|
Log-Analyse und Auswertung: Hohe CPU Auslastung & thewebtimes WeiterleitungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.02.2012, 16:54 | #16 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Edit: Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
09.02.2012, 17:10 | #17 |
| Hohe CPU Auslastung & thewebtimes Weiterleitung Mein Office ist vorinstalliert gewesen, was das sein soll - ich habe keine Ahnung!
__________________ |
09.02.2012, 17:12 | #18 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html
__________________Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet, Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten. Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs. Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten! Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern ) Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ |
09.02.2012, 17:26 | #19 |
| Hohe CPU Auslastung & thewebtimes WeiterleitungCode:
ATTFilter 17:21:33.0647 5340 TDSS rootkit removing tool 2.7.11.0 Feb 9 2012 10:12:57 17:21:33.0819 5340 ============================================================ 17:21:33.0819 5340 Current date / time: 2012/02/09 17:21:33.0819 17:21:33.0834 5340 SystemInfo: 17:21:33.0834 5340 17:21:33.0834 5340 OS Version: 6.1.7601 ServicePack: 1.0 17:21:33.0834 5340 Product type: Workstation 17:21:33.0834 5340 ComputerName: BERNISP 17:21:33.0834 5340 UserName: *** 17:21:33.0834 5340 Windows directory: C:\Windows 17:21:33.0834 5340 System windows directory: C:\Windows 17:21:33.0834 5340 Running under WOW64 17:21:33.0834 5340 Processor architecture: Intel x64 17:21:33.0834 5340 Number of processors: 2 17:21:33.0834 5340 Page size: 0x1000 17:21:33.0834 5340 Boot type: Normal boot 17:21:33.0834 5340 ============================================================ 17:21:34.0302 5340 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 17:21:34.0318 5340 \Device\Harddisk0\DR0: 17:21:34.0318 5340 MBR used 17:21:34.0318 5340 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x17A8800, BlocksNum 0x32000 17:21:34.0318 5340 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x17DA800, BlocksNum 0x23C53AB0 17:21:34.0349 5340 Initialize success 17:21:34.0349 5340 ============================================================ 17:23:46.0192 4920 ============================================================ 17:23:46.0192 4920 Scan started 17:23:46.0192 4920 Mode: Manual; SigCheck; TDLFS; 17:23:46.0192 4920 ============================================================ 17:23:47.0237 4920 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 17:23:47.0362 4920 1394ohci - ok 17:23:47.0502 4920 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 17:23:47.0533 4920 ACPI - ok 17:23:47.0611 4920 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 17:23:47.0752 4920 AcpiPmi - ok 17:23:47.0861 4920 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 17:23:47.0923 4920 adp94xx - ok 17:23:48.0001 4920 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 17:23:48.0048 4920 adpahci - ok 17:23:48.0142 4920 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 17:23:48.0189 4920 adpu320 - ok 17:23:48.0329 4920 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys 17:23:48.0407 4920 AFD - ok 17:23:48.0547 4920 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 17:23:48.0579 4920 agp440 - ok 17:23:48.0750 4920 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 17:23:48.0781 4920 aliide - ok 17:23:48.0844 4920 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 17:23:48.0859 4920 amdide - ok 17:23:48.0906 4920 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 17:23:48.0984 4920 AmdK8 - ok 17:23:49.0062 4920 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 17:23:49.0125 4920 AmdPPM - ok 17:23:49.0249 4920 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 17:23:49.0281 4920 amdsata - ok 17:23:49.0359 4920 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 17:23:49.0390 4920 amdsbs - ok 17:23:49.0405 4920 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 17:23:49.0421 4920 amdxata - ok 17:23:49.0624 4920 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 17:23:49.0842 4920 AppID - ok 17:23:49.0998 4920 appliand (0eeff7103e4f3e783f3d2b870af67f1c) C:\Windows\system32\DRIVERS\appliand.sys 17:23:50.0076 4920 appliand - ok 17:23:50.0092 4920 appliandMP (0eeff7103e4f3e783f3d2b870af67f1c) C:\Windows\system32\DRIVERS\appliand.sys 17:23:50.0092 4920 appliandMP - ok 17:23:50.0201 4920 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 17:23:50.0232 4920 arc - ok 17:23:50.0263 4920 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 17:23:50.0279 4920 arcsas - ok 17:23:50.0341 4920 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys 17:23:50.0373 4920 ArcSoftKsUFilter - ok 17:23:50.0513 4920 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 17:23:50.0700 4920 AsyncMac - ok 17:23:50.0825 4920 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 17:23:50.0856 4920 atapi - ok 17:23:50.0997 4920 avgntflt (b1224e6b086cd6548315b04ab575a23e) C:\Windows\system32\DRIVERS\avgntflt.sys 17:23:51.0028 4920 avgntflt - ok 17:23:51.0153 4920 avipbb (ed45f12cfa62b83765c9c1496758cc87) C:\Windows\system32\DRIVERS\avipbb.sys 17:23:51.0184 4920 avipbb - ok 17:23:51.0340 4920 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 17:23:51.0402 4920 b06bdrv - ok 17:23:51.0527 4920 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 17:23:51.0589 4920 b57nd60a - ok 17:23:51.0699 4920 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 17:23:51.0777 4920 Beep - ok 17:23:51.0901 4920 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 17:23:51.0948 4920 blbdrive - ok 17:23:52.0135 4920 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 17:23:52.0213 4920 bowser - ok 17:23:52.0307 4920 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 17:23:52.0416 4920 BrFiltLo - ok 17:23:52.0525 4920 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 17:23:52.0572 4920 BrFiltUp - ok 17:23:52.0619 4920 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 17:23:52.0681 4920 Brserid - ok 17:23:52.0713 4920 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 17:23:52.0744 4920 BrSerWdm - ok 17:23:52.0791 4920 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 17:23:52.0853 4920 BrUsbMdm - ok 17:23:52.0978 4920 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 17:23:53.0056 4920 BrUsbSer - ok 17:23:53.0181 4920 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys 17:23:53.0259 4920 BthEnum - ok 17:23:53.0399 4920 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 17:23:53.0461 4920 BTHMODEM - ok 17:23:53.0571 4920 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 17:23:53.0649 4920 BthPan - ok 17:23:53.0742 4920 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys 17:23:53.0820 4920 BTHPORT - ok 17:23:53.0945 4920 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys 17:23:53.0992 4920 BTHUSB - ok 17:23:54.0039 4920 btwaudio (6bcfdc2b5b7f66d484486d4bd4b39a6b) C:\Windows\system32\drivers\btwaudio.sys 17:23:54.0070 4920 btwaudio - ok 17:23:54.0179 4920 btwavdt (82dc8b7c626e526681c1bebed2bc3ff9) C:\Windows\system32\DRIVERS\btwavdt.sys 17:23:54.0210 4920 btwavdt - ok 17:23:54.0351 4920 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys 17:23:54.0382 4920 btwl2cap - ok 17:23:54.0429 4920 btwrchid (28e105ad3b79f440bf94780f507bf66a) C:\Windows\system32\DRIVERS\btwrchid.sys 17:23:54.0444 4920 btwrchid - ok 17:23:54.0507 4920 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 17:23:54.0553 4920 cdfs - ok 17:23:54.0694 4920 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys 17:23:54.0772 4920 cdrom - ok 17:23:54.0912 4920 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 17:23:54.0990 4920 circlass - ok 17:23:55.0037 4920 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 17:23:55.0053 4920 CLFS - ok 17:23:55.0115 4920 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 17:23:55.0162 4920 CmBatt - ok 17:23:55.0209 4920 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 17:23:55.0240 4920 cmdide - ok 17:23:55.0287 4920 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys 17:23:55.0318 4920 CNG - ok 17:23:55.0380 4920 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 17:23:55.0396 4920 Compbatt - ok 17:23:55.0474 4920 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 17:23:55.0536 4920 CompositeBus - ok 17:23:55.0614 4920 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 17:23:55.0630 4920 crcdisk - ok 17:23:55.0786 4920 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 17:23:55.0864 4920 DfsC - ok 17:23:55.0895 4920 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 17:23:55.0957 4920 discache - ok 17:23:56.0067 4920 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 17:23:56.0082 4920 Disk - ok 17:23:56.0129 4920 Dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys 17:23:56.0176 4920 Dot4 - ok 17:23:56.0285 4920 Dot4Print (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\drivers\Dot4Prt.sys 17:23:56.0332 4920 Dot4Print - ok 17:23:56.0363 4920 dot4usb (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys 17:23:56.0410 4920 dot4usb - ok 17:23:56.0457 4920 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 17:23:56.0488 4920 drmkaud - ok 17:23:56.0566 4920 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 17:23:56.0613 4920 DXGKrnl - ok 17:23:56.0737 4920 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 17:23:56.0878 4920 ebdrv - ok 17:23:57.0018 4920 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 17:23:57.0065 4920 elxstor - ok 17:23:57.0143 4920 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 17:23:57.0190 4920 ErrDev - ok 17:23:57.0315 4920 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 17:23:57.0424 4920 exfat - ok 17:23:57.0439 4920 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 17:23:57.0502 4920 fastfat - ok 17:23:57.0564 4920 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 17:23:57.0595 4920 fdc - ok 17:23:57.0673 4920 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 17:23:57.0689 4920 FileInfo - ok 17:23:57.0720 4920 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 17:23:57.0751 4920 Filetrace - ok 17:23:57.0798 4920 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 17:23:57.0845 4920 flpydisk - ok 17:23:57.0954 4920 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 17:23:57.0985 4920 FltMgr - ok 17:23:58.0032 4920 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 17:23:58.0032 4920 FsDepends - ok 17:23:58.0063 4920 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 17:23:58.0079 4920 Fs_Rec - ok 17:23:58.0141 4920 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 17:23:58.0188 4920 fvevol - ok 17:23:58.0219 4920 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 17:23:58.0235 4920 gagp30kx - ok 17:23:58.0266 4920 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 17:23:58.0282 4920 GEARAspiWDM - ok 17:23:58.0453 4920 hamachi (7eec4281639dc7e9a67c661efd414f3a) C:\Windows\system32\DRIVERS\hamachi.sys 17:23:58.0485 4920 hamachi - ok 17:23:58.0516 4920 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 17:23:58.0578 4920 hcw85cir - ok 17:23:58.0672 4920 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 17:23:58.0703 4920 HdAudAddService - ok 17:23:58.0797 4920 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 17:23:58.0859 4920 HDAudBus - ok 17:23:58.0953 4920 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 17:23:59.0015 4920 HidBatt - ok 17:23:59.0140 4920 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 17:23:59.0218 4920 HidBth - ok 17:23:59.0249 4920 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 17:23:59.0311 4920 HidIr - ok 17:23:59.0452 4920 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys 17:23:59.0514 4920 HidUsb - ok 17:23:59.0686 4920 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 17:23:59.0717 4920 HpSAMD - ok 17:23:59.0795 4920 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 17:23:59.0889 4920 HTTP - ok 17:24:00.0013 4920 hwdatacard (d96a290f699081ae737390c0fe329d7c) C:\Windows\system32\DRIVERS\ewusbmdm.sys 17:24:00.0076 4920 hwdatacard - ok 17:24:00.0138 4920 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 17:24:00.0169 4920 hwpolicy - ok 17:24:00.0325 4920 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys 17:24:00.0372 4920 i8042prt - ok 17:24:00.0419 4920 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 17:24:00.0466 4920 iaStor - ok 17:24:00.0544 4920 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys 17:24:00.0591 4920 iaStorV - ok 17:24:00.0637 4920 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 17:24:00.0684 4920 iirsp - ok 17:24:00.0825 4920 IntcAzAudAddService (b16fc828ce7a76a8f1ce682e6ead2627) C:\Windows\system32\drivers\RTKVHD64.sys 17:24:00.0856 4920 IntcAzAudAddService - ok 17:24:00.0934 4920 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 17:24:00.0965 4920 intelide - ok 17:24:01.0059 4920 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 17:24:01.0121 4920 intelppm - ok 17:24:01.0261 4920 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 17:24:01.0371 4920 IpFilterDriver - ok 17:24:01.0417 4920 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 17:24:01.0480 4920 IPMIDRV - ok 17:24:01.0527 4920 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 17:24:01.0589 4920 IPNAT - ok 17:24:01.0745 4920 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 17:24:01.0823 4920 IRENUM - ok 17:24:01.0932 4920 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 17:24:01.0963 4920 isapnp - ok 17:24:02.0026 4920 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 17:24:02.0073 4920 iScsiPrt - ok 17:24:02.0119 4920 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 17:24:02.0135 4920 kbdclass - ok 17:24:02.0275 4920 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys 17:24:02.0307 4920 kbdhid - ok 17:24:02.0353 4920 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys 17:24:02.0369 4920 KSecDD - ok 17:24:02.0416 4920 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys 17:24:02.0463 4920 KSecPkg - ok 17:24:02.0509 4920 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 17:24:02.0572 4920 ksthunk - ok 17:24:02.0790 4920 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys 17:24:02.0806 4920 Lavasoft Kernexplorer - ok 17:24:02.0915 4920 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 17:24:02.0977 4920 lltdio - ok 17:24:03.0040 4920 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 17:24:03.0071 4920 LSI_FC - ok 17:24:03.0102 4920 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 17:24:03.0118 4920 LSI_SAS - ok 17:24:03.0149 4920 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 17:24:03.0165 4920 LSI_SAS2 - ok 17:24:03.0196 4920 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 17:24:03.0211 4920 LSI_SCSI - ok 17:24:03.0243 4920 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 17:24:03.0336 4920 luafv - ok 17:24:03.0461 4920 massfilter (23488767cb18fc3ff39e3af1db3fb02c) C:\Windows\system32\drivers\massfilter.sys 17:24:03.0492 4920 massfilter ( UnsignedFile.Multi.Generic ) - warning 17:24:03.0492 4920 massfilter - detected UnsignedFile.Multi.Generic (1) 17:24:03.0633 4920 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys 17:24:03.0664 4920 MBAMProtector - ok 17:24:03.0773 4920 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 17:24:03.0804 4920 megasas - ok 17:24:03.0851 4920 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 17:24:03.0867 4920 MegaSR - ok 17:24:03.0976 4920 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 17:24:04.0038 4920 Modem - ok 17:24:04.0069 4920 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 17:24:04.0132 4920 monitor - ok 17:24:04.0210 4920 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 17:24:04.0241 4920 mouclass - ok 17:24:04.0335 4920 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 17:24:04.0397 4920 mouhid - ok 17:24:04.0444 4920 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 17:24:04.0475 4920 mountmgr - ok 17:24:04.0538 4920 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 17:24:04.0569 4920 mpio - ok 17:24:04.0600 4920 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 17:24:04.0662 4920 mpsdrv - ok 17:24:04.0740 4920 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 17:24:04.0818 4920 MRxDAV - ok 17:24:04.0881 4920 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 17:24:04.0943 4920 mrxsmb - ok 17:24:05.0052 4920 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 17:24:05.0099 4920 mrxsmb10 - ok 17:24:05.0146 4920 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 17:24:05.0177 4920 mrxsmb20 - ok 17:24:05.0240 4920 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 17:24:05.0271 4920 msahci - ok 17:24:05.0318 4920 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 17:24:05.0349 4920 msdsm - ok 17:24:05.0380 4920 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 17:24:05.0427 4920 Msfs - ok 17:24:05.0458 4920 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 17:24:05.0536 4920 mshidkmdf - ok 17:24:05.0583 4920 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 17:24:05.0614 4920 msisadrv - ok 17:24:05.0754 4920 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 17:24:05.0864 4920 MSKSSRV - ok 17:24:05.0988 4920 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 17:24:06.0066 4920 MSPCLOCK - ok 17:24:06.0176 4920 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 17:24:06.0254 4920 MSPQM - ok 17:24:06.0300 4920 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 17:24:06.0332 4920 MsRPC - ok 17:24:06.0394 4920 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 17:24:06.0425 4920 mssmbios - ok 17:24:06.0503 4920 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 17:24:06.0597 4920 MSTEE - ok 17:24:06.0628 4920 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 17:24:06.0675 4920 MTConfig - ok 17:24:06.0800 4920 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 17:24:06.0831 4920 Mup - ok 17:24:06.0909 4920 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 17:24:06.0956 4920 NativeWifiP - ok 17:24:07.0096 4920 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 17:24:07.0158 4920 NDIS - ok 17:24:07.0221 4920 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 17:24:07.0283 4920 NdisCap - ok 17:24:07.0314 4920 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 17:24:07.0361 4920 NdisTapi - ok 17:24:07.0455 4920 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 17:24:07.0533 4920 Ndisuio - ok 17:24:07.0611 4920 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 17:24:07.0689 4920 NdisWan - ok 17:24:07.0736 4920 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 17:24:07.0798 4920 NDProxy - ok 17:24:07.0907 4920 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 17:24:07.0985 4920 NetBIOS - ok 17:24:08.0032 4920 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 17:24:08.0094 4920 NetBT - ok 17:24:08.0313 4920 netw5v64 (705283c02177809ca9fa7cc58a4f1e77) C:\Windows\system32\DRIVERS\netw5v64.sys 17:24:08.0531 4920 netw5v64 - ok 17:24:08.0640 4920 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 17:24:08.0672 4920 nfrd960 - ok 17:24:08.0718 4920 NPF (351533acc2a069b94e80bbfc177e8fdf) C:\Windows\system32\drivers\npf.sys 17:24:08.0734 4920 NPF - ok 17:24:08.0812 4920 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 17:24:08.0874 4920 Npfs - ok 17:24:08.0906 4920 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 17:24:08.0952 4920 nsiproxy - ok 17:24:09.0140 4920 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 17:24:09.0296 4920 Ntfs - ok 17:24:09.0389 4920 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 17:24:09.0483 4920 Null - ok 17:24:09.0561 4920 NVHDA (cb599955ce2ce9694721562f9481cd84) C:\Windows\system32\drivers\nvhda64v.sys 17:24:09.0592 4920 NVHDA - ok 17:24:09.0951 4920 nvlddmkm (ff02bae39d23bb74959f6f49bbd589d3) C:\Windows\system32\DRIVERS\nvlddmkm.sys 17:24:10.0138 4920 nvlddmkm - ok 17:24:10.0216 4920 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 17:24:10.0247 4920 nvraid - ok 17:24:10.0278 4920 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 17:24:10.0294 4920 nvstor - ok 17:24:10.0450 4920 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 17:24:10.0481 4920 nv_agp - ok 17:24:10.0559 4920 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 17:24:10.0637 4920 ohci1394 - ok 17:24:10.0793 4920 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 17:24:10.0840 4920 Parport - ok 17:24:10.0902 4920 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys 17:24:10.0918 4920 partmgr - ok 17:24:10.0996 4920 pccsmcfd (bc0018c2d29f655188a0ed3fa94fdb24) C:\Windows\system32\DRIVERS\pccsmcfdx64.sys 17:24:11.0043 4920 pccsmcfd - ok 17:24:11.0168 4920 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 17:24:11.0183 4920 pci - ok 17:24:11.0230 4920 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 17:24:11.0261 4920 pciide - ok 17:24:11.0308 4920 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 17:24:11.0355 4920 pcmcia - ok 17:24:11.0448 4920 PCTCore (54e013b6d55b81c0aa1ebea80ff42383) C:\Windows\system32\drivers\PCTCore64.sys 17:24:11.0480 4920 PCTCore - ok 17:24:11.0495 4920 pctDS (ff43e3b1687e4e2140de6349ea5c7372) C:\Windows\system32\drivers\pctDS64.sys 17:24:11.0526 4920 pctDS - ok 17:24:11.0558 4920 pctEFA (60e9a05852af7e9cb11237c00aee4ccf) C:\Windows\system32\drivers\pctEFA64.sys 17:24:11.0589 4920 pctEFA - ok 17:24:11.0651 4920 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 17:24:11.0682 4920 pcw - ok 17:24:11.0729 4920 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 17:24:11.0792 4920 PEAUTH - ok 17:24:12.0104 4920 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 17:24:12.0182 4920 PptpMiniport - ok 17:24:12.0228 4920 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 17:24:12.0275 4920 Processor - ok 17:24:12.0447 4920 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 17:24:12.0509 4920 Psched - ok 17:24:12.0618 4920 PxHlpa64 (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys 17:24:12.0634 4920 PxHlpa64 - ok 17:24:12.0774 4920 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 17:24:12.0852 4920 ql2300 - ok 17:24:12.0962 4920 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 17:24:12.0977 4920 ql40xx - ok 17:24:13.0008 4920 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 17:24:13.0055 4920 QWAVEdrv - ok 17:24:13.0118 4920 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 17:24:13.0196 4920 RasAcd - ok 17:24:13.0289 4920 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 17:24:13.0352 4920 RasAgileVpn - ok 17:24:13.0414 4920 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 17:24:13.0508 4920 Rasl2tp - ok 17:24:13.0554 4920 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 17:24:13.0648 4920 RasPppoe - ok 17:24:13.0757 4920 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 17:24:13.0835 4920 RasSstp - ok 17:24:13.0898 4920 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 17:24:13.0976 4920 rdbss - ok 17:24:14.0085 4920 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 17:24:14.0147 4920 rdpbus - ok 17:24:14.0178 4920 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 17:24:14.0225 4920 RDPCDD - ok 17:24:14.0288 4920 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 17:24:14.0350 4920 RDPENCDD - ok 17:24:14.0381 4920 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 17:24:14.0412 4920 RDPREFMP - ok 17:24:14.0475 4920 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys 17:24:14.0522 4920 RDPWD - ok 17:24:14.0600 4920 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 17:24:14.0631 4920 rdyboost - ok 17:24:14.0678 4920 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 17:24:14.0724 4920 RFCOMM - ok 17:24:14.0834 4920 rimspci (5767961268aa43d9f3fa6d59ec8b7b12) C:\Windows\system32\DRIVERS\rimssne64.sys 17:24:14.0896 4920 rimspci - ok 17:24:15.0005 4920 risdsnpe (bb6e138aeb351728959da5e2731d8140) C:\Windows\system32\DRIVERS\risdsne64.sys 17:24:15.0052 4920 risdsnpe - ok 17:24:15.0224 4920 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 17:24:15.0317 4920 rspndr - ok 17:24:15.0364 4920 s125bus (ae722fd346b75b776ca75f297347ee8a) C:\Windows\system32\DRIVERS\s125bus.sys 17:24:15.0380 4920 s125bus - ok 17:24:15.0411 4920 s125mdfl (651362aadc145d0028df288182989136) C:\Windows\system32\DRIVERS\s125mdfl.sys 17:24:15.0426 4920 s125mdfl - ok 17:24:15.0442 4920 s125mdm (0744248b0ee7c0f652882ae3b67e6429) C:\Windows\system32\DRIVERS\s125mdm.sys 17:24:15.0458 4920 s125mdm - ok 17:24:15.0489 4920 s125mgmt (51c6262ad6dd5da12543f623b0ee2ebf) C:\Windows\system32\DRIVERS\s125mgmt.sys 17:24:15.0504 4920 s125mgmt - ok 17:24:15.0551 4920 s125obex (5a5b9b10a9545a832b436884a1d1a848) C:\Windows\system32\DRIVERS\s125obex.sys 17:24:15.0567 4920 s125obex - ok 17:24:15.0629 4920 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 17:24:15.0660 4920 sbp2port - ok 17:24:15.0738 4920 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 17:24:15.0816 4920 scfilter - ok 17:24:15.0988 4920 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\drivers\sdbus.sys 17:24:16.0035 4920 sdbus - ok 17:24:16.0082 4920 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 17:24:16.0113 4920 secdrv - ok 17:24:16.0191 4920 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 17:24:16.0222 4920 Serenum - ok 17:24:16.0253 4920 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 17:24:16.0284 4920 Serial - ok 17:24:16.0331 4920 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 17:24:16.0362 4920 sermouse - ok 17:24:16.0456 4920 SFEP (70f9c476b62de4f2823e918a6c181ade) C:\Windows\system32\DRIVERS\SFEP.sys 17:24:16.0503 4920 SFEP - ok 17:24:16.0612 4920 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 17:24:16.0674 4920 sffdisk - ok 17:24:16.0706 4920 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 17:24:16.0737 4920 sffp_mmc - ok 17:24:16.0752 4920 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 17:24:16.0799 4920 sffp_sd - ok 17:24:16.0862 4920 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 17:24:16.0908 4920 sfloppy - ok 17:24:16.0971 4920 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 17:24:17.0002 4920 SiSRaid2 - ok 17:24:17.0033 4920 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 17:24:17.0049 4920 SiSRaid4 - ok 17:24:17.0096 4920 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 17:24:17.0142 4920 Smb - ok 17:24:17.0376 4920 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 17:24:17.0392 4920 spldr - ok 17:24:17.0532 4920 sptd (602884696850c86434530790b110e8eb) C:\Windows\System32\Drivers\sptd.sys 17:24:17.0610 4920 sptd - ok 17:24:17.0688 4920 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 17:24:17.0751 4920 srv - ok 17:24:17.0876 4920 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 17:24:17.0922 4920 srv2 - ok 17:24:17.0969 4920 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 17:24:18.0000 4920 srvnet - ok 17:24:18.0063 4920 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 17:24:18.0094 4920 stexstor - ok 17:24:18.0156 4920 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 17:24:18.0172 4920 swenum - ok 17:24:18.0250 4920 SynTP (be7311da9d6833fa69ed04b744a1c8f8) C:\Windows\system32\DRIVERS\SynTP.sys 17:24:18.0281 4920 SynTP - ok 17:24:18.0500 4920 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys 17:24:18.0578 4920 Tcpip - ok 17:24:18.0905 4920 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys 17:24:18.0952 4920 TCPIP6 - ok 17:24:19.0092 4920 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 17:24:19.0155 4920 tcpipreg - ok 17:24:19.0202 4920 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 17:24:19.0264 4920 TDPIPE - ok 17:24:19.0358 4920 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 17:24:19.0404 4920 TDTCP - ok 17:24:19.0560 4920 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 17:24:19.0623 4920 tdx - ok 17:24:19.0732 4920 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 17:24:19.0779 4920 TermDD - ok 17:24:19.0888 4920 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 17:24:19.0966 4920 tssecsrv - ok 17:24:20.0075 4920 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 17:24:20.0169 4920 TsUsbFlt - ok 17:24:20.0309 4920 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 17:24:20.0403 4920 tunnel - ok 17:24:20.0434 4920 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 17:24:20.0450 4920 uagp35 - ok 17:24:20.0590 4920 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 17:24:20.0652 4920 udfs - ok 17:24:20.0762 4920 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 17:24:20.0793 4920 uliagpkx - ok 17:24:20.0871 4920 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 17:24:20.0918 4920 umbus - ok 17:24:20.0980 4920 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 17:24:21.0027 4920 UmPass - ok 17:24:21.0136 4920 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys 17:24:21.0167 4920 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning 17:24:21.0167 4920 USBAAPL64 - detected UnsignedFile.Multi.Generic (1) 17:24:21.0214 4920 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys 17:24:21.0245 4920 usbccgp - ok 17:24:21.0386 4920 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 17:24:21.0464 4920 usbcir - ok 17:24:21.0495 4920 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys 17:24:21.0526 4920 usbehci - ok 17:24:21.0651 4920 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys 17:24:21.0698 4920 usbhub - ok 17:24:21.0729 4920 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 17:24:21.0760 4920 usbohci - ok 17:24:21.0869 4920 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 17:24:21.0916 4920 usbprint - ok 17:24:21.0994 4920 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 17:24:22.0025 4920 usbscan - ok 17:24:22.0072 4920 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 17:24:22.0134 4920 USBSTOR - ok 17:24:22.0197 4920 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys 17:24:22.0244 4920 usbuhci - ok 17:24:22.0322 4920 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 17:24:22.0400 4920 usbvideo - ok 17:24:22.0665 4920 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 17:24:22.0665 4920 vdrvroot - ok 17:24:22.0727 4920 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 17:24:22.0758 4920 vga - ok 17:24:22.0790 4920 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 17:24:22.0852 4920 VgaSave - ok 17:24:22.0914 4920 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 17:24:22.0961 4920 vhdmp - ok 17:24:23.0008 4920 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 17:24:23.0024 4920 viaide - ok 17:24:23.0102 4920 VNUSB (3f63fa4a5d8a7c1b1a87e342569fba53) C:\Windows\system32\Drivers\VNUSB.sys 17:24:23.0148 4920 VNUSB - ok 17:24:23.0258 4920 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 17:24:23.0304 4920 volmgr - ok 17:24:23.0367 4920 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 17:24:23.0382 4920 volmgrx - ok 17:24:23.0445 4920 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 17:24:23.0476 4920 volsnap - ok 17:24:23.0523 4920 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 17:24:23.0554 4920 vsmraid - ok 17:24:23.0601 4920 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys 17:24:23.0632 4920 vwifibus - ok 17:24:23.0741 4920 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 17:24:23.0788 4920 WacomPen - ok 17:24:23.0928 4920 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 17:24:24.0022 4920 WANARP - ok 17:24:24.0038 4920 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 17:24:24.0069 4920 Wanarpv6 - ok 17:24:24.0240 4920 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 17:24:24.0287 4920 Wd - ok 17:24:24.0318 4920 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 17:24:24.0350 4920 Wdf01000 - ok 17:24:24.0474 4920 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 17:24:24.0521 4920 WfpLwf - ok 17:24:24.0599 4920 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 17:24:24.0630 4920 WIMMount - ok 17:24:24.0786 4920 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys 17:24:24.0849 4920 WinUsb - ok 17:24:24.0927 4920 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 17:24:24.0958 4920 WmiAcpi - ok 17:24:25.0098 4920 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 17:24:25.0192 4920 ws2ifsl - ok 17:24:25.0301 4920 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 17:24:25.0364 4920 WudfPf - ok 17:24:25.0488 4920 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 17:24:25.0582 4920 WUDFRd - ok 17:24:25.0738 4920 yukonw7 (6affd75c6807b3dd3ab018e27b88ef95) C:\Windows\system32\DRIVERS\yk62x64.sys 17:24:25.0785 4920 yukonw7 - ok 17:24:25.0863 4920 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 17:24:26.0081 4920 \Device\Harddisk0\DR0 - ok 17:24:26.0097 4920 Boot (0x1200) (9bc0edb184f5187eb355b37654974d4e) \Device\Harddisk0\DR0\Partition0 17:24:26.0097 4920 \Device\Harddisk0\DR0\Partition0 - ok 17:24:26.0144 4920 Boot (0x1200) (24ea07d16a69568e2c6cb443bd84ccf9) \Device\Harddisk0\DR0\Partition1 17:24:26.0144 4920 \Device\Harddisk0\DR0\Partition1 - ok 17:24:26.0159 4920 ============================================================ 17:24:26.0159 4920 Scan finished 17:24:26.0159 4920 ============================================================ 17:24:26.0175 4464 Detected object count: 2 17:24:26.0175 4464 Actual detected object count: 2 17:24:42.0056 4464 massfilter ( UnsignedFile.Multi.Generic ) - skipped by user 17:24:42.0056 4464 massfilter ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:24:42.0056 4464 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user 17:24:42.0056 4464 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip |
09.02.2012, 20:41 | #20 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat! Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie Zitat:
__________________ Logfiles bitte immer in CODE-Tags posten |
09.02.2012, 22:30 | #21 |
| Hohe CPU Auslastung & thewebtimes Weiterleitung Jetzt habe ich folgendes Problem: Combofix sagt mir, dass Lavasoft Ad-Watch Live! und Virenschutz sowie Antivir Desktop noch laufen. Ich habe nur davor beide Programme deinstalliert, Lavasoft habe ich in den Diensten noch drinnne aus irgendeinem Grund hab es aber auf deaktiv gesetzt und restart gemacht, Antivir sehe ich nirgends mehr in den aktiven Diensten, das kann ich mir überhaupt nicht erklären. Kannst du mir weiterhelfen? |
10.02.2012, 12:11 | #22 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Wenn AntiVir weg ist kannst du die Meldung ignorieren und einfach weiterklicken
__________________ Logfiles bitte immer in CODE-Tags posten |
10.02.2012, 15:18 | #23 |
| Hohe CPU Auslastung & thewebtimes Weiterleitung Mittleweile sind die Weiterleitungen in Firefox glaube ich weg bzw. seit gestern nicht mehr aufgetreten. Generell wirkt das System als Ganzes deutlich schneller und die CPU Auslastung liegt irgendwo bei 10% im Office Betrieb mit mehren Browserseiten offen. Code:
ATTFilter ComboFix 12-02-09.04 - *** 10.02.2012 14:59:23.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.43.1031.18.4063.2821 [GMT 1:00] ausgeführt von:: c:\users\***\Desktop\ComboFix.exe AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7} AV: Lavasoft Ad-Watch Live! Virenschutz *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A} SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2012-01-10 bis 2012-02-10 )))))))))))))))))))))))))))))) . . 2012-02-10 14:07 . 2012-02-10 14:07 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-02-10 14:07 . 2012-02-10 14:07 -------- d-----w- c:\users\Administrator\AppData\Local\temp 2012-02-09 15:40 . 2012-02-09 15:40 -------- d-----w- C:\_OTL 2012-01-30 18:39 . 2012-01-30 18:50 -------- d-----w- c:\users\***\.freemind 2012-01-30 18:39 . 2012-01-30 18:39 -------- d-----w- c:\program files (x86)\FreeMind 2012-01-24 12:22 . 2012-01-24 12:22 -------- d-----w- c:\program files (x86)\ESET 2012-01-11 18:13 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll 2012-01-11 18:13 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll 2012-01-11 18:13 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll 2012-01-11 18:13 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll 2012-01-11 18:13 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll 2012-01-11 18:13 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll 2012-01-11 18:13 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll 2012-01-11 18:13 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-10 14:24 . 2011-04-30 19:15 23152 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-11-24 04:52 . 2011-12-15 09:40 3145216 ----a-w- c:\windows\system32\win32k.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="c:\users\***\AppData\Local\Akamai\netsession_win.exe" [2012-02-02 3329824] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288] "MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-09-02 26624] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-10-09 421736] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872] . c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-5-25 24176560] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584] Device Detector 3.lnk - c:\program files (x86)\Olympus\DeviceDetector\DevDtct2.exe [2011-1-18 118784] HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] 2009-07-01 09:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer6"=wdmaud.drv . R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-02 133104] R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992] R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [x] R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-02 133104] R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2011-04-30 17152] R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x] R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840] R3 sdAuxService;PC Tools Auxiliary Service;c:\program files (x86)\PC Tools Security\pctsAuxs.exe [2010-03-15 366840] R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-27 120104] R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-27 70952] R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-27 427304] R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-27 75048] R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-27 91432] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264] R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672] R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-17 110888] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [x] R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R4 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 27136] S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x] S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [x] S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360] S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x] S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimssne64.sys [x] S2 risdsnpe;risdsnpe;c:\windows\system32\DRIVERS\risdsne64.sys [x] S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960] S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-07-16 411496] S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920] S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-08-12 522240] S3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [x] S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhalt des "geplante Tasks" Ordners . 2012-02-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-02 04:47] . 2012-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-02 04:47] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080] "Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504] "IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-27 16335392] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-21 171520] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = mLocal Page = c:\windows\SysWOW64\blank.htm IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll TCP: DhcpNameServer = 192.168.0.1 TCP: Interfaces\{281F3844-8182-43BE-AF01-8632CF7475C6}\86964656: NameServer = 192.168.0.1 TCP: Interfaces\{C0061238-6148-4038-979E-952DFC9A7AE8}: NameServer = 131.130.1.11 131.130.1.12 FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\1fcxif07.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - . - - - - Entfernte verwaiste Registrierungseinträge - - - - . SafeBoot-mcmscsvc SafeBoot-MCODS HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-NTFS Undelete_is1 - i:\ntfs undelete\unins000.exe AddRemove-RecoveryFix For Windows(Demo)_is1 - i:\lost files and folders\RecoveryFix For Windows(Demo)\unins000.exe AddRemove-vfkzlfhpkoxluotsg - c:\windows\system32\vfkzlfhpkoxluotsg.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai] "ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_e286960.dll" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-3431719083-2788512362-1001467312-1000\Software\SecuROM\License information*] "datasecu"=hex:a4,e6,4e,0b,29,e4,15,c3,6f,59,67,8d,8e,4b,c7,7d,7b,0e,3c,d7,8c, cb,d9,6d,b3,e4,0a,9c,27,84,82,ad,20,db,7c,69,fd,1f,0a,8d,14,9f,0a,ff,5c,32,\ "rkeysecu"=hex:a4,52,b7,ee,02,cb,cf,56,fa,94,a5,8b,7c,ee,3e,08 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2012-02-10 15:12:02 ComboFix-quarantined-files.txt 2012-02-10 14:12 . Vor Suchlauf: 15 Verzeichnis(se), 55.700.541.440 Bytes frei Nach Suchlauf: 21 Verzeichnis(se), 54.947.049.472 Bytes frei . - - End Of File - - 150BDD2C52C7A157C5FF632AE7C0CD59 Geändert von Sliver12 (10.02.2012 um 16:14 Uhr) |
10.02.2012, 16:46 | #24 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
10.02.2012, 18:10 | #25 |
| Hohe CPU Auslastung & thewebtimes WeiterleitungCode:
ATTFilter aswMBR version 0.9.9.1532 Copyright(c) 2011 AVAST Software Run date: 2012-02-10 17:23:36 ----------------------------- 17:23:36.700 OS Version: Windows x64 6.1.7601 Service Pack 1 17:23:36.700 Number of processors: 2 586 0x170A 17:23:36.701 ComputerName: BERNISP UserName: 17:23:39.017 Initialize success 17:24:31.690 AVAST engine defs: 12021000 17:25:19.736 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 17:25:19.741 Disk 0 Vendor: ST932032 0004 Size: 305245MB BusType: 3 17:25:19.748 Disk 1 \Device\Harddisk1\DR1 -> \Device\0000006f 17:25:19.754 Disk 1 Vendor: RICOH 02 Size: 305245MB BusType: 0 17:25:19.763 Disk 2 \Device\Harddisk2\DR2 -> \Device\00000070 17:25:19.766 Disk 2 Vendor: RICOH 02 Size: 305245MB BusType: 0 17:25:19.783 Disk 0 MBR read successfully 17:25:19.787 Disk 0 MBR scan 17:25:19.791 Disk 0 Windows 7 default MBR code 17:25:19.807 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 12112 MB offset 2048 17:25:19.827 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 24807424 17:25:19.842 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 293031 MB offset 25012224 17:25:19.849 Service scanning 17:25:21.567 Modules scanning 17:25:21.581 Disk 0 trace - called modules: 17:25:21.609 ntoskrnl.exe CLASSPNP.SYS disk.sys PCTCore64.sys ACPI.sys iaStor.sys hal.dll 17:25:21.616 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004c34060] 17:25:21.637 3 CLASSPNP.SYS[fffff88001bcd43f] -> nt!IofCallDriver -> [0xfffffa8004c31970] 17:25:21.660 5 PCTCore64.sys[fffff88001159094] -> nt!IofCallDriver -> [0xfffffa8004a9f2b0] 17:25:21.678 7 ACPI.sys[fffff88000f2f7a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004aa5050] 17:25:22.712 AVAST engine scan C:\Windows 17:25:26.288 AVAST engine scan C:\Windows\system32 17:28:59.926 AVAST engine scan C:\Windows\system32\drivers 17:29:17.711 AVAST engine scan C:\Users\*** 17:43:28.663 AVAST engine scan C:\ProgramData 17:47:26.509 Scan finished successfully 18:09:29.132 Disk 0 MBR has been saved successfully to "C:\Users\***\Desktop\MBR.dat" 18:09:29.137 The log file has been saved successfully to "C:\Users\***\Desktop\aswMBR.txt" |
10.02.2012, 19:15 | #26 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Hohe CPU Auslastung & thewebtimes Weiterleitung Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!!
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Hohe CPU Auslastung & thewebtimes Weiterleitung |
4d36e972-e325-11ce-bfc1-08002be10318, 64 bit system, ad-aware, antivir, antivir guard, auslastung, avira, bonjour, codes, converter, cpu, cpu auslastung hoch, desktop, email, firefox, flash player, google, google earth, hohe cpu, home, langsam, mozilla, mp3, nicht gefunden, olympus, plug-in, problem, rundll, security, sehr langsam, software, studio, svchost.exe, system, thewebtimes, vista, windows, windows 7 home, windows 7 home premium |