|
Plagegeister aller Art und deren Bekämpfung: Firefox startet nicht, Taskmanager hängt extremWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
22.12.2011, 21:08 | #1 |
| Firefox startet nicht, Taskmanager hängt extrem Hey Leute, ich hoffe ihr könnt mir helfen. Ich hab die Boardsuche benutzt und auch Google, aber ich bin zu keinem Ergebniss gekommen. Ich schildere kurz das Problem: Wenn ich meinen Taskmanager öffne, dann dauert es schonma 3-5 Sekunden bis sich überhaupt irgendwas tut, zuerst öffnet sich das Fenster und dann kommt das Icon in der Taskleiste langsam hinterher. So weit, so gut, aber der Manager hängt extrem und braucht allein 30 Sekunden bis er die Prozesse geladen hat und auf Klicken mit der Maus reagiert er auch erst 5-10 Sekunden später. Und dann hab ich neuerdings auch noch ein Problem mit Firefox, ich kann 1000 Mal auf die Verknüpfung klicken und es tut sich nichts, außerdem hat der PC ab und zu kurze hänger und die Systemauslastung steigt an. Könnt ihr mir helfen, ich verzweifel noch mit dem Ding.. Danke schonmal im Voraus. |
22.12.2011, 21:38 | #2 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem hi
__________________Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex netsvcs msconfig %SYSTEMDRIVE%\*. %PROGRAMFILES%\*.exe %LOCALAPPDATA%\*.exe %systemroot%\*. /mp /s /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll winlogon.exe logevent.dll user32.DLL explorer.exe iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\system32\*.dll /lockedfiles %USERPROFILE%\*.* %USERPROFILE%\Local Settings\Temp\*.exe %USERPROFILE%\Local Settings\Temp\*.dll %USERPROFILE%\Application Data\*.exe HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs CREATERESTOREPOINT
__________________ |
22.12.2011, 23:08 | #3 |
| Firefox startet nicht, Taskmanager hängt extrem Extras.txt
__________________Code:
ATTFilter OTL Extras logfile created on: 22.12.2011 22:13:29 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Dell\Desktop Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 70,69% Memory free 5,99 Gb Paging File | 4,91 Gb Available in Paging File | 82,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 455,59 Gb Total Space | 249,10 Gb Free Space | 54,68% Space Free | Partition Type: NTFS Drive D: | 232,88 Gb Total Space | 186,31 Gb Free Space | 80,00% Space Free | Partition Type: NTFS Drive E: | 10,00 Gb Total Space | 2,78 Gb Free Space | 27,76% Space Free | Partition Type: NTFS Computer Name: DELL-STUDIO | User Name: Dell | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{1226B9A5-FBFD-4120-9AED-08CABCDAF3AB}" = Nokia Ovi Player "{1E11EE30-C0D4-46BC-9142-27EB4C37BE35}" = Angry Birds "{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011 "{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10 "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 29 "{2A0A6470-FD0F-4F45-9B11-85F3167DB943}" = Nokia Flashing Cable Driver "{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch "{340A2AD6-0679-46DA-9180-DABBD5B36FD1}" = BitDefender Total Security 2011 "{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch "{39DB116F-E088-486F-B13C-8925ECE7A6E5}" = 3D Sound Back Beta0.1 "{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Überwachungstool für die Intel® Turbo-Boost-Technik "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3DAD83B9-4C8B-4AC6-BF5E-B9FB181CCBE8}" = Nokia Service Tool Drivers "{4216D328-0FE8-48B8-85B8-BD300E6F080F}" = Nokia Connectivity Cable Driver "{4343080E-91B7-4388-AB4D-FB1000008200}" = Dead Rising 2 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM) "{54194F60-988C-4D03-B922-C2B00EFDA39A}" = NVIDIA PhysX "{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI "{54B7A3C7-0940-4C16-A509-FC3C3758D22A}_is1" = Amnesia - The Dark Descent "{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM) "{576CA494-F771-4B10-9AF0-8ED4A7AFB0CC}_is1" = Amnesia - The Dark Descent Demo "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime "{5A32C25A-7E99-4A77-B419-B47DA290DD67}" = Phoenix Service Software "{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth "{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}" = TuneUp Utilities Language Pack (de-DE) "{5E1375CB-6792-4464-8715-CC3EC83D48FA}" = VirtualDJ Home FREE "{5F4B9958-F507-449A-A6E1-FD223314AF5A}" = TMPGEnc 4.0 XPress Testversion "{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update "{66A405D2-BA14-4594-BF36-B3B544F0754E}" = Stronghold Legends "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10 "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10 "{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support "{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable "{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}" = Microsoft IntelliPoint 8.2 "{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6 "{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch "{986A654F-F1E4-11DD-9FCA-005056C00008}" = Paragon Partition Manager™ 11 Personal Demo "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box "{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM) "{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Deutsch "{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™ "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B547567F-6BD1-3E76-E945-9DA067EF5AAA}" = AMD Catalyst Install Manager "{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3 "{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support "{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch "{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars "{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}" = PC Connectivity Solution "{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "{D8A39D68-A269-45C2-8730-23AA08F75D64}" = O2Micro Flash Memory Card Windows Driver "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E4423F16-0E98-4855-BFF4-3EF016C55D67}" = Nokia_Multimedia_Common_Components_2_5 "{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F38FD0E4-B991-462B-873D-F2115EADD093}" = Nokia PC Suite "{F59A9E08-A6A4-4ACF-91F2-D0344956C30B}" = iTunes "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE "{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10 "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) "6DA48AFDE796708D5A4C9121A83E7617A63A9A15" = Windows-Treiberpaket - Nokia Modem (10/07/2010 4.6) "7-Zip" = 7-Zip 9.20 "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "AnyDVD" = AnyDVD "Audacity_is1" = Audacity 1.2.6 "Aura DVD Ripper Professional_is1" = Aura DVD Ripper Professional 1.3.3 "Aura Software Manager_is1" = Aura Software Manager 1.0.3 "AviSynth" = AviSynth 2.5 "BitDefender" = BitDefender Total Security 2011 "Call of Duty Black Ops GERMAN Uncut 1.00" = Call of Duty Black Ops GERMAN Uncut 1.00 "CrystalDiskInfo_is1" = CrystalDiskInfo 3.10.0 "CyberGhost VPN_is1" = CyberGhost VPN "Demo von StarCraft II" = Demo von StarCraft II "DESkey DK2 Uninstall" = DK2 Drivers v 6.21.0.169 "DivX Setup.divx.com" = DivX-Setup "E5372C32E8562C76C24DBA6525002B1031495F34" = Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.8) "FileZilla Client" = FileZilla Client 3.5.0 "Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition "FLSINST" = FLS-4 Driver Installation "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7 "Free iPod Video Converter_is1" = Free iPod Video Converter 1.34 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.40.602 "GCFScape_is1" = GCFScape 1.8.2 "GFWL_{4343080E-91B7-4388-AB4D-FB1000008200}" = Dead Rising 2 "InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty(R) - World at War(TM) 1.2 Patch "InstallShield_{3521F7CF-9343-4C1F-AE5E-0D2A57A18D2B}" = Call of Duty(R) - World at War(TM) 1.5 Patch "InstallShield_{97EE1BAC-C04F-4935-8110-B1BBAB99D09D}" = Call of Duty(R) - World at War(TM) 1.4.1 Patch "InstallShield_{CC862A04-B2B0-4A79-ADD2-4B76D6CF4DCD}" = Call of Duty(R) - World at War(TM) 1.4 Patch "InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM) "InstallShield_{D8A39D68-A269-45C2-8730-23AA08F75D64}" = O2Micro Flash Memory Card Windows Driver "JDownloader" = JDownloader "LAME for Audacity_is1" = LAME v3.98.3 for Audacity "LameACM" = LameACM "MAGIX Fotobuch" = MAGIX Fotobuch 3.6 "MAGIX Online Druck Service D" = MAGIX Online Druck Service 3.4.3.0 (D) "MAGIX Screenshare D" = MAGIX Screenshare 4.3.6.1987 (D) "MAGIX Xtreme Web Designer 5 D" = MAGIX Xtreme Web Designer 5 5.0.1.8579 (D) "McAfee Security Scan" = McAfee Security Scan Plus "Media Converter SA Edition" = Media Converter SA Edition 0.8 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2 "Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de) "Nokia PC Suite" = Nokia PC Suite "NSS" = Norton Security Scan "Opera 11.60.1185" = Opera 11.60 "Phoenix Service Software 2009.20.010.39068_is1" = Phoenix Service Software 2009.20.010.39068 "PowerISO" = PowerISO "Sauerbraten" = Sauerbraten "Serious Sam HD The First Encounter_is1" = Serious Sam HD The First Encounter "Steam App 40950" = Stronghold "Steam App 47400" = Stronghold 3 "Steam App 57940" = Duke Nukem Forever Demo "Steam App 620" = Portal 2 "SWiSH Max4" = SWiSH Max4 "TuneUp Utilities 2011" = TuneUp Utilities 2011 "Uninstall_is1" = Uninstall 1.0.0.1 "Videora Nokia 5800 XpressMusic Converter" = Videora Nokia 5800 XpressMusic Converter 6 "Virtual DJ Home - Atomix Productions" = Virtual DJ Home - Atomix Productions "VLC media player" = VLC media player 1.1.11 "WBFS Manager 3.0" = WBFS Manager 3.0 "WinGimp-2.0_is1" = GIMP 2.6.11 "WinRAR archiver" = WinRAR "WMV9_VCM" = Microsoft Windows Media Video 9 VCM ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{EF36A836-BF89-4A4F-B079-057B0C68C1E0}" = Sid Meier's Civilization IV Colonization "f018cf21c0452c64" = AVM FRITZ!Box USB-Fernanschluss "Tropico 4 Demo" = Tropico 4 Demo 1.00 ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 21.12.2011 14:02:23 | Computer Name = Dell-Studio | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Nokia\Nokia PC Suite 7\TIS_Windows7PIM.dll". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 21.12.2011 14:05:15 | Computer Name = Dell-Studio | Source = SideBySide | ID = 16842815 Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program files\spybot - search & destroy\DelZip179.dll" in Zeile 8. Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig. Error - 21.12.2011 17:30:55 | Computer Name = Dell-Studio | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: opera.exe, Version: 11.52.1100.0, Zeitstempel: 0x4e9c6c1d Name des fehlerhaften Moduls: Opera.dll, Version: 11.52.1100.0, Zeitstempel: 0x4e9c79de Ausnahmecode: 0xc0000005 Fehleroffset: 0x00673ea6 ID des fehlerhaften Prozesses: 0x137c Startzeit der fehlerhaften Anwendung: 0x01ccbff2eaf003b3 Pfad der fehlerhaften Anwendung: C:\Program Files\Opera\opera.exe Pfad des fehlerhaften Moduls: C:\Program Files\Opera\Opera.dll Berichtskennung: 103fb50a-2c1b-11e1-af40-0021708d5458 Error - 22.12.2011 11:48:53 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002 Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1278 Startzeit: 01ccc0c12d0d943b Endzeit: 13 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: 70a8f56a-2cb4-11e1-af40-0021708d5458 Error - 22.12.2011 13:00:02 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002 Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1f4 Startzeit: 01ccc0caef93fc35 Endzeit: 130 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: 61312b9e-2cbe-11e1-af40-0021708d5458 Error - 22.12.2011 13:05:09 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002 Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 101c Startzeit: 01ccc0cbaea14ca1 Endzeit: 38 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: 18838f1f-2cbf-11e1-af40-0021708d5458 Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = VSS | ID = 18 Description = Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = VSS | ID = 8193 Description = Error - 22.12.2011 15:39:33 | Computer Name = Dell-Studio | Source = System Restore | ID = 8193 Description = Error - 22.12.2011 15:56:13 | Computer Name = Dell-Studio | Source = Application Hang | ID = 1002 Description = Programm taskmgr.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: cf0 Startzeit: 01ccc0e3bb599b0c Endzeit: 187 Anwendungspfad: C:\Windows\system32\taskmgr.exe Berichts-ID: ff220e02-2cd6-11e1-b5e4-0021708d5458 [ System Events ] Error - 22.12.2011 15:51:47 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:51:48 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 22.12.2011 15:53:49 | Computer Name = Dell-Studio | Source = atikmdag | ID = 52236 Description = CPLIB :: General - Invalid Parameter Error - 22.12.2011 15:53:49 | Computer Name = Dell-Studio | Source = atikmdag | ID = 43029 Description = Display is not active Error - 22.12.2011 15:54:44 | Computer Name = Dell-Studio | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 [ TuneUp Events ] Error - 15.12.2011 17:28:05 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 15.12.2011 17:28:06 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300 Description = Error - 15.12.2011 17:28:06 | Computer Name = Dell-Studio | Source = TuneUp.UtilitiesSvc | ID = 300 Description = < End of report > |
22.12.2011, 23:12 | #4 |
| Firefox startet nicht, Taskmanager hängt extrem OTL.txt Code:
ATTFilter OTL logfile created on: 22.12.2011 22:13:29 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Dell\Desktop Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 70,69% Memory free 5,99 Gb Paging File | 4,91 Gb Available in Paging File | 82,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 455,59 Gb Total Space | 249,10 Gb Free Space | 54,68% Space Free | Partition Type: NTFS Drive D: | 232,88 Gb Total Space | 186,31 Gb Free Space | 80,00% Space Free | Partition Type: NTFS Drive E: | 10,00 Gb Total Space | 2,78 Gb Free Space | 27,76% Space Free | Partition Type: NTFS Computer Name: DELL-STUDIO | User Name: Dell | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe PRC - [2011.12.21 08:42:28 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe PRC - [2011.08.01 14:56:42 | 001,821,576 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\ipoint.exe PRC - [2011.08.01 14:56:42 | 000,412,552 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft IntelliPoint\dpupdchk.exe PRC - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\vsserv.exe PRC - [2011.07.17 13:01:04 | 001,451,928 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\bdagent.exe PRC - [2011.06.18 10:16:04 | 000,064,048 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\pchooklaunch32.exe PRC - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) -- C:\Programme\BitDefender\BitDefender 2011\updatesrv.exe PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011.03.30 18:49:44 | 000,671,552 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe PRC - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe PRC - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) -- C:\Programme\Nero\Update\NASvc.exe PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010.11.20 13:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009.08.18 02:36:36 | 000,348,160 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe PRC - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe PRC - [2009.03.05 15:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe ========== Modules (No Company Name) ========== MOD - [2011.12.21 08:42:28 | 002,124,760 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll MOD - [2011.07.17 13:01:05 | 000,185,040 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\framework.dll MOD - [2011.06.18 10:14:24 | 000,109,344 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\connector.dll MOD - [2011.06.18 10:14:05 | 000,189,184 | ---- | M] () -- C:\Programme\BitDefender\BitDefender 2011\txmlutil.dll MOD - [2011.05.22 18:21:36 | 000,093,696 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll MOD - [2010.03.15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll ========== Win32 Services (SafeList) ========== SRV - [2011.12.10 12:23:11 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011.07.17 13:01:18 | 002,090,016 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe -- (VSSERV) SRV - [2011.07.05 10:28:46 | 002,428,968 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Programme\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc) SRV - [2011.06.18 10:12:23 | 000,043,936 | ---- | M] (BitDefender S.R.L.) [Auto | Running] -- C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe -- (Updatesrv) SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.03.30 18:48:00 | 001,523,008 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc) SRV - [2011.03.30 18:45:32 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp) SRV - [2011.03.04 10:39:14 | 000,584,488 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2011.02.22 21:25:17 | 000,307,544 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Programme\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe -- (Update Server) SRV - [2010.12.08 13:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009.11.02 12:48:12 | 000,099,728 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV - [2009.08.18 02:36:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2009.07.14 02:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009.01.26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2005.11.17 14:18:52 | 001,527,900 | ---- | M] (MAGIX®) [Disabled | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance) ========== Driver Services (SafeList) ========== DRV - [2011.12.02 18:38:08 | 000,199,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService) DRV - [2011.09.08 09:23:34 | 000,211,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService) DRV - [2011.08.01 14:56:42 | 000,045,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB) DRV - [2011.06.30 18:18:56 | 000,122,552 | ---- | M] (BitDefender LLC) [Kernel | On_Demand | Running] -- C:\Programme\BitDefender\BitDefender 2011\bdselfpr.sys -- (bdselfpr) DRV - [2011.06.25 17:18:22 | 000,010,454 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\parldr2k.sys -- (PARLDR2K) DRV - [2011.06.25 16:28:29 | 000,033,402 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsvcom.sys -- (FLSVCOM) DRV - [2011.06.25 16:28:29 | 000,008,344 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsser.sys -- (FLSSER) DRV - [2011.06.25 16:28:28 | 000,033,404 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\fle5wnnt.sys -- (FLE5WNNT) DRV - [2011.06.25 16:28:28 | 000,016,314 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flspar.sys -- (FLSPAR) DRV - [2011.06.25 16:28:28 | 000,013,440 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\flsiface.sys -- (FLSIFACE) DRV - [2011.06.18 09:12:52 | 000,306,320 | ---- | M] (BitDefender S.R.L.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\trufos.sys -- (Trufos) DRV - [2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\bdfsfltr.sys -- (bdfsfltr) DRV - [2011.03.25 03:57:58 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbohci.sys -- (usbohci) DRV - [2011.02.10 10:22:58 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv) DRV - [2011.02.03 20:52:56 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\avmaudio.sys -- (avmaudio) DRV - [2010.12.02 11:13:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2010.12.02 11:13:22 | 000,018,304 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010.12.02 09:36:42 | 000,137,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2010.12.02 09:36:42 | 000,008,576 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc) DRV - [2010.12.01 20:06:29 | 000,108,104 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD) DRV - [2010.11.20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus) DRV - [2010.11.20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt) DRV - [2010.11.20 13:30:15 | 000,028,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc) DRV - [2010.11.20 13:30:14 | 000,160,128 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vhdmp.sys -- (vhdmp) DRV - [2010.11.20 13:30:12 | 000,053,120 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\termdd.sys -- (TermDD) DRV - [2010.11.20 13:30:10 | 000,085,376 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sbp2port.sys -- (sbp2port) DRV - [2010.11.20 13:30:05 | 000,233,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msiscsi.sys -- (iScsiPrt) DRV - [2010.11.20 13:30:04 | 000,116,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\msdsm.sys -- (msdsm) DRV - [2010.11.20 13:30:01 | 000,130,432 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\mpio.sys -- (mpio) DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010.11.20 11:01:12 | 000,164,864 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\1394ohci.sys -- (1394ohci) DRV - [2010.11.20 11:00:24 | 000,039,936 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\umbus.sys -- (umbus) DRV - [2010.11.20 11:00:21 | 000,304,128 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\HdAudio.sys -- (HdAudAddService) DRV - [2010.11.20 11:00:21 | 000,146,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\usbvideo.sys -- (usbvideo) USB-Videogerät (WDM) DRV - [2010.11.20 10:59:46 | 000,027,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbser.sys -- (usbser) DRV - [2010.11.20 10:59:44 | 000,080,768 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbaudio.sys -- (usbaudio) USB-Audiotreiber (WDM) DRV - [2010.11.20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010.11.20 10:50:21 | 000,031,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\CompositeBus.sys -- (CompositeBus) DRV - [2010.11.20 10:50:10 | 000,028,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\kbdhid.sys -- (kbdhid) DRV - [2010.11.20 10:19:15 | 000,065,536 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\IPMIDrv.sys -- (IPMIDRV) DRV - [2010.11.20 10:14:45 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010.11.20 10:14:41 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap) DRV - [2010.11.20 09:54:02 | 000,084,992 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\sdbus.sys -- (sdbus) DRV - [2010.11.20 09:47:55 | 000,010,240 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\acpipmi.sys -- (AcpiPmi) DRV - [2010.08.20 17:41:54 | 000,088,144 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys -- (bdfwfpf) DRV - [2010.08.20 14:41:58 | 000,072,784 | ---- | M] (BitDefender) [Kernel | System | Running] -- c:\Programme\Common Files\BitDefender\BitDefender Firewall\bdfndisf6.sys -- (Bdfndisf) DRV - [2010.07.30 13:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2010.07.30 13:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010.06.28 11:55:42 | 000,970,320 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avckf.sys -- (avckf) DRV - [2010.06.28 11:55:36 | 000,633,424 | ---- | M] (BitDefender) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\avc3.sys -- (avc3) DRV - [2010.05.28 12:24:56 | 000,040,560 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\hotcore3.sys -- (hotcore3) DRV - [2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bdfm.sys -- (BDFM) DRV - [2010.02.25 16:51:02 | 000,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901) DRV - [2010.01.19 18:32:40 | 000,085,128 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\Windows\System32\drivers\bdvedisk.sys -- (Bdvedisk) DRV - [2009.11.02 12:45:44 | 000,014,808 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TurboB.sys -- (TurboB) DRV - [2009.08.18 03:48:06 | 004,994,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\agp440.sys -- (agp440) DRV - [2009.07.14 02:26:15 | 000,014,912 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\amdide.sys -- (amdide) DRV - [2009.07.14 02:20:45 | 000,012,368 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\pciide.sys -- (pciide) DRV - [2009.07.14 02:20:44 | 000,105,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\nv_agp.sys -- (nv_agp) DRV - [2009.07.14 02:20:44 | 000,028,240 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\drivers\mssmbios.sys -- (mssmbios) DRV - [2009.07.14 02:20:36 | 000,046,656 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\isapnp.sys -- (isapnp) DRV - [2009.07.14 02:20:36 | 000,042,576 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\kbdclass.sys -- (kbdclass) DRV - [2009.07.14 02:20:36 | 000,015,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\intelide.sys -- (intelide) DRV - [2009.07.14 02:20:28 | 000,057,936 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\gagp30kx.sys -- (gagp30kx) DRV - [2009.07.14 02:20:28 | 000,022,096 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\system32\DRIVERS\crcdisk.sys -- (crcdisk) DRV - [2009.07.14 02:19:11 | 000,057,424 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\uliagpkx.sys -- (uliagpkx) DRV - [2009.07.14 02:19:11 | 000,019,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wd.sys -- (Wd) DRV - [2009.07.14 02:19:10 | 000,055,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\uagp35.sys -- (uagp35) DRV - [2009.07.14 02:19:10 | 000,053,328 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\viaagp.sys -- (viaagp) DRV - [2009.07.14 02:19:10 | 000,012,240 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\swenum.sys -- (swenum) DRV - [2009.07.14 02:19:03 | 000,180,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\pcmcia.sys -- (pcmcia) DRV - [2009.07.14 00:51:35 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\umpass.sys -- (UmPass) DRV - [2009.07.14 00:51:34 | 000,056,320 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\bthmodem.sys -- (BTHMODEM) DRV - [2009.07.14 00:51:33 | 000,091,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidbth.sys -- (HidBth) DRV - [2009.07.14 00:51:29 | 000,062,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\ohci1394.sys -- (ohci1394) OHCI-konformer 1394-Hostcontroller (alt) DRV - [2009.07.14 00:51:18 | 000,086,016 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\usbcir.sys -- (usbcir) eHome-Infrarotempfänger (USBCIR) DRV - [2009.07.14 00:51:17 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\circlass.sys -- (circlass) DRV - [2009.07.14 00:51:05 | 000,037,888 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\hidir.sys -- (HidIr) DRV - [2009.07.14 00:46:55 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\MTConfig.sys -- (MTConfig) DRV - [2009.07.14 00:46:53 | 000,021,632 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\wacompen.sys -- (WacomPen) DRV - [2009.07.14 00:45:52 | 000,013,824 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sfloppy.sys -- (sfloppy) DRV - [2009.07.14 00:45:52 | 000,012,288 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\sffp_mmc.sys -- (sffp_mmc) DRV - [2009.07.14 00:45:45 | 000,025,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\fdc.sys -- (fdc) DRV - [2009.07.14 00:45:45 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\flpydisk.sys -- (flpydisk) DRV - [2009.07.14 00:45:35 | 000,079,360 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\parport.sys -- (Parport) DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serial.sys -- (Serial) DRV - [2009.07.14 00:45:29 | 000,008,704 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\system32\DRIVERS\parvdm.sys -- (Parvdm) DRV - [2009.07.14 00:45:28 | 000,017,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serenum.sys -- (Serenum) DRV - [2009.07.14 00:45:08 | 000,019,968 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\sermouse.sys -- (sermouse) DRV - [2009.07.14 00:19:21 | 000,021,504 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\HidBatt.sys -- (HidBatt) DRV - [2009.07.14 00:19:19 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\errdev.sys -- (ErrDev) DRV - [2009.07.14 00:19:17 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\wmiacpi.sys -- (WmiAcpi) DRV - [2009.07.14 00:11:24 | 000,080,896 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\system32\drivers\i8042prt.sys -- (i8042prt) DRV - [2009.07.14 00:11:04 | 000,055,296 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdk8.sys -- (AmdK8) DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\viac7.sys -- (ViaC7) DRV - [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\amdppm.sys -- (AmdPPM) DRV - [2009.07.14 00:11:04 | 000,052,224 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\processr.sys -- (Processor) DRV - [2009.07.13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R) DRV - [2009.07.13 23:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM) DRV - [2008.08.26 08:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008.03.14 07:04:29 | 000,046,652 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2007.06.29 13:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AmdLLD.sys -- (AmdLLD) DRV - [2006.11.14 17:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2005.11.22 11:12:32 | 000,042,624 | ---- | M] (Data Encryption Systems Limited) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\dk2drv.sys -- (dk2drv) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 30 B8 89 93 F0 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Facemoods Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/||hxxp://www.facebook.com/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: FFToolbar@bitdefender.com:2.0 FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.03.11 23:37:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.03.11 23:37:19 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.22 18:05:10 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.09.19 14:54:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ [2011.10.11 18:02:35 | 000,000,000 | ---D | M] [2011.02.02 21:12:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Extensions [2011.12.20 16:50:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions [2011.02.03 18:42:09 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2011.11.12 18:25:33 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2011.12.20 16:50:37 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Dell\AppData\Roaming\mozilla\Firefox\Profiles\n7wz0213.default\extensions\foxyproxy@eric.h.jung [2011.12.22 18:05:09 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions () (No name found) -- C:\USERS\DELL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\N7WZ0213.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2011.12.21 08:42:29 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.10.03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011.12.21 06:08:50 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.12.21 06:02:40 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011.12.21 06:08:50 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2011.12.21 06:08:50 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011.12.21 06:08:50 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011.12.21 06:08:50 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2011.12.22 20:50:11 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O3 - HKLM\..\Toolbar: (Bitdefender Toolbar) - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Programme\BitDefender\BitDefender 2011\ietoolbar.dll (BitDefender S.R.L.) O4 - HKLM..\Run: [BDAgent] C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [BitDefender Antiphishing Helper] C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe (BitDefender S.R.L.) O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia) O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Dell\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://active.macromedia.com/flash2/cabs/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BD2B9DE0-579C-4040-BD43-B6F0EAC6852D}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C9423DBA-B676-4608-91BA-8ECDD0E96D9D}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software) NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.12.22 22:11:09 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe [2011.12.22 20:51:41 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Windows\temp [2011.12.22 20:51:38 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\temp [2011.12.22 20:39:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011.12.22 20:39:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011.12.22 20:39:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011.12.22 20:39:25 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011.12.22 20:36:14 | 004,348,814 | R--- | C] (Swearware) -- C:\ComboFix.exe [2011.12.22 20:30:07 | 000,000,000 | ---D | C] -- C:\Qoobox [2011.12.20 22:03:35 | 003,296,600 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEP32H.dll [2011.12.20 22:03:35 | 000,357,720 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEP32H.dll [2011.12.20 22:03:35 | 000,345,944 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EED32H.dll [2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DHT32.dll [2011.12.20 22:03:35 | 000,295,768 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RH3DAA32.dll [2011.12.20 22:03:35 | 000,170,840 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEED32H.dll [2011.12.20 22:03:35 | 000,103,256 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEL32H.dll [2011.12.20 22:03:35 | 000,088,408 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEA32H.dll [2011.12.20 22:03:35 | 000,076,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEL32H.dll [2011.12.20 22:03:35 | 000,064,856 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\System32\RTEEG32H.dll [2011.12.20 22:03:35 | 000,061,272 | ---- | C] (Dolby Laboratories) -- C:\Windows\System32\R4EEG32H.dll [2011.12.20 21:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\newfolder3 [2011.12.20 20:51:55 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2011.12.20 20:51:53 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp [2011.12.20 17:44:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2011.12.13 10:50:57 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\Zubehör [2011.12.11 11:52:26 | 000,000,000 | -HSD | C] -- C:\Users\Dell\Phone Browser [2011.12.10 14:42:11 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\Chromium [2011.12.08 15:46:25 | 000,000,000 | ---D | C] -- C:\Users\Dell\Desktop\sh3u56f [2011.12.08 15:20:42 | 000,000,000 | ---D | C] -- C:\Users\Dell\Documents\Stronghold 3 [2011.11.27 16:12:00 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Roaming\SWiSH Max4 [2011.11.27 16:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWiSH Max4 [2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameACM [2011.11.27 16:07:24 | 000,000,000 | ---D | C] -- C:\Program Files\LameACM [2011.11.27 16:06:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWiSHzone.com [2011.11.27 16:06:57 | 000,000,000 | ---D | C] -- C:\Program Files\SWiSH Max4 [2011.11.27 15:53:32 | 056,654,648 | ---- | C] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.12.22 22:12:30 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe [2011.12.22 21:39:16 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.12.22 21:01:42 | 000,014,832 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.12.22 20:59:25 | 000,705,096 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.12.22 20:59:25 | 000,660,374 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.12.22 20:59:25 | 000,151,424 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.12.22 20:59:25 | 000,124,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.12.22 20:54:21 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.12.22 20:53:55 | 000,000,434 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Dell.job [2011.12.22 20:53:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.12.22 20:53:41 | 2411,900,928 | -HS- | M] () -- C:\hiberfil.sys [2011.12.22 20:50:11 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2011.12.22 20:27:12 | 004,348,814 | R--- | M] (Swearware) -- C:\ComboFix.exe [2011.12.22 18:05:16 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2011.12.20 17:44:17 | 000,002,172 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2011.12.15 14:23:25 | 000,387,392 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.12.13 11:03:24 | 001,328,721 | ---- | M] () -- C:\Users\Dell\Desktop\iw3mp_17.rar [2011.12.13 10:50:52 | 002,399,568 | ---- | M] () -- C:\Users\Dell\Desktop\Zubehoer.rar [2011.12.10 17:45:23 | 000,641,127 | ---- | M] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip [2011.12.10 13:54:44 | 000,363,580 | ---- | M] () -- C:\Users\Dell\Desktop\loc.v [2011.12.08 15:46:22 | 001,204,704 | ---- | M] () -- C:\Users\Dell\Desktop\sh3u56f.rar [2011.12.06 20:23:34 | 005,615,808 | ---- | M] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3 [2011.11.27 16:07:26 | 000,000,982 | ---- | M] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk [2011.11.27 16:06:37 | 056,654,648 | ---- | M] (SWiSHzone.com) -- C:\Users\Dell\Desktop\SetupSwishmax4.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.12.22 20:39:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2011.12.22 20:39:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2011.12.22 20:39:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011.12.22 20:39:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011.12.22 20:39:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011.12.20 17:44:17 | 000,002,172 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2011.12.13 11:03:50 | 003,330,048 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp.exe [2011.12.13 11:03:12 | 001,328,721 | ---- | C] () -- C:\Users\Dell\Desktop\iw3mp_17.rar [2011.12.13 10:50:29 | 002,399,568 | ---- | C] () -- C:\Users\Dell\Desktop\Zubehoer.rar [2011.12.11 11:52:50 | 003,515,964 | ---- | C] () -- C:\Users\Dell\Desktop\Rihanna feat. Calvin Harris - We Found Love.mp3 [2011.12.10 17:45:20 | 000,641,127 | ---- | C] () -- C:\Users\Dell\Desktop\PeZBOT_002p_-_World_at_War.zip [2011.12.10 15:03:05 | 000,363,580 | ---- | C] () -- C:\Users\Dell\Desktop\loc.v [2011.12.08 15:46:10 | 001,204,704 | ---- | C] () -- C:\Users\Dell\Desktop\sh3u56f.rar [2011.12.06 20:17:23 | 005,615,808 | ---- | C] () -- C:\Users\Dell\Desktop\Taio_Cruz_ft._Flo_Rida_-_Hangover_Hardwell_Extende....mp3 [2011.11.27 16:07:26 | 000,000,982 | ---- | C] () -- C:\Users\Public\Desktop\SWiSH Max4.lnk [2011.09.27 17:51:24 | 000,007,615 | ---- | C] () -- C:\Users\Dell\AppData\Local\Resmon.ResmonCfg [2011.07.28 16:49:12 | 000,053,760 | ---- | C] () -- C:\Windows\System32\OVDecode.dll [2011.06.25 16:28:34 | 000,000,064 | ---- | C] () -- C:\Windows\FLS1.INI [2011.06.25 16:28:29 | 000,081,920 | ---- | C] () -- C:\Windows\System32\FLSDEVCP.EXE [2011.06.25 16:28:27 | 001,695,744 | ---- | C] () -- C:\Windows\System32\flsinst.dll [2011.06.25 16:28:27 | 000,004,122 | ---- | C] () -- C:\Windows\System32\flsinst.ini [2011.06.23 20:20:14 | 000,233,344 | ---- | C] () -- C:\Windows\System32\drivers\msiscsi.sys [2011.06.23 20:19:54 | 000,164,864 | ---- | C] () -- C:\Windows\System32\drivers\1394ohci.sys [2011.06.23 20:19:52 | 000,116,096 | ---- | C] () -- C:\Windows\System32\drivers\msdsm.sys [2011.06.23 20:19:49 | 000,053,120 | ---- | C] () -- C:\Windows\System32\drivers\termdd.sys [2011.06.23 20:19:47 | 000,085,376 | ---- | C] () -- C:\Windows\System32\drivers\sbp2port.sys [2011.06.23 20:19:45 | 000,160,128 | ---- | C] () -- C:\Windows\System32\drivers\vhdmp.sys [2011.06.23 20:19:39 | 000,146,432 | ---- | C] () -- C:\Windows\System32\drivers\usbvideo.sys [2011.06.23 20:19:39 | 000,130,432 | ---- | C] () -- C:\Windows\System32\drivers\mpio.sys [2011.06.23 20:19:37 | 000,028,032 | ---- | C] () -- C:\Windows\System32\drivers\storvsc.sys [2011.06.23 20:19:27 | 000,084,992 | ---- | C] () -- C:\Windows\System32\drivers\sdbus.sys [2011.06.23 20:19:23 | 000,080,768 | ---- | C] () -- C:\Windows\System32\drivers\USBAUDIO.sys [2011.06.23 20:19:18 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2011.06.23 20:19:17 | 000,031,232 | ---- | C] () -- C:\Windows\System32\drivers\CompositeBus.sys [2011.06.23 20:19:15 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\VMBusHID.sys [2011.06.23 20:19:15 | 000,010,240 | ---- | C] () -- C:\Windows\System32\drivers\acpipmi.sys [2011.06.23 20:19:14 | 000,065,536 | ---- | C] () -- C:\Windows\System32\drivers\IPMIDrv.sys [2011.06.23 20:19:14 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\kbdhid.sys [2011.06.23 20:19:14 | 000,027,648 | ---- | C] () -- C:\Windows\System32\drivers\usbser.sys [2011.06.23 20:19:13 | 000,304,128 | ---- | C] () -- C:\Windows\System32\drivers\HdAudio.sys [2011.06.23 20:19:13 | 000,108,544 | ---- | C] () -- C:\Windows\System32\drivers\hdaudbus.sys [2011.06.23 20:19:13 | 000,039,936 | ---- | C] () -- C:\Windows\System32\drivers\umbus.sys [2011.06.23 20:19:11 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\vms3cap.sys [2011.05.11 14:05:49 | 000,020,480 | ---- | C] () -- C:\Windows\System32\drivers\usbohci.sys [2011.04.27 21:23:36 | 000,143,744 | ---- | C] () -- C:\Windows\System32\drivers\nvstor.sys [2011.04.27 21:23:36 | 000,117,120 | ---- | C] () -- C:\Windows\System32\drivers\nvraid.sys [2011.04.27 21:23:36 | 000,080,256 | ---- | C] () -- C:\Windows\System32\drivers\amdsata.sys [2011.04.27 21:23:35 | 000,332,160 | ---- | C] () -- C:\Windows\System32\drivers\iaStorV.sys [2011.04.15 20:21:54 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll [2011.04.15 20:21:34 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini [2011.04.14 20:17:29 | 000,000,259 | ---- | C] () -- C:\Windows\WinInit.Ini [2011.03.13 20:37:56 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib [2011.02.02 23:08:15 | 000,000,016 | ---- | C] () -- C:\Windows\System32\asdict.dat [2011.02.02 22:44:14 | 000,063,007 | ---- | C] () -- C:\ProgramData\bdinstall.bin [2011.02.02 21:22:32 | 000,000,400 | ---- | C] () -- C:\Windows\ODBC.INI [2011.02.02 21:12:36 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2011.02.02 21:06:22 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2011.02.02 13:30:31 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010.07.08 09:37:14 | 000,101,544 | ---- | C] () -- C:\Program Files\Common Files\LinkInstaller.exe [2010.04.02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat [2009.11.02 12:45:44 | 000,014,808 | ---- | C] () -- C:\Windows\System32\drivers\TurboB.sys [2009.07.14 10:00:12 | 000,705,096 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009.07.14 10:00:12 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009.07.14 10:00:12 | 000,151,424 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009.07.14 10:00:12 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 05:33:53 | 000,387,392 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 03:05:48 | 000,660,374 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 03:05:48 | 000,124,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 01:59:16 | 000,013,568 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltLo.sys [2009.07.14 01:59:02 | 000,062,336 | ---- | C] () -- C:\Windows\System32\drivers\BrSerWdm.sys [2009.07.14 01:58:59 | 000,005,248 | ---- | C] () -- C:\Windows\System32\drivers\BrFiltUp.sys [2009.07.14 01:58:35 | 000,011,904 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbSer.sys [2009.07.14 01:58:27 | 000,012,160 | ---- | C] () -- C:\Windows\System32\drivers\BrUsbMdm.sys [2009.07.14 01:57:25 | 000,272,128 | ---- | C] () -- C:\Windows\System32\drivers\BrSerId.sys [2009.07.14 01:55:09 | 001,332,736 | ---- | C] () -- C:\Windows\System32\hpotiop1.dll [2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 00:51:35 | 000,008,192 | ---- | C] () -- C:\Windows\System32\drivers\umpass.sys [2009.07.14 00:51:34 | 000,056,320 | ---- | C] () -- C:\Windows\System32\drivers\bthmodem.sys [2009.07.14 00:51:33 | 000,091,136 | ---- | C] () -- C:\Windows\System32\drivers\hidbth.sys [2009.07.14 00:51:29 | 000,062,464 | ---- | C] () -- C:\Windows\System32\drivers\ohci1394.sys [2009.07.14 00:51:18 | 000,086,016 | ---- | C] () -- C:\Windows\System32\drivers\usbcir.sys [2009.07.14 00:51:17 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\circlass.sys [2009.07.14 00:51:05 | 000,037,888 | ---- | C] () -- C:\Windows\System32\drivers\hidir.sys [2009.07.14 00:46:55 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\MTConfig.sys [2009.07.14 00:46:53 | 000,021,632 | ---- | C] () -- C:\Windows\System32\drivers\wacompen.sys [2009.07.14 00:46:05 | 000,022,096 | ---- | C] () -- C:\Windows\System32\drivers\crcdisk.sys [2009.07.14 00:45:52 | 000,013,824 | ---- | C] () -- C:\Windows\System32\drivers\sfloppy.sys [2009.07.14 00:45:52 | 000,012,288 | ---- | C] () -- C:\Windows\System32\drivers\sffp_mmc.sys [2009.07.14 00:45:45 | 000,025,088 | ---- | C] () -- C:\Windows\System32\drivers\fdc.sys [2009.07.14 00:45:45 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\flpydisk.sys [2009.07.14 00:45:35 | 000,079,360 | ---- | C] () -- C:\Windows\System32\drivers\parport.sys [2009.07.14 00:45:33 | 000,083,456 | ---- | C] () -- C:\Windows\System32\drivers\serial.sys [2009.07.14 00:45:29 | 000,008,704 | ---- | C] () -- C:\Windows\System32\drivers\parvdm.sys [2009.07.14 00:45:28 | 000,017,920 | ---- | C] () -- C:\Windows\System32\drivers\serenum.sys [2009.07.14 00:45:08 | 000,019,968 | ---- | C] () -- C:\Windows\System32\drivers\sermouse.sys [2009.07.14 00:45:08 | 000,012,240 | ---- | C] () -- C:\Windows\System32\drivers\swenum.sys [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.07.14 00:25:51 | 000,105,024 | ---- | C] () -- C:\Windows\System32\drivers\NV_AGP.SYS [2009.07.14 00:25:48 | 000,057,424 | ---- | C] () -- C:\Windows\System32\drivers\ULIAGPKX.SYS [2009.07.14 00:25:42 | 000,057,936 | ---- | C] () -- C:\Windows\System32\drivers\GAGP30KX.SYS [2009.07.14 00:25:41 | 000,055,888 | ---- | C] () -- C:\Windows\System32\drivers\UAGP35.SYS [2009.07.14 00:25:40 | 000,053,328 | ---- | C] () -- C:\Windows\System32\drivers\VIAAGP.SYS [2009.07.14 00:25:37 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AGP440.sys [2009.07.14 00:25:36 | 000,053,312 | ---- | C] () -- C:\Windows\System32\drivers\AMDAGP.SYS [2009.07.14 00:25:36 | 000,052,304 | ---- | C] () -- C:\Windows\System32\drivers\SISAGP.SYS [2009.07.14 00:19:30 | 000,180,288 | ---- | C] () -- C:\Windows\System32\drivers\pcmcia.sys [2009.07.14 00:19:29 | 000,046,656 | ---- | C] () -- C:\Windows\System32\drivers\isapnp.sys [2009.07.14 00:19:26 | 000,028,240 | ---- | C] () -- C:\Windows\System32\drivers\mssmbios.sys [2009.07.14 00:19:21 | 000,021,504 | ---- | C] () -- C:\Windows\System32\drivers\hidbatt.sys [2009.07.14 00:19:19 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\errdev.sys [2009.07.14 00:19:17 | 000,011,264 | ---- | C] () -- C:\Windows\System32\drivers\wmiacpi.sys [2009.07.14 00:11:31 | 000,019,024 | ---- | C] () -- C:\Windows\System32\drivers\wd.sys [2009.07.14 00:11:24 | 000,080,896 | ---- | C] () -- C:\Windows\System32\drivers\i8042prt.sys [2009.07.14 00:11:20 | 000,016,976 | ---- | C] () -- C:\Windows\System32\drivers\viaide.sys [2009.07.14 00:11:20 | 000,012,368 | ---- | C] () -- C:\Windows\System32\drivers\pciide.sys [2009.07.14 00:11:19 | 000,015,424 | ---- | C] () -- C:\Windows\System32\drivers\intelide.sys [2009.07.14 00:11:19 | 000,014,912 | ---- | C] () -- C:\Windows\System32\drivers\amdide.sys [2009.07.14 00:11:18 | 000,015,952 | ---- | C] () -- C:\Windows\System32\drivers\cmdide.sys [2009.07.14 00:11:17 | 000,014,400 | ---- | C] () -- C:\Windows\System32\drivers\aliide.sys [2009.07.14 00:11:15 | 000,042,576 | ---- | C] () -- C:\Windows\System32\drivers\kbdclass.sys [2009.07.14 00:11:04 | 000,055,296 | ---- | C] () -- C:\Windows\System32\drivers\amdk8.sys [2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\viac7.sys [2009.07.14 00:11:04 | 000,052,736 | ---- | C] () -- C:\Windows\System32\drivers\amdppm.sys [2009.07.14 00:11:04 | 000,052,224 | ---- | C] () -- C:\Windows\System32\drivers\processr.sys [2009.07.13 23:54:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\drivers\hcw85cir.sys [2009.07.13 23:09:19 | 000,095,824 | ---- | C] () -- C:\Windows\System32\drivers\lsi_fc.sys [2009.07.13 23:09:18 | 000,106,064 | ---- | C] () -- C:\Windows\System32\drivers\ql40xx.sys [2009.07.13 23:09:18 | 000,096,848 | ---- | C] () -- C:\Windows\System32\drivers\lsi_scsi.sys [2009.07.13 23:09:18 | 000,089,168 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas.sys [2009.07.13 23:09:18 | 000,077,888 | ---- | C] () -- C:\Windows\System32\drivers\sisraid4.sys [2009.07.13 23:09:18 | 000,054,864 | ---- | C] () -- C:\Windows\System32\drivers\lsi_sas2.sys [2009.07.13 23:09:18 | 000,021,072 | ---- | C] () -- C:\Windows\System32\drivers\stexstor.sys [2009.07.13 23:09:17 | 000,235,584 | ---- | C] () -- C:\Windows\System32\drivers\MegaSR.sys [2009.07.13 23:09:17 | 000,086,608 | ---- | C] () -- C:\Windows\System32\drivers\arcsas.sys [2009.07.13 23:09:17 | 000,076,368 | ---- | C] () -- C:\Windows\System32\drivers\arc.sys [2009.07.13 23:09:17 | 000,067,152 | ---- | C] () -- C:\Windows\System32\drivers\HpSAMD.sys [2009.07.13 23:09:17 | 000,044,624 | ---- | C] () -- C:\Windows\System32\drivers\nfrd960.sys [2009.07.13 23:09:17 | 000,041,040 | ---- | C] () -- C:\Windows\System32\drivers\iirsp.sys [2009.07.13 23:09:16 | 000,297,552 | ---- | C] () -- C:\Windows\System32\drivers\adpahci.sys [2009.07.13 23:09:16 | 000,146,512 | ---- | C] () -- C:\Windows\System32\drivers\adpu320.sys [2009.06.18 19:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2009.06.10 22:20:26 | 000,070,720 | ---- | C] () -- C:\Windows\System32\drivers\djsvs.sys [2009.06.10 22:20:24 | 000,141,904 | ---- | C] () -- C:\Windows\System32\drivers\vsmraid.sys [2009.06.10 22:20:08 | 000,040,016 | ---- | C] () -- C:\Windows\System32\drivers\sisraid2.sys [2009.06.10 22:20:06 | 001,383,488 | ---- | C] () -- C:\Windows\System32\drivers\ql2300.sys [2009.06.10 22:20:03 | 000,159,312 | ---- | C] () -- C:\Windows\System32\drivers\amdsbs.sys [2009.06.10 22:19:35 | 000,030,800 | ---- | C] () -- C:\Windows\System32\drivers\megasas.sys [2009.06.10 22:19:19 | 000,453,712 | ---- | C] () -- C:\Windows\System32\drivers\elxstor.sys [2009.06.10 22:19:05 | 000,422,976 | ---- | C] () -- C:\Windows\System32\drivers\adp94xx.sys [2009.06.10 22:17:55 | 003,100,160 | ---- | C] () -- C:\Windows\System32\drivers\evbdx.sys [2009.06.10 22:17:52 | 000,430,080 | ---- | C] () -- C:\Windows\System32\drivers\bxvbdx.sys [2009.02.18 17:55:22 | 000,294,912 | ---- | C] () -- C:\Windows\System32\ATIODE.exe [2009.02.03 20:52:04 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe [2007.01.31 13:50:32 | 000,913,408 | ---- | C] () -- C:\Windows\System32\xreglib.dll [2005.05.06 19:06:00 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll [2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI [2001.08.29 13:11:40 | 000,398,848 | R--- | C] () -- C:\Windows\System32\dk2win32.dll ========== LOP Check ========== [2009.07.14 05:53:46 | 000,028,348 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011.12.22 20:51:41 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN [2009.06.04 11:26:16 | 000,000,000 | ---D | M] -- C:\ATI [2011.07.31 22:02:38 | 000,000,000 | ---D | M] -- C:\Boot [2011.12.20 17:44:40 | 000,000,000 | ---D | M] -- C:\Config.Msi [2011.03.02 22:07:34 | 000,000,000 | ---D | M] -- C:\DELL [2008.08.05 13:36:12 | 000,000,000 | ---D | M] -- C:\doctemp [2009.07.14 05:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2011.10.07 15:01:11 | 000,000,000 | ---D | M] -- C:\Download [2009.12.05 21:22:34 | 000,000,000 | ---D | M] -- C:\Downloads [2008.09.05 07:19:14 | 000,000,000 | ---D | M] -- C:\Drivers [2011.01.01 19:05:48 | 000,000,000 | ---D | M] -- C:\Fraps [2011.01.13 11:07:19 | 000,000,000 | ---D | M] -- C:\MeinBackup [2009.07.26 19:40:38 | 000,000,000 | R--D | M] -- C:\MSOCache [2010.02.13 19:54:36 | 000,000,000 | ---D | M] -- C:\Nokia [2010.12.26 11:48:39 | 000,000,000 | ---D | M] -- C:\OutputFolder [2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs [2011.12.20 20:51:55 | 000,000,000 | R--D | M] -- C:\Program Files [2011.09.08 09:52:50 | 000,000,000 | ---D | M] -- C:\ProgramData [2008.12.04 20:49:57 | 000,000,000 | -HSD | M] -- C:\Programme [2009.11.13 22:21:58 | 000,000,000 | ---D | M] -- C:\PSFonts [2011.12.22 20:51:39 | 000,000,000 | ---D | M] -- C:\Qoobox [2011.02.02 13:51:20 | 000,000,000 | ---D | M] -- C:\Recovery [2011.12.22 22:28:43 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2010.08.15 14:26:41 | 000,000,000 | ---D | M] -- C:\totalcmd [2011.07.21 17:46:04 | 000,000,000 | R--D | M] -- C:\Users [2011.12.22 20:51:38 | 000,000,000 | ---D | M] -- C:\Windows [2011.04.25 08:46:22 | 000,000,000 | ---D | M] -- C:\Windows.old < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < MD5 for: AGP440.SYS > [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\AGP440.sys < MD5 for: ATAPI.SYS > [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys [2009.07.14 02:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys < MD5 for: CNGAUDIT.DLL > [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll [2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll < MD5 for: EVENTLOG.DLL > [2011.02.22 21:18:51 | 000,008,376 | ---- | M] () MD5=68F9AD291B0C16F6B4AAEBFC26960EFA -- C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\lib\eventlog.dll < MD5 for: EXPLORER.EXE > [2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe [2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\ERDNT\cache\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe [2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe < MD5 for: IASTORV.SYS > [2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys [2011.03.11 06:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys [2011.03.11 06:43:55 | 000,332,160 | ---- | M] (Intel Corporation) MD5=71F1A494FEDF4B33C02C4A6A28D6D9E9 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_aef580fde910b4b0\iaStorV.sys [2011.03.11 06:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys [2009.07.14 02:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys [2010.11.20 13:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys [2011.03.11 06:52:21 | 000,332,160 | ---- | M] (Intel Corporation) MD5=B9039A34C2F8769490DCC494E2402445 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_afae2d45020c148b\iaStorV.sys [2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\iaStorV.sys < MD5 for: NETLOGON.DLL > [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\ERDNT\cache\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll [2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll [2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll < MD5 for: NVSTOR.SYS > [2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys [2011.03.11 06:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys [2011.03.11 06:44:01 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4520B63899E867F354EE012D34E11536 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_39bef1ad20475e88\nvstor.sys [2011.03.11 06:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys [2011.03.11 06:52:25 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=8A7583A3B58D3EEB28BB26626526BC91 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_3a779df43942be63\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys [2010.11.20 13:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys [2009.07.14 02:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys [2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\System32\drivers\nvstor.sys < MD5 for: SCECLI.DLL > [2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\ERDNT\cache\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll [2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll < MD5 for: USER32.DLL > [2009.07.14 02:16:17 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=34B7E222E81FAFA885F0C5F2CFA56861 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\ERDNT\cache\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\System32\user32.dll [2010.11.20 13:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) MD5=F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\ERDNT\cache\userinit.exe [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe < MD5 for: WINLOGON.EXE > [2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\ERDNT\cache\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\System32\winlogon.exe [2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe [2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe < MD5 for: WS2IFSL.SYS > [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\System32\drivers\ws2ifsl.sys [2009.07.14 00:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) MD5=6DB3276587B853BF886B69528FDB048C -- C:\Windows\winsxs\x86_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_4f5cf6f829213bb2\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > [2010.11.20 11:01:12 | 000,164,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\1394ohci.sys [2010.11.20 09:47:55 | 000,010,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\acpipmi.sys [2009.07.14 02:26:15 | 000,422,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adp94xx.sys [2009.07.14 02:26:17 | 000,297,552 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpahci.sys [2009.07.14 02:26:15 | 000,146,512 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\adpu320.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AGP440.sys [2009.07.14 02:26:15 | 000,014,400 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\aliide.sys [2009.07.14 02:26:15 | 000,053,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\AMDAGP.SYS [2009.07.14 02:26:15 | 000,014,912 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdide.sys [2009.07.14 00:11:04 | 000,055,296 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdk8.sys [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdppm.sys [2011.03.11 06:38:37 | 000,080,256 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsata.sys [2009.07.14 02:26:15 | 000,159,312 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\amdsbs.sys [2009.07.14 02:26:15 | 000,076,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arc.sys [2009.07.14 02:26:15 | 000,086,608 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\arcsas.sys [2010.05.13 15:52:04 | 000,152,528 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfm.sys [2011.04.09 09:16:10 | 000,353,096 | ---- | M] (BitDefender) Unable to obtain MD5 -- C:\Windows\system32\drivers\bdfsfltr.sys [2009.07.13 23:53:28 | 000,013,568 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltLo.sys [2009.07.13 23:53:28 | 000,005,248 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrFiltUp.sys [2009.07.14 01:57:25 | 000,272,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerId.sys [2009.07.13 23:53:32 | 000,062,336 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrSerWdm.sys [2009.07.13 23:53:33 | 000,012,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbMdm.sys [2009.07.13 23:53:33 | 000,011,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\BrUsbSer.sys [2009.07.14 00:51:34 | 000,056,320 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bthmodem.sys [2009.07.13 23:02:48 | 000,430,080 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\bxvbdx.sys [2009.07.14 00:51:17 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\circlass.sys [2009.07.14 02:26:21 | 000,015,952 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\cmdide.sys [2010.11.20 10:50:21 | 000,031,232 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\CompositeBus.sys [2009.07.14 02:20:28 | 000,022,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\crcdisk.sys [2009.07.14 02:20:28 | 000,070,720 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\djsvs.sys [2009.07.14 02:20:28 | 000,453,712 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\elxstor.sys [2009.07.14 00:19:19 | 000,007,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\errdev.sys [2009.07.13 23:02:48 | 003,100,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\evbdx.sys [2009.07.14 00:45:45 | 000,025,088 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\fdc.sys [2009.07.14 00:45:45 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\flpydisk.sys [2009.07.14 02:20:28 | 000,057,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\GAGP30KX.SYS [2009.07.13 23:54:14 | 000,026,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hcw85cir.sys [2010.11.20 10:59:29 | 000,108,544 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hdaudbus.sys [2010.11.20 11:00:21 | 000,304,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HdAudio.sys [2009.07.14 00:19:21 | 000,021,504 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbatt.sys [2009.07.14 00:51:33 | 000,091,136 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidbth.sys [2009.07.14 00:51:05 | 000,037,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\hidir.sys [2009.07.14 02:20:28 | 000,067,152 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\HpSAMD.sys [2009.07.14 00:11:24 | 000,080,896 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\i8042prt.sys [2011.03.11 06:38:51 | 000,332,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iaStorV.sys [2009.07.14 02:20:36 | 000,041,040 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\iirsp.sys [2009.07.14 02:20:36 | 000,015,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\intelide.sys [2010.11.20 10:19:15 | 000,065,536 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\IPMIDrv.sys [2009.07.14 02:20:36 | 000,046,656 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\isapnp.sys [2009.07.14 02:20:36 | 000,042,576 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdclass.sys [2010.11.20 10:50:10 | 000,028,160 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\kbdhid.sys [2009.07.14 02:20:36 | 000,095,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_fc.sys [2009.07.14 02:20:37 | 000,089,168 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas.sys [2009.07.14 02:20:36 | 000,054,864 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_sas2.sys [2009.07.14 02:20:36 | 000,096,848 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\lsi_scsi.sys [2009.07.14 02:20:36 | 000,030,800 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\megasas.sys [2009.07.14 02:20:36 | 000,235,584 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MegaSR.sys [2010.11.20 13:30:01 | 000,130,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mpio.sys [2010.11.20 13:30:04 | 000,116,096 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msdsm.sys [2010.11.20 13:30:05 | 000,233,344 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\msiscsi.sys [2009.07.14 02:20:44 | 000,028,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\mssmbios.sys [2009.07.14 00:46:55 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\MTConfig.sys [2009.07.14 02:20:44 | 000,044,624 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nfrd960.sys [2011.03.11 06:39:00 | 000,117,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvraid.sys [2011.03.11 06:39:00 | 000,143,744 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\nvstor.sys [2009.07.14 02:20:44 | 000,105,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\NV_AGP.SYS [2009.07.14 00:51:29 | 000,062,464 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ohci1394.sys [2009.07.14 00:45:35 | 000,079,360 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parport.sys [2009.07.14 00:45:29 | 000,008,704 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\parvdm.sys [2009.07.14 02:20:45 | 000,012,368 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pciide.sys [2009.07.14 02:19:03 | 000,180,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\pcmcia.sys [2009.07.14 00:11:04 | 000,052,224 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\processr.sys [2009.07.14 02:19:04 | 001,383,488 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql2300.sys [2009.07.14 02:19:04 | 000,106,064 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ql40xx.sys [2010.11.20 13:30:10 | 000,085,376 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sbp2port.sys [2010.11.20 09:54:02 | 000,084,992 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sdbus.sys [2009.07.14 00:45:28 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serenum.sys [2009.07.14 00:45:33 | 000,083,456 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\serial.sys [2009.07.14 00:45:08 | 000,019,968 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sermouse.sys [2009.07.14 00:45:52 | 000,012,288 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sffp_mmc.sys [2009.07.14 00:45:52 | 000,013,824 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sfloppy.sys [2009.07.14 02:19:03 | 000,052,304 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\SISAGP.SYS [2009.07.14 02:19:04 | 000,040,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid2.sys [2009.07.14 02:19:04 | 000,077,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\sisraid4.sys [2009.07.14 02:19:04 | 000,021,072 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\stexstor.sys [2010.11.20 13:30:15 | 000,028,032 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\storvsc.sys [2009.07.14 02:19:10 | 000,012,240 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\swenum.sys [2010.11.20 13:30:12 | 000,053,120 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\termdd.sys [2009.07.14 02:19:10 | 000,055,888 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\UAGP35.SYS [2009.07.14 02:19:11 | 000,057,424 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\ULIAGPKX.SYS [2010.11.20 11:00:24 | 000,039,936 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umbus.sys [2009.07.14 00:51:35 | 000,008,192 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\umpass.sys [2010.11.20 10:59:44 | 000,080,768 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\USBAUDIO.sys [2009.07.14 00:51:18 | 000,086,016 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbcir.sys [2011.03.25 03:57:58 | 000,020,480 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbohci.sys [2010.11.20 10:59:46 | 000,027,648 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbser.sys [2010.11.20 11:00:21 | 000,146,432 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\usbvideo.sys [2010.11.20 13:30:14 | 000,160,128 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vhdmp.sys [2009.07.14 02:19:10 | 000,053,328 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VIAAGP.SYS [2009.07.14 00:11:04 | 000,052,736 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viac7.sys [2009.07.14 02:19:10 | 000,016,976 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\viaide.sys [2010.11.20 10:14:45 | 000,017,920 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\VMBusHID.sys [2010.11.20 10:14:41 | 000,005,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vms3cap.sys [2009.07.14 02:19:11 | 000,141,904 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\vsmraid.sys [2009.07.14 00:46:53 | 000,021,632 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wacompen.sys [2009.07.14 02:19:11 | 000,019,024 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wd.sys [2009.07.14 00:19:17 | 000,011,264 | ---- | M] () Unable to obtain MD5 -- C:\Windows\system32\drivers\wmiacpi.sys < %systemroot%\System32\config\*.sav > < %systemroot%\system32\*.dll /lockedfiles > < %USERPROFILE%\*.* > [2011.10.30 14:01:22 | 000,001,452 | ---- | M] () -- C:\Users\Dell\.recently-used.xbel [2011.12.22 22:52:16 | 008,912,896 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT [2011.12.22 22:52:16 | 000,262,144 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG1 [2011.02.02 13:51:30 | 000,000,000 | -HS- | M] () -- C:\Users\Dell\ntuser.dat.LOG2 [2011.02.02 13:52:32 | 000,065,536 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf [2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms [2011.02.02 13:52:32 | 000,524,288 | -HS- | M] () -- C:\Users\Dell\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms [2011.02.02 13:51:31 | 000,000,020 | -HS- | M] () -- C:\Users\Dell\ntuser.ini < %USERPROFILE%\Local Settings\Temp\*.exe > < %USERPROFILE%\Local Settings\Temp\*.dll > < %USERPROFILE%\Application Data\*.exe > < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < > ========== Alternate Data Streams ========== @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:96D0C06F < End of report > |
02.01.2012, 10:37 | #5 |
| Firefox startet nicht, Taskmanager hängt extrem Wie lang dauert normalerweise das Auswerten der Logfiles? |
02.01.2012, 17:20 | #6 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem sorry ich hab deinen thread irgendwie übersehen! 1. spybot deinstalieren, neustarten. es stört die reinigung und ist auch nicht mehr sonderlich hilfreich. Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde! Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
__________________ --> Firefox startet nicht, Taskmanager hängt extrem |
05.01.2012, 11:31 | #7 |
| Firefox startet nicht, Taskmanager hängt extrem Hier ist das Log: Code:
ATTFilter ComboFix 12-01-05.01 - Dell 05.01.2012 11:12:49.2.2 - x86 NETWORK Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.3067.2494 [GMT 1:00] ausgeführt von:: c:\users\Dell\Desktop\ComboFix1.exe AV: BitDefender Antivirus *Disabled/Outdated* {50909708-FF80-02AF-F814-B28405891E92} FW: BitDefender Firewall *Disabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9} SP: BitDefender AntiSpyware *Disabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . ((((((((((((((((((((((( Dateien erstellt von 2011-12-05 bis 2012-01-05 )))))))))))))))))))))))))))))) . . 2011-12-22 17:05 . 2011-12-21 07:42 43992 ----a-w- c:\program files\Mozilla Firefox\mozutils.dll 2011-12-22 17:05 . 2011-12-21 04:29 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll 2011-12-22 17:05 . 2011-12-21 04:29 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll 2011-12-22 17:05 . 2011-12-21 04:29 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll 2011-12-20 19:51 . 2011-12-20 20:53 -------- d-----w- c:\program files\Realtek 2011-12-20 19:51 . 2011-12-20 21:04 -------- d--h--w- c:\program files\Temp 2011-12-20 19:51 . 2011-12-13 10:01 1698408 ----a-w- c:\windows\RtlExUpd.dll 2011-12-20 19:51 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll 2011-12-20 19:51 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll 2011-12-20 19:51 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll 2011-12-20 19:51 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll 2011-12-20 19:51 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe 2011-12-20 19:51 . 2011-12-20 19:51 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll 2011-12-20 19:51 . 2011-12-20 19:51 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll 2011-12-14 08:48 . 2011-11-24 04:25 2342912 ----a-w- c:\windows\system32\win32k.sys 2011-12-14 08:48 . 2011-11-05 04:26 2048 ----a-w- c:\windows\system32\tzres.dll 2011-12-14 08:47 . 2011-10-15 05:38 534528 ----a-w- c:\windows\system32\EncDec.dll 2011-12-14 08:47 . 2011-10-26 04:28 38912 ----a-w- c:\windows\system32\csrsrv.dll 2011-12-14 08:47 . 2011-10-26 04:47 3912560 ----a-w- c:\windows\system32\ntoskrnl.exe 2011-12-14 08:47 . 2011-10-26 04:47 3967856 ----a-w- c:\windows\system32\ntkrnlpa.exe 2011-12-11 10:52 . 2011-12-11 10:52 -------- d-sh--w- c:\users\Dell\Phone Browser 2011-12-10 13:42 . 2011-12-10 13:42 -------- d-----w- c:\users\Dell\AppData\Local\Chromium . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-27 17:01 . 2011-06-18 07:46 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2010-07-08 08:37 . 2010-07-08 08:37 101544 ----a-w- c:\program files\Common Files\LinkInstaller.exe 2011-12-21 07:42 . 2011-04-24 16:04 121816 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BDAgent"="c:\program files\BitDefender\BitDefender 2011\bdagent.exe" [2011-07-17 1451928] "NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-10-20 2192752] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 1821576] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitDefender Antiphishing Helper] 2011-06-18 09:13 92352 ----a-w- c:\program files\BitDefender\BitDefender 2011\ieshow.exe . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray "Steam"="c:\program files\Steam\Steam.exe" -silent . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "amd_dc_opt"=c:\program files\AMD\Dual-Core Optimizer\amd_dc_opt.exe . R1 Bdvedisk;Bdvedisk;c:\windows\system32\DRIVERS\bdvedisk.sys [2010-01-19 85128] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952] R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 dk2drv;DK2 WindowsNT Driver;c:\windows\system32\Drivers\dk2drv.sys [2005-11-22 42624] R2 FLE5WNNT;FLE-5 WindowsNT Driver;c:\windows\System32\Drivers\fle5wnnt.sys [2011-06-25 33404] R2 FLSIFACE;FLSIFACE;c:\windows\System32\Drivers\flsiface.sys [2011-06-25 13440] R2 FLSPAR;FLSPAR;c:\windows\System32\Drivers\flspar.sys [2011-06-25 16314] R2 FLSSER;FLSSER;c:\windows\System32\Drivers\flsser.sys [2011-06-25 8344] R2 FLSVCOM;FLSVCOM;c:\windows\System32\Drivers\flsvcom.sys [2011-06-25 33402] R2 gupdate;Google Update-Dienst (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 136176] R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2011-03-04 584488] R2 PARLDR2K;PARLDR2K;c:\windows\system32\drivers\parldr2k.sys [2011-06-25 10454] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-03-30 1523008] R2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 14808] R2 Updatesrv;BitDefender Desktop Update Service;c:\program files\BitDefender\BitDefender 2011\updatesrv.exe [2011-06-18 43936] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-09-08 211984] R3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys [2011-02-03 101248] R3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-05-13 152528] R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [2011-07-05 2428968] R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-08-01 45288] R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 136176] R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232] R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-12-02 137600] R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-12-02 8576] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2011-02-10 10064] R3 Update Server;BitDefender Update Server v2;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2011-02-22 307544] R4 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [2010-06-28 633424] R4 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [2010-06-28 970320] R4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900] R4 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 99728] S0 hotcore3;hc3ServiceName;c:\windows\system32\DRIVERS\hotcore3.sys [2010-05-28 40560] S1 Bdfndisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2010-08-20 72784] S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [2010-08-20 88144] S3 k57nd60x;Broadcom NetLink (TM)-Gigabit-Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888] S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168] . . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhalt des "geplante Tasks" Ordners . 2012-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 20:45] . 2012-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-10-06 20:45] . 2011-12-28 c:\windows\Tasks\Norton Security Scan for Dell.job - c:\progra~1\NORTON~2\Engine\351~1.8\Nss.exe [2011-11-02 23:02] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = about:blank mStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: Free YouTube to MP3 Converter - c:\users\Dell\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/||hxxp://www.facebook.com/ . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-19526181-302486724-255597020-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:72,0f,9a,b5,d6,1b,d8,3b,3c,0a,58,73,63,fb,74,92,e6,3a,a0,c8,75,50,6c, bb,93,53,02,4d,fc,0d,0f,a5,c7,9b,51,8c,e7,05,1f,67,de,1c,d4,2d,72,2b,c1,f7,\ "??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50 . [HKEY_USERS\S-1-5-21-19526181-302486724-255597020-1000\Software\SecuROM\License information*] "datasecu"=hex:1d,d8,40,c1,2c,60,6f,62,17,a3,5e,e1,7d,e1,8f,f7,3c,88,58,fa,9e, ac,ef,6d,5a,d9,c6,2a,88,ad,6a,08,c7,35,b1,44,d0,2f,6f,01,76,71,77,4e,1e,c9,\ "rkeysecu"=hex:3f,56,5f,4b,9e,d0,6b,f8,61,68,41,da,d2,0d,a7,ec . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- . - - - - - - - > 'Explorer.exe'(1076) c:\windows\system32\CmdLineExt.dll . Zeit der Fertigstellung: 2012-01-05 11:23:08 ComboFix-quarantined-files.txt 2012-01-05 10:23 ComboFix2.txt 2011-12-22 19:51 . Vor Suchlauf: 23 Verzeichnis(se), 264.180.375.552 Bytes frei Nach Suchlauf: 24 Verzeichnis(se), 264.090.193.920 Bytes frei . - - End Of File - - 3670F241F572B1CE80117E43BD5AC7EB |
05.01.2012, 12:58 | #8 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem malwarebytes: Downloade Dir bitte Malwarebytes
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.01.2012, 18:20 | #9 |
| Firefox startet nicht, Taskmanager hängt extrem Fertig. Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.60.0.1800 www.malwarebytes.org Datenbank Version: v2012.01.05.02 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 9.0.8112.16421 Dell :: DELL-STUDIO [Administrator] Schutz: Aktiviert 05.01.2012 15:03:48 mbam-log-2012-01-05 (15-03-48).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 524989 Laufzeit: 3 Stunde(n), 4 Minute(n), 40 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 3 C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\GCFMgr.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\EmuCfg.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Dell\Desktop\Phoenix\Phx_data\Res\ss.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
05.01.2012, 18:38 | #10 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem prüfe bitte ob der firefox wieder läuft
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.01.2012, 18:42 | #11 |
| Firefox startet nicht, Taskmanager hängt extrem nein, läuft leider immer noch nicht |
05.01.2012, 18:51 | #12 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem lass mal den tdss killer laufen log posten http://www.trojaner-board.de/82358-t...entfernen.html
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.01.2012, 19:01 | #13 |
| Firefox startet nicht, Taskmanager hängt extremCode:
ATTFilter 18:57:47.0906 3328 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16 18:57:49.0913 3328 ============================================================ 18:57:49.0913 3328 Current date / time: 2012/01/05 18:57:49.0913 18:57:49.0913 3328 SystemInfo: 18:57:49.0913 3328 18:57:49.0913 3328 OS Version: 6.1.7601 ServicePack: 1.0 18:57:49.0913 3328 Product type: Workstation 18:57:49.0916 3328 ComputerName: DELL-STUDIO 18:57:49.0916 3328 UserName: Dell 18:57:49.0916 3328 Windows directory: C:\Windows 18:57:49.0916 3328 System windows directory: C:\Windows 18:57:49.0916 3328 Processor architecture: Intel x86 18:57:49.0916 3328 Number of processors: 2 18:57:49.0916 3328 Page size: 0x1000 18:57:49.0916 3328 Boot type: Normal boot 18:57:49.0916 3328 ============================================================ 18:57:53.0328 3328 Initialize success 18:58:57.0612 3780 ============================================================ 18:58:57.0612 3780 Scan started 18:58:57.0612 3780 Mode: Manual; 18:58:57.0612 3780 ============================================================ 18:58:59.0983 3780 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys 18:58:59.0983 3780 1394ohci - ok 18:59:00.0046 3780 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys 18:59:00.0046 3780 ACPI - ok 18:59:00.0077 3780 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys 18:59:00.0077 3780 AcpiPmi - ok 18:59:00.0170 3780 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys 18:59:00.0170 3780 adp94xx - ok 18:59:00.0202 3780 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys 18:59:00.0217 3780 adpahci - ok 18:59:00.0264 3780 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys 18:59:00.0264 3780 adpu320 - ok 18:59:00.0342 3780 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys 18:59:00.0342 3780 AFD - ok 18:59:00.0389 3780 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys 18:59:00.0389 3780 agp440 - ok 18:59:00.0482 3780 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys 18:59:00.0482 3780 aic78xx - ok 18:59:00.0545 3780 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys 18:59:00.0560 3780 aliide - ok 18:59:00.0607 3780 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys 18:59:00.0607 3780 amdagp - ok 18:59:00.0654 3780 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys 18:59:00.0654 3780 amdide - ok 18:59:00.0685 3780 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys 18:59:00.0685 3780 AmdK8 - ok 18:59:00.0748 3780 AmdLLD (ad8fa28d8ed0d0a689a0559085ce0f18) C:\Windows\system32\DRIVERS\AmdLLD.sys 18:59:00.0748 3780 AmdLLD - ok 18:59:00.0794 3780 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys 18:59:00.0794 3780 AmdPPM - ok 18:59:00.0841 3780 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys 18:59:00.0857 3780 amdsata - ok 18:59:00.0919 3780 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys 18:59:00.0919 3780 amdsbs - ok 18:59:00.0950 3780 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys 18:59:00.0966 3780 amdxata - ok 18:59:01.0028 3780 AnyDVD (40c279a23bd43553bfba6e88a9b38ae2) C:\Windows\system32\Drivers\AnyDVD.sys 18:59:01.0028 3780 AnyDVD - ok 18:59:01.0091 3780 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys 18:59:01.0106 3780 AppID - ok 18:59:01.0184 3780 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys 18:59:01.0184 3780 arc - ok 18:59:01.0216 3780 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys 18:59:01.0231 3780 arcsas - ok 18:59:01.0294 3780 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys 18:59:01.0294 3780 AsyncMac - ok 18:59:01.0340 3780 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys 18:59:01.0340 3780 atapi - ok 18:59:01.0418 3780 AtiHDAudioService (84faf3d287d56d210f84db7c1349d43b) C:\Windows\system32\drivers\AtihdW73.sys 18:59:01.0434 3780 AtiHDAudioService - ok 18:59:01.0559 3780 atikmdag (04f09923a393e4e0e8453a8f78361e73) C:\Windows\system32\DRIVERS\atikmdag.sys 18:59:01.0730 3780 atikmdag - ok 18:59:01.0808 3780 avc3 (c6cf76384dfc739b0be55abb79ad4dc0) C:\Windows\system32\DRIVERS\avc3.sys 18:59:01.0840 3780 avc3 - ok 18:59:01.0918 3780 avckf (b758a219e95c085405b1e356a8267610) C:\Windows\system32\DRIVERS\avckf.sys 18:59:01.0964 3780 avckf - ok 18:59:02.0011 3780 avmaudio (728c4a6c722535c16d1025f51aa31e22) C:\Windows\system32\DRIVERS\avmaudio.sys 18:59:02.0027 3780 avmaudio - ok 18:59:02.0089 3780 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys 18:59:02.0105 3780 b06bdrv - ok 18:59:02.0152 3780 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys 18:59:02.0167 3780 b57nd60x - ok 18:59:02.0230 3780 BDFM (8d4efc5c378bffe34c298c92f37d3b14) C:\Windows\system32\DRIVERS\bdfm.sys 18:59:02.0230 3780 BDFM - ok 18:59:02.0308 3780 Bdfndisf (817fc12bc93a70b0449ebefaa4d6f4d2) c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys 18:59:02.0323 3780 Bdfndisf - ok 18:59:02.0386 3780 bdfsfltr (c3e025d46368e3d18085eef26ef6f6a1) C:\Windows\system32\DRIVERS\bdfsfltr.sys 18:59:02.0386 3780 bdfsfltr - ok 18:59:02.0401 3780 bdfwfpf (f16b1b98871a44192c0364a23b57ff35) C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys 18:59:02.0417 3780 bdfwfpf - ok 18:59:02.0479 3780 bdselfpr (2daa9e807c11b4677cafc1e43a98f8ce) C:\Program Files\BitDefender\BitDefender 2011\bdselfpr.sys 18:59:02.0479 3780 bdselfpr - ok 18:59:02.0542 3780 Bdvedisk (375cd0b9f433465ec6f50d4df44e9448) C:\Windows\system32\DRIVERS\bdvedisk.sys 18:59:02.0542 3780 Bdvedisk - ok 18:59:02.0588 3780 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys 18:59:02.0588 3780 Beep - ok 18:59:02.0620 3780 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys 18:59:02.0620 3780 blbdrive - ok 18:59:02.0698 3780 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys 18:59:02.0713 3780 bowser - ok 18:59:02.0744 3780 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys 18:59:02.0744 3780 BrFiltLo - ok 18:59:02.0791 3780 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys 18:59:02.0791 3780 BrFiltUp - ok 18:59:02.0854 3780 BridgeMP (77361d72a04f18809d0efb6cceb74d4b) C:\Windows\system32\DRIVERS\bridge.sys 18:59:02.0854 3780 BridgeMP - ok 18:59:02.0885 3780 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys 18:59:02.0900 3780 Brserid - ok 18:59:02.0932 3780 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys 18:59:02.0947 3780 BrSerWdm - ok 18:59:02.0963 3780 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys 18:59:02.0963 3780 BrUsbMdm - ok 18:59:03.0010 3780 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys 18:59:03.0010 3780 BrUsbSer - ok 18:59:03.0041 3780 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys 18:59:03.0056 3780 BTHMODEM - ok 18:59:03.0166 3780 catchme - ok 18:59:03.0197 3780 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys 18:59:03.0197 3780 cdfs - ok 18:59:03.0244 3780 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys 18:59:03.0275 3780 cdrom - ok 18:59:03.0337 3780 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys 18:59:03.0337 3780 circlass - ok 18:59:03.0384 3780 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys 18:59:03.0384 3780 CLFS - ok 18:59:03.0431 3780 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys 18:59:03.0431 3780 CmBatt - ok 18:59:03.0478 3780 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys 18:59:03.0478 3780 cmdide - ok 18:59:03.0524 3780 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys 18:59:03.0524 3780 CNG - ok 18:59:03.0556 3780 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys 18:59:03.0571 3780 Compbatt - ok 18:59:03.0618 3780 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys 18:59:03.0634 3780 CompositeBus - ok 18:59:03.0680 3780 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys 18:59:03.0680 3780 crcdisk - ok 18:59:03.0727 3780 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys 18:59:03.0758 3780 CSC - ok 18:59:03.0805 3780 dc3d (90f8539fa0de4aafe4fdbe7f95d6a512) C:\Windows\system32\DRIVERS\dc3d.sys 18:59:03.0821 3780 dc3d - ok 18:59:03.0868 3780 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys 18:59:03.0883 3780 DfsC - ok 18:59:03.0914 3780 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys 18:59:03.0914 3780 discache - ok 18:59:03.0961 3780 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys 18:59:03.0977 3780 Disk - ok 18:59:04.0039 3780 dk2drv (dd3a2ba0f02ece964669295a54c5b9a2) C:\Windows\system32\Drivers\dk2drv.sys 18:59:04.0039 3780 dk2drv - ok 18:59:04.0117 3780 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys 18:59:04.0117 3780 drmkaud - ok 18:59:04.0164 3780 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys 18:59:04.0211 3780 DXGKrnl - ok 18:59:04.0289 3780 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys 18:59:04.0382 3780 ebdrv - ok 18:59:04.0445 3780 ElbyCDIO (d71233d7ccc2e64f8715a20428d5a33b) C:\Windows\system32\Drivers\ElbyCDIO.sys 18:59:04.0460 3780 ElbyCDIO - ok 18:59:04.0507 3780 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys 18:59:04.0507 3780 elxstor - ok 18:59:04.0554 3780 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys 18:59:04.0554 3780 ErrDev - ok 18:59:04.0616 3780 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys 18:59:04.0616 3780 exfat - ok 18:59:04.0648 3780 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys 18:59:04.0663 3780 fastfat - ok 18:59:04.0694 3780 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys 18:59:04.0710 3780 fdc - ok 18:59:04.0726 3780 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys 18:59:04.0726 3780 FileInfo - ok 18:59:04.0757 3780 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys 18:59:04.0757 3780 Filetrace - ok 18:59:04.0819 3780 FLE5WNNT (ea7ed2075d7eed73dd5658835b61c558) C:\Windows\System32\Drivers\fle5wnnt.sys 18:59:04.0866 3780 FLE5WNNT - ok 18:59:05.0053 3780 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys 18:59:05.0069 3780 flpydisk - ok 18:59:05.0100 3780 FLSIFACE (ebacbf7f420bbaa0cfd98bfc02a0ec40) C:\Windows\System32\Drivers\flsiface.sys 18:59:05.0116 3780 FLSIFACE - ok 18:59:05.0147 3780 FLSPAR (f85ec1ad593b1f889cf664d68da27274) C:\Windows\System32\Drivers\flspar.sys 18:59:05.0162 3780 FLSPAR - ok 18:59:05.0194 3780 FLSSER (84bf89b463893461c664880463e3eede) C:\Windows\System32\Drivers\flsser.sys 18:59:05.0209 3780 FLSSER - ok 18:59:05.0225 3780 FLSVCOM (18d789fefbb60020f3448bb27bbde8e5) C:\Windows\System32\Drivers\flsvcom.sys 18:59:05.0240 3780 FLSVCOM - ok 18:59:05.0287 3780 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys 18:59:05.0287 3780 FltMgr - ok 18:59:05.0318 3780 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys 18:59:05.0318 3780 FsDepends - ok 18:59:05.0350 3780 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys 18:59:05.0350 3780 Fs_Rec - ok 18:59:05.0412 3780 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys 18:59:05.0412 3780 fvevol - ok 18:59:05.0459 3780 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys 18:59:05.0474 3780 gagp30kx - ok 18:59:05.0506 3780 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 18:59:05.0521 3780 GEARAspiWDM - ok 18:59:05.0615 3780 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys 18:59:05.0630 3780 hcw85cir - ok 18:59:05.0677 3780 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys 18:59:05.0693 3780 HdAudAddService - ok 18:59:05.0755 3780 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys 18:59:05.0755 3780 HDAudBus - ok 18:59:05.0786 3780 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys 18:59:05.0786 3780 HidBatt - ok 18:59:05.0818 3780 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys 18:59:05.0818 3780 HidBth - ok 18:59:05.0864 3780 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys 18:59:05.0864 3780 HidIr - ok 18:59:05.0927 3780 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\DRIVERS\hidusb.sys 18:59:05.0942 3780 HidUsb - ok 18:59:06.0005 3780 hotcore3 (48ed16c0c98c950843e673eeee02ac94) C:\Windows\system32\DRIVERS\hotcore3.sys 18:59:06.0020 3780 hotcore3 - ok 18:59:06.0083 3780 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys 18:59:06.0083 3780 HpSAMD - ok 18:59:06.0145 3780 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys 18:59:06.0145 3780 HTTP - ok 18:59:06.0192 3780 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys 18:59:06.0192 3780 hwpolicy - ok 18:59:06.0239 3780 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys 18:59:06.0239 3780 i8042prt - ok 18:59:06.0286 3780 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys 18:59:06.0301 3780 iaStorV - ok 18:59:06.0364 3780 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys 18:59:06.0379 3780 iirsp - ok 18:59:06.0410 3780 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys 18:59:06.0410 3780 intelide - ok 18:59:06.0457 3780 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys 18:59:06.0457 3780 intelppm - ok 18:59:06.0488 3780 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys 18:59:06.0504 3780 IpFilterDriver - ok 18:59:06.0551 3780 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys 18:59:06.0566 3780 IPMIDRV - ok 18:59:06.0598 3780 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys 18:59:06.0598 3780 IPNAT - ok 18:59:06.0660 3780 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys 18:59:06.0660 3780 IRENUM - ok 18:59:06.0707 3780 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys 18:59:06.0707 3780 isapnp - ok 18:59:06.0738 3780 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys 18:59:06.0754 3780 iScsiPrt - ok 18:59:06.0800 3780 k57nd60x (c4c95805b85bce1eb9d20f4a02fc5f9b) C:\Windows\system32\DRIVERS\k57nd60x.sys 18:59:06.0816 3780 k57nd60x - ok 18:59:06.0847 3780 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys 18:59:06.0847 3780 kbdclass - ok 18:59:06.0894 3780 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys 18:59:06.0910 3780 kbdhid - ok 18:59:06.0956 3780 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\Windows\system32\Drivers\ksecdd.sys 18:59:06.0956 3780 KSecDD - ok 18:59:07.0003 3780 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys 18:59:07.0003 3780 KSecPkg - ok 18:59:07.0066 3780 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys 18:59:07.0066 3780 lltdio - ok 18:59:07.0112 3780 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys 18:59:07.0128 3780 LSI_FC - ok 18:59:07.0159 3780 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys 18:59:07.0159 3780 LSI_SAS - ok 18:59:07.0190 3780 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys 18:59:07.0190 3780 LSI_SAS2 - ok 18:59:07.0237 3780 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys 18:59:07.0237 3780 LSI_SCSI - ok 18:59:07.0268 3780 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys 18:59:07.0268 3780 luafv - ok 18:59:07.0331 3780 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys 18:59:07.0346 3780 MBAMProtector - ok 18:59:07.0409 3780 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys 18:59:07.0409 3780 megasas - ok 18:59:07.0440 3780 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys 18:59:07.0456 3780 MegaSR - ok 18:59:07.0487 3780 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys 18:59:07.0487 3780 Modem - ok 18:59:07.0534 3780 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys 18:59:07.0534 3780 monitor - ok 18:59:07.0580 3780 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys 18:59:07.0580 3780 mouclass - ok 18:59:07.0627 3780 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys 18:59:07.0627 3780 mouhid - ok 18:59:07.0690 3780 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys 18:59:07.0690 3780 mountmgr - ok 18:59:07.0736 3780 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys 18:59:07.0768 3780 mpio - ok 18:59:07.0814 3780 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys 18:59:07.0830 3780 mpsdrv - ok 18:59:07.0861 3780 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys 18:59:07.0877 3780 MRxDAV - ok 18:59:07.0908 3780 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys 18:59:07.0924 3780 mrxsmb - ok 18:59:07.0970 3780 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys 18:59:07.0986 3780 mrxsmb10 - ok 18:59:08.0002 3780 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys 18:59:08.0017 3780 mrxsmb20 - ok 18:59:08.0048 3780 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys 18:59:08.0064 3780 msahci - ok 18:59:08.0095 3780 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys 18:59:08.0111 3780 msdsm - ok 18:59:08.0158 3780 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys 18:59:08.0158 3780 Msfs - ok 18:59:08.0189 3780 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys 18:59:08.0189 3780 mshidkmdf - ok 18:59:08.0220 3780 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys 18:59:08.0236 3780 msisadrv - ok 18:59:08.0282 3780 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys 18:59:08.0282 3780 MSKSSRV - ok 18:59:08.0314 3780 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys 18:59:08.0314 3780 MSPCLOCK - ok 18:59:08.0345 3780 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys 18:59:08.0345 3780 MSPQM - ok 18:59:08.0392 3780 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys 18:59:08.0392 3780 MsRPC - ok 18:59:08.0423 3780 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys 18:59:08.0423 3780 mssmbios - ok 18:59:08.0454 3780 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys 18:59:08.0470 3780 MSTEE - ok 18:59:08.0501 3780 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys 18:59:08.0516 3780 MTConfig - ok 18:59:08.0532 3780 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys 18:59:08.0548 3780 Mup - ok 18:59:08.0594 3780 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys 18:59:08.0594 3780 NativeWifiP - ok 18:59:08.0688 3780 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys 18:59:08.0688 3780 NDIS - ok 18:59:08.0719 3780 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys 18:59:08.0719 3780 NdisCap - ok 18:59:08.0766 3780 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys 18:59:08.0766 3780 NdisTapi - ok 18:59:08.0813 3780 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys 18:59:08.0813 3780 Ndisuio - ok 18:59:08.0860 3780 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys 18:59:08.0860 3780 NdisWan - ok 18:59:08.0906 3780 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys 18:59:08.0922 3780 NDProxy - ok 18:59:08.0953 3780 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys 18:59:08.0953 3780 NetBIOS - ok 18:59:09.0000 3780 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys 18:59:09.0000 3780 NetBT - ok 18:59:09.0172 3780 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\Windows\system32\DRIVERS\netw5v32.sys 18:59:09.0281 3780 netw5v32 - ok 18:59:09.0328 3780 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys 18:59:09.0328 3780 nfrd960 - ok 18:59:09.0390 3780 nmwcd (712bc0c22ba00b2ba324c6b8df668ee7) C:\Windows\system32\drivers\ccdcmb.sys 18:59:09.0406 3780 nmwcd - ok 18:59:09.0452 3780 nmwcdc (7312987b6ccde6f6cee32c14bed1ca2e) C:\Windows\system32\drivers\ccdcmbo.sys 18:59:09.0468 3780 nmwcdc - ok 18:59:09.0499 3780 nmwcdnsu (99145c5d4b6c4d6f5ce83ee6abffe294) C:\Windows\system32\drivers\nmwcdnsu.sys 18:59:09.0515 3780 nmwcdnsu - ok 18:59:09.0546 3780 nmwcdnsuc (faee7b61c6885b091cec1ff06da2e1ab) C:\Windows\system32\drivers\nmwcdnsuc.sys 18:59:09.0562 3780 nmwcdnsuc - ok 18:59:09.0593 3780 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys 18:59:09.0608 3780 Npfs - ok 18:59:09.0640 3780 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys 18:59:09.0640 3780 nsiproxy - ok 18:59:09.0702 3780 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys 18:59:09.0718 3780 Ntfs - ok 18:59:09.0749 3780 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys 18:59:09.0749 3780 Null - ok 18:59:09.0796 3780 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys 18:59:09.0796 3780 nvraid - ok 18:59:09.0842 3780 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys 18:59:09.0858 3780 nvstor - ok 18:59:09.0905 3780 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys 18:59:09.0920 3780 nv_agp - ok 18:59:09.0967 3780 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys 18:59:09.0967 3780 ohci1394 - ok 18:59:10.0045 3780 PARLDR2K (b129365892b2e7b5155e601a4924cd2f) C:\Windows\system32\drivers\parldr2k.sys 18:59:10.0061 3780 PARLDR2K - ok 18:59:10.0217 3780 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys 18:59:10.0217 3780 Parport - ok 18:59:10.0279 3780 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys 18:59:10.0279 3780 partmgr - ok 18:59:10.0310 3780 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys 18:59:10.0326 3780 Parvdm - ok 18:59:10.0373 3780 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\Windows\system32\DRIVERS\pccsmcfd.sys 18:59:10.0388 3780 pccsmcfd - ok 18:59:10.0420 3780 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys 18:59:10.0420 3780 pci - ok 18:59:10.0466 3780 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys 18:59:10.0466 3780 pciide - ok 18:59:10.0498 3780 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys 18:59:10.0498 3780 pcmcia - ok 18:59:10.0529 3780 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys 18:59:10.0529 3780 pcw - ok 18:59:10.0560 3780 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys 18:59:10.0576 3780 PEAUTH - ok 18:59:10.0654 3780 Point32 (896d916de06f5502d301e8c4dc442ae8) C:\Windows\system32\DRIVERS\point32.sys 18:59:10.0669 3780 Point32 - ok 18:59:10.0716 3780 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys 18:59:10.0716 3780 PptpMiniport - ok 18:59:10.0747 3780 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys 18:59:10.0747 3780 Processor - ok 18:59:10.0810 3780 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys 18:59:10.0810 3780 Psched - ok 18:59:10.0856 3780 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys 18:59:10.0888 3780 ql2300 - ok 18:59:10.0934 3780 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys 18:59:10.0934 3780 ql40xx - ok 18:59:10.0966 3780 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys 18:59:10.0966 3780 QWAVEdrv - ok 18:59:10.0997 3780 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys 18:59:10.0997 3780 RasAcd - ok 18:59:11.0044 3780 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys 18:59:11.0044 3780 RasAgileVpn - ok 18:59:11.0075 3780 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys 18:59:11.0090 3780 Rasl2tp - ok 18:59:11.0137 3780 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys 18:59:11.0137 3780 RasPppoe - ok 18:59:11.0168 3780 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys 18:59:11.0184 3780 RasSstp - ok 18:59:11.0215 3780 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys 18:59:11.0231 3780 rdbss - ok 18:59:11.0262 3780 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys 18:59:11.0262 3780 rdpbus - ok 18:59:11.0293 3780 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys 18:59:11.0293 3780 RDPCDD - ok 18:59:11.0340 3780 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys 18:59:11.0356 3780 RDPDR - ok 18:59:11.0371 3780 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys 18:59:11.0371 3780 RDPENCDD - ok 18:59:11.0402 3780 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys 18:59:11.0402 3780 RDPREFMP - ok 18:59:11.0449 3780 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys 18:59:11.0465 3780 RDPWD - ok 18:59:11.0527 3780 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys 18:59:11.0543 3780 rdyboost - ok 18:59:11.0590 3780 rismxdp (6c1f93c0760c9f79a1869d07233df39d) C:\Windows\system32\DRIVERS\rixdptsk.sys 18:59:11.0605 3780 rismxdp - ok 18:59:11.0636 3780 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys 18:59:11.0636 3780 rspndr - ok 18:59:11.0714 3780 RTHDMIAzAudService (99ffd5bbb261203fda695c84fa8be9f6) C:\Windows\system32\drivers\RtHDMIV.sys 18:59:11.0730 3780 RTHDMIAzAudService - ok 18:59:11.0777 3780 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys 18:59:11.0777 3780 s3cap - ok 18:59:11.0839 3780 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys 18:59:11.0839 3780 sbp2port - ok 18:59:11.0917 3780 SCDEmu (e9bbd87afd80dc1212ecd762858b45c7) C:\Windows\system32\drivers\SCDEmu.sys 18:59:11.0917 3780 SCDEmu - ok 18:59:11.0964 3780 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys 18:59:11.0964 3780 scfilter - ok 18:59:12.0026 3780 sdbus (0328be1c7f1cba23848179f8762e391c) C:\Windows\system32\drivers\sdbus.sys 18:59:12.0042 3780 sdbus - ok 18:59:12.0089 3780 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 18:59:12.0089 3780 secdrv - ok 18:59:12.0151 3780 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys 18:59:12.0151 3780 Serenum - ok 18:59:12.0182 3780 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys 18:59:12.0182 3780 Serial - ok 18:59:12.0229 3780 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys 18:59:12.0229 3780 sermouse - ok 18:59:12.0276 3780 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys 18:59:12.0276 3780 sffdisk - ok 18:59:12.0307 3780 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys 18:59:12.0307 3780 sffp_mmc - ok 18:59:12.0354 3780 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\DRIVERS\sffp_sd.sys 18:59:12.0354 3780 sffp_sd - ok 18:59:12.0401 3780 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys 18:59:12.0401 3780 sfloppy - ok 18:59:12.0479 3780 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys 18:59:12.0479 3780 sisagp - ok 18:59:12.0510 3780 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys 18:59:12.0526 3780 SiSRaid2 - ok 18:59:12.0541 3780 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys 18:59:12.0557 3780 SiSRaid4 - ok 18:59:12.0604 3780 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys 18:59:12.0619 3780 Smb - ok 18:59:12.0650 3780 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys 18:59:12.0650 3780 spldr - ok 18:59:12.0728 3780 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys 18:59:12.0791 3780 srv - ok 18:59:12.0838 3780 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys 18:59:12.0853 3780 srv2 - ok 18:59:12.0884 3780 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys 18:59:12.0900 3780 srvnet - ok 18:59:12.0978 3780 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys 18:59:12.0978 3780 stexstor - ok 18:59:13.0009 3780 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys 18:59:13.0025 3780 storflt - ok 18:59:13.0072 3780 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys 18:59:13.0087 3780 storvsc - ok 18:59:13.0118 3780 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys 18:59:13.0118 3780 swenum - ok 18:59:13.0196 3780 tap0901 (1e89de7a4fb7a854ebb241d0aa8996dd) C:\Windows\system32\DRIVERS\tap0901.sys 18:59:13.0212 3780 tap0901 - ok 18:59:13.0274 3780 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys 18:59:13.0337 3780 Tcpip - ok 18:59:13.0399 3780 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys 18:59:13.0399 3780 TCPIP6 - ok 18:59:13.0430 3780 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys 18:59:13.0446 3780 tcpipreg - ok 18:59:13.0493 3780 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys 18:59:13.0508 3780 TDPIPE - ok 18:59:13.0540 3780 TDTCP (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys 18:59:13.0555 3780 TDTCP - ok 18:59:13.0586 3780 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys 18:59:13.0602 3780 tdx - ok 18:59:13.0633 3780 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys 18:59:13.0649 3780 TermDD - ok 18:59:13.0711 3780 Trufos (a919775c03303d0e0690b315d26a5e1d) C:\Windows\system32\DRIVERS\Trufos.sys 18:59:13.0727 3780 Trufos - ok 18:59:13.0774 3780 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys 18:59:13.0789 3780 tssecsrv - ok 18:59:13.0852 3780 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys 18:59:13.0852 3780 TsUsbFlt - ok 18:59:13.0945 3780 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys 18:59:13.0945 3780 TuneUpUtilitiesDrv - ok 18:59:14.0008 3780 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys 18:59:14.0023 3780 tunnel - ok 18:59:14.0070 3780 TurboB (08d15ade5701acadbbb2b59ab349f74f) C:\Windows\system32\DRIVERS\TurboB.sys 18:59:14.0086 3780 TurboB - ok 18:59:14.0132 3780 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys 18:59:14.0132 3780 uagp35 - ok 18:59:14.0179 3780 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys 18:59:14.0195 3780 udfs - ok 18:59:14.0273 3780 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys 18:59:14.0273 3780 uliagpkx - ok 18:59:14.0335 3780 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys 18:59:14.0335 3780 umbus - ok 18:59:14.0398 3780 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys 18:59:14.0398 3780 UmPass - ok 18:59:14.0460 3780 upperdev (e526a166e6acafd0a9b3841d3941669e) C:\Windows\system32\DRIVERS\usbser_lowerflt.sys 18:59:14.0476 3780 upperdev - ok 18:59:14.0522 3780 USBAAPL (d4fb6ecc60a428564ba8768b0e23c0fc) C:\Windows\system32\Drivers\usbaapl.sys 18:59:14.0538 3780 USBAAPL - ok 18:59:14.0600 3780 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys 18:59:14.0616 3780 usbaudio - ok 18:59:14.0663 3780 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\DRIVERS\usbccgp.sys 18:59:14.0678 3780 usbccgp - ok 18:59:14.0710 3780 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys 18:59:14.0725 3780 usbcir - ok 18:59:14.0756 3780 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys 18:59:14.0772 3780 usbehci - ok 18:59:14.0834 3780 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys 18:59:14.0881 3780 usbhub - ok 18:59:14.0928 3780 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\drivers\usbohci.sys 18:59:14.0928 3780 usbohci - ok 18:59:14.0975 3780 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys 18:59:14.0975 3780 usbprint - ok 18:59:15.0022 3780 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys 18:59:15.0022 3780 usbscan - ok 18:59:15.0084 3780 usbser (31181de6190b39fc8007dffd1a48ffd6) C:\Windows\system32\drivers\usbser.sys 18:59:15.0100 3780 usbser - ok 18:59:15.0146 3780 UsbserFilt (6f3e3c6811b930d2414552a2e4a40f36) C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys 18:59:15.0146 3780 UsbserFilt - ok 18:59:15.0193 3780 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS 18:59:15.0209 3780 USBSTOR - ok 18:59:15.0240 3780 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys 18:59:15.0240 3780 usbuhci - ok 18:59:15.0302 3780 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\System32\Drivers\usbvideo.sys 18:59:15.0318 3780 usbvideo - ok 18:59:15.0365 3780 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys 18:59:15.0365 3780 vdrvroot - ok 18:59:15.0443 3780 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys 18:59:15.0443 3780 vga - ok 18:59:15.0474 3780 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys 18:59:15.0474 3780 VgaSave - ok 18:59:15.0536 3780 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys 18:59:15.0552 3780 vhdmp - ok 18:59:15.0583 3780 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys 18:59:15.0583 3780 viaagp - ok 18:59:15.0614 3780 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys 18:59:15.0614 3780 ViaC7 - ok 18:59:15.0661 3780 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys 18:59:15.0677 3780 viaide - ok 18:59:15.0724 3780 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys 18:59:15.0755 3780 vmbus - ok 18:59:15.0786 3780 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys 18:59:15.0802 3780 VMBusHID - ok 18:59:15.0817 3780 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys 18:59:15.0833 3780 volmgr - ok 18:59:15.0895 3780 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys 18:59:15.0895 3780 volmgrx - ok 18:59:15.0911 3780 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys 18:59:15.0958 3780 volsnap - ok 18:59:16.0036 3780 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys 18:59:16.0036 3780 vsmraid - ok 18:59:16.0082 3780 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys 18:59:16.0082 3780 vwifibus - ok 18:59:16.0129 3780 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys 18:59:16.0129 3780 WacomPen - ok 18:59:16.0176 3780 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys 18:59:16.0192 3780 WANARP - ok 18:59:16.0192 3780 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys 18:59:16.0192 3780 Wanarpv6 - ok 18:59:16.0238 3780 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys 18:59:16.0254 3780 Wd - ok 18:59:16.0270 3780 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys 18:59:16.0285 3780 Wdf01000 - ok 18:59:16.0332 3780 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys 18:59:16.0332 3780 WfpLwf - ok 18:59:16.0363 3780 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys 18:59:16.0379 3780 WIMMount - ok 18:59:16.0457 3780 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\Windows\system32\DRIVERS\WinUsb.sys 18:59:16.0472 3780 WinUsb - ok 18:59:16.0535 3780 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys 18:59:16.0535 3780 WmiAcpi - ok 18:59:16.0628 3780 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys 18:59:16.0628 3780 ws2ifsl - ok 18:59:16.0660 3780 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys 18:59:16.0675 3780 WudfPf - ok 18:59:16.0738 3780 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys 18:59:16.0738 3780 WUDFRd - ok 18:59:16.0784 3780 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 18:59:16.0847 3780 \Device\Harddisk0\DR0 - ok 18:59:16.0862 3780 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1 18:59:16.0862 3780 \Device\Harddisk1\DR1 - ok 18:59:16.0878 3780 Boot (0x1200) (214ef0629ec1ef9bf0914d2718419c71) \Device\Harddisk0\DR0\Partition0 18:59:16.0878 3780 \Device\Harddisk0\DR0\Partition0 - ok 18:59:16.0894 3780 Boot (0x1200) (4a1cf225da04774af94ff5f13c1d0e2a) \Device\Harddisk0\DR0\Partition1 18:59:16.0894 3780 \Device\Harddisk0\DR0\Partition1 - ok 18:59:16.0894 3780 Boot (0x1200) (b630a39284fc54e7a3e9ce4aa391368f) \Device\Harddisk1\DR1\Partition0 18:59:16.0894 3780 \Device\Harddisk1\DR1\Partition0 - ok 18:59:16.0894 3780 ============================================================ 18:59:16.0894 3780 Scan finished 18:59:16.0894 3780 ============================================================ 18:59:16.0909 2428 Detected object count: 0 18:59:16.0909 2428 Actual detected object count: 0 |
05.01.2012, 19:32 | #14 |
/// Malware-holic | Firefox startet nicht, Taskmanager hängt extrem lade hitmanpro: http://www.trojaner-board.de/99424-c...o-scannen.html doppelklicken, settings, license, activate test license scanner, dort funde in quarantäne, nach scan. dann am ende log als xml exportieren und hier anhängen
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
05.01.2012, 20:15 | #15 |
| Firefox startet nicht, Taskmanager hängt extremCode:
ATTFilter <Log computer="DELL-STUDIO" scan="Normal" version="3.5.9.131" date="2012-01-05T19:40:41" timeSpentInSecs="331" filesProcessed="168264"><Item type="Suspicious" score="38.0" status="None"></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@ads.creative-serving[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@ads.fling[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@adtech[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@clicksor[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@content.yieldmanager[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@content.yieldmanager[3].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@creative-serving[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@eaeacom.112.2o7[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@fl01.ct2.comclick[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@invitemedia[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@mm.chitika[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@msnportal.112.2o7[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@myroitracking[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@overture[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@revsci[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@serving-sys[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@track.effiliation[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@track.effiliation[2].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\dell@xiti[1].txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies\Q04LVW60.txt" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:2o7.net" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:ad.adnet.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:ad.zanox.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:de.partypoker.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:de.sitestat.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:partypoker.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:rts.pgmediaserve.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:stats.computecmedia.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:track.webtrekk.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:www.etracker.de" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:xiti.com" /></Item><Item type="Repair" score="0.0" status="Deleted"><File path="C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\n7wz0213.default\cookies.sqlite:yadro.ru" /></Item><Item type="Malware" malwareName="Trojan" score="106.0" status="Deleted"><Scanners><Scanner id="Ikarus" name="Trojan-Dropper!IK" /></Scanners><File path="C:\Users\Dell\Downloads\SteamEmu\SteamLauncher.exe" hash="2A0ADC3CAA9F100C643E51B345D212E8192C7667F627163D87990DB30F55B59E" /></Item></Log> |
Themen zu Firefox startet nicht, Taskmanager hängt extrem |
brauch, fenster, firefox, google, hängt, icon, klicke, klicken, kurze, langsam, leute, maus, nichts, problem, prozesse, reagiert, sekunden, startet, startet nicht, steigt, systemauslastung, taskleiste, taskmanager, überhaupt, öffnet |