|
Plagegeister aller Art und deren Bekämpfung: "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse FestplattenwarnungenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
15.06.2011, 10:13 | #1 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Hallo liebes Forum! Auf unserem HP Laptop geht seit gestern nix mehr. Zunächst war auf dem Desktop ein neues Symbol "Malware Protection"..kurz nach dessen Erscheinen schlossen sich alle Anwendungen und naja, was dann so alles erschien, muss ich Euch ja mit Sicherheit nicht erzählen.. Ich habe es nach einigen Stunden geschaffte, im abgesicherten Modus diese Registry aufzurufen und dort dem Pfad nachzugehen, den ich hier im Foru gefunden hatte..Entsprechenden Dateien wurden gelöscht und nun ist das PRogramm auch weg (scheinbar). Dann wieder neu gestartet und nun habe ich das nächste Ding namens "Windows Vista Restore", das mir erzählt, dass ich irgendwelche Festplattenschäden habe etc pp. Nun wollte ich hierbei erstmal dasselbe wie zuvor versuchen, aber ich finde das Teil in der Registry nicht.. Zuvor hatte ich auch eine lange Zeit lang versucht, den Rechner von einer Avira Rescue-CD zu booten, was mir aber partout nicht gelingen wollte, obwohl ich im BIOS alles so eingestellt hatte, wie es mir das Internet gesagt hatte. Anbei: nebenher habe ich noch einen unralten Laptop, mit dem ich wenigstens via Wlan-Stick einen Internetzugang habe. Zwar langsam und mit argen Kühlroblemen, aber so kann ich Euch grad wenigestens um Hilfe bitten Was soll ich tun? Beste Grüße und herzlichen Dank im Voraus! OTL kann ich scheinbar nicht nutzen, da ich es nicht öffnen kann. "C:\Users.........Appdata\Local\Microsoft\Windows\Temporary Internet Files\Content.IES\K28XB..... \OTL[1].exe" ist keine zulässige Win32-Anwendung" sagt er mir, wenn ich den Link "hxxp://oldtimer.geekstogo.com/OTL.exe" nutzen will. Wenn ich eine externe Festplatte an den Rechner anschließ, wird mir diese dann als leer angezeigt, obwohl sie es nicht ist. Habe ich überhaupt noch Hoffnung, dass die Daten auf dem Rechner noch irgendwie zu retten sind |
15.06.2011, 11:29 | #2 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse FestplattenwarnungenZitat:
__________________ |
15.06.2011, 11:34 | #3 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen ok super!
__________________und nun erstmal einen scan (nicht den quick scan, nehme ich an)? weiß nur nicht, wie ich irgendwas irgenwo reinkopieren soll, wenn der rechner keine inhalte auf speichermedien erkennt. |
15.06.2011, 12:17 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Halte dich doch einfach an die Anleitungen!! Bitte beachten => http://www.trojaner-board.de/95173-b...es-posten.html und http://www.trojaner-board.de/69886-a...-beachten.html
__________________ Logfiles bitte immer in CODE-Tags posten |
15.06.2011, 12:43 | #5 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen scan ist durch. konnte mich nun überraschenderweise auf dem infizierte rechner ins forum einloggen.. nur leider springt die ansicht des boards im sekundentakt zwischen der foren-startseite und der Weiterleitung "Die Einstellungen zur Sommer-/Winterzeit wurden aktualisiert"..immer hin und her. Bekomme ich das irgendwie weg? Auf dem anderen rechner passiert das nicht. hier nun das ergebnis:OTL Logfile: Code:
ATTFilter OTL logfile created on: 15.06.2011 13:25:23 - Run 1 OTL by OldTimer - Version 3.2.24.0 Folder = C:\Users\Karina und Volker\Desktop Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.19048) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,80 Gb Available Physical Memory | 60,00% Memory free 6,19 Gb Paging File | 5,10 Gb Available in Paging File | 82,41% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 289,06 Gb Total Space | 57,58 Gb Free Space | 19,92% Space Free | Partition Type: NTFS Drive D: | 298,09 Gb Total Space | 282,83 Gb Free Space | 94,88% Space Free | Partition Type: NTFS Drive E: | 9,03 Gb Total Space | 1,65 Gb Free Space | 18,28% Space Free | Partition Type: NTFS Drive F: | 225,87 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: HOME | User Name: Karina und Volker | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.06.15 12:33:50 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Karina und Volker\Desktop\OTL.exe PRC - [2011.06.14 20:13:50 | 000,392,192 | -H-- | M] (Microsoft Corporation) -- C:\ProgramData\39902968.exe PRC - [2011.06.14 20:00:05 | 000,488,448 | -H-- | M] (Microsoft Corporation) -- C:\ProgramData\JBrIvuwsjXBVY.exe PRC - [2009.08.05 20:38:33 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2009.05.13 16:48:18 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2009.03.02 13:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2008.06.27 17:53:08 | 000,077,824 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\AEstSrv.exe PRC - [2008.06.27 17:43:24 | 000,221,273 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\stacsv.exe PRC - [2008.06.27 17:42:06 | 000,442,467 | ---- | M] (IDT, Inc.) -- C:\Programme\IDT\WDM\sttray.exe PRC - [2008.04.26 01:15:26 | 000,361,808 | -H-- | M] () -- C:\Windows\SMINST\BLService.exe PRC - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2008.01.21 04:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe PRC - [2007.06.12 01:18:00 | 000,537,520 | ---- | M] ( ) -- C:\Windows\System32\lxdjcoms.exe PRC - [2007.06.12 01:17:46 | 000,099,248 | ---- | M] (Lexmark International, Inc.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxdjserv.exe ========== Modules (SafeList) ========== MOD - [2011.06.15 12:33:50 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Karina und Volker\Desktop\OTL.exe MOD - [2010.08.31 17:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - [2010.01.26 12:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2009.08.05 20:38:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009.05.13 16:48:18 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2008.06.27 17:53:08 | 000,077,824 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\AEstSrv.exe -- (AESTFilters) SRV - [2008.06.27 17:43:24 | 000,221,273 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\stacsv.exe -- (STacSV) SRV - [2008.04.26 01:15:26 | 000,361,808 | -H-- | M] () [Auto | Running] -- C:\Windows\SMINST\BLService.exe -- (Recovery Service for Windows) SRV - [2008.02.03 12:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc) SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007.06.12 01:18:00 | 000,537,520 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdjcoms.exe -- (lxdj_device) SRV - [2007.06.12 01:17:46 | 000,099,248 | ---- | M] () [Auto | Running] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdjserv.exe -- (lxdjCATSCustConnectService) ========== Driver Services (SafeList) ========== DRV - [2009.12.08 13:07:28 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009.05.11 10:12:20 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.03.30 10:33:03 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2009.02.13 12:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008.12.08 18:42:00 | 007,451,712 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008.11.23 11:23:04 | 000,097,792 | ---- | M] (T0r0 2008) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NSHE.SYS -- (NSHE) DRV - [2008.11.17 16:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R) DRV - [2008.09.24 17:09:48 | 000,045,600 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008.07.08 12:16:26 | 000,096,856 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR) DRV - [2008.06.27 17:44:18 | 000,380,928 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA) DRV - [2008.05.02 15:59:40 | 000,122,368 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2008.03.27 13:12:12 | 000,024,424 | ---- | M] (Hewlett-Packard Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hpdskflt.sys -- (hpdskflt) DRV - [2008.03.27 13:11:34 | 000,034,664 | ---- | M] (Hewlett-Packard Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer) DRV - [2008.01.24 15:23:12 | 000,052,736 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir) DRV - [2007.06.18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV - [2007.01.24 12:17:38 | 000,448,512 | ---- | M] (Arcor Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ARWUSB.sys -- (WN4501HLFIR(Arcor)) Arcor-Easy Stick A 50 WLAN(Arcor) DRV - [2006.11.22 11:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\system32\drivers\hardlock.sys -- (Hardlock) DRV - [2006.11.02 09:30:56 | 000,429,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm60x32.sys -- (NVENETFD) DRV - [2004.10.25 14:40:58 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PCASp50.sys -- (PCASp50) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 80 09 B2 BC 12 CB 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {a51a36e6-31e7-4838-9ff7-76298b527ec0} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaulturl: "hxxp://www.bing.com/search?FORM=IEFM1&q=" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.de" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.5 FF - prefs.js..extensions.enabledItems: {8f8fe09b-0bd3-4470-bc1b-8cad42b8203a}:0.16 FF - prefs.js..extensions.enabledItems: {FEABC877-A38C-471C-B7A7-5C3ACBC19959}:1.9.1 FF - prefs.js..extensions.enabledItems: 2020Player@2020Technologies.com:4.5.4.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q=" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties" FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.05.17 17:03:22 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.17 17:03:22 | 000,000,000 | ---D | M] [2009.01.08 17:58:13 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Karina und Volker\AppData\Roaming\mozilla\Extensions [2011.05.25 05:39:16 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Karina und Volker\AppData\Roaming\mozilla\Firefox\Profiles\g01xe13l.default\extensions [2010.10.04 21:38:13 | 000,000,000 | -H-D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Karina und Volker\AppData\Roaming\mozilla\Firefox\Profiles\g01xe13l.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.05.18 00:51:29 | 000,000,000 | -H-D | M] (Live HTTP Headers) -- C:\Users\Karina und Volker\AppData\Roaming\mozilla\Firefox\Profiles\g01xe13l.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2011.01.04 12:41:06 | 000,000,000 | -H-D | M] (20-20 3D Viewer) -- C:\Users\Karina und Volker\AppData\Roaming\mozilla\Firefox\Profiles\g01xe13l.default\extensions\2020Player@2020Technologies.com [2010.03.24 08:28:59 | 000,001,827 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Mozilla\Firefox\Profiles\g01xe13l.default\searchplugins\bing.xml [2011.06.09 18:07:57 | 000,001,056 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Mozilla\Firefox\Profiles\g01xe13l.default\searchplugins\icqplugin.xml [2009.08.13 01:41:34 | 000,003,915 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Mozilla\Firefox\Profiles\g01xe13l.default\searchplugins\sweetim.xml [2011.02.21 22:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2011.02.01 07:21:09 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} File not found (No name found) -- [2009.12.07 08:36:32 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [2011.02.01 07:21:09 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.05.11 15:29:25 | 000,000,000 | -H-D | M] (XULRunner) -- C:\USERS\KARINA UND VOLKER\APPDATA\LOCAL\{FEABC877-A38C-471C-B7A7-5C3ACBC19959} () (No name found) -- C:\USERS\KARINA UND VOLKER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\G01XE13L.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2011.05.17 17:03:18 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Programme\Mozilla Firefox\components\browsercomps.dll [2011.02.01 07:20:45 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll [2011.05.17 17:03:19 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2011.05.17 17:03:19 | 000,002,252 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\bing.xml [2011.05.17 17:03:19 | 000,001,153 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2011.05.17 17:03:19 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2011.05.17 17:03:19 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2011.05.17 17:03:19 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: ::1 localhost O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A51A36E6-31E7-4838-9FF7-76298B527EC0} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [4E3E0230AEBB4E96] File not found O4 - HKCU..\Run: [JBrIvuwsjXBVY] C:\ProgramData\JBrIvuwsjXBVY.exe (Microsoft Corporation) O4 - HKCU..\Run: [msnmsgr] File not found O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation) O4 - Startup: C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PMB Medien-Prüfung.lnk = C:\Programme\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (Sony Corporation) O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13 - gopher Prefix: missing O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Public\Pictures\Sample Pictures\Dock.jpg O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\Sample Pictures\Dock.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2009.01.08 17:52:19 | 000,000,832 | ---- | M] () - C:\Autorun_dll.log -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found NetSvcs: ezSharedSvc - C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS) MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Arcor Wlan-Monitor 1.0.lnk - C:\Programme\Arcor\Arcor Wlan-Monitor 1.0\ArcorWlanUtility.exe - (Arcor AG & Co. KG) MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk - C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe - (Broadcom Corporation.) MsConfig - StartUpFolder: C:^Users^Karina und Volker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk - C:\Programme\OpenOffice.org 3\program\quickstart.exe - () MsConfig - StartUpReg: DivXUpdate - hkey= - key= - C:\Program Files\DivX\DivX Update\DivXUpdate.exe () MsConfig - StartUpReg: FreePDF Assistant - hkey= - key= - C:\Programme\FreePDF_XP\fpassist.exe (shbox.de) MsConfig - StartUpReg: HP Health Check Scheduler - hkey= - key= - c:\Programme\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard) MsConfig - StartUpReg: hpWirelessAssistant - hkey= - key= - C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.) MsConfig - StartUpReg: LightScribe Control Panel - hkey= - key= - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company) MsConfig - StartUpReg: lxdjamon - hkey= - key= - C:\Program Files\Lexmark 1400 Series\lxdjamon.exe () MsConfig - StartUpReg: lxdjmon.exe - hkey= - key= - File not found MsConfig - StartUpReg: NokiaMServer - hkey= - key= - C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia) MsConfig - StartUpReg: NokiaOviSuite2 - hkey= - key= - File not found MsConfig - StartUpReg: OnScreenDisplay - hkey= - key= - C:\Programme\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe ( Hewlett-Packard Development Company, L.P.) MsConfig - StartUpReg: QlbCtrl.exe - hkey= - key= - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe ( Hewlett-Packard Development Company, L.P.) MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) MsConfig - State: "startup" - 2 SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: NTDS - File not found SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: NTDS - File not found SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet: WudfPf - Driver SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1 ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.) Drivers32: vidc.i420 - C:\Windows\System32\i420vfw.dll (www.helixcommunity.org) Drivers32: vidc.yv12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.06.15 12:33:36 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Karina und Volker\Desktop\OTL.exe [2011.06.15 01:32:24 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\AppData\Roaming\Malwarebytes [2011.06.15 01:31:43 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.06.15 01:31:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011.06.15 01:31:37 | 000,000,000 | -H-D | C] -- C:\ProgramData\Malwarebytes [2011.06.15 01:31:34 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.06.15 01:31:33 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2011.06.15 01:30:03 | 009,435,312 | -H-- | C] (Malwarebytes Corporation ) -- C:\Users\Karina und Volker\Desktop\mbam-setup-1.51.0.1200.exe [2011.06.15 01:18:36 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Vista Restore [2011.06.14 22:37:40 | 009,435,312 | -H-- | C] (Malwarebytes Corporation ) -- C:\Users\Karina und Volker\Desktop\fzujignz.exe [2011.06.14 20:13:50 | 000,392,192 | -H-- | C] (Microsoft Corporation) -- C:\ProgramData\39902968.exe [2011.06.14 20:00:06 | 000,488,448 | -H-- | C] (Microsoft Corporation) -- C:\ProgramData\JBrIvuwsjXBVY.exe [2011.06.02 00:11:19 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Desktop\Linsen Koni [2011.05.30 21:03:40 | 000,000,000 | -H-D | C] -- C:\ProgramData\fotobuch.de AG [2011.05.30 21:03:40 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Documents\Designer Files [2011.05.30 21:03:28 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\AppData\Roaming\fotobuch.de AG [2011.05.30 21:02:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\fotobuch.de [2011.05.30 21:01:21 | 000,000,000 | ---D | C] -- C:\Programme\fotobuch.de [2011.05.30 21:01:21 | 000,000,000 | ---D | C] -- C:\Windows\System32\artworks [2011.05.30 20:23:56 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Documents\Mutti höhere Auflösung [2011.05.30 06:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2011.05.29 21:11:34 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Documents\Mutti bday2 [2011.05.29 20:19:56 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Documents\Mutti Bday [2011.05.29 18:49:23 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Desktop\2011-05 (Mai)-29 [2011.05.29 18:32:56 | 000,000,000 | -H-D | C] -- C:\Users\Karina und Volker\Documents\HP Photosmart Projects [2009.05.12 22:03:10 | 003,063,561 | -H-- | C] (Macromedia, Inc.) -- C:\ProgramData\MobileTV.exe [2009.05.12 22:03:09 | 002,989,660 | -H-- | C] (Macromedia, Inc.) -- C:\ProgramData\DVD.exe [2009.05.12 22:03:09 | 002,864,396 | -H-- | C] (Macromedia, Inc.) -- C:\ProgramData\MPV.exe [2009.05.12 22:03:09 | 002,331,174 | -H-- | C] (Macromedia, Inc.) -- C:\ProgramData\Karaoke.exe [2009.05.12 22:03:09 | 002,231,606 | -H-- | C] (Macromedia, Inc.) -- C:\ProgramData\Games.exe [2009.01.09 16:33:17 | 000,323,584 | ---- | C] ( ) -- C:\Windows\System32\lxdjhcp.dll [2009.01.09 16:33:16 | 000,999,424 | ---- | C] ( ) -- C:\Windows\System32\lxdjusb1.dll [2009.01.09 16:33:16 | 000,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxdjinpa.dll [2009.01.09 16:33:16 | 000,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxdjiesc.dll [2009.01.09 16:33:15 | 001,232,896 | ---- | C] ( ) -- C:\Windows\System32\lxdjserv.dll [2009.01.09 16:33:15 | 000,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxdjpmui.dll [2009.01.09 16:33:15 | 000,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxdjlmpm.dll [2009.01.09 16:33:15 | 000,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxdjprox.dll [2009.01.09 16:33:15 | 000,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxdjpplc.dll [2009.01.09 16:33:14 | 000,700,416 | ---- | C] ( ) -- C:\Windows\System32\lxdjhbn3.dll [2009.01.09 16:33:14 | 000,385,968 | ---- | C] ( ) -- C:\Windows\System32\lxdjih.exe [2009.01.09 16:33:13 | 000,537,520 | ---- | C] ( ) -- C:\Windows\System32\lxdjcoms.exe [2009.01.09 16:33:12 | 000,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxdjcomc.dll [2009.01.09 16:33:12 | 000,425,984 | ---- | C] ( ) -- C:\Windows\System32\lxdjcomm.dll [2009.01.09 16:33:12 | 000,394,160 | ---- | C] ( ) -- C:\Windows\System32\lxdjcfg.exe [2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.06.15 13:03:00 | 000,001,120 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.06.15 12:33:50 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Karina und Volker\Desktop\OTL.exe [2011.06.15 12:01:41 | 000,001,116 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.06.15 12:01:33 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.06.15 12:01:33 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.06.15 12:01:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.06.15 12:01:24 | 3218,042,880 | -HS- | M] () -- C:\hiberfil.sys [2011.06.15 11:55:52 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2011.06.15 03:08:39 | 000,327,128 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.06.15 02:16:35 | 000,008,268 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Local\d3d9caps.dat [2011.06.15 01:30:07 | 009,435,312 | -H-- | M] (Malwarebytes Corporation ) -- C:\Users\Karina und Volker\Desktop\mbam-setup-1.51.0.1200.exe [2011.06.15 01:25:43 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~39902968r [2011.06.15 01:25:43 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~39902968 [2011.06.15 01:22:03 | 000,000,384 | -H-- | M] () -- C:\ProgramData\39902968 [2011.06.15 01:18:43 | 000,122,119 | -H-- | M] () -- C:\ProgramData\nvModes.dat [2011.06.15 01:18:43 | 000,122,119 | -H-- | M] () -- C:\ProgramData\nvModes.001 [2011.06.15 01:18:37 | 000,000,595 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\Windows Vista Restore.lnk [2011.06.15 00:33:16 | 009,435,312 | -H-- | M] (Malwarebytes Corporation ) -- C:\Users\Karina und Volker\Desktop\fzujignz.exe [2011.06.15 00:30:28 | 000,287,048 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\fgzj.exe [2011.06.14 20:20:54 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.06.14 20:20:54 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.06.14 20:20:54 | 000,126,454 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.06.14 20:20:54 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.06.08 19:33:27 | 000,565,681 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\eingescannt-mit-08-06-2011-15-07-7883440934323002785.jpg [2011.06.08 11:07:03 | 000,001,292 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\download_pc [2011.06.08 11:04:04 | 000,001,292 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\Powertech D 9x14ET15 Gutachten [2011.06.07 19:25:11 | 000,142,336 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.05.29 23:16:53 | 010,988,334 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\digifant-farbe.pdf [2011.05.29 21:19:16 | 000,001,760 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\Albelli Fotobücher.lnk [2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.05.24 01:58:44 | 000,012,646 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\Stellenausschreibung_Stud._Hilfskraft_ZStB_16_5_2011.pdf [2011.05.17 20:02:11 | 000,027,226 | -H-- | M] () -- C:\Users\Karina und Volker\Desktop\Rechnung.pdf [2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [2 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.06.15 12:01:24 | 3218,042,880 | -HS- | C] () -- C:\hiberfil.sys [2011.06.15 01:18:38 | 000,000,128 | -H-- | C] () -- C:\ProgramData\~39902968r [2011.06.15 01:18:38 | 000,000,128 | -H-- | C] () -- C:\ProgramData\~39902968 [2011.06.15 01:18:37 | 000,000,595 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\Windows Vista Restore.lnk [2011.06.14 23:39:21 | 000,000,384 | -H-- | C] () -- C:\ProgramData\39902968 [2011.06.14 22:37:39 | 000,287,048 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\fgzj.exe [2011.06.08 19:32:46 | 000,565,681 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\eingescannt-mit-08-06-2011-15-07-7883440934323002785.jpg [2011.06.08 11:07:03 | 000,001,292 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\download_pc [2011.06.08 11:04:03 | 000,001,292 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\Powertech D 9x14ET15 Gutachten [2011.05.29 23:16:49 | 010,988,334 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\digifant-farbe.pdf [2011.05.29 21:19:16 | 000,001,760 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\Albelli Fotobücher.lnk [2011.05.24 01:58:43 | 000,012,646 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\Stellenausschreibung_Stud._Hilfskraft_ZStB_16_5_2011.pdf [2011.05.17 20:02:11 | 000,027,226 | -H-- | C] () -- C:\Users\Karina und Volker\Desktop\Rechnung.pdf [2011.05.17 17:03:22 | 000,000,860 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2011.02.05 15:07:54 | 000,179,126 | ---- | C] () -- C:\Windows\hpoins27.dat [2010.11.03 14:52:52 | 000,000,120 | -H-- | C] () -- C:\Users\Karina und Volker\AppData\Local\Fziyageyabe.dat [2010.11.03 14:52:52 | 000,000,000 | -H-- | C] () -- C:\Users\Karina und Volker\AppData\Local\Xzutatebiwelo.bin [2010.03.11 07:56:39 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2010.02.25 03:04:11 | 000,153,088 | ---- | C] () -- C:\Windows\System32\UNWISE.EXE [2010.02.25 03:04:11 | 000,028,672 | ---- | C] () -- C:\Windows\System32\hlduinst.exe [2010.02.25 03:04:11 | 000,006,836 | ---- | C] () -- C:\Windows\System32\UNWISE.INI [2009.12.13 22:05:05 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2009.11.04 20:20:06 | 000,000,000 | ---- | C] () -- C:\Windows\PROTOCOL.INI [2009.10.02 20:39:19 | 000,002,864 | -H-- | C] () -- C:\ProgramData\lxdj [2009.09.30 13:36:57 | 000,116,224 | ---- | C] () -- C:\Windows\System32\redmonnt.dll [2009.09.30 13:36:57 | 000,045,056 | ---- | C] () -- C:\Windows\System32\unredmon.exe [2009.09.24 06:52:46 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.09.24 06:52:46 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009.05.17 11:02:17 | 000,008,268 | -H-- | C] () -- C:\Users\Karina und Volker\AppData\Local\d3d9caps.dat [2009.03.08 19:34:52 | 000,003,578 | ---- | C] () -- C:\Windows\WEEP.INI [2009.03.08 19:34:52 | 000,000,980 | ---- | C] () -- C:\Windows\winhelp.ini [2009.03.08 19:34:52 | 000,000,943 | ---- | C] () -- C:\Windows\WEEP_SND.INI [2009.01.09 16:35:33 | 000,348,160 | ---- | C] () -- C:\Windows\System32\lxdjcoin.dll [2009.01.09 16:33:30 | 000,000,060 | ---- | C] () -- C:\Windows\System32\lxdjrwrd.ini [2009.01.09 16:33:17 | 000,286,720 | ---- | C] () -- C:\Windows\System32\lxdjinst.dll [2009.01.09 16:33:13 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdjgrd.dll [2009.01.07 18:02:02 | 000,142,336 | -H-- | C] () -- C:\Users\Karina und Volker\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.01.07 17:26:07 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2009.01.07 16:55:28 | 000,122,119 | -H-- | C] () -- C:\ProgramData\nvModes.001 [2009.01.07 16:53:27 | 000,122,119 | -H-- | C] () -- C:\ProgramData\nvModes.dat [2008.10.31 20:55:48 | 000,000,249 | ---- | C] () -- C:\ProgramData\hpqp.ini [2008.10.31 20:20:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008.08.01 08:37:46 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.08.01 08:37:46 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.08.01 08:37:46 | 000,126,454 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.08.01 08:37:46 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2008.08.01 00:28:40 | 000,000,428 | ---- | C] () -- C:\Windows\System32\ezdigsgn.dat [2008.07.31 22:52:12 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2008.06.11 10:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll [2008.06.11 10:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2008.06.11 10:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll [2008.06.11 10:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll [2008.06.05 09:58:26 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll [2008.01.18 17:56:22 | 000,000,932 | ---- | C] () -- C:\Windows\hpomdl27.dat [2007.10.14 23:29:55 | 000,112,158 | ---- | C] () -- C:\Windows\hpqins13.dat [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 14:47:37 | 000,327,128 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 12:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2006.05.18 16:47:12 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdjvs.dll [2001.11.14 14:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll ========== LOP Check ========== [2009.08.24 23:40:46 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Ahnenblatt [2010.12.22 07:53:30 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Amazon [2009.08.14 18:44:17 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\brands4friends.E56CC41965779EE8288BF19BFB961933E9F195AA.1 [2010.09.16 18:26:18 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\DVDVideoSoftIEHelpers [2010.07.16 06:06:56 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\elsterformular [2011.05.30 21:03:39 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\fotobuch.de AG [2010.08.23 21:43:57 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Foxit Software [2010.03.26 07:07:37 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\gtk-2.0 [2010.10.03 02:27:12 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\ICQ [2009.09.30 14:07:19 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Inkscape [2011.03.26 11:05:09 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Nokia [2010.03.30 19:10:00 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Nokia Ovi Suite [2009.02.23 23:44:59 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\OpenOffice.org [2010.10.04 22:18:15 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Opera [2010.03.29 19:38:49 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\PC Suite [2009.12.07 21:51:55 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\PlayFirst [2009.02.17 00:23:57 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Proxima Software [2009.01.08 23:09:08 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\RapidGet [2009.11.22 02:22:43 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\WildTangent [2009.11.22 11:30:50 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Zylom [2011.06.15 11:55:52 | 000,032,514 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2011.05.11 15:27:30 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Adobe [2009.08.24 23:40:46 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Ahnenblatt [2010.12.22 07:53:30 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Amazon [2009.08.14 18:44:17 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\brands4friends.E56CC41965779EE8288BF19BFB961933E9F195AA.1 [2009.07.27 19:34:21 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\CyberLink [2010.08.30 21:31:07 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\DivX [2011.04.01 06:40:09 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\dvdcss [2010.09.16 18:26:18 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\DVDVideoSoftIEHelpers [2010.07.16 06:06:56 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\elsterformular [2011.05.30 21:03:39 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\fotobuch.de AG [2010.08.23 21:43:57 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Foxit Software [2010.03.26 07:07:37 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\gtk-2.0 [2011.05.29 18:37:21 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Hewlett-Packard [2011.02.05 15:45:05 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\HP [2010.10.03 02:27:12 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\ICQ [2009.11.22 11:30:50 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Identities [2009.09.30 14:07:19 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Inkscape [2010.01.28 21:29:50 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\InstallShield [2009.11.22 02:25:09 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Macromedia [2011.06.15 01:32:24 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Malwarebytes [2006.11.02 14:37:34 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Media Center Programs [2011.02.07 00:04:29 | 000,000,000 | --SD | M] -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft [2009.01.08 17:58:13 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Mozilla [2011.01.23 23:41:28 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\NCH Software [2011.03.26 11:05:09 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Nokia [2010.03.30 19:10:00 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Nokia Ovi Suite [2009.02.23 23:44:59 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\OpenOffice.org [2010.10.04 22:18:15 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Opera [2010.03.29 19:38:49 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\PC Suite [2009.12.07 21:51:55 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\PlayFirst [2009.02.17 00:23:57 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Proxima Software [2009.01.08 23:09:08 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\RapidGet [2011.02.21 16:17:21 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Real [2010.01.28 21:37:58 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Sony Corporation [2009.01.07 17:04:46 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Symantec [2010.10.03 02:14:17 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\vlc [2009.11.22 02:22:43 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\WildTangent [2009.01.09 14:43:01 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\WinRAR [2009.11.22 11:30:50 | 000,000,000 | -H-D | M] -- C:\Users\Karina und Volker\AppData\Roaming\Zylom < %APPDATA%\*.exe /s > [2011.06.14 20:00:02 | 000,000,162 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Adobe\plugs\mmc22.exe [2009.10.18 17:45:59 | 000,038,208 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe [2009.03.08 20:05:04 | 000,003,638 | RH-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Installer\{C576C82C-EE87-11D6-B031-0000CB597465}\_13613862.exe [2009.03.08 20:05:04 | 000,003,638 | RH-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Installer\{C576C82C-EE87-11D6-B031-0000CB597465}\_2cf863d5.exe [2009.03.08 20:05:04 | 000,001,078 | RH-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Installer\{C576C82C-EE87-11D6-B031-0000CB597465}\_620b3803.exe [2009.03.08 20:05:04 | 000,003,638 | RH-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Installer\{C576C82C-EE87-11D6-B031-0000CB597465}\_773f777d.exe [2009.03.08 20:05:04 | 000,003,638 | RH-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Microsoft\Installer\{C576C82C-EE87-11D6-B031-0000CB597465}\_b807925.exe [2008.02.13 09:07:36 | 000,393,216 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\NCH Software\Components\aacenc3\aacenc3.exe < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\AGP440.sys [2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys [2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys [2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys [2008.01.21 04:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys [2006.11.02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys < MD5 for: ATAPI.SYS > [2008.08.01 08:43:55 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys [2008.08.01 08:43:55 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys [2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys [2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys [2009.04.11 08:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys [2008.01.21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys [2008.01.21 04:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys [2006.11.02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys [2008.08.01 08:43:55 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys < MD5 for: CNGAUDIT.DLL > [2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll [2006.11.02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll < MD5 for: EVENTLOG.DLL > [2007.01.12 22:30:08 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Programme\CyberLink\PowerDirector\EventLog.dll < MD5 for: IASTORV.SYS > [2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\drivers\iaStorV.sys [2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys [2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys [2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys < MD5 for: NETLOGON.DLL > [2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll [2009.04.11 08:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll [2008.01.21 04:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll < MD5 for: NVSTOR.SYS > [2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys [2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys [2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys [2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys < MD5 for: SCECLI.DLL > [2008.01.21 04:24:50 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll [2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll [2009.04.11 08:28:24 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll < MD5 for: USER32.DLL > [2008.01.21 04:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll [2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll [2009.04.11 08:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll < MD5 for: USERINIT.EXE > [2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WININIT.EXE > [2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe [2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe < MD5 for: WINLOGON.EXE > [2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008.01.21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < MD5 for: WS2IFSL.SYS > [2008.01.21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\System32\drivers\ws2ifsl.sys [2008.01.21 04:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) MD5=E3A3CB253C0EC2494D4A61F5E43A389C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.0.6001.18000_none_4f86a0d4c7cda641\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2008.01.21 05:14:18 | 016,846,848 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV [2008.01.21 05:14:08 | 000,106,496 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV [2008.01.21 05:14:18 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV [2006.11.02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV [2006.11.02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < > ========== Alternate Data Streams ========== @Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E2B84483 @Alternate Data Stream - 293 bytes -> C:\ProgramData\TEMP:9AF3A05F @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:91486201 < End of report > |
15.06.2011, 13:08 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL O4 - HKCU..\Run: [4E3E0230AEBB4E96] File not found O4 - HKCU..\Run: [JBrIvuwsjXBVY] C:\ProgramData\JBrIvuwsjXBVY.exe (Microsoft Corporation) O4 - HKCU..\Run: [msnmsgr] File not found O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A51A36E6-31E7-4838-9FF7-76298B527EC0} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2009.01.08 17:52:19 | 000,000,832 | ---- | M] () - C:\Autorun_dll.log -- [ NTFS ] [2011.06.14 20:13:50 | 000,392,192 | -H-- | C] (Microsoft Corporation) -- C:\ProgramData\39902968.exe [2011.06.14 20:00:06 | 000,488,448 | -H-- | C] (Microsoft Corporation) -- C:\ProgramData\JBrIvuwsjXBVY.exe [2011.06.15 01:25:43 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~39902968r [2011.06.15 01:25:43 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~39902968 [2011.06.15 01:22:03 | 000,000,384 | -H-- | M] () -- C:\ProgramData\39902968 [2011.06.14 20:00:02 | 000,000,162 | -H-- | M] () -- C:\Users\Karina und Volker\AppData\Roaming\Adobe\plugs\mmc22.exe @Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E2B84483 @Alternate Data Stream - 293 bytes -> C:\ProgramData\TEMP:9AF3A05F @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:91486201 :Commands [purity] [resethosts] Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt. Stell uns bitte danach den Quarantäneordner von OTL zur Verfügung. Bitte dabei so vorgehen: 1.) GANZ WICHTIG!! Virenscanner deaktivieren, der darf das Packen nicht behindern! 2.) Ordner MovedFiles in C:\_OTL in eine Datei zippen 3.) Die erstellte ZIP-Datei hier hochladen => http://www.trojaner-board.de/54791-a...ner-board.html 4.) Wenns erfolgreich war Bescheid sagen 5.) Erst dann wieder den Virenscanner einschalten
__________________ --> "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen |
15.06.2011, 13:31 | #7 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen ok, hab die zip-datei jetzt über den upload-channel hochgeladen. als link hatte ich den letzten offenen link meines threads hier angegeben..hoffe, das war richtig. hab ich noch etwas vergessen oder kannst du damit jetzt schon was anfangen bzw etwas erkennen? fällt mir alles recht schwer, da ich auf dem gebiet leider ein laie bin.. |
15.06.2011, 13:54 | #8 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern ) Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ Logfiles bitte immer in CODE-Tags posten |
15.06.2011, 14:05 | #9 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen ok, habe den tdsskiller laufen lassen..hat knapp 300objekte durchsucht und nix gefunden. da mir das zu wenig erscheint, mache ich grad die unhide-geschichte. desktop ist noch immer leer, bis auf die programme, die ich jetzt im zuge dieses threads dort abgelegt habe. edit: ok, alles wieder auf dem desktop erschienen dann mache ich den kaspersky-scan jetzt nochmal. |
15.06.2011, 14:14 | #10 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen so, hier nun der log des kaspersky-tool's: 2011/06/15 14:59:15.0231 0428 TDSS rootkit removing tool 2.5.4.0 Jun 7 2011 17:31:48 2011/06/15 14:59:15.0418 0428 ================================================================================ 2011/06/15 14:59:15.0418 0428 SystemInfo: 2011/06/15 14:59:15.0418 0428 2011/06/15 14:59:15.0418 0428 OS Version: 6.0.6002 ServicePack: 2.0 2011/06/15 14:59:15.0418 0428 Product type: Workstation 2011/06/15 14:59:15.0418 0428 ComputerName: HOME 2011/06/15 14:59:15.0418 0428 UserName: Karina und Volker 2011/06/15 14:59:15.0418 0428 Windows directory: C:\Windows 2011/06/15 14:59:15.0418 0428 System windows directory: C:\Windows 2011/06/15 14:59:15.0418 0428 Processor architecture: Intel x86 2011/06/15 14:59:15.0418 0428 Number of processors: 2 2011/06/15 14:59:15.0418 0428 Page size: 0x1000 2011/06/15 14:59:15.0418 0428 Boot type: Normal boot 2011/06/15 14:59:15.0418 0428 ================================================================================ 2011/06/15 14:59:18.0768 0428 Initialize success 2011/06/15 14:59:24.0496 0504 ================================================================================ 2011/06/15 14:59:24.0496 0504 Scan started 2011/06/15 14:59:24.0496 0504 Mode: Manual; 2011/06/15 14:59:24.0496 0504 ================================================================================ 2011/06/15 14:59:25.0359 0504 Accelerometer (3b10711ad8656c097e0d16a41b29c54c) C:\Windows\system32\DRIVERS\Accelerometer.sys 2011/06/15 14:59:25.0425 0504 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 2011/06/15 14:59:25.0485 0504 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 2011/06/15 14:59:25.0559 0504 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 2011/06/15 14:59:25.0591 0504 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 2011/06/15 14:59:25.0630 0504 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 2011/06/15 14:59:25.0740 0504 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys 2011/06/15 14:59:25.0829 0504 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 2011/06/15 14:59:25.0875 0504 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 2011/06/15 14:59:25.0916 0504 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 2011/06/15 14:59:25.0954 0504 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 2011/06/15 14:59:25.0989 0504 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 2011/06/15 14:59:26.0083 0504 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 2011/06/15 14:59:26.0132 0504 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys 2011/06/15 14:59:26.0281 0504 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 2011/06/15 14:59:26.0332 0504 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 2011/06/15 14:59:26.0394 0504 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/06/15 14:59:26.0469 0504 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 2011/06/15 14:59:26.0544 0504 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2011/06/15 14:59:26.0637 0504 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys 2011/06/15 14:59:26.0707 0504 avipbb (6d52060b59e7d79cd2a044b6add1f1ef) C:\Windows\system32\DRIVERS\avipbb.sys 2011/06/15 14:59:26.0785 0504 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys 2011/06/15 14:59:26.0976 0504 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 2011/06/15 14:59:27.0088 0504 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 2011/06/15 14:59:27.0159 0504 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 2011/06/15 14:59:27.0202 0504 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 2011/06/15 14:59:27.0298 0504 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 2011/06/15 14:59:27.0383 0504 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 2011/06/15 14:59:27.0412 0504 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 2011/06/15 14:59:27.0453 0504 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 2011/06/15 14:59:27.0504 0504 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 2011/06/15 14:59:27.0611 0504 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys 2011/06/15 14:59:27.0702 0504 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys 2011/06/15 14:59:27.0761 0504 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys 2011/06/15 14:59:27.0816 0504 BTHPORT (5a3abaa2f8eece7aefb942773766e3db) C:\Windows\system32\Drivers\BTHport.sys 2011/06/15 14:59:27.0937 0504 BTHUSB (94e2941280e3756a5e0bcb467865c43a) C:\Windows\system32\Drivers\BTHUSB.sys 2011/06/15 14:59:28.0019 0504 btwaudio (229b2c1e776062a4033305d5a9d6e28d) C:\Windows\system32\drivers\btwaudio.sys 2011/06/15 14:59:28.0062 0504 btwavdt (97062053359f6908e1fb2791bfa54734) C:\Windows\system32\drivers\btwavdt.sys 2011/06/15 14:59:28.0103 0504 btwrchid (d9269b0e3e3cf46d677fd071a40fe6cd) C:\Windows\system32\DRIVERS\btwrchid.sys 2011/06/15 14:59:28.0181 0504 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/06/15 14:59:28.0267 0504 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 2011/06/15 14:59:28.0306 0504 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys 2011/06/15 14:59:28.0406 0504 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 2011/06/15 14:59:28.0544 0504 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/06/15 14:59:28.0582 0504 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 2011/06/15 14:59:28.0643 0504 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 2011/06/15 14:59:28.0684 0504 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 2011/06/15 14:59:28.0761 0504 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 2011/06/15 14:59:28.0863 0504 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys 2011/06/15 14:59:28.0987 0504 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 2011/06/15 14:59:29.0061 0504 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys 2011/06/15 14:59:29.0115 0504 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys 2011/06/15 14:59:29.0155 0504 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys 2011/06/15 14:59:29.0244 0504 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 2011/06/15 14:59:29.0326 0504 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 2011/06/15 14:59:29.0373 0504 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 2011/06/15 14:59:29.0554 0504 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 2011/06/15 14:59:29.0620 0504 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 2011/06/15 14:59:29.0677 0504 enecir (4cd6b056c5fd9e97c06fe74c81479517) C:\Windows\system32\DRIVERS\enecir.sys 2011/06/15 14:59:29.0761 0504 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 2011/06/15 14:59:29.0859 0504 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 2011/06/15 14:59:29.0934 0504 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 2011/06/15 14:59:29.0980 0504 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 2011/06/15 14:59:30.0065 0504 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 2011/06/15 14:59:30.0104 0504 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 2011/06/15 14:59:30.0145 0504 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/06/15 14:59:30.0221 0504 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 2011/06/15 14:59:30.0330 0504 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 2011/06/15 14:59:30.0376 0504 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 2011/06/15 14:59:30.0559 0504 Hardlock (d95554949082fd29a04d351b58396718) C:\Windows\system32\drivers\hardlock.sys 2011/06/15 14:59:30.0668 0504 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 2011/06/15 14:59:30.0761 0504 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/06/15 14:59:30.0804 0504 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 2011/06/15 14:59:30.0851 0504 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys 2011/06/15 14:59:30.0959 0504 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 2011/06/15 14:59:31.0012 0504 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 2011/06/15 14:59:31.0063 0504 hpdskflt (24f3f496c18efc234777723a67a85f81) C:\Windows\system32\DRIVERS\hpdskflt.sys 2011/06/15 14:59:31.0137 0504 HpqKbFiltr (35956140e686d53bf676cf0c778880fc) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 2011/06/15 14:59:31.0225 0504 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS 2011/06/15 14:59:31.0301 0504 HSF_DPV (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS 2011/06/15 14:59:31.0409 0504 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 2011/06/15 14:59:31.0491 0504 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 2011/06/15 14:59:31.0555 0504 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/06/15 14:59:31.0648 0504 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 2011/06/15 14:59:31.0739 0504 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 2011/06/15 14:59:31.0795 0504 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 2011/06/15 14:59:31.0843 0504 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 2011/06/15 14:59:31.0886 0504 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/06/15 14:59:32.0016 0504 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 2011/06/15 14:59:32.0085 0504 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 2011/06/15 14:59:32.0128 0504 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 2011/06/15 14:59:32.0168 0504 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 2011/06/15 14:59:32.0255 0504 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/06/15 14:59:32.0308 0504 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 2011/06/15 14:59:32.0355 0504 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 2011/06/15 14:59:32.0418 0504 JMCR (da971cfc625d13636e04c405948e9d62) C:\Windows\system32\DRIVERS\jmcr.sys 2011/06/15 14:59:32.0466 0504 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/06/15 14:59:32.0548 0504 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys 2011/06/15 14:59:32.0667 0504 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 2011/06/15 14:59:32.0755 0504 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 2011/06/15 14:59:32.0808 0504 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 2011/06/15 14:59:32.0862 0504 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 2011/06/15 14:59:32.0908 0504 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 2011/06/15 14:59:32.0975 0504 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 2011/06/15 14:59:33.0067 0504 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 2011/06/15 14:59:33.0124 0504 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 2011/06/15 14:59:33.0204 0504 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 2011/06/15 14:59:33.0249 0504 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 2011/06/15 14:59:33.0285 0504 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 2011/06/15 14:59:33.0326 0504 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 2011/06/15 14:59:33.0354 0504 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 2011/06/15 14:59:33.0425 0504 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 2011/06/15 14:59:33.0506 0504 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 2011/06/15 14:59:33.0544 0504 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 2011/06/15 14:59:33.0623 0504 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 2011/06/15 14:59:33.0676 0504 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/06/15 14:59:33.0733 0504 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/06/15 14:59:33.0773 0504 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/06/15 14:59:33.0843 0504 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys 2011/06/15 14:59:33.0905 0504 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 2011/06/15 14:59:33.0966 0504 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 2011/06/15 14:59:34.0019 0504 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 2011/06/15 14:59:34.0094 0504 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 2011/06/15 14:59:34.0157 0504 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/06/15 14:59:34.0223 0504 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 2011/06/15 14:59:34.0295 0504 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 2011/06/15 14:59:34.0351 0504 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/06/15 14:59:34.0444 0504 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 2011/06/15 14:59:34.0509 0504 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 2011/06/15 14:59:34.0586 0504 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 2011/06/15 14:59:34.0688 0504 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 2011/06/15 14:59:34.0732 0504 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/06/15 14:59:34.0799 0504 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/06/15 14:59:34.0894 0504 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/06/15 14:59:34.0924 0504 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 2011/06/15 14:59:34.0988 0504 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 2011/06/15 14:59:35.0082 0504 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 2011/06/15 14:59:35.0296 0504 NETw5v32 (8de67bd902095a13329fd82c85a1fa09) C:\Windows\system32\DRIVERS\NETw5v32.sys 2011/06/15 14:59:35.0390 0504 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 2011/06/15 14:59:35.0573 0504 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 2011/06/15 14:59:35.0658 0504 NSHE (f8e396f5e703d7a8f37d90f59c776268) C:\Windows\system32\Drivers\NSHE.SYS 2011/06/15 14:59:35.0710 0504 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 2011/06/15 14:59:35.0803 0504 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 2011/06/15 14:59:35.0855 0504 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 2011/06/15 14:59:35.0899 0504 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 2011/06/15 14:59:35.0999 0504 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys 2011/06/15 14:59:36.0064 0504 NVHDA (723931a765e8cddf7ffcb42f5a72ce79) C:\Windows\system32\drivers\nvhda32v.sys 2011/06/15 14:59:36.0287 0504 nvlddmkm (c043ce48391211bb591e74518eb0fa5f) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2011/06/15 14:59:36.0440 0504 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 2011/06/15 14:59:36.0469 0504 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 2011/06/15 14:59:36.0542 0504 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 2011/06/15 14:59:36.0701 0504 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/06/15 14:59:36.0762 0504 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 2011/06/15 14:59:36.0831 0504 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 2011/06/15 14:59:36.0871 0504 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 2011/06/15 14:59:36.0981 0504 PCASp50 (00ae175b903d45ed4a62384d3315dc2a) C:\Windows\system32\Drivers\PCASp50.sys 2011/06/15 14:59:37.0068 0504 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys 2011/06/15 14:59:37.0135 0504 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 2011/06/15 14:59:37.0196 0504 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys 2011/06/15 14:59:37.0259 0504 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 2011/06/15 14:59:37.0379 0504 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 2011/06/15 14:59:37.0529 0504 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 2011/06/15 14:59:37.0564 0504 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 2011/06/15 14:59:37.0640 0504 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 2011/06/15 14:59:37.0715 0504 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 2011/06/15 14:59:37.0793 0504 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 2011/06/15 14:59:37.0835 0504 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 2011/06/15 14:59:37.0867 0504 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 2011/06/15 14:59:37.0906 0504 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/06/15 14:59:37.0988 0504 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/06/15 14:59:38.0080 0504 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 2011/06/15 14:59:38.0155 0504 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 2011/06/15 14:59:38.0201 0504 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/06/15 14:59:38.0259 0504 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 2011/06/15 14:59:38.0297 0504 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 2011/06/15 14:59:38.0479 0504 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 2011/06/15 14:59:38.0586 0504 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys 2011/06/15 14:59:38.0697 0504 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 2011/06/15 14:59:38.0798 0504 RTL8169 (2fc33077f85d7dc0d03678c06d43898c) C:\Windows\system32\DRIVERS\Rtlh86.sys 2011/06/15 14:59:38.0835 0504 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 2011/06/15 14:59:38.0904 0504 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys 2011/06/15 14:59:38.0973 0504 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2011/06/15 14:59:39.0093 0504 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 2011/06/15 14:59:39.0164 0504 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 2011/06/15 14:59:39.0219 0504 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 2011/06/15 14:59:39.0311 0504 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 2011/06/15 14:59:39.0370 0504 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 2011/06/15 14:59:39.0490 0504 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 2011/06/15 14:59:39.0533 0504 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 2011/06/15 14:59:39.0611 0504 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 2011/06/15 14:59:39.0696 0504 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 2011/06/15 14:59:39.0739 0504 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 2011/06/15 14:59:39.0832 0504 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 2011/06/15 14:59:39.0901 0504 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 2011/06/15 14:59:39.0999 0504 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 2011/06/15 14:59:40.0051 0504 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys 2011/06/15 14:59:40.0101 0504 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys 2011/06/15 14:59:40.0149 0504 ssmdrv (5ec550b8952882ee856b862cf648522d) C:\Windows\system32\DRIVERS\ssmdrv.sys 2011/06/15 14:59:40.0250 0504 STHDA (21cc262ab5f42f7a6b91dc7304c2f267) C:\Windows\system32\DRIVERS\stwrt.sys 2011/06/15 14:59:40.0315 0504 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 2011/06/15 14:59:40.0356 0504 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 2011/06/15 14:59:40.0387 0504 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 2011/06/15 14:59:40.0472 0504 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 2011/06/15 14:59:40.0605 0504 SynTP (f5d926807bd9bc0af68f9376144de425) C:\Windows\system32\DRIVERS\SynTP.sys 2011/06/15 14:59:40.0770 0504 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys 2011/06/15 14:59:40.0837 0504 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys 2011/06/15 14:59:40.0925 0504 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 2011/06/15 14:59:40.0979 0504 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 2011/06/15 14:59:41.0024 0504 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 2011/06/15 14:59:41.0097 0504 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 2011/06/15 14:59:41.0168 0504 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 2011/06/15 14:59:41.0256 0504 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/06/15 14:59:41.0303 0504 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 2011/06/15 14:59:41.0372 0504 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 2011/06/15 14:59:41.0435 0504 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 2011/06/15 14:59:41.0562 0504 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 2011/06/15 14:59:41.0644 0504 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 2011/06/15 14:59:41.0727 0504 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 2011/06/15 14:59:41.0778 0504 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 2011/06/15 14:59:41.0811 0504 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 2011/06/15 14:59:41.0889 0504 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 2011/06/15 14:59:42.0017 0504 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/06/15 14:59:42.0076 0504 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 2011/06/15 14:59:42.0137 0504 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 2011/06/15 14:59:42.0228 0504 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 2011/06/15 14:59:42.0517 0504 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys 2011/06/15 14:59:42.0571 0504 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 2011/06/15 14:59:42.0635 0504 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 2011/06/15 14:59:42.0881 0504 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/06/15 14:59:42.0962 0504 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/06/15 14:59:43.0117 0504 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys 2011/06/15 14:59:43.0210 0504 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/06/15 14:59:43.0281 0504 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 2011/06/15 14:59:43.0344 0504 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 2011/06/15 14:59:43.0409 0504 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 2011/06/15 14:59:43.0655 0504 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 2011/06/15 14:59:43.0701 0504 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 2011/06/15 14:59:43.0793 0504 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 2011/06/15 14:59:43.0871 0504 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 2011/06/15 14:59:43.0988 0504 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 2011/06/15 14:59:44.0048 0504 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 2011/06/15 14:59:44.0114 0504 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/06/15 14:59:44.0129 0504 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/06/15 14:59:44.0202 0504 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 2011/06/15 14:59:44.0252 0504 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 2011/06/15 14:59:44.0362 0504 winachsf (5c7bdcf5864db00323fe2d90fa26a8a2) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS 2011/06/15 14:59:44.0478 0504 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/06/15 14:59:44.0675 0504 WN4501HLFIR(Arcor) (35aba0f0f00bd3a9817a46b87a59b952) C:\Windows\system32\DRIVERS\ARWUSB.sys 2011/06/15 14:59:44.0773 0504 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 2011/06/15 14:59:44.0888 0504 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 2011/06/15 14:59:44.0972 0504 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/06/15 14:59:45.0031 0504 MBR (0x1B8) (85d751f0e41b8e520aee8c07a8da777b) \Device\Harddisk0\DR0 2011/06/15 14:59:45.0064 0504 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1 2011/06/15 14:59:45.0074 0504 ================================================================================ 2011/06/15 14:59:45.0074 0504 Scan finished 2011/06/15 14:59:45.0074 0504 ================================================================================ 2011/06/15 14:59:45.0087 1284 Detected object count: 0 2011/06/15 14:59:45.0087 1284 Actual detected object count: 0 2011/06/15 15:09:06.0239 5612 ================================================================================ 2011/06/15 15:09:06.0239 5612 Scan started 2011/06/15 15:09:06.0239 5612 Mode: Manual; 2011/06/15 15:09:06.0239 5612 ================================================================================ 2011/06/15 15:09:12.0046 5612 Accelerometer (3b10711ad8656c097e0d16a41b29c54c) C:\Windows\system32\DRIVERS\Accelerometer.sys 2011/06/15 15:09:12.0189 5612 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 2011/06/15 15:09:12.0383 5612 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 2011/06/15 15:09:12.0467 5612 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 2011/06/15 15:09:12.0622 5612 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 2011/06/15 15:09:12.0786 5612 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 2011/06/15 15:09:13.0150 5612 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys 2011/06/15 15:09:13.0217 5612 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 2011/06/15 15:09:13.0307 5612 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 2011/06/15 15:09:13.0403 5612 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 2011/06/15 15:09:13.0485 5612 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 2011/06/15 15:09:13.0576 5612 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 2011/06/15 15:09:13.0626 5612 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 2011/06/15 15:09:13.0742 5612 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys 2011/06/15 15:09:13.0902 5612 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 2011/06/15 15:09:14.0035 5612 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 2011/06/15 15:09:14.0114 5612 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/06/15 15:09:14.0256 5612 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 2011/06/15 15:09:14.0764 5612 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2011/06/15 15:09:14.0959 5612 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys 2011/06/15 15:09:15.0050 5612 avipbb (6d52060b59e7d79cd2a044b6add1f1ef) C:\Windows\system32\DRIVERS\avipbb.sys 2011/06/15 15:09:15.0305 5612 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys 2011/06/15 15:09:15.0452 5612 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 2011/06/15 15:09:15.0542 5612 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 2011/06/15 15:09:15.0624 5612 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 2011/06/15 15:09:15.0692 5612 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 2011/06/15 15:09:15.0863 5612 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 2011/06/15 15:09:16.0004 5612 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 2011/06/15 15:09:16.0166 5612 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 2011/06/15 15:09:16.0229 5612 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 2011/06/15 15:09:16.0458 5612 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 2011/06/15 15:09:16.0576 5612 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys 2011/06/15 15:09:16.0689 5612 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys 2011/06/15 15:09:16.0770 5612 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys 2011/06/15 15:09:17.0392 5612 BTHPORT (5a3abaa2f8eece7aefb942773766e3db) C:\Windows\system32\Drivers\BTHport.sys 2011/06/15 15:09:17.0535 5612 BTHUSB (94e2941280e3756a5e0bcb467865c43a) C:\Windows\system32\Drivers\BTHUSB.sys 2011/06/15 15:09:17.0717 5612 btwaudio (229b2c1e776062a4033305d5a9d6e28d) C:\Windows\system32\drivers\btwaudio.sys 2011/06/15 15:09:17.0794 5612 btwavdt (97062053359f6908e1fb2791bfa54734) C:\Windows\system32\drivers\btwavdt.sys 2011/06/15 15:09:17.0935 5612 btwrchid (d9269b0e3e3cf46d677fd071a40fe6cd) C:\Windows\system32\DRIVERS\btwrchid.sys 2011/06/15 15:09:18.0007 5612 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/06/15 15:09:18.0077 5612 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 2011/06/15 15:09:18.0127 5612 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys 2011/06/15 15:09:18.0215 5612 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 2011/06/15 15:09:18.0264 5612 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/06/15 15:09:18.0336 5612 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 2011/06/15 15:09:18.0385 5612 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 2011/06/15 15:09:18.0427 5612 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 2011/06/15 15:09:18.0460 5612 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 2011/06/15 15:09:18.0561 5612 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys 2011/06/15 15:09:18.0663 5612 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 2011/06/15 15:09:18.0704 5612 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys 2011/06/15 15:09:18.0758 5612 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys 2011/06/15 15:09:18.0798 5612 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys 2011/06/15 15:09:18.0865 5612 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 2011/06/15 15:09:19.0003 5612 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 2011/06/15 15:09:19.0050 5612 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 2011/06/15 15:09:19.0153 5612 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 2011/06/15 15:09:19.0252 5612 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 2011/06/15 15:09:19.0298 5612 enecir (4cd6b056c5fd9e97c06fe74c81479517) C:\Windows\system32\DRIVERS\enecir.sys 2011/06/15 15:09:19.0337 5612 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 2011/06/15 15:09:19.0425 5612 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 2011/06/15 15:09:19.0511 5612 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 2011/06/15 15:09:19.0578 5612 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 2011/06/15 15:09:19.0630 5612 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 2011/06/15 15:09:19.0669 5612 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 2011/06/15 15:09:19.0711 5612 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/06/15 15:09:19.0797 5612 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 2011/06/15 15:09:19.0873 5612 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 2011/06/15 15:09:19.0919 5612 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 2011/06/15 15:09:20.0035 5612 Hardlock (d95554949082fd29a04d351b58396718) C:\Windows\system32\drivers\hardlock.sys 2011/06/15 15:09:20.0111 5612 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 2011/06/15 15:09:20.0226 5612 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/06/15 15:09:20.0280 5612 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 2011/06/15 15:09:20.0327 5612 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys 2011/06/15 15:09:20.0413 5612 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 2011/06/15 15:09:20.0477 5612 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 2011/06/15 15:09:20.0528 5612 hpdskflt (24f3f496c18efc234777723a67a85f81) C:\Windows\system32\DRIVERS\hpdskflt.sys 2011/06/15 15:09:20.0591 5612 HpqKbFiltr (35956140e686d53bf676cf0c778880fc) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 2011/06/15 15:09:20.0668 5612 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS 2011/06/15 15:09:20.0742 5612 HSF_DPV (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS 2011/06/15 15:09:20.0818 5612 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 2011/06/15 15:09:20.0867 5612 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 2011/06/15 15:09:20.0909 5612 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/06/15 15:09:20.0946 5612 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 2011/06/15 15:09:21.0007 5612 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 2011/06/15 15:09:21.0093 5612 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 2011/06/15 15:09:21.0164 5612 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 2011/06/15 15:09:21.0218 5612 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/06/15 15:09:21.0326 5612 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 2011/06/15 15:09:21.0384 5612 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 2011/06/15 15:09:21.0426 5612 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 2011/06/15 15:09:21.0478 5612 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 2011/06/15 15:09:21.0554 5612 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/06/15 15:09:21.0629 5612 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 2011/06/15 15:09:21.0675 5612 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 2011/06/15 15:09:21.0727 5612 JMCR (da971cfc625d13636e04c405948e9d62) C:\Windows\system32\DRIVERS\jmcr.sys 2011/06/15 15:09:21.0776 5612 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/06/15 15:09:21.0836 5612 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys 2011/06/15 15:09:21.0942 5612 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 2011/06/15 15:09:22.0009 5612 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 2011/06/15 15:09:22.0065 5612 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 2011/06/15 15:09:22.0105 5612 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 2011/06/15 15:09:22.0151 5612 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 2011/06/15 15:09:22.0240 5612 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 2011/06/15 15:09:22.0288 5612 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 2011/06/15 15:09:22.0345 5612 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 2011/06/15 15:09:22.0402 5612 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 2011/06/15 15:09:22.0447 5612 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 2011/06/15 15:09:22.0516 5612 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 2011/06/15 15:09:22.0557 5612 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 2011/06/15 15:09:22.0594 5612 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 2011/06/15 15:09:22.0646 5612 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 2011/06/15 15:09:22.0682 5612 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 2011/06/15 15:09:22.0732 5612 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 2011/06/15 15:09:23.0177 5612 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 2011/06/15 15:09:23.0619 5612 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/06/15 15:09:23.0665 5612 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/06/15 15:09:23.0783 5612 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/06/15 15:09:23.0863 5612 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys 2011/06/15 15:09:23.0937 5612 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 2011/06/15 15:09:24.0031 5612 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 2011/06/15 15:09:24.0073 5612 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 2011/06/15 15:09:24.0126 5612 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 2011/06/15 15:09:24.0189 5612 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/06/15 15:09:24.0277 5612 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 2011/06/15 15:09:24.0361 5612 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 2011/06/15 15:09:24.0439 5612 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/06/15 15:09:24.0509 5612 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 2011/06/15 15:09:24.0597 5612 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 2011/06/15 15:09:24.0685 5612 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 2011/06/15 15:09:24.0820 5612 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 2011/06/15 15:09:24.0897 5612 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/06/15 15:09:24.0942 5612 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/06/15 15:09:25.0048 5612 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/06/15 15:09:25.0089 5612 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 2011/06/15 15:09:25.0131 5612 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 2011/06/15 15:09:25.0236 5612 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 2011/06/15 15:09:25.0406 5612 NETw5v32 (8de67bd902095a13329fd82c85a1fa09) C:\Windows\system32\DRIVERS\NETw5v32.sys 2011/06/15 15:09:25.0545 5612 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 2011/06/15 15:09:25.0772 5612 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 2011/06/15 15:09:25.0857 5612 NSHE (f8e396f5e703d7a8f37d90f59c776268) C:\Windows\system32\Drivers\NSHE.SYS 2011/06/15 15:09:25.0931 5612 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 2011/06/15 15:09:26.0057 5612 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 2011/06/15 15:09:26.0143 5612 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 2011/06/15 15:09:26.0186 5612 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 2011/06/15 15:09:26.0252 5612 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys 2011/06/15 15:09:26.0329 5612 NVHDA (723931a765e8cddf7ffcb42f5a72ce79) C:\Windows\system32\drivers\nvhda32v.sys 2011/06/15 15:09:26.0570 5612 nvlddmkm (c043ce48391211bb591e74518eb0fa5f) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2011/06/15 15:09:26.0827 5612 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 2011/06/15 15:09:26.0857 5612 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 2011/06/15 15:09:26.0918 5612 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 2011/06/15 15:09:27.0067 5612 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/06/15 15:09:27.0127 5612 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 2011/06/15 15:09:27.0218 5612 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 2011/06/15 15:09:27.0259 5612 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 2011/06/15 15:09:27.0335 5612 PCASp50 (00ae175b903d45ed4a62384d3315dc2a) C:\Windows\system32\Drivers\PCASp50.sys 2011/06/15 15:09:27.0422 5612 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys 2011/06/15 15:09:27.0489 5612 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 2011/06/15 15:09:27.0551 5612 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys 2011/06/15 15:09:27.0602 5612 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 2011/06/15 15:09:27.0679 5612 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 2011/06/15 15:09:27.0806 5612 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 2011/06/15 15:09:27.0863 5612 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 2011/06/15 15:09:28.0028 5612 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 2011/06/15 15:09:28.0160 5612 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 2011/06/15 15:09:28.0269 5612 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 2011/06/15 15:09:28.0312 5612 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 2011/06/15 15:09:28.0343 5612 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 2011/06/15 15:09:28.0415 5612 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/06/15 15:09:28.0509 5612 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/06/15 15:09:28.0601 5612 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 2011/06/15 15:09:28.0676 5612 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 2011/06/15 15:09:28.0744 5612 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/06/15 15:09:28.0791 5612 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 2011/06/15 15:09:28.0838 5612 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 2011/06/15 15:09:28.0926 5612 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 2011/06/15 15:09:29.0118 5612 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys 2011/06/15 15:09:29.0229 5612 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 2011/06/15 15:09:29.0309 5612 RTL8169 (2fc33077f85d7dc0d03678c06d43898c) C:\Windows\system32\DRIVERS\Rtlh86.sys 2011/06/15 15:09:29.0356 5612 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 2011/06/15 15:09:29.0436 5612 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys 2011/06/15 15:09:29.0517 5612 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2011/06/15 15:09:29.0591 5612 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 2011/06/15 15:09:29.0663 5612 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 2011/06/15 15:09:29.0717 5612 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 2011/06/15 15:09:29.0821 5612 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 2011/06/15 15:09:29.0879 5612 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 2011/06/15 15:09:29.0933 5612 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 2011/06/15 15:09:29.0976 5612 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 2011/06/15 15:09:30.0032 5612 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 2011/06/15 15:09:30.0161 5612 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 2011/06/15 15:09:30.0227 5612 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 2011/06/15 15:09:30.0319 5612 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 2011/06/15 15:09:30.0377 5612 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 2011/06/15 15:09:30.0465 5612 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 2011/06/15 15:09:30.0528 5612 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys 2011/06/15 15:09:30.0578 5612 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys 2011/06/15 15:09:30.0626 5612 ssmdrv (5ec550b8952882ee856b862cf648522d) C:\Windows\system32\DRIVERS\ssmdrv.sys 2011/06/15 15:09:30.0704 5612 STHDA (21cc262ab5f42f7a6b91dc7304c2f267) C:\Windows\system32\DRIVERS\stwrt.sys 2011/06/15 15:09:30.0769 5612 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 2011/06/15 15:09:30.0822 5612 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 2011/06/15 15:09:30.0853 5612 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 2011/06/15 15:09:30.0893 5612 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 2011/06/15 15:09:30.0970 5612 SynTP (f5d926807bd9bc0af68f9376144de425) C:\Windows\system32\DRIVERS\SynTP.sys 2011/06/15 15:09:31.0069 5612 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys 2011/06/15 15:09:31.0260 5612 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys 2011/06/15 15:09:31.0379 5612 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 2011/06/15 15:09:31.0455 5612 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 2011/06/15 15:09:31.0501 5612 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 2011/06/15 15:09:31.0585 5612 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 2011/06/15 15:09:31.0689 5612 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 2011/06/15 15:09:31.0800 5612 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/06/15 15:09:31.0846 5612 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 2011/06/15 15:09:31.0959 5612 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 2011/06/15 15:09:32.0179 5612 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 2011/06/15 15:09:32.0294 5612 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 2011/06/15 15:09:32.0376 5612 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 2011/06/15 15:09:32.0459 5612 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 2011/06/15 15:09:32.0512 5612 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 2011/06/15 15:09:32.0574 5612 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 2011/06/15 15:09:32.0622 5612 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 2011/06/15 15:09:32.0749 5612 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/06/15 15:09:32.0808 5612 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 2011/06/15 15:09:32.0847 5612 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 2011/06/15 15:09:32.0949 5612 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 2011/06/15 15:09:33.0016 5612 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys 2011/06/15 15:09:33.0136 5612 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 2011/06/15 15:09:33.0223 5612 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 2011/06/15 15:09:33.0291 5612 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/06/15 15:09:33.0338 5612 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/06/15 15:09:33.0415 5612 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys 2011/06/15 15:09:33.0475 5612 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/06/15 15:09:33.0535 5612 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 2011/06/15 15:09:33.0587 5612 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 2011/06/15 15:09:33.0685 5612 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 2011/06/15 15:09:33.0741 5612 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 2011/06/15 15:09:33.0788 5612 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 2011/06/15 15:09:33.0914 5612 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 2011/06/15 15:09:34.0002 5612 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 2011/06/15 15:09:34.0053 5612 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 2011/06/15 15:09:34.0136 5612 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 2011/06/15 15:09:34.0224 5612 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/06/15 15:09:34.0234 5612 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/06/15 15:09:34.0634 5612 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 2011/06/15 15:09:34.0763 5612 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 2011/06/15 15:09:34.0882 5612 winachsf (5c7bdcf5864db00323fe2d90fa26a8a2) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS 2011/06/15 15:09:34.0977 5612 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/06/15 15:09:35.0063 5612 WN4501HLFIR(Arcor) (35aba0f0f00bd3a9817a46b87a59b952) C:\Windows\system32\DRIVERS\ARWUSB.sys 2011/06/15 15:09:35.0183 5612 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 2011/06/15 15:09:35.0231 5612 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 2011/06/15 15:09:35.0304 5612 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/06/15 15:09:35.0363 5612 MBR (0x1B8) (85d751f0e41b8e520aee8c07a8da777b) \Device\Harddisk0\DR0 2011/06/15 15:09:35.0417 5612 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1 2011/06/15 15:09:35.0426 5612 ================================================================================ 2011/06/15 15:09:35.0426 5612 Scan finished 2011/06/15 15:09:35.0426 5612 ================================================================================ 2011/06/15 15:09:35.0436 5372 Detected object count: 0 2011/06/15 15:09:35.0436 5372 Actual detected object count: 0 |
15.06.2011, 14:25 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
__________________ Logfiles bitte immer in CODE-Tags posten |
15.06.2011, 14:36 | #12 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen mist.. jetzt hab ich das so gemacht, CF gestartet ("als admin"), dann erschien ein schwarzes fenster mit gründer schrift..er tat etwas, dann kam eine fehlermeldung (mit sicherheit die des virus..mein ganzer desktop ist ständig voll davon) und dann fuhr der rechner sich selbst runter.. also keine txt erschienen nun isser wieder hochgefahren. erstmals ist der virus nicht gleich wieder aktiv geworden. aber dessen symbol ist noch auf dem desktop (schaut aber jetzt anders aus) soll ich den CF jetzt nochmal machen? avira war auch inaktiviert.. |
15.06.2011, 14:51 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen Starte Windows neu, lösch die alte cofi.exe, lade CF neu als cofi.exe runter und probier es bitte nochmal.
__________________ Logfiles bitte immer in CODE-Tags posten |
15.06.2011, 14:58 | #14 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen ok, läuft danke und bis gleich. |
15.06.2011, 15:14 | #15 |
| "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen so, CF ist fertig: Combofix Logfile: Code:
ATTFilter ComboFix 11-06-14.03 - Karina und Volker 15.06.2011 16:01:44.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.3068.2028 [GMT 2:00] ausgeführt von:: c:\users\Karina und Volker\Desktop\cofi.exe AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7} SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\Recycle.Bin c:\recycle.bin\config.bin c:\users\Karina und Volker\2gweorjqjutp92vjy9gake c:\users\Karina und Volker\AppData\Local\Microsoft\Windows\Temporary Internet Files\pse_350_deu.exe c:\users\Karina und Volker\AppData\Roaming\Adobe\plugs c:\users\Karina und Volker\AppData\Roaming\Adobe\shed c:\users\Karina und Volker\AppData\Roaming\Adobe\shed\thr1.chm c:\users\Karina und Volker\OOo_3.0.1_Win32Intel_install_de.exe c:\windows\system32\UNWISE.EXE c:\windows\winhelp.ini . . ((((((((((((((((((((((( Dateien erstellt von 2011-05-15 bis 2011-06-15 )))))))))))))))))))))))))))))) . . 2011-06-15 14:10 . 2011-06-15 14:10 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-06-15 12:18 . 2011-06-15 12:24 -------- d-----w- C:\_OTL 2011-06-14 23:32 . 2011-06-14 23:32 -------- d-----w- c:\users\Karina und Volker\AppData\Roaming\Malwarebytes 2011-06-14 23:31 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-06-14 23:31 . 2011-06-14 23:31 -------- d-----w- c:\programdata\Malwarebytes 2011-06-14 23:31 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-06-14 23:31 . 2011-06-14 23:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-06-14 16:25 . 2011-05-09 20:46 6962000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{880474B4-8BAD-4CB2-BDB2-5FF65E500606}\mpengine.dll 2011-05-30 19:03 . 2011-05-30 19:03 -------- d-----w- c:\programdata\fotobuch.de AG 2011-05-30 19:03 . 2011-05-30 19:03 -------- d-----w- c:\users\Karina und Volker\AppData\Roaming\fotobuch.de AG 2011-05-30 19:01 . 2011-05-30 19:01 -------- d-----w- c:\program files\fotobuch.de 2011-05-30 19:01 . 2011-05-30 19:01 -------- d-----w- c:\windows\system32\artworks 2011-05-17 15:03 . 2011-05-17 15:03 89048 ----a-w- c:\program files\Mozilla Firefox\libEGL.dll 2011-05-17 15:03 . 2011-05-17 15:03 781272 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll 2011-05-17 15:03 . 2011-05-17 15:03 465880 ----a-w- c:\program files\Mozilla Firefox\libGLESv2.dll 2011-05-17 15:03 . 2011-05-17 15:03 1892184 ----a-w- c:\program files\Mozilla Firefox\d3dx9_42.dll 2011-05-17 15:03 . 2011-05-17 15:03 1874904 ----a-w- c:\program files\Mozilla Firefox\mozjs.dll 2011-05-17 15:03 . 2011-05-17 15:03 15832 ----a-w- c:\program files\Mozilla Firefox\mozalloc.dll 2011-05-17 15:03 . 2011-05-17 15:03 142296 ----a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll 2011-05-17 15:03 . 2011-05-17 15:03 1974616 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_42.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-05-12 22:04 . 2010-11-03 12:52 0 ----a-w- c:\users\Karina und Volker\AppData\Local\Xzutatebiwelo.bin 2011-05-17 15:03 . 2011-05-17 15:03 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll 2006-05-03 09:06 163328 --sh--r- c:\windows\System32\flvDX.dll 2007-02-21 10:47 31232 --sh--r- c:\windows\System32\msfDX.dll 2008-03-16 12:30 216064 --sh--r- c:\windows\System32\nbDX.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800] "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-12-24 222504] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153] "SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-06-27 442467] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-08 13601312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-08 92704] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-10 35736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] . c:\users\Karina und Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ PMB Medien-Prfung.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-1-28 333088] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Arcor Wlan-Monitor 1.0.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Arcor Wlan-Monitor 1.0.lnk backup=c:\windows\pss\Arcor Wlan-Monitor 1.0.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk] path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk backup=c:\windows\pss\BTTray.lnk.CommonStartup backupExtension=.CommonStartup . [HKLM\~\startupfolder\C:^Users^Karina und Volker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk] path=c:\users\Karina und Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk backup=c:\windows\pss\OpenOffice.org 3.0.lnk.Startup backupExtension=.Startup . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer] c:\program files\Common Files\Nokia\MPlatform\NokiaMServer [X] . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate] 2010-08-20 19:45 1164584 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreePDF Assistant] 2010-06-17 20:56 370176 ----a-w- c:\program files\FreePDF_XP\fpassist.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler] 2008-04-15 11:42 70912 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant] 2008-04-15 12:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] 2008-02-26 13:08 2289664 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdjamon] 2007-04-30 20:19 20480 ----a-w- c:\program files\Lexmark 1400 Series\lxdjamon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OnScreenDisplay] 2007-11-01 16:42 554288 ----a-w- c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe] 2008-03-14 06:45 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2010-05-14 10:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-02-09 136176] R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840] R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-02-09 136176] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [x] R3 WN4501HLFIR(Arcor);Arcor-Easy Stick A 50 WLAN(Arcor);c:\windows\system32\DRIVERS\ARWUSB.sys [2007-01-24 448512] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe [2008-06-27 77824] S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2008-03-18 19456] S2 lxdjCATSCustConnectService;lxdjCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxdjserv.exe [2007-06-11 99248] S2 NSHE;Guardant Emulator Driver;c:\windows\system32\Drivers\NSHE.SYS [2008-11-23 97792] S2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [2008-04-25 361808] S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2008-01-24 52736] S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-07-08 96856] S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-09-24 45600] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-02-26 13:06 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Inhalt des "geplante Tasks" Ordners . 2011-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-02-09 06:47] . 2011-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-02-09 06:47] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://google.de/ mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cnnb IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Karina und Volker\AppData\Roaming\Mozilla\Firefox\Profiles\g01xe13l.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - www.google.de FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q= . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{EEE6C35D-6118-11DC-9C72-001320C79847} - (no file) URLSearchHooks-{a51a36e6-31e7-4838-9ff7-76298b527ec0} - (no file) MSConfigStartUp-lxdjmon - c:\program files\Lexmark 1400 Series\lxdjmon.exe MSConfigStartUp-NokiaOviSuite2 - c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe AddRemove-Hardlock Gerätetreiber - c:\windows\system32\UNWISE.EXE AddRemove-SlingMedia.QPSlingPlayer_is1 - c:\program files\HP\QuickPlay\unins001.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net Rootkit scan 2011-06-15 16:10 Windows 6.0.6002 Service Pack 2 NTFS . Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . Scanne versteckte Dateien... . . c:\windows\TEMP\TMP00000076685A95F9D13AA743 524288 bytes . Scan erfolgreich abgeschlossen versteckte Dateien: 1 . ************************************************************************** . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Zeit der Fertigstellung: 2011-06-15 16:12:52 ComboFix-quarantined-files.txt 2011-06-15 14:12 . Vor Suchlauf: 20 Verzeichnis(se), 62.036.553.728 Bytes frei Nach Suchlauf: 21 Verzeichnis(se), 63.693.586.432 Bytes frei . - - End Of File - - BE96CA83E117CFC0D77DA252E61203ED |
Themen zu "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen |
anwendungen, avira, bios, booten, dateien, desktop, diverse, festplatte, forum, gelöscht, gen, internet, langsam, laptop, malware, neues, nicht öffnen, programm, rechner, registry, sicherheit, symbol, vista, windows, windows vista, wlan-stick |