Windows Defender\MpOAV.dll

2013-07-10 11:07 . 2013-05-27 04:57        392704        ----a-w-        c:\program files (x86)\Windows Defender\MpClient.dll

2013-07-10 11:07 . 2013-05-27 03:15        9216        ----a-w-        c:\program files (x86)\Windows Defender\MpAsDesc.dll

2013-07-10 11:07 . 2013-06-04 06:00        624128        ----a-w-        c:\windows\system32\qedit.dll

2013-07-10 11:07 . 2013-06-04 04:53        509440        ----a-w-        c:\windows\SysWow64\qedit.dll

2013-07-10 11:07 . 2013-05-06 06:03        1887744        ----a-w-        c:\windows\system32\WMVDECOD.DLL

2013-07-10 11:07 . 2013-05-06 04:56        1620480        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL

2013-07-10 11:06 . 2013-06-05 03:34        3153920        ----a-w-        c:\windows\system32\win32k.sys

2013-07-10 11:06 . 2013-04-10 05:48        1732608        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL

2013-07-10 11:06 . 2013-04-10 05:46        1402880        ----a-w-        c:\program files\Windows Journal\JNWDRV.dll

2013-07-10 11:06 . 2013-04-10 05:46        1393152        ----a-w-        c:\program files\Windows Journal\JNTFiltr.dll

2013-07-10 11:06 . 2013-04-10 05:46        1367040        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\journal.dll

2013-07-10 11:06 . 2013-04-10 05:03        936448        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll

2013-07-10 11:06 . 2013-04-02 22:51        1643520        ----a-w-        c:\windows\system32\DWrite.dll

2013-07-10 11:06 . 2013-04-09 23:34        1247744        ----a-w-        c:\windows\SysWow64\DWrite.dll

2013-07-06 14:55 . 2013-07-06 14:55        --------        d-----w-        c:\users\Polly1701\Tracing

2013-07-06 14:53 . 2013-07-06 14:53        --------        d-----w-        c:\windows\en

2013-07-06 14:53 . 2013-07-06 14:53        --------        d-----w-        c:\windows\de

2013-07-06 14:48 . 2013-02-05 20:06        57840        ----a-w-        c:\windows\system32\drivers\fssfltr.sys

2013-07-06 14:46 . 2010-06-02 02:55        77656        ----a-w-        c:\windows\system32\XAPOFX1_5.dll

2013-07-06 14:46 . 2010-06-02 02:55        74072        ----a-w-        c:\windows\SysWow64\XAPOFX1_5.dll

2013-07-06 14:46 . 2010-06-02 02:55        527192        ----a-w-        c:\windows\SysWow64\XAudio2_7.dll

2013-07-06 14:46 . 2010-06-02 02:55        518488        ----a-w-        c:\windows\system32\XAudio2_7.dll

2013-07-06 14:46 . 2010-05-26 09:41        276832        ----a-w-        c:\windows\system32\d3dx11_43.dll

2013-07-06 14:46 . 2010-05-26 09:41        2526056        ----a-w-        c:\windows\system32\D3DCompiler_43.dll

2013-07-06 14:46 . 2010-05-26 09:41        248672        ----a-w-        c:\windows\SysWow64\d3dx11_43.dll

2013-07-06 14:46 . 2010-05-26 09:41        2106216        ----a-w-        c:\windows\SysWow64\D3DCompiler_43.dll

2013-07-06 14:45 . 2009-09-04 15:29        453456        ----a-w-        c:\windows\SysWow64\d3dx10_42.dll

2013-07-06 14:45 . 2009-09-04 15:29        523088        ----a-w-        c:\windows\system32\d3dx10_42.dll

2013-07-06 14:43 . 2013-07-06 14:43        94040        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\3d5ecab21ce7a5707\DSETUP.dll

2013-07-06 14:43 . 2013-07-06 14:43        525656        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\3d5ecab21ce7a5707\DXSETUP.exe

2013-07-06 14:43 . 2013-07-06 14:43        1691480        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\3d5ecab21ce7a5707\dsetup32.dll

2013-07-06 14:43 . 2013-07-06 14:43        89944        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\35f50ce51ce7a5704\DSETUP.dll

2013-07-06 14:43 . 2013-07-06 14:43        537432        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\35f50ce51ce7a5704\DXSETUP.exe

2013-07-06 14:43 . 2013-07-06 14:43        1801048        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\35f50ce51ce7a5704\dsetup32.dll

2013-07-06 14:43 . 2013-07-06 14:43        89944        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\31e710821ce7a5702\DSETUP.dll

2013-07-06 14:43 . 2013-07-06 14:43        537432        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\31e710821ce7a5702\DXSETUP.exe

2013-07-06 14:43 . 2013-07-06 14:43        1801048        ----a-w-        c:\program files (x86)\Common Files\Windows Live\.cache\31e710821ce7a5702\dsetup32.dll

2013-07-06 14:43 . 2013-07-16 22:03        --------        d-----w-        c:\users\Polly1701\AppData\Local\Windows Live

2013-07-06 14:38 . 2013-07-06 14:38        --------        d-----w-        c:\programdata\NCH Software

2013-07-06 14:37 . 2013-07-06 14:40        --------        d-----w-        c:\program files (x86)\NCH Software

2013-07-06 14:37 . 2013-07-06 14:40        --------        d-----w-        c:\users\Polly1701\AppData\Roaming\NCH Software

2013-07-06 14:28 . 2013-07-06 14:28        --------        d-----w-        c:\users\Polly1701\AppData\Roaming\TuneUp Software

2013-07-06 14:27 . 2013-07-06 14:28        --------        d-----w-        c:\programdata\TuneUp Software

2013-07-06 14:27 . 2013-07-06 14:27        --------        d-sh--w-        c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-07-06 14:27 . 2013-07-06 14:27        --------        d--h--w-        c:\programdata\Common Files

2013-07-06 14:26 . 2013-07-06 14:26        --------        d-----w-        c:\programdata\Babylon

2013-07-06 14:26 . 2013-07-06 14:26        --------        d-----w-        c:\users\Polly1701\AppData\Roaming\Babylon

2013-07-06 14:26 . 2013-07-06 14:26        --------        d-----w-        c:\users\Polly1701\AppData\Roaming\OpenCandy

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-07-10 16:57 . 2010-02-09 15:59        78185248        ----a-w-        c:\windows\system32\MRT.exe

2013-07-06 14:47 . 2012-07-17 12:37        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-07-06 14:14 . 2010-02-01 20:37        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

2013-07-06 14:14 . 2010-12-10 21:57        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll

2013-07-06 14:13 . 2010-02-19 16:14        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

2013-06-07 12:19 . 2013-06-07 12:19        226304        ----a-w-        c:\windows\system32\elshyph.dll

2013-06-07 12:19 . 2013-06-07 12:19        185344        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-06-07 12:19 . 2013-06-07 12:19        1054720        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-06-07 12:19 . 2013-06-07 12:19        719360        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-06-07 12:19 . 2013-06-07 12:19        523264        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-06-07 12:19 . 2013-06-07 12:19        158720        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-06-07 12:19 . 2013-06-07 12:19        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-06-07 12:19 . 2013-06-07 12:19        138752        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-06-07 12:19 . 2013-06-07 12:19        73728        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-06-07 12:19 . 2013-06-07 12:19        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-06-07 12:19 . 2013-06-07 12:19        38400        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-06-07 12:19 . 2013-06-07 12:19        137216        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-06-07 12:19 . 2013-06-07 12:19        12800        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-06-07 12:19 . 2013-06-07 12:19        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-06-07 12:19 . 2013-06-07 12:19        61952        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-06-07 12:19 . 2013-06-07 12:19        361984        ----a-w-        c:\windows\SysWow64\html.iec

2013-06-07 12:19 . 2013-06-07 12:19        23040        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-06-07 12:19 . 2013-06-07 12:19        1441280        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-06-07 12:19 . 2013-06-07 12:19        97280        ----a-w-        c:\windows\system32\mshtmled.dll

2013-06-07 12:19 . 2013-06-07 12:19        905728        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-06-07 12:19 . 2013-06-07 12:19        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-06-07 12:19 . 2013-06-07 12:19        762368        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-06-07 12:19 . 2013-06-07 12:19        452096        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-06-07 12:19 . 2013-06-07 12:19        441856        ----a-w-        c:\windows\system32\html.iec

2013-06-07 12:19 . 2013-06-07 12:19        281600        ----a-w-        c:\windows\system32\dxtrans.dll

2013-06-07 12:19 . 2013-06-07 12:19        27648        ----a-w-        c:\windows\system32\licmgr10.dll

2013-06-07 12:19 . 2013-06-07 12:19        270848        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-06-07 12:19 . 2013-06-07 12:19        247296        ----a-w-        c:\windows\system32\webcheck.dll

2013-06-07 12:19 . 2013-06-07 12:19        235008        ----a-w-        c:\windows\system32\url.dll

2013-06-07 12:19 . 2013-06-07 12:19        216064        ----a-w-        c:\windows\system32\msls31.dll

2013-06-07 12:19 . 2013-06-07 12:19        197120        ----a-w-        c:\windows\system32\msrating.dll

2013-06-07 12:19 . 2013-06-07 12:19        167424        ----a-w-        c:\windows\system32\iexpress.exe

2013-06-07 12:19 . 2013-06-07 12:19        1509376        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-06-07 12:19 . 2013-06-07 12:19        144896        ----a-w-        c:\windows\system32\wextract.exe

2013-06-07 12:19 . 2013-06-07 12:19        1400416        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-06-07 12:19 . 2013-06-07 12:19        102912        ----a-w-        c:\windows\system32\inseng.dll

2013-06-07 12:19 . 2013-06-07 12:19        92160        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-06-07 12:19 . 2013-06-07 12:19        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-06-07 12:19 . 2013-06-07 12:19        62976        ----a-w-        c:\windows\system32\pngfilt.dll

2013-06-07 12:19 . 2013-06-07 12:19        599552        ----a-w-        c:\windows\system32\vbscript.dll

2013-06-07 12:19 . 2013-06-07 12:19        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-06-07 12:19 . 2013-06-07 12:19        51200        ----a-w-        c:\windows\system32\imgutil.dll

2013-06-07 12:19 . 2013-06-07 12:19        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-06-07 12:19 . 2013-06-07 12:19        173568        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-06-07 12:19 . 2013-06-07 12:19        149504        ----a-w-        c:\windows\system32\occache.dll

2013-06-07 12:19 . 2013-06-07 12:19        13824        ----a-w-        c:\windows\system32\mshta.exe

2013-06-07 12:19 . 2013-06-07 12:19        136192        ----a-w-        c:\windows\system32\iepeers.dll

2013-06-07 12:19 . 2013-06-07 12:19        135680        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-06-07 12:19 . 2013-06-07 12:19        12800        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-05-13 05:51 . 2013-06-12 10:30        184320        ----a-w-        c:\windows\system32\cryptsvc.dll

2013-05-13 05:51 . 2013-06-12 10:30        1464320        ----a-w-        c:\windows\system32\crypt32.dll

2013-05-13 05:51 . 2013-06-12 10:30        139776        ----a-w-        c:\windows\system32\cryptnet.dll

2013-05-13 05:50 . 2013-06-12 10:30        52224        ----a-w-        c:\windows\system32\certenc.dll

2013-05-13 04:45 . 2013-06-12 10:30        1160192        ----a-w-        c:\windows\SysWow64\crypt32.dll

2013-05-13 04:45 . 2013-06-12 10:30        140288        ----a-w-        c:\windows\SysWow64\cryptsvc.dll

2013-05-13 04:45 . 2013-06-12 10:30        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll

2013-05-13 03:43 . 2013-06-12 10:30        1192448        ----a-w-        c:\windows\system32\certutil.exe

2013-05-13 03:08 . 2013-06-12 10:30        903168        ----a-w-        c:\windows\SysWow64\certutil.exe

2013-05-13 03:08 . 2013-06-12 10:30        43008        ----a-w-        c:\windows\SysWow64\certenc.dll

2013-05-10 05:49 . 2013-06-12 10:30        30720        ----a-w-        c:\windows\system32\cryptdlg.dll

2013-05-10 03:20 . 2013-06-12 10:30        24576        ----a-w-        c:\windows\SysWow64\cryptdlg.dll

2013-05-08 06:39 . 2013-06-12 10:30        1910632        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-05-02 00:06 . 2010-02-17 00:33        278800        ------w-        c:\windows\system32\MpSigStub.exe

2010-10-27 17:04 . 2010-10-27 17:04        2000324        ----a-w-        c:\program files (x86)\cdex_151.exe

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        130736        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        130736        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        130736        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-01-21 39408]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-11-20 284696]

"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-08-26 320880]

"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-03-24 599328]

"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2010-01-21 26624]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"Sophos AutoUpdate Monitor"="c:\program files (x86)\Sophos\AutoUpdate\almon.exe" [2012-08-08 900160]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"InstaLAN"="c:\program files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" [2011-05-27 2015136]

"Family Tree Builder Update"="c:\program files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe" [2011-12-21 229376]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

.

c:\users\Polly1701\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\Polly1701\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-6-5 27370808]

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-1-8 228448]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-9-4 1081632]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]

2009-11-30 18:20        98304        ----a-w-        c:\windows\System32\VESWinlogon.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\progra~2\Sophos\SOPHOS~1\sophos_detoured.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages        REG_MULTI_SZ           scecli c:\program files\Protector Suite\psqlpwd.dll

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]

@="service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SophosAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]

R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R2 swi_update_64;Sophos Web Intelligence Update;c:\programdata\Sophos\Web Intelligence\swi_update_64.exe;c:\programdata\Sophos\Web Intelligence\swi_update_64.exe [x]

R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys;c:\windows\SYSNATIVE\drivers\btusbflt.sys [x]

R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbnet.sys [x]

R3 netr7364;RT73-Drahtlostreiber für Vista von Conceptronic;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]

R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [x]

R3 sdcfilter;sdcfilter;c:\windows\system32\DRIVERS\sdcfilter.sys;c:\windows\SYSNATIVE\DRIVERS\sdcfilter.sys [x]

R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x]

R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [x]

R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]

R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]

R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x]

R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x]

R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]

R3 vnet;Shrew Soft Virtual Adapter;c:\windows\system32\DRIVERS\virtualnet.sys;c:\windows\SYSNATIVE\DRIVERS\virtualnet.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R4 SophosBootDriver;SophosBootDriver;c:\windows\system32\DRIVERS\SophosBootDriver.sys;c:\windows\SYSNATIVE\DRIVERS\SophosBootDriver.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]

S0 shpf;Sony HDD Protection Filter Driver;c:\windows\system32\DRIVERS\shpf.sys;c:\windows\SYSNATIVE\DRIVERS\shpf.sys [x]

S1 SAVOnAccess;SAVOnAccess;c:\windows\system32\DRIVERS\savonaccess.sys;c:\windows\SYSNATIVE\DRIVERS\savonaccess.sys [x]

S1 vflt;Shrew Soft Lightweight Filter;c:\windows\system32\DRIVERS\vfilter.sys;c:\windows\SYSNATIVE\DRIVERS\vfilter.sys [x]

S2 dtpd;ShrewSoft DNS Proxy Daemon;c:\program files\ShrewSoft\VPN Client\dtpd.exe;c:\program files\ShrewSoft\VPN Client\dtpd.exe [x]

S2 HI-epanel-Reporting-Service;HI-epanel-Reporting-Service;c:\program files (x86)\Digital Trends Club\HI-epanel-Reporting.exe;c:\program files (x86)\Digital Trends Club\HI-epanel-Reporting.exe [x]

S2 HI-epanel-Update-Service;HI-epanel-Update-Service;c:\program files (x86)\Digital Trends Club\HI-epanel-Updater.exe;c:\program files (x86)\Digital Trends Club\HI-epanel-Updater.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 iked;ShrewSoft IKE Daemon;c:\program files\ShrewSoft\VPN Client\iked.exe;c:\program files\ShrewSoft\VPN Client\iked.exe [x]

S2 ipsecd;ShrewSoft IPSEC Daemon;c:\program files\ShrewSoft\VPN Client\ipsecd.exe;c:\program files\ShrewSoft\VPN Client\ipsecd.exe [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]

S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x]

S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x]

S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x]

S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x]

S2 SAVAdminService;Sophos Anti-Virus Statusreporter;c:\program files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe;c:\program files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [x]

S2 SAVService;Sophos Anti-Virus;c:\program files (x86)\Sophos\Sophos Anti-Virus\SavService.exe;c:\program files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [x]

S2 Sophos Web Control Service;Sophos Web Control Service;c:\program files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe;c:\program files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [x]

S2 swi_service;Sophos Web Intelligence Service;c:\program files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe;c:\program files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [x]

S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x]

S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x]

S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x]

S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]

S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]

S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x]

S3 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]

S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2013-07-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-25 12:10]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        164016        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        164016        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        164016        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17        164016        ----a-w-        c:\users\Polly1701\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]

@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"

[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]

2009-07-20 13:18        5943048        ----a-w-        c:\program files\Protector Suite\farchns.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]

@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"

[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]

2009-07-20 13:18        5943048        ----a-w-        c:\program files\Protector Suite\farchns.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-02 16395880]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-12-07 9636896]

"PSQLLauncher"="c:\program files\Protector Suite\launcher.exe" [2009-07-20 84744]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-21 171520]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-11-26 166424]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-11-26 390680]

"Persistence"="c:\windows\system32\igfxpers.exe" [2012-11-26 410136]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\progra~2\Sophos\SOPHOS~1\sophos_detoured_x64.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com/

uDefault_Search_URL = hxxp://search.qip.ru

mDefault_Search_URL = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = about:blank

mWindow Title = Microsoft Internet Explorer

uInternet Settings,ProxyOverride = <local>

uSearchAssistant = hxxp://search.qip.ru/ie

IE: Add to &Evernote - c:\program files (x86)\Evernote\Evernote3.5\enbar.dll/2000

IE: An OneNote s&enden - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105

IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\OFFICE11\EXCEL.EXE/3000

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000

IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

LSP: c:\programdata\Sophos\Web Intelligence\swi_ifslsp.dll

TCP: Interfaces\{4183AE89-854E-467C-9FCC-94DE00E792A2}: NameServer = 134.147.32.40,134.147.222.4

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-Java Auto Update - c:\users\Polly1701\AppData\Roaming\Java\Update\Download\Cache\jsheded.exe

Wow6432Node-HKLM-Run-cvYTlJojJpL.exe - c:\programdata\cvYTlJojJpL.exe

SafeBoot-mcmscsvc

SafeBoot-MCODS

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

HKLM-Run-SpywareTerminatorShield - c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe

HKLM-Run-SpywareTerminatorUpdater - c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe

AddRemove-SecureW2 EAP Suite - c:\program files (x86)\SecureW2\Uninstall.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]

"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

c:\program files (x86)\Sophos\AutoUpdate\ALsvc.exe

c:\program files (x86)\SONY\VAIO Event Service\VESMgr.exe

c:\windows\SysWOW64\DllHost.exe

c:\program files (x86)\SONY\VAIO Event Service\VESMgrSub.exe

c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

c:\program files\Sony\VAIO Care\listener.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-07-30  17:30:20 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-07-30 15:30

.

Vor Suchlauf: 19 Verzeichnis(se), 372.890.681.344 Bytes frei

Nach Suchlauf: 21 Verzeichnis(se), 372.717.383.680 Bytes frei

.

- - End Of File - - C376C5F390F5520ED7ACE97A55F3F0A4

--- --- ---
D41D8CD98F00B204E9800998ECF8427E

[/CODE]

passt.
bist du mal so gut und öffnest Computer, c: qoobox.
packe den ordner Quarantain und lade ihn im Uploadchannel hoch, bescheid geben, wenn fertig

Erledigt, aber beim Packen kam die Meldung, dass die Datei nicht geöffnet (oder gefunden?) werden konnte und "zugriff verweigert".
zip-Datei wurde trotzdem erstellt und der Upload hat geklappt.

Hi, passt.
1.
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

2.
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Hi,
beide Schritte geschafft!

1. Logfile TDSSKiller

Code:

18:32:43.0594 6536  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

18:32:43.0610 6536  ============================================================

18:32:43.0610 6536  Current date / time: 2013/07/30 18:32:43.0610

18:32:43.0610 6536  SystemInfo:

18:32:43.0610 6536  

18:32:43.0610 6536  OS Version: 6.1.7601 ServicePack: 1.0

18:32:43.0610 6536  Product type: Workstation

18:32:43.0610 6536  ComputerName: POLLY

18:32:43.0610 6536  UserName: Polly1701

18:32:43.0610 6536  Windows directory: C:\Windows

18:32:43.0610 6536  System windows directory: C:\Windows

18:32:43.0610 6536  Running under WOW64

18:32:43.0610 6536  Processor architecture: Intel x64

18:32:43.0610 6536  Number of processors: 4

18:32:43.0610 6536  Page size: 0x1000

18:32:43.0610 6536  Boot type: Normal boot

18:32:43.0610 6536  ============================================================

18:32:44.0280 6536  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

18:32:44.0296 6536  ============================================================

18:32:44.0296 6536  \Device\Harddisk0\DR0:

18:32:44.0296 6536  MBR partitions:

18:32:44.0296 6536  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1127800, BlocksNum 0x32000

18:32:44.0296 6536  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1159800, BlocksNum 0x3922C030

18:32:44.0296 6536  ============================================================

18:32:44.0327 6536  C: <-> \Device\Harddisk0\DR0\Partition2

18:32:44.0327 6536  ============================================================

18:32:44.0327 6536  Initialize success

18:32:44.0327 6536  ============================================================

18:33:15.0481 4912  ============================================================

18:33:15.0481 4912  Scan started

18:33:15.0481 4912  Mode: Manual; SigCheck; TDLFS; 

18:33:15.0481 4912  ============================================================

18:33:15.0652 4912  ================ Scan system memory ========================

18:33:15.0652 4912  System memory - ok

18:33:15.0652 4912  ================ Scan services =============================

18:33:15.0839 4912  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

18:33:15.0949 4912  1394ohci - ok

18:33:16.0073 4912  [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon        C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

18:33:16.0120 4912  ACDaemon - ok

18:33:16.0183 4912  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

18:33:16.0198 4912  ACPI - ok

18:33:16.0261 4912  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

18:33:16.0339 4912  AcpiPmi - ok

18:33:16.0401 4912  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

18:33:16.0448 4912  adp94xx - ok

18:33:16.0463 4912  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\drivers\adpahci.sys

18:33:16.0495 4912  adpahci - ok

18:33:16.0495 4912  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

18:33:16.0510 4912  adpu320 - ok

18:33:16.0557 4912  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

18:33:16.0713 4912  AeLookupSvc - ok

18:33:16.0775 4912  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

18:33:16.0853 4912  AFD - ok

18:33:16.0947 4912  [ B29BC445561F1AC7B1DAF67AF954C36B ] AffinegyService C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe

18:33:16.0978 4912  AffinegyService - ok

18:33:17.0025 4912  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

18:33:17.0056 4912  agp440 - ok

18:33:17.0103 4912  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

18:33:17.0181 4912  ALG - ok

18:33:17.0243 4912  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

18:33:17.0275 4912  aliide - ok

18:33:17.0290 4912  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

18:33:17.0306 4912  amdide - ok

18:33:17.0353 4912  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys

18:33:17.0415 4912  AmdK8 - ok

18:33:17.0415 4912  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys

18:33:17.0477 4912  AmdPPM - ok

18:33:17.0509 4912  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

18:33:17.0540 4912  amdsata - ok

18:33:17.0571 4912  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys

18:33:17.0602 4912  amdsbs - ok

18:33:17.0618 4912  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

18:33:17.0633 4912  amdxata - ok

18:33:17.0665 4912  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

18:33:17.0852 4912  AppID - ok

18:33:17.0883 4912  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

18:33:17.0961 4912  AppIDSvc - ok

18:33:18.0023 4912  [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo         C:\Windows\System32\appinfo.dll

18:33:18.0086 4912  Appinfo - ok

18:33:18.0164 4912  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\drivers\arc.sys

18:33:18.0195 4912  arc - ok

18:33:18.0211 4912  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys

18:33:18.0226 4912  arcsas - ok

18:33:18.0273 4912  [ C130BC4A51B1382B2BE8E44579EC4C0A ] ArcSoftKsUFilter C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys

18:33:18.0304 4912  ArcSoftKsUFilter - ok

18:33:18.0335 4912  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

18:33:18.0413 4912  AsyncMac - ok

18:33:18.0476 4912  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

18:33:18.0491 4912  atapi - ok

18:33:18.0569 4912  [ 0ACC06FCF46F64ED4F11E57EE461C1F4 ] athr            C:\Windows\system32\DRIVERS\athrx.sys

18:33:18.0694 4912  athr - ok

18:33:18.0741 4912  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

18:33:18.0819 4912  AudioEndpointBuilder - ok

18:33:18.0835 4912  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

18:33:18.0866 4912  AudioSrv - ok

18:33:18.0913 4912  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

18:33:19.0006 4912  AxInstSV - ok

18:33:19.0069 4912  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys

18:33:19.0131 4912  b06bdrv - ok

18:33:19.0178 4912  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

18:33:19.0225 4912  b57nd60a - ok

18:33:19.0287 4912  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

18:33:19.0334 4912  BDESVC - ok

18:33:19.0381 4912  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

18:33:19.0474 4912  Beep - ok

18:33:19.0552 4912  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

18:33:19.0599 4912  BFE - ok

18:33:19.0646 4912  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\system32\qmgr.dll

18:33:19.0708 4912  BITS - ok

18:33:19.0755 4912  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

18:33:19.0786 4912  blbdrive - ok

18:33:19.0833 4912  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

18:33:19.0880 4912  bowser - ok

18:33:19.0927 4912  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys

18:33:20.0020 4912  BrFiltLo - ok

18:33:20.0051 4912  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys

18:33:20.0083 4912  BrFiltUp - ok

18:33:20.0145 4912  [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys

18:33:20.0207 4912  BridgeMP - ok

18:33:20.0254 4912  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

18:33:20.0317 4912  Browser - ok

18:33:20.0348 4912  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

18:33:20.0441 4912  Brserid - ok

18:33:20.0473 4912  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

18:33:20.0504 4912  BrSerWdm - ok

18:33:20.0535 4912  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

18:33:20.0566 4912  BrUsbMdm - ok

18:33:20.0597 4912  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

18:33:20.0629 4912  BrUsbSer - ok

18:33:20.0675 4912  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

18:33:20.0738 4912  BthEnum - ok

18:33:20.0785 4912  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

18:33:20.0831 4912  BTHMODEM - ok

18:33:20.0878 4912  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

18:33:20.0909 4912  BthPan - ok

18:33:20.0972 4912  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

18:33:21.0019 4912  BTHPORT - ok

18:33:21.0050 4912  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

18:33:21.0128 4912  bthserv - ok

18:33:21.0159 4912  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

18:33:21.0221 4912  BTHUSB - ok

18:33:21.0284 4912  [ 6E04458E98DAF28826482E41A7A62DF5 ] btusbflt        C:\Windows\system32\drivers\btusbflt.sys

18:33:21.0315 4912  btusbflt - ok

18:33:21.0362 4912  [ 4BDBDB86ABBA924E029FB2683BE7C505 ] btwaudio        C:\Windows\system32\drivers\btwaudio.sys

18:33:21.0393 4912  btwaudio - ok

18:33:21.0455 4912  [ 5C849BD7C78791C5CEE9F4651D7FE38D ] btwavdt         C:\Windows\system32\drivers\btwavdt.sys

18:33:21.0502 4912  btwavdt - ok

18:33:21.0611 4912  [ 31DA517946FFE416442E864592548F8A ] btwdins         C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

18:33:21.0643 4912  btwdins - ok

18:33:21.0674 4912  [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap        C:\Windows\system32\DRIVERS\btwl2cap.sys

18:33:21.0689 4912  btwl2cap - ok

18:33:21.0736 4912  [ 3E1991AFA851A36DC978B0A1B0535C8B ] btwrchid        C:\Windows\system32\DRIVERS\btwrchid.sys

18:33:21.0752 4912  btwrchid - ok

18:33:21.0908 4912  catchme - ok

18:33:21.0955 4912  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

18:33:22.0017 4912  cdfs - ok

18:33:22.0079 4912  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\drivers\cdrom.sys

18:33:22.0126 4912  cdrom - ok

18:33:22.0173 4912  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

18:33:22.0251 4912  CertPropSvc - ok

18:33:22.0313 4912  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys

18:33:22.0360 4912  circlass - ok

18:33:22.0407 4912  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

18:33:22.0438 4912  CLFS - ok

18:33:22.0516 4912  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

18:33:22.0594 4912  clr_optimization_v2.0.50727_32 - ok

18:33:22.0641 4912  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

18:33:22.0672 4912  clr_optimization_v2.0.50727_64 - ok

18:33:22.0766 4912  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

18:33:22.0781 4912  clr_optimization_v4.0.30319_32 - ok

18:33:22.0844 4912  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

18:33:22.0859 4912  clr_optimization_v4.0.30319_64 - ok

18:33:22.0906 4912  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\drivers\CmBatt.sys

18:33:22.0922 4912  CmBatt - ok

18:33:22.0953 4912  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

18:33:22.0969 4912  cmdide - ok

18:33:23.0015 4912  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys

18:33:23.0031 4912  CNG - ok

18:33:23.0093 4912  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

18:33:23.0109 4912  Compbatt - ok

18:33:23.0156 4912  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

18:33:23.0203 4912  CompositeBus - ok

18:33:23.0218 4912  COMSysApp - ok

18:33:23.0265 4912  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

18:33:23.0281 4912  crcdisk - ok

18:33:23.0327 4912  [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc        C:\Windows\system32\cryptsvc.dll

18:33:23.0390 4912  CryptSvc - ok

18:33:23.0437 4912  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

18:33:23.0483 4912  DcomLaunch - ok

18:33:23.0530 4912  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

18:33:23.0577 4912  defragsvc - ok

18:33:23.0624 4912  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

18:33:23.0717 4912  DfsC - ok

18:33:23.0733 4912  DFUBTUSB - ok

18:33:23.0764 4912  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

18:33:23.0811 4912  Dhcp - ok

18:33:23.0842 4912  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

18:33:23.0905 4912  discache - ok

18:33:23.0936 4912  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys

18:33:23.0951 4912  Disk - ok

18:33:23.0983 4912  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

18:33:24.0014 4912  Dnscache - ok

18:33:24.0045 4912  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

18:33:24.0139 4912  dot3svc - ok

18:33:24.0170 4912  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

18:33:24.0232 4912  DPS - ok

18:33:24.0279 4912  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

18:33:24.0310 4912  drmkaud - ok

18:33:24.0341 4912  dtpd - ok

18:33:24.0404 4912  [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

18:33:24.0466 4912  DXGKrnl - ok

18:33:24.0497 4912  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

18:33:24.0560 4912  EapHost - ok

18:33:24.0669 4912  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\drivers\evbda.sys

18:33:24.0794 4912  ebdrv - ok

18:33:24.0825 4912  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

18:33:24.0887 4912  EFS - ok

18:33:24.0965 4912  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

18:33:25.0059 4912  ehRecvr - ok

18:33:25.0090 4912  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

18:33:25.0137 4912  ehSched - ok

18:33:25.0199 4912  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

18:33:25.0246 4912  elxstor - ok

18:33:25.0262 4912  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

18:33:25.0293 4912  ErrDev - ok

18:33:25.0340 4912  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

18:33:25.0418 4912  EventSystem - ok

18:33:25.0496 4912  [ 51643EE2712D9212E1E53CA7E8D8EB4A ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe

18:33:25.0543 4912  EvtEng - ok

18:33:25.0558 4912  ewusbnet - ok

18:33:25.0574 4912  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

18:33:25.0621 4912  exfat - ok

18:33:25.0636 4912  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

18:33:25.0699 4912  fastfat - ok

18:33:25.0745 4912  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

18:33:25.0808 4912  Fax - ok

18:33:25.0823 4912  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\drivers\fdc.sys

18:33:25.0839 4912  fdc - ok

18:33:25.0855 4912  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

18:33:25.0917 4912  fdPHost - ok

18:33:25.0933 4912  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

18:33:25.0979 4912  FDResPub - ok

18:33:26.0011 4912  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

18:33:26.0026 4912  FileInfo - ok

18:33:26.0042 4912  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

18:33:26.0089 4912  Filetrace - ok

18:33:26.0104 4912  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys

18:33:26.0135 4912  flpydisk - ok

18:33:26.0167 4912  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

18:33:26.0182 4912  FltMgr - ok

18:33:26.0260 4912  [ C4C183E6551084039EC862DA1C945E3D ] FontCache       C:\Windows\system32\FntCache.dll

18:33:26.0323 4912  FontCache - ok

18:33:26.0369 4912  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

18:33:26.0385 4912  FontCache3.0.0.0 - ok

18:33:26.0401 4912  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

18:33:26.0432 4912  FsDepends - ok

18:33:26.0479 4912  [ B3EB502D2C3F47C47415F85387DFAEF1 ] fssfltr         C:\Windows\system32\DRIVERS\fssfltr.sys

18:33:26.0510 4912  fssfltr - ok

18:33:26.0635 4912  [ B6AB40819ECEC4BA07266EC0EBBC85A7 ] fsssvc          C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe

18:33:26.0728 4912  fsssvc - ok

18:33:26.0775 4912  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

18:33:26.0775 4912  Fs_Rec - ok

18:33:26.0822 4912  [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

18:33:26.0853 4912  fvevol - ok

18:33:26.0900 4912  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

18:33:26.0931 4912  gagp30kx - ok

18:33:26.0993 4912  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

18:33:27.0056 4912  gpsvc - ok

18:33:27.0149 4912  [ 626A24ED1228580B9518C01930936DF9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

18:33:27.0165 4912  gupdate - ok

18:33:27.0181 4912  [ 626A24ED1228580B9518C01930936DF9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

18:33:27.0196 4912  gupdatem - ok

18:33:27.0259 4912  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

18:33:27.0321 4912  gusvc - ok

18:33:27.0337 4912  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

18:33:27.0399 4912  hcw85cir - ok

18:33:27.0446 4912  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

18:33:27.0508 4912  HdAudAddService - ok

18:33:27.0555 4912  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

18:33:27.0602 4912  HDAudBus - ok

18:33:27.0649 4912  [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64         C:\Windows\system32\drivers\HECIx64.sys

18:33:27.0680 4912  HECIx64 - ok

18:33:27.0867 4912  [ AF53DDCC45B762176B6AC7FB2A9A4B6B ] HI-epanel-Reporting-Service C:\Program Files (x86)\Digital Trends Club\HI-epanel-Reporting.exe

18:33:27.0929 4912  HI-epanel-Reporting-Service - ok

18:33:27.0992 4912  [ 5AE7BBA88C1F0F5FDC719205B9006D85 ] HI-epanel-Update-Service C:\Program Files (x86)\Digital Trends Club\HI-epanel-Updater.exe

18:33:28.0023 4912  HI-epanel-Update-Service - ok

18:33:28.0054 4912  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys

18:33:28.0085 4912  HidBatt - ok

18:33:28.0085 4912  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys

18:33:28.0117 4912  HidBth - ok

18:33:28.0148 4912  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\drivers\hidir.sys

18:33:28.0179 4912  HidIr - ok

18:33:28.0210 4912  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\System32\hidserv.dll

18:33:28.0257 4912  hidserv - ok

18:33:28.0288 4912  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

18:33:28.0319 4912  HidUsb - ok

18:33:28.0351 4912  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

18:33:28.0397 4912  hkmsvc - ok

18:33:28.0429 4912  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

18:33:28.0491 4912  HomeGroupListener - ok

18:33:28.0522 4912  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

18:33:28.0553 4912  HomeGroupProvider - ok

18:33:28.0600 4912  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

18:33:28.0631 4912  HpSAMD - ok

18:33:28.0694 4912  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

18:33:28.0772 4912  HTTP - ok

18:33:28.0834 4912  hwdatacard - ok

18:33:28.0850 4912  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

18:33:28.0881 4912  hwpolicy - ok

18:33:28.0975 4912  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

18:33:28.0990 4912  i8042prt - ok

18:33:29.0084 4912  [ 073A606333B6F7BBF20AA856DF7F0997 ] iaStor          C:\Windows\system32\drivers\iaStor.sys

18:33:29.0115 4912  iaStor - ok

18:33:29.0193 4912  [ CC800D2D9FD467542BAC7C186C4774AD ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

18:33:29.0224 4912  IAStorDataMgrSvc - ok

18:33:29.0287 4912  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

18:33:29.0333 4912  iaStorV - ok

18:33:29.0396 4912  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

18:33:29.0474 4912  idsvc - ok

18:33:29.0723 4912  [ 2835C0808BA40FA8BC141E6015EB2414 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

18:33:30.0020 4912  igfx - ok

18:33:30.0051 4912  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\drivers\iirsp.sys

18:33:30.0067 4912  iirsp - ok

18:33:30.0082 4912  iked - ok

18:33:30.0129 4912  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

18:33:30.0207 4912  IKEEXT - ok

18:33:30.0254 4912  [ 36FDF367A1DABFF903E2214023D71368 ] Impcd           C:\Windows\system32\DRIVERS\Impcd.sys

18:33:30.0301 4912  Impcd - ok

18:33:30.0394 4912  [ 0F144E5F46CB9043004B5E84AA4BCA6A ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

18:33:30.0457 4912  IntcAzAudAddService - ok

18:33:30.0503 4912  [ D248AAE81C156C0D47A77CD61BC24CD4 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys

18:33:30.0566 4912  IntcDAud - ok

18:33:30.0613 4912  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

18:33:30.0628 4912  intelide - ok

18:33:30.0675 4912  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\drivers\intelppm.sys

18:33:30.0706 4912  intelppm - ok

18:33:30.0722 4912  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

18:33:30.0784 4912  IPBusEnum - ok

18:33:30.0800 4912  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

18:33:30.0862 4912  IpFilterDriver - ok

18:33:30.0909 4912  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

18:33:30.0971 4912  iphlpsvc - ok

18:33:31.0003 4912  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

18:33:31.0034 4912  IPMIDRV - ok

18:33:31.0049 4912  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

18:33:31.0112 4912  IPNAT - ok

18:33:31.0127 4912  ipsecd - ok

18:33:31.0159 4912  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

18:33:31.0237 4912  IRENUM - ok

18:33:31.0283 4912  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

18:33:31.0315 4912  isapnp - ok

18:33:31.0346 4912  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

18:33:31.0393 4912  iScsiPrt - ok

18:33:31.0424 4912  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys

18:33:31.0455 4912  kbdclass - ok

18:33:31.0502 4912  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys

18:33:31.0533 4912  kbdhid - ok

18:33:31.0564 4912  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

18:33:31.0580 4912  KeyIso - ok

18:33:31.0611 4912  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

18:33:31.0627 4912  KSecDD - ok

18:33:31.0658 4912  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

18:33:31.0673 4912  KSecPkg - ok

18:33:31.0705 4912  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

18:33:31.0751 4912  ksthunk - ok

18:33:31.0783 4912  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

18:33:31.0892 4912  KtmRm - ok

18:33:31.0923 4912  [ E84DA1A93978B3700EA63414357B9BA3 ] L1C             C:\Windows\system32\DRIVERS\L1C62x64.sys

18:33:31.0954 4912  L1C - ok

18:33:32.0017 4912  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\System32\srvsvc.dll

18:33:32.0095 4912  LanmanServer - ok

18:33:32.0141 4912  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

18:33:32.0219 4912  LanmanWorkstation - ok

18:33:32.0266 4912  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

18:33:32.0344 4912  lltdio - ok

18:33:32.0375 4912  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

18:33:32.0485 4912  lltdsvc - ok

18:33:32.0500 4912  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

18:33:32.0547 4912  lmhosts - ok

18:33:32.0594 4912  [ A1C148801B4AF64847AEB9F3AD9594EF ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

18:33:32.0594 4912  LMS ( UnsignedFile.Multi.Generic ) - warning

18:33:32.0594 4912  LMS - detected UnsignedFile.Multi.Generic (1)

18:33:32.0641 4912  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

18:33:32.0672 4912  LSI_FC - ok

18:33:32.0672 4912  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

18:33:32.0703 4912  LSI_SAS - ok

18:33:32.0703 4912  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys

18:33:32.0719 4912  LSI_SAS2 - ok

18:33:32.0734 4912  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

18:33:32.0750 4912  LSI_SCSI - ok

18:33:32.0765 4912  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

18:33:32.0828 4912  luafv - ok

18:33:32.0875 4912  [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

18:33:32.0906 4912  MBAMProtector - ok

18:33:32.0984 4912  [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

18:33:33.0015 4912  MBAMScheduler - ok

18:33:33.0062 4912  [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

18:33:33.0093 4912  MBAMService - ok

18:33:33.0124 4912  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

18:33:33.0155 4912  Mcx2Svc - ok

18:33:33.0187 4912  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\drivers\megasas.sys

18:33:33.0218 4912  megasas - ok

18:33:33.0233 4912  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys

18:33:33.0249 4912  MegaSR - ok

18:33:33.0327 4912  Microsoft SharePoint Workspace Audit Service - ok

18:33:33.0358 4912  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

18:33:33.0436 4912  MMCSS - ok

18:33:33.0452 4912  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

18:33:33.0483 4912  Modem - ok

18:33:33.0514 4912  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

18:33:33.0545 4912  monitor - ok

18:33:33.0577 4912  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

18:33:33.0592 4912  mouclass - ok

18:33:33.0639 4912  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

18:33:33.0686 4912  mouhid - ok

18:33:33.0733 4912  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

18:33:33.0748 4912  mountmgr - ok

18:33:33.0764 4912  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

18:33:33.0795 4912  mpio - ok

18:33:33.0826 4912  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

18:33:33.0857 4912  mpsdrv - ok

18:33:33.0904 4912  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

18:33:33.0967 4912  MpsSvc - ok

18:33:33.0998 4912  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

18:33:34.0045 4912  MRxDAV - ok

18:33:34.0076 4912  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

18:33:34.0123 4912  mrxsmb - ok

18:33:34.0154 4912  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

18:33:34.0185 4912  mrxsmb10 - ok

18:33:34.0216 4912  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

18:33:34.0263 4912  mrxsmb20 - ok

18:33:34.0294 4912  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

18:33:34.0325 4912  msahci - ok

18:33:34.0357 4912  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

18:33:34.0388 4912  msdsm - ok

18:33:34.0403 4912  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

18:33:34.0435 4912  MSDTC - ok

18:33:34.0481 4912  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

18:33:34.0528 4912  Msfs - ok

18:33:34.0559 4912  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

18:33:34.0622 4912  mshidkmdf - ok

18:33:34.0653 4912  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

18:33:34.0669 4912  msisadrv - ok

18:33:34.0700 4912  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

18:33:34.0762 4912  MSiSCSI - ok

18:33:34.0778 4912  msiserver - ok

18:33:34.0809 4912  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

18:33:34.0887 4912  MSKSSRV - ok

18:33:34.0903 4912  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

18:33:34.0965 4912  MSPCLOCK - ok

18:33:34.0981 4912  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

18:33:35.0027 4912  MSPQM - ok

18:33:35.0059 4912  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

18:33:35.0090 4912  MsRPC - ok

18:33:35.0121 4912  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

18:33:35.0121 4912  mssmbios - ok

18:33:35.0168 4912  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

18:33:35.0215 4912  MSTEE - ok

18:33:35.0246 4912  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys

18:33:35.0261 4912  MTConfig - ok

18:33:35.0277 4912  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

18:33:35.0277 4912  Mup - ok

18:33:35.0308 4912  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

18:33:35.0371 4912  napagent - ok

18:33:35.0402 4912  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

18:33:35.0449 4912  NativeWifiP - ok

18:33:35.0511 4912  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

18:33:35.0542 4912  NDIS - ok

18:33:35.0589 4912  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

18:33:35.0636 4912  NdisCap - ok

18:33:35.0667 4912  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

18:33:35.0729 4912  NdisTapi - ok

18:33:35.0761 4912  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

18:33:35.0807 4912  Ndisuio - ok

18:33:35.0839 4912  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

18:33:35.0917 4912  NdisWan - ok

18:33:35.0948 4912  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

18:33:35.0995 4912  NDProxy - ok

18:33:36.0057 4912  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

18:33:36.0119 4912  NetBIOS - ok

18:33:36.0166 4912  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

18:33:36.0229 4912  NetBT - ok

18:33:36.0260 4912  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

18:33:36.0275 4912  Netlogon - ok

18:33:36.0322 4912  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

18:33:36.0385 4912  Netman - ok

18:33:36.0416 4912  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

18:33:36.0463 4912  netprofm - ok

18:33:36.0541 4912  [ 81B8D0C1CE44A7FDBD596B693783950C ] netr7364        C:\Windows\system32\DRIVERS\netr7364.sys

18:33:36.0587 4912  netr7364 - ok

18:33:36.0619 4912  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

18:33:36.0728 4912  NetTcpPortSharing - ok

18:33:36.0899 4912  [ 4D85A450EDEF10C38882182753A49AAE ] NETw5s64        C:\Windows\system32\DRIVERS\NETw5s64.sys

18:33:37.0133 4912  NETw5s64 - ok

18:33:37.0196 4912  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

18:33:37.0227 4912  nfrd960 - ok

18:33:37.0258 4912  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

18:33:37.0289 4912  NlaSvc - ok

18:33:37.0492 4912  [ D884316E70D9BD296EDA37890DAC7BAA ] NOBU            C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

18:33:37.0555 4912  NOBU - ok

18:33:37.0570 4912  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

18:33:37.0617 4912  Npfs - ok

18:33:37.0648 4912  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

18:33:37.0679 4912  nsi - ok

18:33:37.0711 4912  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

18:33:37.0773 4912  nsiproxy - ok

18:33:37.0835 4912  [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

18:33:37.0882 4912  Ntfs - ok

18:33:37.0913 4912  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

18:33:37.0945 4912  Null - ok

18:33:37.0991 4912  [ AD37248BD442D41C9A896E53EB8A85EE ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys

18:33:38.0007 4912  NVHDA - ok

18:33:38.0288 4912  [ 9D1B69708732B57D1DBC0F648692A04B ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

18:33:38.0631 4912  nvlddmkm - ok

18:33:38.0662 4912  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

18:33:38.0678 4912  nvraid - ok

18:33:38.0709 4912  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

18:33:38.0756 4912  nvstor - ok

18:33:38.0803 4912  [ 95D57F391BF4E81A5A9348B57A509E31 ] nvsvc           C:\Windows\system32\nvvsvc.exe

18:33:38.0818 4912  nvsvc - ok

18:33:38.0865 4912  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

18:33:38.0881 4912  nv_agp - ok

18:33:38.0912 4912  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

18:33:38.0927 4912  ohci1394 - ok

18:33:38.0990 4912  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

18:33:39.0052 4912  ose - ok

18:33:39.0255 4912  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

18:33:39.0583 4912  osppsvc - ok

18:33:39.0614 4912  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

18:33:39.0661 4912  p2pimsvc - ok

18:33:39.0692 4912  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

18:33:39.0723 4912  p2psvc - ok

18:33:39.0754 4912  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\drivers\parport.sys

18:33:39.0770 4912  Parport - ok

18:33:39.0801 4912  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

18:33:39.0817 4912  partmgr - ok

18:33:39.0848 4912  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

18:33:39.0879 4912  PcaSvc - ok

18:33:39.0910 4912  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

18:33:39.0926 4912  pci - ok

18:33:39.0957 4912  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

18:33:39.0973 4912  pciide - ok

18:33:40.0004 4912  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

18:33:40.0051 4912  pcmcia - ok

18:33:40.0051 4912  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

18:33:40.0066 4912  pcw - ok

18:33:40.0097 4912  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

18:33:40.0144 4912  PEAUTH - ok

18:33:40.0222 4912  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

18:33:40.0269 4912  PerfHost - ok

18:33:40.0331 4912  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

18:33:40.0425 4912  pla - ok

18:33:40.0456 4912  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

18:33:40.0519 4912  PlugPlay - ok

18:33:40.0597 4912  [ 627FA58ADC043704F9D14CA44340956F ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

18:33:40.0612 4912  PMBDeviceInfoProvider - ok

18:33:40.0643 4912  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

18:33:40.0690 4912  PNRPAutoReg - ok

18:33:40.0721 4912  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

18:33:40.0737 4912  PNRPsvc - ok

18:33:40.0784 4912  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

18:33:40.0862 4912  PolicyAgent - ok

18:33:40.0909 4912  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

18:33:40.0971 4912  Power - ok

18:33:41.0018 4912  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

18:33:41.0080 4912  PptpMiniport - ok

18:33:41.0111 4912  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\drivers\processr.sys

18:33:41.0127 4912  Processor - ok

18:33:41.0158 4912  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

18:33:41.0221 4912  ProfSvc - ok

18:33:41.0236 4912  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

18:33:41.0236 4912  ProtectedStorage - ok

18:33:41.0283 4912  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

18:33:41.0361 4912  Psched - ok

18:33:41.0408 4912  [ AED797CCA02783296C68AA10D0CFF8A9 ] PxHlpa64        C:\Windows\system32\Drivers\PxHlpa64.sys

18:33:41.0408 4912  PxHlpa64 - ok

18:33:41.0470 4912  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys

18:33:41.0533 4912  ql2300 - ok

18:33:41.0564 4912  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

18:33:41.0579 4912  ql40xx - ok

18:33:41.0611 4912  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

18:33:41.0626 4912  QWAVE - ok

18:33:41.0642 4912  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

18:33:41.0673 4912  QWAVEdrv - ok

18:33:41.0689 4912  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

18:33:41.0751 4912  RasAcd - ok

18:33:41.0782 4912  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

18:33:41.0829 4912  RasAgileVpn - ok

18:33:41.0845 4912  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

18:33:41.0907 4912  RasAuto - ok

18:33:41.0954 4912  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

18:33:42.0032 4912  Rasl2tp - ok

18:33:42.0094 4912  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

18:33:42.0125 4912  RasMan - ok

18:33:42.0172 4912  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

18:33:42.0250 4912  RasPppoe - ok

18:33:42.0266 4912  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

18:33:42.0328 4912  RasSstp - ok

18:33:42.0359 4912  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

18:33:42.0422 4912  rdbss - ok

18:33:42.0453 4912  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys

18:33:42.0500 4912  rdpbus - ok

18:33:42.0515 4912  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

18:33:42.0578 4912  RDPCDD - ok

18:33:42.0609 4912  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

18:33:43.0280 4912  RDPENCDD - ok

18:33:43.0327 4912  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

18:33:43.0358 4912  RDPREFMP - ok

18:33:43.0389 4912  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

18:33:43.0436 4912  RDPWD - ok

18:33:43.0483 4912  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

18:33:43.0514 4912  rdyboost - ok

18:33:43.0592 4912  [ 3B71B5B91E7DCA93585D5A86C897ADC4 ] RegSrvc         C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

18:33:43.0623 4912  RegSrvc - ok

18:33:43.0654 4912  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

18:33:43.0701 4912  RemoteAccess - ok

18:33:43.0732 4912  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

18:33:43.0795 4912  RemoteRegistry - ok

18:33:43.0841 4912  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

18:33:43.0873 4912  RFCOMM - ok

18:33:43.0904 4912  [ 5CA4ABD888B602551B59BAA26941C167 ] rimspci         C:\Windows\system32\drivers\rimssne64.sys

18:33:43.0951 4912  rimspci - ok

18:33:44.0013 4912  [ AA7B4AC7CB1281349CD61DE067F00D5D ] risdsnpe        C:\Windows\system32\drivers\risdsne64.sys

18:33:44.0060 4912  risdsnpe - ok

18:33:44.0138 4912  [ D151224BC11078895A60FA970728FF59 ] Roxio UPnP Renderer 10 C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe

18:33:44.0216 4912  Roxio UPnP Renderer 10 - ok

18:33:44.0247 4912  [ 5022A927944878BD750960BD21E751AF ] Roxio Upnp Server 10 C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe

18:33:44.0263 4912  Roxio Upnp Server 10 - ok

18:33:44.0278 4912  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

18:33:44.0325 4912  RpcEptMapper - ok

18:33:44.0356 4912  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

18:33:44.0372 4912  RpcLocator - ok

18:33:44.0403 4912  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

18:33:44.0450 4912  RpcSs - ok

18:33:44.0497 4912  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

18:33:44.0528 4912  rspndr - ok

18:33:44.0575 4912  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

18:33:44.0590 4912  SamSs - ok

18:33:44.0731 4912  [ 26A05F8833938BD989199E8681B53B86 ] SAVAdminService C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe

18:33:44.0746 4912  SAVAdminService - ok

18:33:44.0809 4912  [ 2192AE4D310ADB821B38595150F5A384 ] SAVOnAccess     C:\Windows\system32\DRIVERS\savonaccess.sys

18:33:44.0840 4912  SAVOnAccess - ok

18:33:44.0918 4912  [ B8A272D4E91EFB366E16BEA0FA42D7EE ] SAVService      C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe

18:33:44.0933 4912  SAVService - ok

18:33:44.0965 4912  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

18:33:44.0996 4912  sbp2port - ok

18:33:45.0027 4912  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

18:33:45.0089 4912  SCardSvr - ok

18:33:45.0105 4912  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

18:33:45.0152 4912  scfilter - ok

18:33:45.0199 4912  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

18:33:45.0261 4912  Schedule - ok

18:33:45.0292 4912  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

18:33:45.0323 4912  SCPolicySvc - ok

18:33:45.0370 4912  [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus           C:\Windows\system32\drivers\sdbus.sys

18:33:45.0401 4912  sdbus - ok

18:33:45.0448 4912  [ 7D67AEABEB597C602EDB5B3AE316E96A ] sdcfilter       C:\Windows\system32\DRIVERS\sdcfilter.sys

18:33:45.0464 4912  sdcfilter - ok

18:33:45.0495 4912  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

18:33:45.0557 4912  SDRSVC - ok

18:33:45.0604 4912  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

18:33:45.0667 4912  secdrv - ok

18:33:45.0698 4912  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

18:33:45.0729 4912  seclogon - ok

18:33:45.0760 4912  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\system32\sens.dll

18:33:45.0838 4912  SENS - ok

18:33:45.0869 4912  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

18:33:45.0901 4912  SensrSvc - ok

18:33:45.0916 4912  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\drivers\serenum.sys

18:33:45.0932 4912  Serenum - ok

18:33:45.0932 4912  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\drivers\serial.sys

18:33:45.0963 4912  Serial - ok

18:33:45.0994 4912  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

18:33:46.0025 4912  sermouse - ok

18:33:46.0057 4912  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

18:33:46.0135 4912  SessionEnv - ok

18:33:46.0166 4912  [ 70F9C476B62DE4F2823E918A6C181ADE ] SFEP            C:\Windows\system32\drivers\SFEP.sys

18:33:46.0213 4912  SFEP - ok

18:33:46.0244 4912  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

18:33:46.0275 4912  sffdisk - ok

18:33:46.0275 4912  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

18:33:46.0306 4912  sffp_mmc - ok

18:33:46.0322 4912  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

18:33:46.0369 4912  sffp_sd - ok

18:33:46.0400 4912  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

18:33:46.0447 4912  sfloppy - ok

18:33:46.0493 4912  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

18:33:46.0571 4912  SharedAccess - ok

18:33:46.0603 4912  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

18:33:46.0649 4912  ShellHWDetection - ok

18:33:46.0681 4912  [ C06CCD29F5C15B610237E86F82085E77 ] shpf            C:\Windows\system32\DRIVERS\shpf.sys

18:33:46.0696 4912  shpf - ok

18:33:46.0727 4912  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys

18:33:46.0743 4912  SiSRaid2 - ok

18:33:46.0759 4912  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

18:33:46.0774 4912  SiSRaid4 - ok

18:33:46.0852 4912  [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

18:33:46.0868 4912  SkypeUpdate - ok

18:33:46.0899 4912  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

18:33:46.0961 4912  Smb - ok

18:33:47.0024 4912  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

18:33:47.0055 4912  SNMPTRAP - ok

18:33:47.0133 4912  [ 98886C88A1CB13D61672AE2C638B7E1C ] SOHCImp         C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

18:33:47.0164 4912  SOHCImp - ok

18:33:47.0180 4912  [ 442A13F395546F4564C377296D43B564 ] SOHDBSvr        C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe

18:33:47.0211 4912  SOHDBSvr - ok

18:33:47.0227 4912  [ 556681BE668D71DC162391A45422B52C ] SOHDms          C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

18:33:47.0258 4912  SOHDms - ok

18:33:47.0289 4912  [ 72B46103E4111439109ACF5882627C24 ] SOHDs           C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

18:33:47.0305 4912  SOHDs - ok

18:33:47.0320 4912  [ 725B6E9CD1959271AC993DC035E1606D ] SOHPlMgr        C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe

18:33:47.0351 4912  SOHPlMgr - ok

18:33:47.0414 4912  [ 8A12AB5DE877B8F97D5EE70E16A5C9B2 ] Sophos AutoUpdate Service C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe

18:33:47.0429 4912  Sophos AutoUpdate Service - ok

18:33:47.0507 4912  [ BD03374253F79CE7A716A870DC85BD84 ] Sophos Web Control Service C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe

18:33:47.0539 4912  Sophos Web Control Service - ok

18:33:47.0617 4912  [ 69FBE35A8165ADBC313AA7F64B868CA1 ] SophosBootDriver C:\Windows\system32\DRIVERS\SophosBootDriver.sys

18:33:47.0648 4912  SophosBootDriver - ok

18:33:47.0663 4912  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

18:33:47.0679 4912  spldr - ok

18:33:47.0726 4912  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

18:33:47.0773 4912  Spooler - ok

18:33:47.0882 4912  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

18:33:47.0991 4912  sppsvc - ok

18:33:48.0022 4912  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

18:33:48.0085 4912  sppuinotify - ok

18:33:48.0116 4912  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

18:33:48.0163 4912  srv - ok

18:33:48.0194 4912  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

18:33:48.0225 4912  srv2 - ok

18:33:48.0256 4912  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

18:33:48.0303 4912  srvnet - ok

18:33:48.0350 4912  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

18:33:48.0443 4912  SSDPSRV - ok

18:33:48.0459 4912  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

18:33:48.0490 4912  SstpSvc - ok

18:33:48.0521 4912  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys

18:33:48.0537 4912  stexstor - ok

18:33:48.0584 4912  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

18:33:48.0599 4912  stisvc - ok

18:33:48.0631 4912  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

18:33:48.0646 4912  swenum - ok

18:33:48.0771 4912  [ B3379659D773BFDD3B631F5FEE2FF2B3 ] swi_service     C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe

18:33:48.0833 4912  swi_service - ok

18:33:48.0989 4912  [ F6A5E474ED27BA7938A1D0CA19F7008B ] swi_update_64   C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe

18:33:49.0083 4912  swi_update_64 - ok

18:33:49.0114 4912  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

18:33:49.0177 4912  swprv - ok

18:33:49.0223 4912  [ 2F827BB08CC7F1A17DF2EAD7B424D731 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

18:33:49.0255 4912  SynTP - ok

18:33:49.0333 4912  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

18:33:49.0395 4912  SysMain - ok

18:33:49.0426 4912  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

18:33:49.0442 4912  TabletInputService - ok

18:33:49.0457 4912  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

18:33:49.0520 4912  TapiSrv - ok

18:33:49.0551 4912  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

18:33:49.0629 4912  TBS - ok

18:33:49.0723 4912  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

18:33:49.0754 4912  Tcpip - ok

18:33:49.0832 4912  [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

18:33:49.0879 4912  TCPIP6 - ok

18:33:49.0910 4912  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

18:33:49.0941 4912  tcpipreg - ok

18:33:49.0972 4912  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

18:33:50.0019 4912  TDPIPE - ok

18:33:50.0035 4912  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

18:33:50.0081 4912  TDTCP - ok

18:33:50.0128 4912  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

18:33:50.0191 4912  tdx - ok

18:33:50.0222 4912  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

18:33:50.0253 4912  TermDD - ok

18:33:50.0284 4912  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

18:33:50.0331 4912  TermService - ok

18:33:50.0362 4912  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

18:33:50.0409 4912  Themes - ok

18:33:50.0456 4912  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

18:33:50.0503 4912  THREADORDER - ok

18:33:50.0534 4912  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

18:33:50.0581 4912  TrkWks - ok

18:33:50.0643 4912  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

18:33:50.0705 4912  TrustedInstaller - ok

18:33:50.0721 4912  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

18:33:50.0768 4912  tssecsrv - ok

18:33:50.0846 4912  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

18:33:50.0893 4912  TsUsbFlt - ok

18:33:50.0939 4912  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

18:33:51.0002 4912  tunnel - ok

18:33:51.0033 4912  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

18:33:51.0049 4912  uagp35 - ok

18:33:51.0111 4912  [ 63F6D08C54D5B3C1B12A6172032055C7 ] uCamMonitor     C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

18:33:51.0142 4912  uCamMonitor - ok

18:33:51.0173 4912  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

18:33:51.0267 4912  udfs - ok

18:33:51.0298 4912  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

18:33:51.0314 4912  UI0Detect - ok

18:33:51.0345 4912  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

18:33:51.0392 4912  uliagpkx - ok

18:33:51.0439 4912  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys

18:33:51.0485 4912  umbus - ok

18:33:51.0532 4912  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys

18:33:51.0563 4912  UmPass - ok

18:33:51.0673 4912  [ 41118D920B2B268C0ADC36421248CDCF ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

18:33:51.0735 4912  UNS ( UnsignedFile.Multi.Generic ) - warning

18:33:51.0735 4912  UNS - detected UnsignedFile.Multi.Generic (1)

18:33:51.0766 4912  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

18:33:51.0813 4912  upnphost - ok

18:33:51.0844 4912  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

18:33:51.0891 4912  usbccgp - ok

18:33:51.0907 4912  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

18:33:51.0922 4912  usbcir - ok

18:33:51.0953 4912  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\drivers\usbehci.sys

18:33:51.0985 4912  usbehci - ok

18:33:52.0031 4912  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

18:33:52.0094 4912  usbhub - ok

18:33:52.0125 4912  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

18:33:52.0156 4912  usbohci - ok

18:33:52.0187 4912  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

18:33:52.0234 4912  usbprint - ok

18:33:52.0265 4912  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

18:33:52.0328 4912  USBSTOR - ok

18:33:52.0328 4912  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

18:33:52.0375 4912  usbuhci - ok

18:33:52.0421 4912  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

18:33:52.0453 4912  usbvideo - ok

18:33:52.0484 4912  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

18:33:52.0546 4912  UxSms - ok

18:33:52.0593 4912  [ 4E7135D6D0127067E4CFEE12259F895D ] VAIO Entertainment TV Device Arbitration Service C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe

18:33:52.0640 4912  VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - warning

18:33:52.0640 4912  VAIO Entertainment TV Device Arbitration Service - detected UnsignedFile.Multi.Generic (1)

18:33:52.0718 4912  [ 6B31C9CB94927DBEEB62E15275F4CC54 ] VAIO Event Service C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe

18:33:52.0733 4912  VAIO Event Service - ok

18:33:52.0780 4912  [ B8C9A7010AFD5CBBE194CB9EF7C4FD14 ] VAIO Power Management C:\Program Files\Sony\VAIO Power Management\SPMService.exe

18:33:52.0811 4912  VAIO Power Management - ok

18:33:52.0827 4912  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

18:33:52.0827 4912  VaultSvc - ok

18:33:52.0889 4912  [ 6A740F5FF3246C3BE3DD317299EFC88E ] VCFw            C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

18:33:52.0921 4912  VCFw - ok

18:33:53.0030 4912  [ 10E212BFB7EAB152A64C1AAEC2F7F4E0 ] VcmIAlzMgr      C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

18:33:53.0045 4912  VcmIAlzMgr - ok

18:33:53.0092 4912  [ 9D9B34B430B4DC683112F59C80D20AB8 ] VcmINSMgr       C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

18:33:53.0155 4912  VcmINSMgr - ok

18:33:53.0248 4912  [ 8EFAACCC7BFA1E9031EFDFB01A1B0D69 ] VcmXmlIfHelper  C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

18:33:53.0279 4912  VcmXmlIfHelper - ok

18:33:53.0342 4912  [ D347D3ABE070AA09C22FC37121555D52 ] VCService       C:\Program Files\Sony\VAIO Care\VCService.exe

18:33:53.0357 4912  VCService - ok

18:33:53.0404 4912  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

18:33:53.0420 4912  vdrvroot - ok

18:33:53.0467 4912  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

18:33:53.0545 4912  vds - ok

18:33:53.0560 4912  [ 70EB327D68D7CEC357B734B0BE5B4A21 ] vflt            C:\Windows\system32\DRIVERS\vfilter.sys

18:33:53.0623 4912  vflt - ok

18:33:53.0654 4912  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

18:33:53.0669 4912  vga - ok

18:33:53.0685 4912  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

18:33:53.0732 4912  VgaSave - ok

18:33:53.0763 4912  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

18:33:53.0794 4912  vhdmp - ok

18:33:53.0825 4912  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

18:33:53.0841 4912  viaide - ok

18:33:53.0872 4912  [ 71BF90872B6A7B34A26F4794DDA7AEC3 ] vnet            C:\Windows\system32\DRIVERS\virtualnet.sys

18:33:53.0919 4912  vnet - ok

18:33:53.0966 4912  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

18:33:53.0981 4912  volmgr - ok

18:33:54.0013 4912  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

18:33:54.0044 4912  volmgrx - ok

18:33:54.0059 4912  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

18:33:54.0075 4912  volsnap - ok

18:33:54.0122 4912  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

18:33:54.0169 4912  vsmraid - ok

18:33:54.0247 4912  [ 047F22BDFDAE6DF6F1E47E747A1237A2 ] VSNService      C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

18:33:54.0278 4912  VSNService ( UnsignedFile.Multi.Generic ) - warning

18:33:54.0278 4912  VSNService - detected UnsignedFile.Multi.Generic (1)

18:33:54.0340 4912  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

18:33:54.0449 4912  VSS - ok

18:33:54.0715 4912  [ 630BC8454C8F1398CE4FAEA1FBF62789 ] VUAgent         C:\Program Files\Sony\VAIO Update\VUAgent.exe

18:33:54.0746 4912  VUAgent - ok

18:33:54.0777 4912  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

18:33:54.0808 4912  vwifibus - ok

18:33:54.0824 4912  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

18:33:54.0855 4912  vwififlt - ok

18:33:54.0902 4912  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

18:33:54.0933 4912  vwifimp - ok

18:33:54.0980 4912  [ D8BEF4AC1EAC809DBDBD441D6CFF6C4C ] VzCdbSvc        C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

18:33:54.0995 4912  VzCdbSvc ( UnsignedFile.Multi.Generic ) - warning

18:33:54.0995 4912  VzCdbSvc - detected UnsignedFile.Multi.Generic (1)

18:33:55.0042 4912  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

18:33:55.0120 4912  W32Time - ok

18:33:55.0136 4912  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

18:33:55.0167 4912  WacomPen - ok

18:33:55.0214 4912  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

18:33:55.0276 4912  WANARP - ok

18:33:55.0307 4912  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

18:33:55.0339 4912  Wanarpv6 - ok

18:33:55.0432 4912  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

18:33:55.0495 4912  WatAdminSvc - ok

18:33:55.0573 4912  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

18:33:55.0666 4912  wbengine - ok

18:33:55.0713 4912  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

18:33:55.0760 4912  WbioSrvc - ok

18:33:55.0791 4912  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

18:33:55.0838 4912  wcncsvc - ok

18:33:55.0869 4912  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

18:33:55.0900 4912  WcsPlugInService - ok

18:33:55.0931 4912  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys

18:33:55.0947 4912  Wd - ok

18:33:55.0994 4912  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

18:33:56.0009 4912  Wdf01000 - ok

18:33:56.0041 4912  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

18:33:56.0119 4912  WdiServiceHost - ok

18:33:56.0150 4912  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

18:33:56.0165 4912  WdiSystemHost - ok

18:33:56.0197 4912  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

18:33:56.0243 4912  WebClient - ok

18:33:56.0259 4912  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

18:33:56.0337 4912  Wecsvc - ok

18:33:56.0353 4912  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

18:33:56.0399 4912  wercplsupport - ok

18:33:56.0446 4912  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

18:33:56.0477 4912  WerSvc - ok

18:33:56.0524 4912  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

18:33:56.0587 4912  WfpLwf - ok

18:33:56.0602 4912  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

18:33:56.0618 4912  WIMMount - ok

18:33:56.0633 4912  WinDefend - ok

18:33:56.0633 4912  WinHttpAutoProxySvc - ok

18:33:56.0711 4912  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

18:33:56.0758 4912  Winmgmt - ok

18:33:56.0836 4912  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

18:33:56.0945 4912  WinRM - ok

18:33:56.0992 4912  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUSB.sys

18:33:57.0039 4912  WinUsb - ok

18:33:57.0086 4912  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

18:33:57.0133 4912  Wlansvc - ok

18:33:57.0273 4912  [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

18:33:57.0320 4912  wlidsvc - ok

18:33:57.0351 4912  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

18:33:57.0382 4912  WmiAcpi - ok

18:33:57.0413 4912  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

18:33:57.0460 4912  wmiApSrv - ok

18:33:57.0491 4912  WMPNetworkSvc - ok

18:33:57.0491 4912  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

18:33:57.0538 4912  WPCSvc - ok

18:33:57.0585 4912  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

18:33:57.0601 4912  WPDBusEnum - ok

18:33:57.0632 4912  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

18:33:57.0710 4912  ws2ifsl - ok

18:33:57.0741 4912  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\system32\wscsvc.dll

18:33:57.0788 4912  wscsvc - ok

18:33:57.0788 4912  WSearch - ok

18:33:57.0881 4912  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

18:33:57.0928 4912  wuauserv - ok

18:33:57.0944 4912  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

18:33:57.0991 4912  WudfPf - ok

18:33:58.0022 4912  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

18:33:58.0053 4912  WUDFRd - ok

18:33:58.0100 4912  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

18:33:58.0131 4912  wudfsvc - ok

18:33:58.0162 4912  [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc         C:\Windows\System32\wwansvc.dll

18:33:58.0209 4912  WwanSvc - ok

18:33:58.0256 4912  ================ Scan global ===============================

18:33:58.0287 4912  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

18:33:58.0318 4912  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

18:33:58.0334 4912  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

18:33:58.0365 4912  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

18:33:58.0381 4912  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

18:33:58.0381 4912  [Global] - ok

18:33:58.0396 4912  ================ Scan MBR ==================================

18:33:58.0396 4912  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

18:33:59.0457 4912  \Device\Harddisk0\DR0 - ok

18:33:59.0457 4912  ================ Scan VBR ==================================

18:33:59.0488 4912  [ 908042BAFC5F5B88552BFFA9ADA6EC0C ] \Device\Harddisk0\DR0\Partition1

18:33:59.0488 4912  \Device\Harddisk0\DR0\Partition1 - ok

18:33:59.0504 4912  [ E7F60DEC86C4EE3CD610F96DEF960160 ] \Device\Harddisk0\DR0\Partition2

18:33:59.0504 4912  \Device\Harddisk0\DR0\Partition2 - ok

18:33:59.0519 4912  ============================================================

18:33:59.0519 4912  Scan finished

18:33:59.0519 4912  ============================================================

18:33:59.0519 4380  Detected object count: 5

18:33:59.0519 4380  Actual detected object count: 5

18:34:50.0001 4380  LMS ( UnsignedFile.Multi.Generic ) - skipped by user

18:34:50.0001 4380  LMS ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:34:50.0001 4380  UNS ( UnsignedFile.Multi.Generic ) - skipped by user

18:34:50.0001 4380  UNS ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:34:50.0001 4380  VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - skipped by user

18:34:50.0001 4380  VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:34:50.0017 4380  VSNService ( UnsignedFile.Multi.Generic ) - skipped by user

18:34:50.0017 4380  VSNService ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:34:50.0017 4380  VzCdbSvc ( UnsignedFile.Multi.Generic ) - skipped by user

18:34:50.0017 4380  VzCdbSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 

18:35:31.0484 2664  Deinitialize success

2. Logfile Malwarebytes (alles entfernt, Neustart durchgeführt)

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.07.30.08
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16635

Polly1701 :: POLLY [Administrator]
 

30.07.2013 18:49:43

mbam-log-2013-07-30 (18-49-43).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 423163

Laufzeit: 1 Stunde(n), 36 Minute(n), 12 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 1

C:\Users\Polly1701\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateien: 4

C:\Users\Polly1701\AppData\Roaming\OpenCandy\4E9A37112048444581B2FB36B389EA58\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\_OTL\MovedFiles.zip (Spyware.Password) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\_OTL\MovedFiles\07302013_163026\C_Users\Polly1701\AppData\Local\JCmZFOv.exe (Spyware.Password) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Polly1701\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Hi,

lade den CCleaner standard:
http://filepony.de/download-ccleaner/
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Hi,
hier ist die Liste. Bei manchen Programmen hab ich "unbekannt" dahinter geschrieben, wobei ich nicht weiß, ob die Programme nicht für irgendwelche Hintergrundprozesse oder ähnliches benötigt werden (z.B. Programme von Microsoft, Sony/Vaio, Skype). Ich kann aber auch die Liste gern überarbeiten! :)

Code:

Adobe AIR        Adobe Systems Incorporated        17.06.2013                3.7.0.2090                        notwendig

Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        12.06.2012        6,00 MB        11.3.300.257        notwendig

Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        19.12.2012        6,00 MB        11.5.502.135        notwendig        

Adobe Reader 9.5.2 - Deutsch        Adobe Systems Incorporated        06.11.2012        119 MB        9.5.2                notwendig

Amazon MP3-Downloader 1.0.17        Amazon Services LLC        21.12.2012                1.0.17                        notwendig

Apple Application Support        Apple Inc.        17.04.2011        52,8 MB        1.4.1                                unbekannt

Apple Software Update        Apple Inc.        07.08.2011        2,38 MB        2.1.3.127                                unbekannt

ArcSoft Magic-i Visual Effects 2        ArcSoft        21.01.2010                2.0.1.85                        notwendig

ArcSoft PhotoBase 3                17.02.2010                unnötig

ArcSoft PhotoStudio 5                17.02.2010                notwendig

ArcSoft WebCam Companion 3        ArcSoft        06.08.2011                3.0.21.390                                notwendig

ArgoUML Latest Stable Release 0.32.2        Tigris.org (Open Source)        29.06.2011                        unbekannt

Belkin Installationsprogramm und Router Monitor                03.11.2011        47,5 MB                                notwendig

CCleaner        Piriform        22.07.2013                4.04                notwendig

CDex extraction audio                27.10.2010                        notwendig

Digital Trends Club        HI-epanel        23.08.2011        8,92 MB        11.1.3067                                notwendig

Dropbox        Dropbox, Inc.        23.07.2013                2.0.26                notwendig

Einstellungen für VAIO-Inhaltsüberwachung        Sony Corporation        21.01.2010                2.4.1.09180        unbekannt

Evernote        Evernote Corp.        03.02.2010        88,2 MB        3.5.0.1258        unnötig

Google Chrome        Google Inc.        21.01.2010                3.0.195.21        unnötig

Google Earth Plug-in        Google        23.03.2013        80,7 MB        7.0.3.8542        notwendig

Google Toolbar for Internet Explorer        Google Inc.        25.06.2013                7.5.4209.2358 unnötig

Intel(R) Control Center        Intel Corporation        26.11.2012                1.2.1.1007                                notwendig

Intel(R) Graphics Media Accelerator Driver        Intel Corporation        26.11.2012                8.15.10.2040        notwendig

Intel(R) Management Engine Components        Intel Corporation        08.11.2012                6.0.0.1179                notwendig

Intel(R) PROSet/Wireless WiFi-Software        Intel Corporation        21.01.2010        109 MB        13.00.0000                notwendig

Intel(R) Rapid Storage Technology        Intel Corporation        26.11.2012                9.5.4.1001                notwendig

Java(TM) 6 Update 16 (64-bit)        Sun Microsystems, Inc.        21.01.2010        90,8 MB        6.0.160                                notwendig

Java(TM) 6 Update 20        Sun Microsystems, Inc.        21.01.2010        97,6 MB        6.0.200                                        notwendig

Malwarebytes Anti-Malware Version 1.75.0.1300        Malwarebytes Corporation        30.07.2013        19,2 MB        1.75.0.1300                notwendig

Media Gallery        Sony Corporation        21.01.2010                1.1.0.10210 unnötig

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        22.09.2010        38,8 MB        4.0.30319                        unbekannt

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        22.09.2010        2,93 MB        4.0.30319        unbekannt

Microsoft Office Professional Plus 2010        Microsoft Corporation        30.11.2011                14.0.6029.1000                                notwendig

Microsoft Silverlight        Microsoft Corporation        10.07.2013        100 MB        5.1.20513.0                                                notwendig

Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        21.01.2010        1,72 MB        3.1.0000                        unbekannt

Microsoft SQL Server Compact 3.5 SP1 English        Microsoft Corporation        21.01.2010        2,59 MB        3.5.5692.0                        unbekannt

Microsoft SQL Server Compact 3.5 SP1 x64 English        Microsoft Corporation        21.01.2010        3,69 MB        3.5.5692.0                        unbekannt

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        03.02.2010        250 KB        8.0.50727.4053        unbekannt

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        20.06.2011        300 KB        8.0.61001                                unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022        Microsoft Corporation        30.12.2011        2,06 MB        9.0.21022                unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729        Microsoft Corporation        16.02.2012        234 KB        9.0.30729                unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        01.01.2012        600 KB        9.0.30729.6161                unbekannt

MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        03.02.2010        1,27 MB        4.20.9870.0                unbekannt

MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        03.02.2010        1,33 MB        4.20.9876.0                unbekannt

MusicStation        Omnifone        21.01.2010        21,4 MB        2.0.0.1067                        unbekannt

MyHeritage Family Tree Builder        MyHeritage.com        30.12.2011                6.0.0.5634                        notwendig

Norton Online Backup        Symantec Corporation        26.05.2013        9,01 MB        2.7.2.25                        unnötig

NVIDIA Drivers        NVIDIA Corporation        26.11.2009                1.9        notwendig

Opera 11.50        Opera Software ASA        30.06.2011                11.50.1074                                unnötig

Opera 12.16        Opera Software ASA        06.07.2013                12.16.1860                                notwendig

PDFCreator        Frank Heindörfer, Philip Chinery        29.03.2010                0.9.9                        notwendig

Pixlr-o-matic        UNKNOWN        09.10.2012                2.1        notwendig

PMB        Sony Corporation        21.01.2010        257 MB        5.0.00.10260                                        notwendig

PMB VAIO Edition Guide        Sony Corporation        21.01.2010        197 MB        1.0.00.09250                        unbekannt        

PMB VAIO Edition plug-in (Click to Disc)        Sony Corporation        08.05.2010        188 MB        3.2.00.16060        unbekannt

PMB VAIO Edition plug-in (VAIO Image Optimizer)        Sony Corporation        26.11.2012        54,8 MB        1.2.00.15250        unbekannt

PMB VAIO Edition plug-in (VAIO Movie Story)        Sony Corporation        08.05.2010        69,4 MB        2.2.00.15250        unbekannt

PMB-Aktualisierungsprogramm        Sony Corporation        09.02.2011        63,5 MB        5.2.00.03250                        unbekannt

Protector Suite 2009        UPEK Inc.        21.01.2010        120 MB        5.9.2.5746                                        unbekannt

Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        21.01.2010                6.0.1.5992        notwendig

Roxio Easy Media Creator 10 LJ        Roxio        21.01.2010        125 MB        10.3        unbekannt

SecureW2 EAP Suite 2.0.4 for Windows                19.05.2011                unbekannt

Setting Utility Series        Sony Corporation        21.01.2010                5.1.0.11200 unbekannt

Shrew Soft VPN Client                09.02.2010                                                                notwendig

SimAquarium        grafio        07.05.2010                                                                        notwendig

Skype Click to Call        Skype Technologies S.A.        17.04.2012        10,0 MB        5.9.9216                        unbekannt

Skype™ 6.3        Skype Technologies S.A.        22.07.2013        21,1 MB        6.3.107                                        notwendig

Sony Home Network Library        Sony Corporation        21.01.2010                2.0.2.12150                unbekannt

Sophos Anti-Virus        Sophos Limited        10.07.2013        70,8 MB        10.0.10                                        notwendig

Sophos AutoUpdate        Sophos Limited        08.08.2012        15,1 MB        2.7.4.317                                notwendig

Synaptics Pointing Device Driver        Synaptics Incorporated        21.01.2010                14.0.10.0        notwendig

The Bat! International Pack v4.2.23        Ritlabs        18.03.2010        20,6 MB        4.2.23                                notwendig

TheBat! Home v5.0.8        Ritlabs        11.04.2011        38,0 MB        5.0.8                                                notwendig

VAIO Care        Sony Corporation        06.12.2011                6.4.2.11150                                notwendig

VAIO Content Metadata Intelligent Analyzing Manager        Sony Corporation        21.01.2010                3.6.0.09250                unbekannt

VAIO Content Metadata Intelligent Network Service Manager        Sony Corporation        21.01.2010                3.6.0.09080        unbekannt

VAIO Content Metadata Manager Settings        Sony Corporation        21.01.2010                3.6.0.09240                                unbekannt

VAIO Content Metadata XML Interface Library        Sony Corporation        21.01.2010                3.6.0.09080                        unbekannt

VAIO Control Center        Sony Corporation        26.11.2012                4.1.1.07160                                                unbekannt

VAIO Data Restore Tool        Sony Corporation        21.01.2010                1.2.0.09150                                                unbekannt

VAIO DVD Menu Data        Sony Corporation        21.01.2010                2.1.00.15050                                                unbekannt

VAIO Energie Verwaltung        Sony Corporation        21.01.2010                5.0.0.11300                                                notwendig

VAIO Entertainment Platform        Sony Corporation        21.01.2010                3.6.0.09150                                        unbekannt

VAIO Event Service        Sony Corporation        21.01.2010                5.1.0.11300                                                unbekannt

VAIO Gate        Sony Corporation        21.01.2010                1.2.0.09240        notwendig

VAIO Gate Default        Sony Corporation        21.01.2010                1.0.0.10290        notwendig

VAIO Marketing Tools        Sony Corporation        21.01.2010                                                                        unbekannt

VAIO Media plus        Sony Corporation        21.01.2010                2.0.1.10160                                                        unbekannt

VAIO Media plus Opening Movie        Sony Corporation        21.01.2010                1.2.0.09100                                        unbekannt

VAIO Movie Story Template Data        Sony Corporation        21.01.2010        438 MB        2.2.00.15250                                        unbekannt

VAIO Original Funktion Einstellungen        Sony Corporation        21.01.2010                2.0.0.07010                                unbekannt

VAIO Personalization Manager        Sony Corporation        21.01.2010                2.0.0.06220                                        unbekannt

VAIO Premium Partners        Sony Europe        21.01.2010                1.0                                                                unbekannt

VAIO screensaver        Sony Europe        21.01.2010                1.0.0.0                                                                notwendig

VAIO Smart Network        Sony Corporation        26.11.2012                3.3.1.08110                                                notwendig

VAIO Update        Sony Corporation        12.06.2013                6.2.1.03260                                                        notwendig

VAIO Wallpaper Contents        Sony Corporation        21.01.2010                2.0.0.06010                                                notwendig

VAIO-Support für Übertragungen        Sony Corporation        30.06.2010                1.1.2.06030                                        unbekannt

VideoPad Videobearbeitungs-Software        NCH Software        06.07.2013                                                                unbekannt

VLC media player 1.0.5        VideoLAN Team        03.04.2010                1.0.5                                                                notwendig

WIDCOMM Bluetooth Software        Broadcom Corporation        25.11.2009        144 MB        6.2.1.500                                        notwendig

Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405)        Broadcom        21.01.2010                09/09/2009 6.2.0.9405        notwendig

Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800)        Broadcom        21.01.2010                07/28/2009 6.2.0.9800        notwendig

Windows Live Essentials        Microsoft Corporation        06.07.2013                16.4.3508.0205                        unnötig

Windows Live Sync        Microsoft Corporation        21.01.2010        2,79 MB        14.0.8089.726                        unbekannt

WinRAR 4.01 (32-Bit)        win.rar GmbH        04.07.2011                4.01.0        notwendig

XnView 1.97.8        Gougelet Pierre-e        10.12.2010        8,17 MB        1.97.8        notwendig

Hi,
es sind 2 Logs zu erstellen, poste diese möglichst gleichzeitig.

1.
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
Evernote
Google : beide unnötigen
Java: alle
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
deinstaliere:
Media Gallery
Norton
VideoPad

Öffne bitte CCleaner, analysieren, starten, PC neustarten.

2.
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

neustarten.

3.
Lade Hitmanpro:
HitmanPro - Download - Filepony

Doppelklicken, Scan klicken.
Nichts löschen, weiter klicken.
Log speichern und posten, bzw als XML exportieren, packen und anhängen.b

Hi,

Schritt 1: durchgeführt
Schritt 2: durchgeführt, hier die Logdatei
AdwCleaner Logfile:

Code:

# AdwCleaner v2.306 - Datei am 31/07/2013 um 15:17:23 erstellt

# Aktualisiert am 19/07/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzer : Polly1701 - POLLY

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Polly1701\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\END

Datei Gelöscht : C:\Users\Polly1701\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll 

Ordner Gelöscht : C:\Program Files (x86)\GinyasBrowserCompanion

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\Partner

Ordner Gelöscht : C:\Users\Polly1701\AppData\Roaming\DesktopIconForAmazon

Ordner Gelöscht : C:\Users\Polly1701\AppData\Roaming\GinyasBrowserCompanion

Ordner Gelöscht : C:\Users\Polly1701\AppData\Roaming\OpenCandy
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\BabSolution

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16635
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.qip.ru --> hxxp://www.google.com

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.qip.ru/ie --> hxxp://www.google.com
 

-\\ Opera v12.16.1860.0
 

Datei : C:\Users\Polly1701\AppData\Roaming\Opera\Opera\operaprefs.ini
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [4177 octets] - [31/07/2013 15:17:23]
 

########## EOF - C:\AdwCleaner[S1].txt - [4237 octets] ##########

--- --- ---

Schritt 3: gescannt, angezeigt wurden die Scanergebnisse und die Meldung "Klicken Sie auf Weiter um die Schadsoftware zu entfernen" - ich hab erstmal nicht auf "weiter" geklickt (falls ich die Anweisung "nichts löschen" richtig verstanden habe?) und nur die Logdatei gespeichert

Code:

HitmanPro 3.7.6.201

www.hitmanpro.com
 

   Computer name . . . . : POLLY

   Windows . . . . . . . : 6.1.1.7601.X64/4

   User name . . . . . . : Polly\Polly1701

   UAC . . . . . . . . . : Enabled

   License . . . . . . . : Free
 

   Scan date . . . . . . : 2013-07-31 15:27:51

   Scan mode . . . . . . : Normal

   Scan duration . . . . : 10m 36s

   Disk access mode  . . : Direct disk access (SRB)

   Cloud . . . . . . . . : Internet

   Reboot  . . . . . . . : No
 

   Threats . . . . . . . : 346

   Traces  . . . . . . . : 346
 

   Objects scanned . . . : 1.762.761

   Files scanned . . . . : 47.239

   Remnants scanned  . . : 490.576 files / 1.224.946 keys
 

Malware _____________________________________________________________________
 

   C:\Users\Public\Documents\Install\ACD Systems\ACD Systems Canvas X KeyGenerator\Keygen.exe

      Size . . . . . . . : 50.176 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:59)

      Entropy  . . . . . : 7.6

      SHA-256  . . . . . : C19E0C6E617E12BD05BAC8E70B9D6916B7E768DAD827EFD5943F3716CBD74561

    > G Data . . . . . . : Gen:Variant.Kazy.6996

      Fuzzy  . . . . . . : 118.0
 

   C:\Users\Public\Documents\Install\Adobe Photoshop CS 8.0\crack\CRACK.EXE

      Size . . . . . . . : 36.312 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:57)

      Entropy  . . . . . : 6.1

      SHA-256  . . . . . : 0E1AF3B829DF94F4ECBA07A0B339103778FA031A100A873FDEF34BA41EDBC5E2

    > Ikarus . . . . . . : Virus.Win32.Virut!IK

      Fuzzy  . . . . . . : 110.0
 

   C:\Users\Public\Documents\Install\Media Player Classic 6.4.8.4 For Windows 2000, XP.exe

      Size . . . . . . . : 53.760 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:52:55)

      Entropy  . . . . . : 7.5

      SHA-256  . . . . . : 7869525CA294882CA9330370F6891FA7EA8A7062E5CE20DC856767028F0E498D

    > G Data . . . . . . : Gen:Trojan.Heur.dmGfrbHHe2hcu

      Fuzzy  . . . . . . : 114.0
 

   C:\Users\Public\Documents\Install\Symantec AntiVirus Corporate Edition 10.0 [EN]\Rollout\AVServer\AMS2\WINNT\amsremote.exe

      Size . . . . . . . : 70.632 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:13)

      Entropy  . . . . . : 6.5

      SHA-256  . . . . . : EF88D4511006E61DB5411FC8628C4F9C7113595FBF43D45EC7FE0FB85FC94596

    > G Data . . . . . . : Gen:Variant.Symmi.25404

      Fuzzy  . . . . . . : 106.0
 

   C:\Users\Public\Documents\Install\Symantec AntiVirus Corporate Edition 10.0 [EN]\Rollout\AVServer\CopySrv.exe

      Size . . . . . . . : 134.576 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:09)

      Entropy  . . . . . : 6.3

      SHA-256  . . . . . : 9CC3013FA879E0E4253B7DBEC2C95FD537105C40531BD9161F1F4BD436D555E2

    > G Data . . . . . . : Gen:Variant.Symmi.25404

      Fuzzy  . . . . . . : 106.0
 

   C:\Users\Public\Documents\Install\Symantec AntiVirus Corporate Edition 10.0 [EN]\Tools\Nosuprt\QuarDel\QuarDel.exe

      Size . . . . . . . : 58.376 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:02)

      Entropy  . . . . . : 5.0

      SHA-256  . . . . . : 85BE7BF1CBBAF21D381609A1C3C0B664D277F0E2DFDD5D38D6D6547966D7FA59

    > Ikarus . . . . . . : Rootkit.Win32.Agent!IK

      Fuzzy  . . . . . . : 106.0
 

   C:\Users\Public\Documents\Install\WinAmp\Plugins\SHOUTcast DSP 1.8.2.exe

      Size . . . . . . . : 36.312 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:52:59)

      Entropy  . . . . . : 6.2

      SHA-256  . . . . . : 3077DC4B329B5362380DDFF5E5F771DD01F9A3F16B335CF6AADF8775A9716C57

    > Ikarus . . . . . . : Virus.Win32.Virut!IK

      Fuzzy  . . . . . . : 110.0
 

   C:\Users\Public\Documents\Install\WinAmp\Plugins\Vorbis Decoder 1.17c.exe

      Size . . . . . . . : 35.800 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:53:00)

      Entropy  . . . . . : 6.2

      SHA-256  . . . . . : B0C27597D63FF3A0B5E1E2CAF76210452DE386770E2D07A03D6317E3EB15E22A

    > Ikarus . . . . . . : Virus.Win32.Virut!IK

      Fuzzy  . . . . . . : 110.0
 

   C:\Users\Public\Documents\Install\WinAmp\WinAmp 3.0 Full.exe

      Size . . . . . . . : 36.992 bytes

      Age  . . . . . . . : 1234.6 days (2010-03-15 00:52:57)

      Entropy  . . . . . : 6.3

      SHA-256  . . . . . : 058F8454FE3B29448CF0C1C51FCD39B0BC3E3F5F5C07777AEE6195A4096F1B54

    > G Data . . . . . . : Gen:Trojan.Heur.GM.0020818020 (Engine-A)

    > Ikarus . . . . . . : Gen.Trojan!IK

      Fuzzy  . . . . . . : 110.0