| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
07.11.2011, 16:53
| #1 |
 |  Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? Hallo, ich habe seit kurzem das Problem eines verdächtig hohen Uploads (teilweise über 700kb/s), dazu kommt das Google plötzlich meint sie hätten sehr viele Anfragen meines Systems erhalten was zu ständigen Captchas führt und die Verbindung ist auch langsamer als sonst. Nach 36min Verbindungsdauer die ich hauptsächlich mit suchen nach dem Problem verbracht habe habe ich nun ein Up/Down-Verhältnis von 1.953.929/10.762.006 Bytes, ist das vlt schon zu viel? Es waren auch bei den Prozessen im Task-Manager ca 10 Plugin-Container von Firefox aktiv :S Soll ich hier zu schon defogger und OTL verwenden oder erst auf andere Anweisungen warten? Ich hoffe ihr könnt mir helfen... p.s.: ich kann gerade auch weder gamestar.de noch gamepro.de erreichen, werde an einen barracuda webfilter weitergeleitet, evtl liegt es ja an ihnen aber auf downforeveryoneorjustme.com komm ich auch nicht weil die "503 Over Quota App Engine Error" haben -.- evtl nur ein zufall aber ich wollte es mal erwähnen Geändert von rimshot (07.11.2011 um 17:05 Uhr) |
|
07.11.2011, 17:27
| #2 |
| /// Malware-holic   | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? hi
__________________Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden)
__________________ |
|
07.11.2011, 18:21
| #3 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? ok, hier OTL.txtOTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 07.11.2011 17:36:13 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\***\Desktop 64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 6,00 Gb Total Physical Memory | 3,76 Gb Available Physical Memory | 62,60% Memory free 12,11 Gb Paging File | 9,53 Gb Available in Paging File | 78,75% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 916,86 Gb Total Space | 358,18 Gb Free Space | 39,07% Space Free | Partition Type: NTFS Computer Name: ***-PC | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\***\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Google\Update\1.3.21.79\GoogleCrashHandler.exe (Google Inc.) PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software) PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) PRC - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe () PRC - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe () PRC - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe () PRC - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.) PRC - C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe () PRC - C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe () PRC - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe () PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) PRC - C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe (Realtime Soft Ltd) PRC - C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe (Nero AG) PRC - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (Symantec Corporation) PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\AOSD.exe (Packard Bell BV) PRC - C:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV) PRC - C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV) PRC - C:\Windows\SysWOW64\HidService.exe (Packard Bell Services) PRC - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe () PRC - C:\Program Files (x86)\RocketDock\RocketDock.exe () PRC - C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.) ========== Modules (No Company Name) ========== MOD - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\RadioWMPCoreGecko7.dll () MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll () MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll () MOD - C:\Program Files (x86)\Yuna Software\Messenger Plus!\detour32.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvorbis_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libzvbi_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libxml_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtaglib_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libx264_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_rtp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_raop_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtheora_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libswscale_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_sdl_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtwolame_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libts_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libzip_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_transcode_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvisual_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvod_rtsp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libwingdi_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libty_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubtitle_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvcd_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsdec_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libwaveout_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvobsub_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsusf_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_record_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_mosaic_bridge_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvideo_filter_wrapper_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtransform_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_standard_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i420_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_wrapper_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i422_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libwav_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsvcdsub_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libwall_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvoc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_smem_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvmem_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libxtag_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtta_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libwave_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libvc1_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_channel_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_gather_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libxa_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuvp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libugly_resampler_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libt140_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libqt4_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libskins2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libschroedinger_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libremoteosd_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librtp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsdl_image_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libspeex_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libspatializer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsap_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libreal_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librss_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libscreen_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_bridge_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libspudec_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_es_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsmf_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libscaletempo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librotate_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvid_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libscene_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libquicktime_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_duplicate_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_rar_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librealvideo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstats_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsimple_channel_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librawdv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librawaud_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_display_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libsharpen_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libripple_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvideo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_autodel_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libscale_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_record_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\librv32_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_description_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libspdif_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_dummy_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libprojectm_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmkv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmod_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpng_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmp4_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ts_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgatofixed32_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libplaylist_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldhttp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ps_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libportaudio_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libogg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpostproc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_h264_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldrc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpanoramix_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4audio_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ogg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mp4_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_asf_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libps_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmosaic_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_dirac_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libosd_parser_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_vc1_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldtelnet_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnuv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_avi_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpegvideo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotiondetect_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4video_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_flac_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpuzzle_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mlp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmono_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libosdmenu_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpodcast_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpeg_audio_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpva_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libntservice_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libparam_eq_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnetsync_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpsychedelic_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_copy_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnormvol_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_wav_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmsn_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotionblur_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libnoise_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mpjpeg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_dummy_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibass_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgnutls_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblive555_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgme_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblua_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgoom_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibmpeg2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_sse2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libkate_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_mmx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libglwin32_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_sse2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libhotkeys_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_sse2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgradient_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_mmx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmarq_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_mmx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmagnify_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libheadphone_channel_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgestures_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmirror_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmediadirs_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblpcm_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmjpeg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogger_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmxext_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpy3dn_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libglobalhotkeys_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvmem_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_i420_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrey_yuv_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrain_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libh264_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvert_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirac_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfreetype_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfaad_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libflac_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfluidsynth_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdnav_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdshow_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstofloat32_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdread_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvbsub_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdeinterlace_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirectx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirect3d_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdmo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcrop_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libequalizer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libflacsys_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libes_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libextract_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdummy_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfilesystem_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdts_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libexport_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfake_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcvdsub_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcroppadd_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liberase_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libgaussianblur_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstospdif_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdolby_surround_decoder_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemuxdump_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfloat32_mixer_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemux_cdg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libfolder_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libdrawable_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libavcodec_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcaca_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_sdl_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libatmo_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libbda_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdda_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libavi_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libasf_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libblend_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_v_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libadjust_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_directx_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaraw_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libball_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudioscrobbler_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudio_format_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcc_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libadpcm_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_a_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libchorus_flanger_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libbluescreen_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcanvas_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libblendbench_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcolorthres_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_file_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdg_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaiff_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libclone_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libalphamask_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaes3_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libconverter_fixed_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libchain_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_udp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libau_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_shout_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe () MOD - C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_bd_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_http_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_mms_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_realrtsp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tofloat32_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_imem_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_ftp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_udp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_http_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_smb_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_fake_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_file_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_tcp_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_attachment_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_dummy_plugin.dll () MOD - C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tospdif_plugin.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe () MOD - C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll () MOD - C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe () MOD - C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\Haali\splitter.ax () MOD - C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\Haali\mp4.dll () MOD - C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\Haali\mkzlib.dll () MOD - C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\Haali\mkunicode.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe () MOD - C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll () MOD - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll () MOD - C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll () MOD - C:\Program Files (x86)\RocketDock\Docklets\RocketClock\StackDocklet.dll () MOD - C:\Program Files (x86)\RocketDock\RocketDock.exe () MOD - C:\Program Files (x86)\RocketDock\RocketDock.dll () ========== Win32 Services (SafeList) ========== SRV:64bit: - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV:64bit: - (LBTServ) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.) SRV:64bit: - (ForceWare Intelligent Application Manager (IAM)) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe () SRV:64bit: - (nSvcIp) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe () SRV:64bit: - (GenericHidService) -- C:\Windows\SysNative\HidService.exe (Packard Bell Services) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation) SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) SRV - (MotoHelper) -- C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe () SRV - (UMVPFSrv) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.) SRV - (ICQ Service) -- C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe () SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (DeviceMonitorService) -- C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe (Nero AG) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (Norton Internet Security) -- C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (Symantec Corporation) SRV - (GenericHidService) -- C:\Windows\SysWow64\HidService.exe (Packard Bell Services) SRV - (ezSharedSvc) -- C:\Windows\SysWOW64\ezsvc7.dll (EasyBits Sofware AS) SRV - (AdobeActiveFileMonitor6.0) -- C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe () SRV - (PLFlash DeviceIoControl Service) -- C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.) ========== Driver Services (SafeList) ========== DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software) DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software) DRV:64bit: - (aswTdi) -- C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software) DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr.sys (AVAST Software) DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software) DRV:64bit: - (aswFsBlk) -- C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software) DRV:64bit: - (motusbdevice) -- C:\Windows\SysNative\DRIVERS\motusbdevice.sys (Motorola Inc) DRV:64bit: - (motccgp) -- C:\Windows\SysNative\DRIVERS\motccgp.sys (Motorola) DRV:64bit: - (LVUVC64) Logitech HD Webcam C270(UVC) -- C:\Windows\SysNative\DRIVERS\lvuvc64.sys (Logitech Inc.) DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\DRIVERS\lvrs64.sys (Logitech Inc.) DRV:64bit: - (motmodem) -- C:\Windows\SysNative\DRIVERS\motmodem.sys (Motorola) DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.) DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys (Sonic Solutions) DRV:64bit: - (SaiNtBus) -- C:\Windows\SysNative\drivers\SaiBus.sys (Saitek) DRV:64bit: - (SaiMini) -- C:\Windows\SysNative\DRIVERS\SaiMini.sys (Saitek) DRV:64bit: - (sptd) -- C:\Windows\SysNative\Drivers\sptd.sys () DRV:64bit: - (lvpopf64) -- C:\Windows\SysNative\DRIVERS\lvpopf64.sys (Logitech Inc.) DRV:64bit: - (LVPr2Mon) -- C:\Windows\SysNative\DRIVERS\LVPr2M64.sys () DRV:64bit: - (LVPr2M64) -- C:\Windows\SysNative\DRIVERS\LVPr2M64.sys () DRV:64bit: - (Motousbnet) -- C:\Windows\SysNative\DRIVERS\Motousbnet.sys (Motorola) DRV:64bit: - (LMouKE) -- C:\Windows\SysNative\DRIVERS\LMouKE.Sys (Logitech, Inc.) DRV:64bit: - (LMouFilt) -- C:\Windows\SysNative\DRIVERS\LMouFilt.Sys (Logitech, Inc.) DRV:64bit: - (LHidFilt) -- C:\Windows\SysNative\DRIVERS\LHidFilt.Sys (Logitech, Inc.) DRV:64bit: - (L8042mou) -- C:\Windows\SysNative\DRIVERS\L8042mou.Sys (Logitech, Inc.) DRV:64bit: - (L8042Kbd) -- C:\Windows\SysNative\DRIVERS\L8042Kbd.sys (Logitech, Inc.) DRV:64bit: - (atksgt) -- C:\Windows\SysNative\DRIVERS\atksgt.sys () DRV:64bit: - (lirsgt) -- C:\Windows\SysNative\DRIVERS\lirsgt.sys () DRV:64bit: - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation) DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.) DRV:64bit: - (MotDev) -- C:\Windows\SysNative\DRIVERS\motodrv.sys (Motorola Inc) DRV:64bit: - (motccgpfl) -- C:\Windows\SysNative\DRIVERS\motccgpfl.sys (Motorola) DRV:64bit: - (BTCFilterService) -- C:\Windows\SysNative\DRIVERS\motfilt.sys (Motorola Inc) DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1000000.07D\SRTSP64.SYS (Symantec Corporation) DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1000000.07D\SRTSPX64.SYS (Symantec Corporation) DRV:64bit: - (nvamacpi) -- C:\Windows\SysNative\DRIVERS\NVAMACPI.sys (NVIDIA Corporation) DRV:64bit: - (SaiK0728) -- C:\Windows\SysNative\DRIVERS\SaiK0728.sys (Saitek) DRV:64bit: - (MotoSwitchService) -- C:\Windows\SysNative\DRIVERS\motswch.sys (Motorola) DRV - (UltraMonUtility) -- C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys (Realtime Soft Ltd) DRV - (NPF_devolo) NetGroup Packet Filter Driver (devolo) -- C:\Windows\sysWOW64\drivers\npf_devolo.sys (CACE Technologies) DRV - (speedfan) -- C:\Windows\SysWOW64\speedfan.sys (Windows (R) Server 2003 DDK provider) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\URLSearchHook: {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\tbMess.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - No CLSID value found IE - HKCU\..\URLSearchHook: {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\tbMess.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 192.168.*.*;*.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.de/search?q=" FF - prefs.js..browser.search.selectedEngine: "Google.com (in English)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de" FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9 FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1 FF - prefs.js..extensions.enabledItems: {DFF722C4-4A11-41A7-9939-C83A06B09897}:1.0 FF - prefs.js..extensions.enabledItems: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.5.8.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1 FF - prefs.js..extensions.enabledItems: {542e4d79-1970-4e95-9862-fdb96f61b280}:2.5.8.6 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.4 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0 FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.2 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 FF - prefs.js..keyword.URL: "hxxp://www.google.de/search?q=" FF - prefs.js..network.proxy.http: "108.5.106.27" FF - prefs.js..network.proxy.http_port: 80 FF - prefs.js..network.proxy.socks_remote_dns: true FF - prefs.js..network.proxy.type: 1 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_0_1.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010.05.13 19:54:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.10.02 03:12:25 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.10.02 03:12:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Sunbird 0.9\extensions\\Components: C:\Program Files (x86)\Mozilla Sunbird\components [2011.03.04 23:44:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Sunbird 0.9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Sunbird\plugins [2011.03.04 23:44:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.09.30 21:29:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2009.06.12 13:57:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions [2009.05.22 22:29:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\extensions [2009.05.22 22:29:00 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D} [2011.11.07 16:13:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\b8glfc8c.default\extensions [2010.05.13 19:56:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\b8glfc8c.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011.11.07 16:13:14 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\b8glfc8c.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} [2011.10.20 16:05:06 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\b8glfc8c.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2010.09.16 17:16:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Sunbird\Profiles\0e9ghsk4.default\extensions [2011.10.24 04:10:43 | 000,001,794 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\google-language-de.xml [2011.10.28 23:39:41 | 000,005,471 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\googlecom-in-english.xml [2010.04.02 23:57:17 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-2.xml [2010.06.25 13:12:54 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-3.xml [2010.07.04 15:14:01 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-4.xml [2010.07.21 14:24:01 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-5.xml [2010.07.25 22:08:04 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-6.xml [2010.09.18 16:23:02 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-7.xml [2010.09.19 13:06:21 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-8.xml [2011.06.03 19:01:22 | 000,000,950 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin-9.xml [2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\searchplugins\icqplugin.xml [2011.10.25 19:56:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010.01.08 17:05:36 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.04.18 21:15:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.08.06 04:22:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010.10.20 16:26:37 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2010.12.21 14:33:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011.03.03 15:11:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011.06.11 14:16:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011.10.25 19:56:32 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2009.09.03 13:19:29 | 000,000,000 | ---D | M] (Zwangi) -- C:\Program Files (x86)\mozilla firefox\extensions\{DFF722C4-4A11-41A7-9939-C83A06B09897} () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\{6005D9B1-D115-485A-A92A-3F6453CA3FE2}.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\{E0204BD5-9D31-402B-A99D-A6AA8FFEBDCA}.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\{E968FC70-8F95-4AB9-9E79-304DE2A71EE1}.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\{E9AD55AB-4D1C-42D2-A40C-A5563A9AD5E6}.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\ICH@MALTEGOETZ.DE.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\LONGURLPLEASE@DARRAGH.CURRAN.XPI () (No name found) -- C:\USERS\***\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B8GLFC8C.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI [2011.09.29 08:09:51 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011.10.03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll O1 HOSTS File: ([2006.09.18 22:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll File not found O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Messenger Plus Live Germany Toolbar) - {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\tbMess.dll (Conduit Ltd.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\IPSBHO.DLL (Symantec Corporation) O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll File not found O3 - HKLM\..\Toolbar: (Messenger Plus Live Germany Toolbar) - {542e4d79-1970-4e95-9862-fdb96f61b280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\tbMess.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.0.0.125\coIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found. O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (Messenger Plus Live Germany Toolbar) - {542E4D79-1970-4E95-9862-FDB96F61B280} - C:\Program Files (x86)\Messenger_Plus_Live_Germany\tbMess.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4:64bit: - HKLM..\Run: [FijiKeyboard] c:\ACER\Preload\Autorun\DRV\Fiji Keyboard\ABoard.exe (Packard Bell BV) O4:64bit: - HKLM..\Run: [NVRaidService] C:\Windows\SysNative\nvraidservice.exe (NVIDIA Corporation) O4:64bit: - HKLM..\Run: [ProfilerU] C:\Program Files\Saitek\SD6\Software\ProfilerU.exe (Saitek) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [SaiMfd] C:\Program Files\Saitek\SD6\Software\SaiMfd.exe (Saitek) O4:64bit: - HKLM..\Run: [SaiVolume] C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe (Saitek) O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [Google Updater] C:\Program Files (x86)\Google\Google Updater\GoogleUpdater.exe (Google) O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) O4 - HKLM..\Run: [mumservice] C:\Program Files\Motorola\Software Update\mumservice.exe File not found O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software) O4 - HKLM..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKCU..\Run: [HTC Home Widget] C:\Users\***\Desktop\HTC Home\HTCHome (x64).exe File not found O4 - HKCU..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe () O4 - HKCU..\Run: [SaitekInstall] C:\Windows\temp\Saitek\Saitek_Cyborg_Keyboard_SD6_64_Drivers\00000011\setup.exe (Saitek) O4 - HKCU..\Run: [SmpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (Packard Bell BV) O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech-Produktregistrierung.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Logitech / Leader Technologies) O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8:64bit: - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.) O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000017 - C:\Windows\SysNative\nvLsp64.dll (NVIDIA) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\SysWOW64\nvLsp.dll (NVIDIA) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0) O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab (DLM Control) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} hxxp://download.bitdefender.com/resources/scanner/sources/de/scan8/oscan8.cab (BDSCANONLINE Control) O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.53.0.cab (Battlefield Heroes Updater) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AAAB52CD-FBEE-4103-81F0-F7452C80D2EC}: DhcpNameServer = 192.168.2.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\***\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{223563a2-1582-11df-84c1-0022683be0b4}\Shell\AutoRun\command - "" = E:\Menu.exe O33 - MountPoints2\{5bf81534-6ac3-11df-a858-0022683be0b4}\Shell - "" = AutoRun O33 - MountPoints2\{5bf81534-6ac3-11df-a858-0022683be0b4}\Shell\AutoRun\command - "" = J:\RunGame.exe O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Toshiba\more4you.exe O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\Toshiba\more4you.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.11.07 17:35:20 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2011.11.06 19:19:26 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\test [2011.11.03 21:59:25 | 000,737,280 | ---- | C] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe [2011.11.03 21:59:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WYSIWYG Web Builder 7 [2011.11.03 21:59:14 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\WYSIWYG Web Builder [2011.11.03 21:59:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WYSIWYG Web Builder 7 [2011.10.31 04:16:52 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\4chan [2011.10.29 17:13:08 | 024,742,720 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2011.10.29 17:13:08 | 018,871,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2011.10.29 17:13:08 | 008,791,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2011.10.29 17:13:08 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2011.10.29 17:13:08 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2011.10.29 17:13:07 | 024,796,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2011.10.29 17:13:07 | 017,248,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2011.10.29 17:13:07 | 007,581,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2011.10.29 17:13:07 | 005,578,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2011.10.29 17:13:07 | 002,542,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2011.10.29 17:13:07 | 002,401,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2011.10.29 17:13:07 | 002,232,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2011.10.29 17:13:07 | 002,099,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2011.10.25 19:57:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011.10.25 19:56:30 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011.10.25 19:56:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011.10.25 19:56:30 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011.10.24 04:15:53 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\***\Desktop\HiJackThis204.exe [2011.10.20 19:52:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed [2011.10.12 22:30:58 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011.10.12 22:30:57 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011.10.12 22:30:56 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2011.10.12 22:30:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2011.10.12 22:30:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2011.10.12 22:30:54 | 002,309,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2011.10.12 22:30:54 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2011.10.12 22:30:53 | 000,818,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2011.10.12 22:30:53 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2011.10.12 17:53:13 | 000,000,000 | ---D | C] -- C:\Users\***\workspace [2011.10.12 17:49:09 | 000,627,600 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2011.10.12 17:49:08 | 000,252,296 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2011.10.12 17:49:08 | 000,188,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2011.10.12 17:49:08 | 000,188,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2011.10.12 17:47:16 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2011.10.12 13:37:56 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2011.10.12 13:37:56 | 000,735,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll [2011.10.12 13:37:56 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll [2011.10.12 13:37:56 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll [2011.10.12 13:37:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaccrc.dll [2011.10.12 13:37:50 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\oleaccrc.dll [2011.10.12 13:37:26 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2011.10.12 13:37:26 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2011.10.12 13:37:25 | 000,289,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax [2011.10.12 13:37:25 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax [2011.10.12 13:37:25 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax [2011.10.12 13:37:25 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax [2011.10.12 13:37:25 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax [2011.10.12 13:37:25 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax [2011.10.10 20:55:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.11.07 17:35:23 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2011.11.07 17:28:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.11.07 17:26:05 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2011.11.07 17:26:00 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job [2011.11.07 17:24:55 | 000,211,968 | ---- | M] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.11.07 16:10:11 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.11.07 16:08:42 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.11.07 16:08:42 | 000,004,784 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.11.07 16:08:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.11.07 16:08:28 | 2146,672,639 | -HS- | M] () -- C:\hiberfil.sys [2011.11.06 19:13:55 | 000,181,789 | ---- | M] () -- C:\Users\***\Desktop\test.rar [2011.11.05 17:55:20 | 000,260,054 | ---- | M] () -- C:\Users\***\Desktop\the_spirit_of_jim_morrison_by_ivankorsario-d2yydgp.jpg [2011.11.05 17:55:16 | 000,300,396 | ---- | M] () -- C:\Users\***\Desktop\4.jpg [2011.11.05 04:43:08 | 001,445,310 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.11.05 04:43:08 | 000,628,504 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.11.05 04:43:08 | 000,595,798 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.11.05 04:43:08 | 000,126,248 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.11.05 04:43:08 | 000,103,872 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.11.05 01:19:21 | 000,015,770 | ---- | M] () -- C:\Users\***\Desktop\img.jpg [2011.11.05 00:41:03 | 000,044,944 | ---- | M] () -- C:\Users\***\Desktop\anonymous_world_conspiracy.gif [2011.11.04 19:06:41 | 003,034,168 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.11.03 21:59:26 | 000,001,857 | ---- | M] () -- C:\Users\***\Desktop\WB7.lnk [2011.11.03 21:57:07 | 000,737,280 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe [2011.11.02 22:35:23 | 000,011,198 | ---- | M] () -- C:\Users\***\.recently-used.xbel [2011.11.01 04:19:19 | 000,046,761 | ---- | M] () -- C:\Users\***\Desktop\Aufzeichnen5.JPG [2011.11.01 04:19:04 | 000,022,347 | ---- | M] () -- C:\Users\***\Desktop\Aufzeichnen4.JPG [2011.11.01 04:17:00 | 000,032,536 | ---- | M] () -- C:\Users\***\Desktop\Aufzeichnen3.JPG [2011.10.31 06:20:04 | 001,495,044 | ---- | M] () -- C:\Users\***\Desktop\Expert at the Card Table pdf.pdf [2011.10.31 06:03:36 | 000,093,536 | ---- | M] () -- C:\Users\***\Desktop\Aufzeichnen2.JPG [2011.10.30 20:41:44 | 000,155,509 | ---- | M] () -- C:\Users\***\Desktop\img1.jpg [2011.10.30 01:24:52 | 000,044,159 | ---- | M] () -- C:\Users\***\Desktop\Aufzeichnen.JPG [2011.10.29 16:41:07 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\LogConfigTemp.xml [2011.10.29 04:11:42 | 000,107,124 | ---- | M] () -- C:\Users\***\Desktop\ragestache_939_trap_avoided.jpg [2011.10.24 22:41:08 | 000,001,460 | ---- | M] () -- C:\Users\***\AppData\Local\d3d9caps64.dat [2011.10.24 04:15:54 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\***\Desktop\HiJackThis204.exe [2011.10.24 02:04:13 | 002,949,878 | ---- | M] () -- C:\Users\***\Desktop\IMG_1509.JPG [2011.10.20 19:53:13 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011.10.16 11:35:29 | 000,049,909 | ---- | M] () -- C:\Users\***\Desktop\Wikileaks-founder-arrived-at-the-protest-wearing-a-mask-which-police-insisted-he-remove.jpg [2011.10.15 16:31:33 | 000,516,833 | ---- | M] () -- C:\Users\***\Desktop\Unbenannt (3).wma [2011.10.15 09:53:00 | 024,796,992 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2011.10.15 09:53:00 | 024,742,720 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2011.10.15 09:53:00 | 018,871,616 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2011.10.15 09:53:00 | 017,248,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2011.10.15 09:53:00 | 015,693,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2011.10.15 09:53:00 | 013,205,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2011.10.15 09:53:00 | 010,406,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll [2011.10.15 09:53:00 | 008,791,360 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2011.10.15 09:53:00 | 007,581,504 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2011.10.15 09:53:00 | 007,041,856 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2011.10.15 09:53:00 | 005,578,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2011.10.15 09:53:00 | 005,067,584 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll [2011.10.15 09:53:00 | 003,074,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll [2011.10.15 09:53:00 | 002,808,128 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll [2011.10.15 09:53:00 | 002,542,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2011.10.15 09:53:00 | 002,458,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2011.10.15 09:53:00 | 002,401,088 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2011.10.15 09:53:00 | 002,232,128 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2011.10.15 09:53:00 | 002,099,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2011.10.15 09:53:00 | 001,533,248 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll [2011.10.15 09:53:00 | 001,454,400 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64.dll [2011.10.15 09:53:00 | 000,837,952 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\easyupdatusapiu64.dll [2011.10.15 09:53:00 | 000,222,528 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll [2011.10.15 09:53:00 | 000,137,536 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll [2011.10.15 09:53:00 | 000,068,928 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2011.10.15 09:53:00 | 000,061,248 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2011.10.15 09:53:00 | 000,007,384 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb [2011.10.14 23:56:28 | 056,944,142 | ---- | M] () -- C:\Users\***\Desktop\MVI_1508.AVI [2011.10.14 23:54:52 | 000,321,856 | ---- | M] () -- C:\Windows\SysWow64\nvStreaming.exe [2011.10.14 23:35:31 | 000,112,009 | ---- | M] () -- C:\Users\***\Desktop\Killstreak Motherfucker!.JPG [2011.10.12 17:48:57 | 000,627,600 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2011.10.12 17:48:57 | 000,252,296 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2011.10.12 17:48:57 | 000,188,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2011.10.12 17:48:57 | 000,188,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2011.10.11 21:02:00 | 439,560,064 | ---- | M] () -- C:\Windows\MEMORY.DMP [2011.10.10 20:54:15 | 021,073,936 | ---- | M] () -- C:\Users\***\Documents\vlc-1.1.11-win32.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.11.06 19:13:55 | 000,181,789 | ---- | C] () -- C:\Users\***\Desktop\test.rar [2011.11.05 17:55:19 | 000,260,054 | ---- | C] () -- C:\Users\***\Desktop\the_spirit_of_jim_morrison_by_ivankorsario-d2yydgp.jpg [2011.11.05 17:55:16 | 000,300,396 | ---- | C] () -- C:\Users\***\Desktop\4.jpg [2011.11.05 00:41:03 | 000,044,944 | ---- | C] () -- C:\Users\***\Desktop\anonymous_world_conspiracy.gif [2011.11.03 21:59:26 | 000,001,857 | ---- | C] () -- C:\Users\***\Desktop\WB7.lnk [2011.11.02 22:35:23 | 000,011,198 | ---- | C] () -- C:\Users\***\.recently-used.xbel [2011.11.01 04:19:17 | 000,046,761 | ---- | C] () -- C:\Users\***\Desktop\Aufzeichnen5.JPG [2011.11.01 04:19:02 | 000,022,347 | ---- | C] () -- C:\Users\***\Desktop\Aufzeichnen4.JPG [2011.11.01 04:16:58 | 000,032,536 | ---- | C] () -- C:\Users\***\Desktop\Aufzeichnen3.JPG [2011.10.31 06:20:01 | 001,495,044 | ---- | C] () -- C:\Users\***\Desktop\Expert at the Card Table pdf.pdf [2011.10.31 06:03:34 | 000,093,536 | ---- | C] () -- C:\Users\***\Desktop\Aufzeichnen2.JPG [2011.10.30 20:41:44 | 000,155,509 | ---- | C] () -- C:\Users\***\Desktop\img1.jpg [2011.10.30 20:41:44 | 000,015,770 | ---- | C] () -- C:\Users\***\Desktop\img.jpg [2011.10.30 01:24:50 | 000,044,159 | ---- | C] () -- C:\Users\***\Desktop\Aufzeichnen.JPG [2011.10.29 04:11:42 | 000,107,124 | ---- | C] () -- C:\Users\***\Desktop\ragestache_939_trap_avoided.jpg [2011.10.24 22:45:04 | 2146,672,639 | -HS- | C] () -- C:\hiberfil.sys [2011.10.24 03:07:32 | 000,001,695 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk [2011.10.24 03:07:32 | 000,001,257 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech-Produktregistrierung.lnk [2011.10.24 03:07:32 | 000,001,189 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2011.10.24 03:07:32 | 000,001,072 | ---- | C] () -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk [2011.10.24 02:04:13 | 002,949,878 | ---- | C] () -- C:\Users\***\Desktop\IMG_1509.JPG [2011.10.16 11:35:29 | 000,049,909 | ---- | C] () -- C:\Users\***\Desktop\Wikileaks-founder-arrived-at-the-protest-wearing-a-mask-which-police-insisted-he-remove.jpg [2011.10.15 16:31:32 | 000,516,833 | ---- | C] () -- C:\Users\***\Desktop\Unbenannt (3).wma [2011.10.14 23:56:22 | 056,944,142 | ---- | C] () -- C:\Users\***\Desktop\MVI_1508.AVI [2011.10.14 23:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2011.10.14 23:35:28 | 000,112,009 | ---- | C] () -- C:\Users\***\Desktop\Killstreak Motherfucker!.JPG [2011.09.21 13:34:22 | 000,001,460 | ---- | C] () -- C:\Users\***\AppData\Local\d3d9caps64.dat [2011.08.12 20:03:18 | 000,001,214 | ---- | C] () -- C:\Program Files (x86)\TS.html [2011.04.01 04:07:02 | 010,877,272 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll [2011.04.01 04:07:02 | 000,102,744 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [2011.04.01 04:06:56 | 000,331,608 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2010.11.23 20:57:39 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI [2010.08.23 22:57:14 | 000,165,172 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2010.03.16 15:48:37 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat [2009.12.03 17:16:49 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll [2009.12.03 17:16:23 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin [2009.12.03 17:15:58 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.11.08 19:47:55 | 000,000,028 | ---- | C] () -- C:\Windows\cdplayer.ini [2009.11.08 19:25:55 | 000,640,957 | ---- | C] () -- C:\Windows\unins000.exe [2009.11.08 19:25:55 | 000,000,803 | ---- | C] () -- C:\Windows\unins000.dat [2009.10.01 21:18:03 | 000,000,040 | ---- | C] () -- C:\Windows\RUNAWAY2.INI [2009.09.29 19:13:23 | 000,000,000 | ---- | C] () -- C:\Windows\MusicMaker.INI [2009.09.29 19:11:20 | 000,006,537 | ---- | C] () -- C:\Windows\mgxoschk.ini [2009.09.10 21:08:20 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2009.08.29 23:16:04 | 000,000,020 | ---- | C] () -- C:\Windows\mafosav.INI [2009.08.24 14:14:55 | 000,001,440 | ---- | C] () -- C:\Windows\ckbz-k48.ini [2009.07.14 15:30:05 | 000,000,760 | ---- | C] () -- C:\Users\***\AppData\Roaming\setup_ldm.iss [2009.07.10 19:42:48 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll [2009.07.10 19:42:48 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\advd.dll [2009.07.10 19:42:48 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\auth.dll [2009.07.01 16:57:21 | 000,000,230 | ---- | C] () -- C:\Windows\wininit.ini [2009.06.12 13:57:43 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2009.05.28 14:30:58 | 000,000,794 | ---- | C] () -- C:\Windows\Thps3.INI [2009.05.24 16:13:18 | 000,000,510 | ---- | C] () -- C:\Windows\WORDPAD.INI [2009.05.14 19:44:55 | 000,001,356 | ---- | C] () -- C:\Users\***\AppData\Local\d3d9caps.dat [2009.05.09 15:13:11 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2009.05.08 20:34:21 | 000,023,552 | ---- | C] () -- C:\Windows\SysWow64\jesterss.dll [2009.05.08 20:24:17 | 000,211,968 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.05.08 20:00:32 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2009.05.08 20:00:25 | 000,008,468 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2009.05.08 18:51:10 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini [2009.01.22 08:43:50 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI [2009.01.22 08:37:19 | 000,000,566 | ---- | C] () -- C:\Windows\SysWow64\hidservice.ini [2009.01.22 07:37:29 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin [2009.01.05 13:44:10 | 000,053,248 | ---- | C] () -- C:\Windows\bdoscandel.exe [2009.01.05 13:44:10 | 000,000,483 | ---- | C] () -- C:\Windows\bdoscandellang.ini [2008.01.21 03:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini [2006.11.02 16:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 13:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2006.11.02 13:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2006.11.02 13:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2006.11.02 10:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin ========== Alternate Data Streams ========== @Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:661DFA1C @Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:D1B5B4F1 < End of report > extras wie gewünscht im anhang, nicht gezippt weils halt nur eine datei ist |
|
07.11.2011, 19:00
| #4 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten?Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde! Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.11.2011, 19:50
| #5 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? scheinbar habe ich den windows defender übersehen .__. bei der ausführung des programms an sich gabs aber keine probleme, hofftl hilft das log trotzdem. Combofix Logfile: Code:
ATTFilter ComboFix 11-11-07.03 - *** 07.11.2011 19:24:22.1.4 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.6142.4154 [GMT 1:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Norton Internet Security *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\***\AppData\Roaming\FFSJ
c:\users\***\AppData\Roaming\FFSJ\FFSJ.cfg
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\system32\Install.cmd
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-10-07 bis 2011-11-07 ))))))))))))))))))))))))))))))
.
.
2011-11-07 18:35 . 2011-11-07 18:35 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2011-11-07 18:35 . 2011-11-07 18:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-07 15:08 . 2011-11-07 15:08 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A5A548D5-533B-4B10-AF61-CE0C5FD11CC5}\offreg.dll
2011-11-04 18:16 . 2011-10-07 04:16 8570192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A5A548D5-533B-4B10-AF61-CE0C5FD11CC5}\mpengine.dll
2011-11-03 20:59 . 2011-11-03 20:59 -------- d-----w- c:\program files (x86)\WYSIWYG Web Builder 7
2011-10-25 18:57 . 2011-10-25 18:57 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-10-20 18:52 . 2011-10-20 18:52 -------- d-----w- c:\windows\system32\Macromed
2011-10-14 22:54 . 2011-10-14 22:54 321856 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2011-10-12 16:53 . 2011-10-12 16:54 -------- d-----w- c:\users\***\workspace
2011-10-12 16:49 . 2011-10-12 16:48 627600 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-12 16:47 . 2011-10-12 16:48 -------- d-----w- c:\program files\Java
2011-10-12 12:38 . 2011-09-14 10:52 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-10-12 12:38 . 2011-09-14 10:51 2409784 ----a-w- c:\program files (x86)\Windows Mail\OESpamFilter.dat
2011-10-12 12:38 . 2011-09-06 13:56 2764288 ----a-w- c:\windows\system32\win32k.sys
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-20 18:53 . 2011-05-16 15:21 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-10-15 08:53 . 2011-09-20 17:35 837952 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-10-15 08:53 . 2011-09-20 17:35 5067584 ----a-w- c:\windows\system32\nvsvc64.dll
2011-10-15 08:53 . 2011-09-20 17:35 3074368 ----a-w- c:\windows\system32\nvsvcr.dll
2011-10-15 08:53 . 2011-09-20 17:35 222528 ----a-w- c:\windows\system32\nvmctray.dll
2011-10-15 08:53 . 2011-09-20 17:35 1640768 ----a-w- c:\windows\system32\nvvsvc.exe
2011-10-15 08:53 . 2011-09-20 17:35 137536 ----a-w- c:\windows\system32\nvshext.dll
2011-10-15 08:53 . 2011-09-20 17:35 10406208 ----a-w- c:\windows\system32\nvcpl.dll
2011-10-15 08:53 . 2011-09-20 17:34 7041856 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2011-10-15 08:53 . 2011-09-20 17:34 2808128 ----a-w- c:\windows\system32\nvapi64.dll
2011-10-15 08:53 . 2011-09-20 17:34 2458432 ----a-w- c:\windows\SysWow64\nvapi.dll
2011-10-15 08:53 . 2011-09-20 17:34 1533248 ----a-w- c:\windows\system32\nvdispco64.dll
2011-10-15 08:53 . 2011-09-20 17:34 1454400 ----a-w- c:\windows\system32\nvgenco64.dll
2011-10-15 08:53 . 2011-09-20 17:34 13205312 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2011-10-15 08:53 . 2009-01-22 15:07 15693120 ----a-w- c:\windows\system32\nvd3dumx.dll
2011-10-03 03:06 . 2010-04-18 20:15 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-09-06 20:45 . 2011-02-11 21:57 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2011-02-11 21:57 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-09-06 20:45 . 2011-02-11 21:57 254400 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-05-20 16:02 601944 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:38 . 2011-02-11 21:57 301912 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:36 . 2011-02-11 21:57 58200 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2011-02-11 21:57 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2011-02-11 21:57 65368 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-09-06 20:36 . 2011-02-11 21:57 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{542e4d79-1970-4e95-9862-fdb96f61b280}"= "c:\program files (x86)\Messenger_Plus_Live_Germany\tbMess.dll" [2010-03-09 2355224]
.
[HKEY_CLASSES_ROOT\clsid\{542e4d79-1970-4e95-9862-fdb96f61b280}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{542e4d79-1970-4e95-9862-fdb96f61b280}]
2010-03-09 09:06 2355224 ----a-w- c:\program files (x86)\Messenger_Plus_Live_Germany\tbMess.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{542e4d79-1970-4e95-9862-fdb96f61b280}"= "c:\program files (x86)\Messenger_Plus_Live_Germany\tbMess.dll" [2010-03-09 2355224]
.
[HKEY_CLASSES_ROOT\clsid\{542e4d79-1970-4e95-9862-fdb96f61b280}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe" [2008-07-07 1038136]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-08 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2008-07-07 1038136]
"TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-05-13 202256]
"LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-03-01 190808]
"WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2010-12-06 74752]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-03-01 421160]
"PlusService"="c:\program files (x86)\Yuna Software\Messenger Plus!\PlusService.exe" [2011-09-20 801792]
"Google Updater"="c:\program files (x86)\Google\Google Updater\GoogleUpdater.exe" [2011-09-17 161336]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech-Produktregistrierung.lnk - c:\program files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2007-4-9 3036688]
OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.0.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2009-1-27 384512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [N/A]
Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-4-10 102912]
UltraMon.lnk - c:\windows\Installer\{537056B7-32A4-4408-9B54-0341963C7C9C}\IcoUltraMon.ico [2011-9-24 29310]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 27648]
R2 gupdate1c9eb65b651b2e;Google Update Service (gupdate1c9eb65b651b2e);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-12 133104]
R3 ALSysIO;ALSysIO;c:\users\***\AppData\Local\Temp\ALSysIO64.sys [x]
R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [x]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-12 133104]
R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys [x]
R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys [x]
R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [x]
R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [x]
R3 MotDev;Motorola Inc. USB Device;c:\windows\system32\DRIVERS\motodrv.sys [x]
R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [x]
R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 1020768]
S0 nvamacpi;Nvidia Away Mode System;c:\windows\system32\DRIVERS\NVAMACPI.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 DeviceMonitorService;DeviceMonitorService;c:\program files (x86)\Motorola Media Link\NServiceEntry.exe [2009-10-12 87336]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
S2 MotoHelper;MotoHelper Service;c:\program files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2011-04-26 223088]
S2 Norton Internet Security;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe [2009-01-22 115560]
S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys [2008-05-13 34048]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]
S2 UltraMonUtility;UltraMon Utility Driver;c:\program files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys [2008-11-14 20512]
S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-04-01 428640]
S3 SaiK0728;SaiK0728;c:\windows\system32\DRIVERS\SaiK0728.sys [x]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
Inhalt des "geplante Tasks" Ordners
.
2011-11-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-08 21:46]
.
2011-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-12 13:52]
.
2011-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-06-12 13:52]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 134384 ----a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-08-18 333344]
"RtHDVCpl"="RAVCpl64.exe" [2008-09-18 6495264]
"Skytel"="Skytel.exe" [2008-09-18 1833504]
"FijiKeyboard"="c:\acer\Preload\Autorun\DRV\FIJI Keyboard\ABoard.exe" [2008-09-18 79416]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-06-26 1609296]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2010-07-29 310272]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2010-07-29 158208]
"SaiVolume"="c:\program files\Saitek\CyborgKeyboard\SaiVolume.exe" [2008-01-18 186880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de
mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=1&o=vp64&d=0509&m=imedia_x6605_ge
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = 192.168.*.*;*.local
IE: Free YouTube to Mp3 Converter - c:\users\***\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe
LSP: %SYSTEMROOT%\system32\nvLsp.dll
TCP: DhcpNameServer = 192.168.2.1
CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\b8glfc8c.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.de/search?q=
FF - prefs.js: browser.search.selectedEngine - Google.com (in English)
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
FF - prefs.js: keyword.URL - hxxp://www.google.de/search?q=
FF - prefs.js: network.proxy.http - 108.5.106.27
FF - prefs.js: network.proxy.http_port - 80
FF - prefs.js: network.proxy.type - 1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files (x86)\AskBarDis\bar\bin\askBar.dll
Toolbar-{3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files (x86)\AskBarDis\bar\bin\askBar.dll
Wow6432Node-HKCU-Run-HTC Home Widget - c:\users\***\Desktop\HTC Home\HTCHome (x64).exe
Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe
Wow6432Node-HKLM-Run-mumservice - c:\program files\Motorola\Software Update\mumservice.exe
WebBrowser-{542E4D79-1970-4E95-9862-FDB96F61B280} - (no file)
HKLM-Run-Windows Defender - c:\program files (x86)\Windows Defender\MSASCui.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Ask Toolbar_is1 - c:\program files (x86)\AskBarDis\unins000.exe
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
AddRemove-Gemalt 2 1.00 - c:\program files (x86)\ICQ6.5\Packages\Uninstall.exe
AddRemove-RAIN_1280 - c:\windows\system32\RAIN_1280.scr
AddRemove-Skulduggery - c:\windows\system32\SKULDU~1.SCR
AddRemove-Sting - c:\windows\IsUn0407.exe
AddRemove-WYSIWYG_Web_Builder_7 - c:\windows\iun6002.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files (x86)\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.download\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
"Progid"="SafariDownload"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.safariextz\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariExtension"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webarchive\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
@Denied: (2) (LocalSystem)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-3329690790-807037482-3119176968-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-3329690790-807037482-3119176968-1000)
"Progid"="SafariHTML"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2011-11-07 19:38:45
ComboFix-quarantined-files.txt 2011-11-07 18:38
.
Vor Suchlauf: 15 Verzeichnis(se), 389.007.728.640 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 405.074.751.488 Bytes frei
.
- - End Of File - - D09D043A26FD54303435CBE13215A361
|
|
07.11.2011, 20:12
| #6 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? sieht ok aus. malwarebytes: Downloade Dir bitte Malwarebytes
__________________ --> Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? |
|
07.11.2011, 21:56
| #7 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? da hat er was gefunden. ich geh jetzt mal pennen, schonmal danke an dich  wenns noch mehr zu tun gibt erledige ich das morgen, gute nacht  Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 8109 Windows 6.0.6002 Service Pack 2 Internet Explorer 9.0.8112.16421 07.11.2011 21:54:05 mbam-log-2011-11-07 (21-54-05).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|G:\|H:\|I:\|) Durchsuchte Objekte: 519274 Laufzeit: 1 Stunde(n), 25 Minute(n), 31 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\Users\***\documents\Keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. |
|
07.11.2011, 22:03
| #8 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? c:\Users\***\documents\Keygen.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully. keygens sind illegal, ilegale software unterstützen wir nicht, da gibts nur hilfe beim formatieren und neu aufsetzen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.11.2011, 22:10
| #9 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? kann ich nachvollziehen :/ kann mir allerdings auch nicht erklären wo der herkommt, das einzige mal wo ich sowas verwendet habe ist schon gut ein jahr her und in der zwischenzeit habe ich mein system mehrfach komplett gescannt Oo kann es sein das er sich erst so spät meldet? der upload ist immer noch recht hoch also fürchte ich das die sache noch nicht erledigt ist? hilft da echt nur noch neu aufsetzen? edit: der upload ist nicht ständig hoch, sondern immer in einigen abständen für kurze zeit, hat es evtl gar nichts damit zu tun? |
|
07.11.2011, 22:23
| #10 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? ja, neu aufsetzen und ich zeig dir wie du das system absicherst, falls interessiert.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
07.11.2011, 22:52
| #11 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? alles klar, gerne (Y) in diesem thread dann? jetzt geh ich aber echt erstmal pennen^^ bis dann |
|
08.11.2011, 12:38
| #12 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? genau hier :-)
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
08.11.2011, 14:46
| #13 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? bin dann ab jetzt da, erstmal ein backup erstellen schätze ich? kenne mich damit nicht sonderlich aus, reicht es wenn ich alle dateien die ich behalten will auf eine externe kopiere? eine windows cd habe ich leider auch nicht, das ist ein fertig-pc wo das os schon drauf war. 2 weitere dinge: 1. seit gestern komme ich mit firefox nicht mehr ins internet, er läd bis es iwann heißt "Fehler: Verbindung unterbrochen". andere browser funktionieren aber. 2. kannst du aus den logs irgendetwas zu meiner sicherheit sagen? nicht das ich atm in einem botnet hänge und irgendwann ärger bekomme weil jemand meinen pc für irgendwelche angriffe nutzt oder so :S |
|
08.11.2011, 15:50
| #14 |
| /// Malware-holic | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? genau, musik etc auf ne externe platte ziehen. ich will noch einen test machen: http://www.trojaner-board.de/82358-t...entfernen.html bitte nur das log posten nichts löschen wenn der pc nich unbedingt ins inet muss, trenne die verbindung, also wlan aus oder lankabel ziehen.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
08.11.2011, 16:30
| #15 |
| | Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? 16:26:34.0122 6644 TDSS rootkit removing tool 2.6.16.0 Nov 7 2011 16:26:51 16:26:34.0700 6644 ============================================================ 16:26:34.0700 6644 Current date / time: 2011/11/08 16:26:34.0700 16:26:34.0700 6644 SystemInfo: 16:26:34.0700 6644 16:26:34.0700 6644 OS Version: 6.0.6002 ServicePack: 2.0 16:26:34.0700 6644 Product type: Workstation 16:26:34.0700 6644 ComputerName: ***-PC 16:26:34.0700 6644 UserName: *** 16:26:34.0700 6644 Windows directory: C:\Windows 16:26:34.0700 6644 System windows directory: C:\Windows 16:26:34.0700 6644 Running under WOW64 16:26:34.0700 6644 Processor architecture: Intel x64 16:26:34.0700 6644 Number of processors: 4 16:26:34.0700 6644 Page size: 0x1000 16:26:34.0700 6644 Boot type: Normal boot 16:26:34.0700 6644 ============================================================ 16:26:35.0166 6644 Initialize success 16:26:50.0061 6616 ============================================================ 16:26:50.0061 6616 Scan started 16:26:50.0061 6616 Mode: Manual; 16:26:50.0061 6616 ============================================================ 16:26:51.0211 6616 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys 16:26:51.0215 6616 ACPI - ok 16:26:51.0314 6616 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys 16:26:51.0321 6616 adp94xx - ok 16:26:51.0356 6616 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys 16:26:51.0361 6616 adpahci - ok 16:26:51.0378 6616 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys 16:26:51.0381 6616 adpu160m - ok 16:26:51.0401 6616 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys 16:26:51.0404 6616 adpu320 - ok 16:26:51.0554 6616 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys 16:26:51.0559 6616 AFD - ok 16:26:51.0622 6616 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys 16:26:51.0623 6616 agp440 - ok 16:26:51.0643 6616 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys 16:26:51.0645 6616 aic78xx - ok 16:26:51.0682 6616 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys 16:26:51.0683 6616 aliide - ok 16:26:51.0823 6616 ALSysIO - ok 16:26:51.0848 6616 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys 16:26:51.0850 6616 amdide - ok 16:26:51.0921 6616 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys 16:26:51.0922 6616 AmdK8 - ok 16:26:51.0950 6616 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys 16:26:51.0951 6616 arc - ok 16:26:51.0973 6616 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys 16:26:51.0974 6616 arcsas - ok 16:26:52.0019 6616 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys 16:26:52.0020 6616 aswFsBlk - ok 16:26:52.0080 6616 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys 16:26:52.0083 6616 aswMonFlt - ok 16:26:52.0145 6616 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys 16:26:52.0147 6616 aswRdr - ok 16:26:52.0209 6616 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys 16:26:52.0219 6616 aswSnx - ok 16:26:52.0240 6616 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys 16:26:52.0244 6616 aswSP - ok 16:26:52.0260 6616 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys 16:26:52.0262 6616 aswTdi - ok 16:26:52.0316 6616 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys 16:26:52.0318 6616 AsyncMac - ok 16:26:52.0374 6616 atapi (1898fae8e07d97f2f6c2d5326c633fac) C:\Windows\system32\drivers\atapi.sys 16:26:52.0375 6616 atapi - ok 16:26:52.0440 6616 atksgt (fc0e8778c000291caf60eb88c011e931) C:\Windows\system32\DRIVERS\atksgt.sys 16:26:52.0444 6616 atksgt - ok 16:26:52.0495 6616 Beep - ok 16:26:52.0523 6616 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys 16:26:52.0524 6616 blbdrive - ok 16:26:52.0607 6616 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys 16:26:52.0609 6616 bowser - ok 16:26:52.0672 6616 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys 16:26:52.0673 6616 BrFiltLo - ok 16:26:52.0690 6616 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys 16:26:52.0691 6616 BrFiltUp - ok 16:26:52.0723 6616 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys 16:26:52.0724 6616 Brserid - ok 16:26:52.0744 6616 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys 16:26:52.0745 6616 BrSerWdm - ok 16:26:52.0760 6616 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys 16:26:52.0761 6616 BrUsbMdm - ok 16:26:52.0774 6616 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys 16:26:52.0774 6616 BrUsbSer - ok 16:26:52.0833 6616 BTCFilterService (ff7c57973eead140062238c5a0b7d455) C:\Windows\system32\DRIVERS\motfilt.sys 16:26:52.0835 6616 BTCFilterService - ok 16:26:52.0900 6616 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys 16:26:52.0901 6616 BTHMODEM - ok 16:26:52.0934 6616 catchme - ok 16:26:52.0950 6616 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys 16:26:52.0952 6616 cdfs - ok 16:26:53.0006 6616 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys 16:26:53.0008 6616 cdrom - ok 16:26:53.0078 6616 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys 16:26:53.0080 6616 circlass - ok 16:26:53.0106 6616 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys 16:26:53.0112 6616 CLFS - ok 16:26:53.0181 6616 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys 16:26:53.0183 6616 cmdide - ok 16:26:53.0201 6616 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys 16:26:53.0202 6616 Compbatt - ok 16:26:53.0233 6616 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys 16:26:53.0235 6616 crcdisk - ok 16:26:53.0290 6616 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys 16:26:53.0293 6616 DfsC - ok 16:26:53.0357 6616 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys 16:26:53.0359 6616 disk - ok 16:26:53.0439 6616 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys 16:26:53.0440 6616 drmkaud - ok 16:26:53.0495 6616 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys 16:26:53.0517 6616 DXGKrnl - ok 16:26:53.0550 6616 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys 16:26:53.0552 6616 E1G60 - ok 16:26:53.0604 6616 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys 16:26:53.0607 6616 Ecache - ok 16:26:53.0673 6616 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys 16:26:53.0678 6616 elxstor - ok 16:26:53.0701 6616 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys 16:26:53.0702 6616 ErrDev - ok 16:26:53.0760 6616 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys 16:26:53.0763 6616 exfat - ok 16:26:53.0813 6616 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys 16:26:53.0816 6616 fastfat - ok 16:26:53.0849 6616 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys 16:26:53.0850 6616 fdc - ok 16:26:53.0888 6616 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys 16:26:53.0890 6616 FileInfo - ok 16:26:53.0918 6616 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys 16:26:53.0919 6616 Filetrace - ok 16:26:53.0947 6616 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 16:26:53.0948 6616 flpydisk - ok 16:26:53.0984 6616 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys 16:26:53.0988 6616 FltMgr - ok 16:26:54.0046 6616 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys 16:26:54.0047 6616 Fs_Rec - ok 16:26:54.0066 6616 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys 16:26:54.0068 6616 gagp30kx - ok 16:26:54.0108 6616 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 16:26:54.0109 6616 GEARAspiWDM - ok 16:26:54.0175 6616 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys 16:26:54.0179 6616 HdAudAddService - ok 16:26:54.0233 6616 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys 16:26:54.0256 6616 HDAudBus - ok 16:26:54.0281 6616 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys 16:26:54.0282 6616 HidBth - ok 16:26:54.0305 6616 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys 16:26:54.0307 6616 HidIr - ok 16:26:54.0347 6616 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys 16:26:54.0348 6616 HidUsb - ok 16:26:54.0380 6616 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys 16:26:54.0382 6616 HpCISSs - ok 16:26:54.0419 6616 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys 16:26:54.0442 6616 HTTP - ok 16:26:54.0476 6616 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys 16:26:54.0477 6616 i2omp - ok 16:26:54.0516 6616 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys 16:26:54.0518 6616 i8042prt - ok 16:26:54.0551 6616 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys 16:26:54.0556 6616 iaStorV - ok 16:26:54.0596 6616 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys 16:26:54.0598 6616 iirsp - ok 16:26:54.0670 6616 IntcAzAudAddService (6fdf709500c20362ffc5057f0d1e0c8d) C:\Windows\system32\drivers\RTKVHD64.sys 16:26:54.0697 6616 IntcAzAudAddService - ok 16:26:54.0738 6616 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys 16:26:54.0739 6616 intelide - ok 16:26:54.0762 6616 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys 16:26:54.0764 6616 intelppm - ok 16:26:54.0832 6616 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys 16:26:54.0834 6616 IpFilterDriver - ok 16:26:54.0844 6616 IpInIp - ok 16:26:54.0875 6616 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys 16:26:54.0876 6616 IPMIDRV - ok 16:26:54.0895 6616 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys 16:26:54.0897 6616 IPNAT - ok 16:26:54.0918 6616 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys 16:26:54.0919 6616 IRENUM - ok 16:26:54.0959 6616 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys 16:26:54.0960 6616 isapnp - ok 16:26:54.0989 6616 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys 16:26:54.0992 6616 iScsiPrt - ok 16:26:55.0022 6616 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys 16:26:55.0023 6616 iteatapi - ok 16:26:55.0052 6616 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys 16:26:55.0053 6616 iteraid - ok 16:26:55.0093 6616 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys 16:26:55.0094 6616 kbdclass - ok 16:26:55.0117 6616 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys 16:26:55.0118 6616 kbdhid - ok 16:26:55.0153 6616 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys 16:26:55.0164 6616 KSecDD - ok 16:26:55.0183 6616 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys 16:26:55.0184 6616 ksthunk - ok 16:26:55.0223 6616 L8042Kbd (f2b22de6e0c4553d80c502635b573cc0) C:\Windows\system32\DRIVERS\L8042Kbd.sys 16:26:55.0224 6616 L8042Kbd - ok 16:26:55.0244 6616 L8042mou (e78b48ba32e4f623cc8ebe80ead9fa89) C:\Windows\system32\DRIVERS\L8042mou.Sys 16:26:55.0246 6616 L8042mou - ok 16:26:55.0300 6616 LHidFilt (0a7d6ed578d85f0c35353424ee3f5245) C:\Windows\system32\DRIVERS\LHidFilt.Sys 16:26:55.0302 6616 LHidFilt - ok 16:26:55.0340 6616 lirsgt (83ba097acaad0b00505634a62d90f93a) C:\Windows\system32\DRIVERS\lirsgt.sys 16:26:55.0342 6616 lirsgt - ok 16:26:55.0355 6616 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys 16:26:55.0356 6616 lltdio - ok 16:26:55.0382 6616 LMouFilt (6542e2e6db58118fbb1b82a68ce3aff9) C:\Windows\system32\DRIVERS\LMouFilt.Sys 16:26:55.0384 6616 LMouFilt - ok 16:26:55.0399 6616 LMouKE (a4a7e16a35e895f46095644f54aa4ef8) C:\Windows\system32\DRIVERS\LMouKE.Sys 16:26:55.0402 6616 LMouKE - ok 16:26:55.0434 6616 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys 16:26:55.0436 6616 LSI_FC - ok 16:26:55.0456 6616 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys 16:26:55.0458 6616 LSI_SAS - ok 16:26:55.0478 6616 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys 16:26:55.0480 6616 LSI_SCSI - ok 16:26:55.0509 6616 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys 16:26:55.0512 6616 luafv - ok 16:26:55.0587 6616 lvpopf64 (a014e25d95f7091000b60ff8a1c2e988) C:\Windows\system32\DRIVERS\lvpopf64.sys 16:26:55.0591 6616 lvpopf64 - ok 16:26:55.0620 6616 LVPr2M64 (b3944d06eb4b64d57bd7e5fe89415f58) C:\Windows\system32\DRIVERS\LVPr2M64.sys 16:26:55.0622 6616 LVPr2M64 - ok 16:26:55.0626 6616 LVPr2Mon (b3944d06eb4b64d57bd7e5fe89415f58) C:\Windows\system32\DRIVERS\LVPr2M64.sys 16:26:55.0626 6616 LVPr2Mon - ok 16:26:55.0684 6616 LVRS64 (ef586b959f747e74c76603ff16ae417b) C:\Windows\system32\DRIVERS\lvrs64.sys 16:26:55.0688 6616 LVRS64 - ok 16:26:55.0812 6616 LVUVC64 (edf73bfa1bd24d74d1d64dc0ed28a7cd) C:\Windows\system32\DRIVERS\lvuvc64.sys 16:26:55.0909 6616 LVUVC64 - ok 16:26:55.0963 6616 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys 16:26:55.0964 6616 megasas - ok 16:26:55.0989 6616 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys 16:26:55.0996 6616 MegaSR - ok 16:26:56.0020 6616 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys 16:26:56.0022 6616 Modem - ok 16:26:56.0062 6616 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys 16:26:56.0063 6616 monitor - ok 16:26:56.0128 6616 motccgp (c94a2ea3fdfa5d650884926b710b7db1) C:\Windows\system32\DRIVERS\motccgp.sys 16:26:56.0129 6616 motccgp - ok 16:26:56.0173 6616 motccgpfl (d51e009baeda07ebc107d49d224c2414) C:\Windows\system32\DRIVERS\motccgpfl.sys 16:26:56.0174 6616 motccgpfl - ok 16:26:56.0215 6616 MotDev (3cc500c9b0e4d476802d277353cb2c89) C:\Windows\system32\DRIVERS\motodrv.sys 16:26:56.0216 6616 MotDev - ok 16:26:56.0251 6616 motmodem (060f0ef84f430802df3788f3dcfd009c) C:\Windows\system32\DRIVERS\motmodem.sys 16:26:56.0252 6616 motmodem - ok 16:26:56.0293 6616 MotoSwitchService (ebd05f60cafc5bba2602b8d7101082d3) C:\Windows\system32\DRIVERS\motswch.sys 16:26:56.0294 6616 MotoSwitchService - ok 16:26:56.0319 6616 Motousbnet (87701078c3f720ac7a028e937994cc49) C:\Windows\system32\DRIVERS\Motousbnet.sys 16:26:56.0321 6616 Motousbnet - ok 16:26:56.0356 6616 motusbdevice (4244e427cda5f6485e74461b5b48a7b6) C:\Windows\system32\DRIVERS\motusbdevice.sys 16:26:56.0357 6616 motusbdevice - ok 16:26:56.0385 6616 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys 16:26:56.0386 6616 mouclass - ok 16:26:56.0403 6616 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys 16:26:56.0404 6616 mouhid - ok 16:26:56.0415 6616 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys 16:26:56.0417 6616 MountMgr - ok 16:26:56.0460 6616 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys 16:26:56.0462 6616 mpio - ok 16:26:56.0476 6616 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys 16:26:56.0478 6616 mpsdrv - ok 16:26:56.0501 6616 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys 16:26:56.0502 6616 Mraid35x - ok 16:26:56.0531 6616 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys 16:26:56.0534 6616 MRxDAV - ok 16:26:56.0564 6616 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys 16:26:56.0566 6616 mrxsmb - ok 16:26:56.0618 6616 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys 16:26:56.0622 6616 mrxsmb10 - ok 16:26:56.0632 6616 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys 16:26:56.0634 6616 mrxsmb20 - ok 16:26:56.0648 6616 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys 16:26:56.0649 6616 msahci - ok 16:26:56.0679 6616 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys 16:26:56.0681 6616 msdsm - ok 16:26:56.0718 6616 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys 16:26:56.0720 6616 Msfs - ok 16:26:56.0738 6616 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys 16:26:56.0740 6616 msisadrv - ok 16:26:56.0790 6616 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys 16:26:56.0791 6616 MSKSSRV - ok 16:26:56.0803 6616 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys 16:26:56.0805 6616 MSPCLOCK - ok 16:26:56.0823 6616 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys 16:26:56.0824 6616 MSPQM - ok 16:26:56.0860 6616 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys 16:26:56.0865 6616 MsRPC - ok 16:26:56.0882 6616 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys 16:26:56.0884 6616 mssmbios - ok 16:26:56.0903 6616 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys 16:26:56.0904 6616 MSTEE - ok 16:26:56.0931 6616 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys 16:26:56.0933 6616 Mup - ok 16:26:56.0998 6616 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys 16:26:57.0001 6616 NativeWifiP - ok 16:26:57.0046 6616 NAVENG - ok 16:26:57.0053 6616 NAVEX15 - ok 16:26:57.0097 6616 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys 16:26:57.0119 6616 NDIS - ok 16:26:57.0171 6616 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys 16:26:57.0172 6616 NdisTapi - ok 16:26:57.0202 6616 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys 16:26:57.0203 6616 Ndisuio - ok 16:26:57.0239 6616 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys 16:26:57.0242 6616 NdisWan - ok 16:26:57.0250 6616 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys 16:26:57.0252 6616 NDProxy - ok 16:26:57.0289 6616 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys 16:26:57.0291 6616 NetBIOS - ok 16:26:57.0328 6616 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys 16:26:57.0332 6616 netbt - ok 16:26:57.0381 6616 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys 16:26:57.0382 6616 nfrd960 - ok 16:26:57.0417 6616 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys 16:26:57.0419 6616 Npfs - ok 16:26:57.0472 6616 NPF_devolo (49697c2c761acb5c0de99cc8fe93e95b) C:\Windows\sysWOW64\drivers\npf_devolo.sys 16:26:57.0474 6616 NPF_devolo - ok 16:26:57.0496 6616 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys 16:26:57.0497 6616 nsiproxy - ok 16:26:57.0590 6616 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys 16:26:57.0624 6616 Ntfs - ok 16:26:57.0641 6616 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys 16:26:57.0642 6616 Null - ok 16:26:57.0686 6616 nvamacpi (2b0885148f27b49365d3ad489f7d7b70) C:\Windows\system32\DRIVERS\NVAMACPI.sys 16:26:57.0687 6616 nvamacpi - ok 16:26:57.0716 6616 NVENETFD (cf2a023f422ce6e43302b139e4b87b05) C:\Windows\system32\DRIVERS\nvmfdx64.sys 16:26:57.0720 6616 NVENETFD - ok 16:26:57.0988 6616 nvlddmkm (b15258b1f45f9571758ac6bb2f043b01) C:\Windows\system32\DRIVERS\nvlddmkm.sys 16:26:58.0208 6616 nvlddmkm - ok 16:26:58.0350 6616 NVNET (cf2a023f422ce6e43302b139e4b87b05) C:\Windows\system32\DRIVERS\nvmfdx64.sys 16:26:58.0353 6616 NVNET - ok 16:26:58.0397 6616 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys 16:26:58.0400 6616 nvraid - ok 16:26:58.0423 6616 nvrd64 (90731d8a25964715b850a5b8c3dbfd22) C:\Windows\system32\drivers\nvrd64.sys 16:26:58.0425 6616 nvrd64 - ok 16:26:58.0479 6616 nvsmu (a3ac469ad99ac3fd63afccfc29a90fa9) C:\Windows\system32\DRIVERS\nvsmu.sys 16:26:58.0480 6616 nvsmu - ok 16:26:58.0502 6616 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys 16:26:58.0504 6616 nvstor - ok 16:26:58.0522 6616 nvstor64 (39d974fd0937db87b10e78ae90951fb1) C:\Windows\system32\drivers\nvstor64.sys 16:26:58.0524 6616 nvstor64 - ok 16:26:58.0562 6616 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys 16:26:58.0564 6616 nv_agp - ok 16:26:58.0571 6616 NwlnkFlt - ok 16:26:58.0580 6616 NwlnkFwd - ok 16:26:58.0622 6616 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys 16:26:58.0623 6616 ohci1394 - ok 16:26:58.0653 6616 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys 16:26:58.0655 6616 Parport - ok 16:26:58.0679 6616 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys 16:26:58.0681 6616 partmgr - ok 16:26:58.0714 6616 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys 16:26:58.0716 6616 pci - ok 16:26:58.0739 6616 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys 16:26:58.0741 6616 pciide - ok 16:26:58.0765 6616 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys 16:26:58.0768 6616 pcmcia - ok 16:26:58.0794 6616 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys 16:26:58.0815 6616 PEAUTH - ok 16:26:58.0885 6616 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys 16:26:58.0888 6616 PptpMiniport - ok 16:26:58.0905 6616 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys 16:26:58.0907 6616 Processor - ok 16:26:58.0957 6616 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys 16:26:58.0959 6616 PSched - ok 16:26:58.0972 6616 PxHlpa64 (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys 16:26:58.0974 6616 PxHlpa64 - ok 16:26:59.0023 6616 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys 16:26:59.0057 6616 ql2300 - ok 16:26:59.0083 6616 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys 16:26:59.0085 6616 ql40xx - ok 16:26:59.0108 6616 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys 16:26:59.0110 6616 QWAVEdrv - ok 16:26:59.0124 6616 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys 16:26:59.0125 6616 RasAcd - ok 16:26:59.0166 6616 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys 16:26:59.0169 6616 Rasl2tp - ok 16:26:59.0201 6616 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys 16:26:59.0202 6616 RasPppoe - ok 16:26:59.0255 6616 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys 16:26:59.0257 6616 RasSstp - ok 16:26:59.0290 6616 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys 16:26:59.0295 6616 rdbss - ok 16:26:59.0352 6616 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys 16:26:59.0355 6616 RDPCDD - ok 16:26:59.0398 6616 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys 16:26:59.0403 6616 rdpdr - ok 16:26:59.0411 6616 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys 16:26:59.0413 6616 RDPENCDD - ok 16:26:59.0437 6616 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys 16:26:59.0440 6616 RDPWD - ok 16:26:59.0493 6616 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys 16:26:59.0495 6616 rspndr - ok 16:26:59.0554 6616 SaiK0728 (476baa3eebe9db94bf6bdfaf46747e5d) C:\Windows\system32\DRIVERS\SaiK0728.sys 16:26:59.0556 6616 SaiK0728 - ok 16:26:59.0617 6616 SaiMini (9e7e53891d1747a01f491ab25b95135d) C:\Windows\system32\DRIVERS\SaiMini.sys 16:26:59.0619 6616 SaiMini - ok 16:26:59.0643 6616 SaiNtBus (b3b86be19a0caf025f679c39fd21e735) C:\Windows\system32\drivers\SaiBus.sys 16:26:59.0645 6616 SaiNtBus - ok 16:26:59.0674 6616 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys 16:26:59.0677 6616 sbp2port - ok 16:26:59.0733 6616 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 16:26:59.0735 6616 secdrv - ok 16:26:59.0749 6616 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys 16:26:59.0751 6616 Serenum - ok 16:26:59.0788 6616 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys 16:26:59.0790 6616 Serial - ok 16:26:59.0815 6616 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys 16:26:59.0816 6616 sermouse - ok 16:26:59.0847 6616 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys 16:26:59.0848 6616 sffdisk - ok 16:26:59.0867 6616 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys 16:26:59.0868 6616 sffp_mmc - ok 16:26:59.0897 6616 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys 16:26:59.0898 6616 sffp_sd - ok 16:26:59.0928 6616 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys 16:26:59.0930 6616 sfloppy - ok 16:26:59.0958 6616 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys 16:26:59.0960 6616 SiSRaid2 - ok 16:26:59.0982 6616 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys 16:26:59.0984 6616 SiSRaid4 - ok 16:27:00.0016 6616 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys 16:27:00.0018 6616 Smb - ok 16:27:00.0057 6616 speedfan - ok 16:27:00.0097 6616 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys 16:27:00.0098 6616 spldr - ok 16:27:00.0162 6616 sptd (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys 16:27:00.0162 6616 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb 16:27:00.0164 6616 sptd ( LockedFile.Multi.Generic ) - warning 16:27:00.0164 6616 sptd - detected LockedFile.Multi.Generic (1) 16:27:00.0220 6616 SRTSP (91d64a876db6d09d9fcac0505c13195a) C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSP64.SYS 16:27:00.0230 6616 SRTSP - ok 16:27:00.0250 6616 SRTSPX (19025dee181e66e345887c2bed0165b5) C:\Windows\system32\drivers\NISx64\1000000.07D\SRTSPX64.SYS 16:27:00.0252 6616 SRTSPX - ok 16:27:00.0290 6616 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys 16:27:00.0296 6616 srv - ok 16:27:00.0317 6616 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys 16:27:00.0320 6616 srv2 - ok 16:27:00.0348 6616 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys 16:27:00.0352 6616 srvnet - ok 16:27:00.0412 6616 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys 16:27:00.0413 6616 swenum - ok 16:27:00.0443 6616 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys 16:27:00.0446 6616 Symc8xx - ok 16:27:00.0478 6616 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys 16:27:00.0480 6616 Sym_hi - ok 16:27:00.0504 6616 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys 16:27:00.0505 6616 Sym_u3 - ok 16:27:00.0605 6616 Tcpip (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\drivers\tcpip.sys 16:27:00.0627 6616 Tcpip - ok 16:27:00.0656 6616 Tcpip6 (4dad14118fbcf7c609f2a4ce21fbcc5f) C:\Windows\system32\DRIVERS\tcpip.sys 16:27:00.0664 6616 Tcpip6 - ok 16:27:00.0689 6616 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys 16:27:00.0691 6616 tcpipreg - ok 16:27:00.0712 6616 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys 16:27:00.0714 6616 TDPIPE - ok 16:27:00.0729 6616 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys 16:27:00.0730 6616 TDTCP - ok 16:27:00.0762 6616 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys 16:27:00.0765 6616 tdx - ok 16:27:00.0795 6616 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys 16:27:00.0796 6616 TermDD - ok 16:27:00.0841 6616 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys 16:27:00.0843 6616 tssecsrv - ok 16:27:00.0875 6616 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys 16:27:00.0876 6616 tunmp - ok 16:27:00.0921 6616 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys 16:27:00.0922 6616 tunnel - ok 16:27:00.0942 6616 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys 16:27:00.0944 6616 uagp35 - ok 16:27:00.0999 6616 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys 16:27:01.0004 6616 udfs - ok 16:27:01.0033 6616 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys 16:27:01.0035 6616 uliagpkx - ok 16:27:01.0065 6616 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys 16:27:01.0070 6616 uliahci - ok 16:27:01.0098 6616 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys 16:27:01.0101 6616 UlSata - ok 16:27:01.0116 6616 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys 16:27:01.0119 6616 ulsata2 - ok 16:27:01.0190 6616 UltraMonUtility (694bcf23662f97d987cf4c6739c35f8b) C:\Program Files (x86)\Common Files\Realtime Soft\UltraMonMirrorDrv\x64\UltraMonUtility.sys 16:27:01.0191 6616 UltraMonUtility - ok 16:27:01.0252 6616 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys 16:27:01.0254 6616 umbus - ok 16:27:01.0330 6616 USBAAPL64 (54d4b48d443e7228bf64cf7cdc3118ac) C:\Windows\system32\Drivers\usbaapl64.sys 16:27:01.0332 6616 USBAAPL64 - ok 16:27:01.0365 6616 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys 16:27:01.0367 6616 usbaudio - ok 16:27:01.0403 6616 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys 16:27:01.0405 6616 usbccgp - ok 16:27:01.0434 6616 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys 16:27:01.0436 6616 usbcir - ok 16:27:01.0472 6616 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys 16:27:01.0474 6616 usbehci - ok 16:27:01.0512 6616 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys 16:27:01.0517 6616 usbhub - ok 16:27:01.0548 6616 usbohci (e406b003a354776d317762694956b0fc) C:\Windows\system32\DRIVERS\usbohci.sys 16:27:01.0549 6616 usbohci - ok 16:27:01.0592 6616 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys 16:27:01.0593 6616 usbprint - ok 16:27:01.0623 6616 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS 16:27:01.0624 6616 USBSTOR - ok 16:27:01.0638 6616 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys 16:27:01.0640 6616 usbuhci - ok 16:27:01.0694 6616 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys 16:27:01.0697 6616 usbvideo - ok 16:27:01.0721 6616 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys 16:27:01.0723 6616 vga - ok 16:27:01.0743 6616 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys 16:27:01.0744 6616 VgaSave - ok 16:27:01.0769 6616 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys 16:27:01.0771 6616 viaide - ok 16:27:01.0798 6616 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys 16:27:01.0800 6616 volmgr - ok 16:27:01.0858 6616 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys 16:27:01.0868 6616 volmgrx - ok 16:27:01.0898 6616 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys 16:27:01.0903 6616 volsnap - ok 16:27:01.0934 6616 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys 16:27:01.0936 6616 vsmraid - ok 16:27:01.0959 6616 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys 16:27:01.0961 6616 WacomPen - ok 16:27:01.0994 6616 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 16:27:01.0996 6616 Wanarp - ok 16:27:02.0001 6616 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 16:27:02.0002 6616 Wanarpv6 - ok 16:27:02.0022 6616 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys 16:27:02.0023 6616 Wd - ok 16:27:02.0051 6616 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys 16:27:02.0070 6616 Wdf01000 - ok 16:27:02.0154 6616 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys 16:27:02.0155 6616 WmiAcpi - ok 16:27:02.0229 6616 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys 16:27:02.0231 6616 WpdUsb - ok 16:27:02.0262 6616 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys 16:27:02.0264 6616 ws2ifsl - ok 16:27:02.0290 6616 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys 16:27:02.0293 6616 WUDFRd - ok 16:27:02.0346 6616 MBR (0x1B8) (ef932eaa6ef4c94e66a7f6ceec7eb422) \Device\Harddisk0\DR0 16:27:02.0905 6616 \Device\Harddisk0\DR0 - ok 16:27:03.0369 6616 MBR (0x1B8) (671b81004fdd1588fa9ed1331c9ceca9) \Device\Harddisk5\DR5 16:27:03.0375 6616 \Device\Harddisk5\DR5 - ok 16:27:03.0392 6616 Boot (0x1200) (292c85cb091b8a5addbc40a69113d262) \Device\Harddisk0\DR0\Partition0 16:27:03.0405 6616 \Device\Harddisk0\DR0\Partition0 - ok 16:27:03.0409 6616 Boot (0x1200) (88a65c74a97b615466a94ac55c5673bc) \Device\Harddisk5\DR5\Partition0 16:27:03.0409 6616 \Device\Harddisk5\DR5\Partition0 - ok 16:27:03.0411 6616 ============================================================ 16:27:03.0411 6616 Scan finished 16:27:03.0411 6616 ============================================================ 16:27:03.0424 6412 Detected object count: 1 16:27:03.0424 6412 Actual detected object count: 1 16:27:20.0793 6412 sptd ( LockedFile.Multi.Generic ) - skipped by user 16:27:20.0793 6412 sptd ( LockedFile.Multi.Generic ) - User select action: Skip |
|
| Themen zu Temporär sehr hoher Upload; Captchas bei Google; langsame Verbindung; evtl. in ein Botnet geraten? |
| aktiv, andere, anfrage, bot, botnet, bytes, captcha, captchas, erhalte, firefox, frage, fragen, google, hoffe, hohe, hoher upload, langsame verbindung, langsamer, min, plötzlich, problem, prozesse, ständige, suche, task-manager, temporär, upload, uploads, verbindung, verwenden |
Linear-Darstellung
