Moin Leute,

habe den abnow Virus abbekommen und ihn mit Hilfe von Kaspersky Virenscanner und dem tdsskiller entfernt. Bedeutet keine weiterleitungen auf abnow mehr. Allerdings würde ich gerne wissen ob noch Reste übriggeblieben sind, welche mir zb beim Online-Banking Probleme bereiten würden.
Ich habe einfach mal die OTL-files angehängt.

gruß Summmsel

Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:

• "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
  - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
  - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
• Charakteristische Merkmale/Profilinformationen:
  - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] oder Sternchen (*) ersetzen
• Die Systemprüfung und Bereinigung:
  - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
• Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
• Innerhalb der Betreuungszeit:
  - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
• Die Reihenfolge:
  - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
• GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
• Ansonsten unsere Forumsregeln:
  - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
• Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen

Wenn ein System kompromittiert wurde, ist das System nicht mehr vertrauenswürdig
Eine Neuinstallation garantiert die rückstandsfreie Entfernung der Infektion - Lesestoff: "Hilfe: Ich wurde das Opfer eines Hackerangriffs. Was soll ich tun?" - Säubern eines gefährdeten Systems

Falls du doch für die Systemreinigung entscheidest - Ein System zu bereinigen kann ein paar Tage dauern (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst::

Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.

Achtung wichtig!:
Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
(Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)

Fixen mit OTL

• Starte die OTL.exe.
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Kopiere folgendes Skript:

:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.de/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 2A A6 B0 3D 56 7B CA 01  [binary data]
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}: "URL" = http://search.kikin.com/search/?q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 9666
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 9666
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 9666
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 9666
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 9666
FF - prefs.js..network.proxy.gopher: ""
FF - prefs.js..network.proxy.gopher_port: 0
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 9666
FF - prefs.js..network.proxy.socks_remote_dns: true
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - prefs.js..network.proxy.type: 0
O3 - HKLM\..\Toolbar: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{1f2f1410-36de-11e1-9919-90e6ba252950}\Shell - "" = AutoRun
O33 - MountPoints2\{1f2f1410-36de-11e1-9919-90e6ba252950}\Shell\AutoRun\command - "" = M:\pushinst.exe

:Files
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
         

• und füge es hier ein:
• Schließe alle Programme.
• Klicke auf den Fix Button.
• Klick auf .
• OTL verlangt einen Neustart. Bitte zulassen.
• Nach dem Neustart findest Du ein Textdokument.
  Kopiere den Inhalt hier in Code-Tags in Deinen Thread.

2.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org

• Installieren und per Doppelklick starten.
• Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
• "Komplett Scan durchführen" wählen (überall Haken setzen)
• wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
• Alle Funde - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
• Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"

eine bebilderte Anleitung findest Du hier: Anleitung

3.
Deinstalliere unter Systemsteuerung/Programme, falls existieren:
Die hier aufgelisteten Programme/Erweiterungen gelten als unnötig, meistens aus Unwissenheit oder Ignoranz wird mitinstalliert und manche davon gehört sogar zur gefährlichsten Art der Adware , oder auch zum eine "Foistware-Gruppe".
Bestandteile der Standardinstallation vieler Freeware-Programme und teilweise sogar von kostenpflichtigen Programmen, die Palette reicht von Toolbars und anderen Browser-Addons bis hin zu System-Utilities und oft die Checkbox bereits angeklickt ist, so dass man keine Möglichkeit hat, solche Zusätzprogramme abwählen.

Conduit Engine <- Adware 
kikin plugin <- ein Risikofaktor, ich würde deinstallieren
         

Hier sind einige der häufigsten Freeware-Anbieter:
Filesharing Software (wie z.B uTorrent, eMule & Co), Instant-Messaging-Client, QIP, IZArc, CPUID HWMonitor , Flash Player, Adobe Air, Silverlight, Foxit-Reader, CCleaner, Adobe Reader, Skype, Dingsby oder den RealPlayer in der Default-Einstellung installiert,
Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte.
Während der Installation die Lizenzbestimmungen immer lesen, und nicht sofort überall den Haken setzen bzw gesetzten Haken belassen, weil damit stimmt man nämlich zu, dass andere "Fremdprogramm", oder sogar Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert.

Daher ist es ratsam, nach jeder Installation in alle installierten Browser zu kontrollieren, ob:
-> die aktuelle Webseite als Startseite von dir festgelegt worden?
-> unter Extras ⇒ Erweiterungen ungewollte AddOns/PlugIns, Toolbars eingetragen sind?
-> In der Liste Zurzeit installierte Programme (unter Systemsteuerung) nachsehen, ob sich so etwas "ungewoltes" (Programm, Toolbar etc) eingenistet hat!

4.
Um festzustellen, ob veraltete oder schädliche Software unter Programme installiert sind, ich würde gerne noch all deine installierten Programme sehen:

• Download den CCleaner - Installer herunter
  
• Software-Lizenzvereinbarung lesen, falls irgendeine Toolbar angeboten wird, bitte abwählen!-> starten -> Falls nötig, auf "Deutsch" einstellen.
• starten-> klick auf `Extras` (um auf deinem System installierte Software zu anzeigen)-> dann auf `Als Textdatei speichern...`
• ein Textdatei wird automatisch erstellt, poste auch dieses Logfile (also die Liste alle installierten Programme...eine Textdatei)

5.
erneut einen Scan mit OTL:

• Doppelklick auf die OTL.exe
• Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
• Oben findest Du ein Kästchen mit Ausgabe.
  Wähle bitte Standard-Ausgabe
• Unter Extra-Registrierung wähle bitte Benutze SafeList.
• Mache Häckchen bei LOP- und Purity-Prüfung.
• Klicke nun auf Scan links oben.
• Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
  Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
• Poste die Logfiles in Code-Tags hier in den Thread.

Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B OTL-Logfile o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]

** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw

gruß
kira

So, das erste OTL-Logfile

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "127.0.0.1" removed from network.proxy.backup.ftp
Prefs.js: 9666 removed from network.proxy.backup.ftp_port
Prefs.js: "127.0.0.1" removed from network.proxy.backup.gopher
Prefs.js: 9666 removed from network.proxy.backup.gopher_port
Prefs.js: "127.0.0.1" removed from network.proxy.backup.socks
Prefs.js: 9666 removed from network.proxy.backup.socks_port
Prefs.js: "127.0.0.1" removed from network.proxy.backup.ssl
Prefs.js: 9666 removed from network.proxy.backup.ssl_port
Prefs.js: "127.0.0.1" removed from network.proxy.ftp
Prefs.js: 9666 removed from network.proxy.ftp_port
Prefs.js: "" removed from network.proxy.gopher
Prefs.js: 0 removed from network.proxy.gopher_port
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 9666 removed from network.proxy.http_port
Prefs.js: true removed from network.proxy.share_proxy_settings
Prefs.js: "127.0.0.1" removed from network.proxy.socks
Prefs.js: 9666 removed from network.proxy.socks_port
Prefs.js: true removed from network.proxy.socks_remote_dns
Prefs.js: "127.0.0.1" removed from network.proxy.ssl
Prefs.js: 9666 removed from network.proxy.ssl_port
Prefs.js: 0 removed from network.proxy.type
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{872b5b88-9db5-4310-bdd0-ac189557e5f5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{872B5B88-9DB5-4310-BDD0-AC189557E5F5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1f2f1410-36de-11e1-9919-90e6ba252950}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f2f1410-36de-11e1-9919-90e6ba252950}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1f2f1410-36de-11e1-9919-90e6ba252950}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1f2f1410-36de-11e1-9919-90e6ba252950}\ not found.
File M:\pushinst.exe not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\*****\Desktop\cmd.bat deleted successfully.
C:\Users\*****\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: AppData
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: *****
->Temp folder emptied: 245760 bytes
->Temporary Internet Files folder emptied: 85087 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 44433414 bytes
->Flash cache emptied: 470 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 43,00 mb
 
 
OTL by OldTimer - Version 3.2.39.2 log created on 03292012_123639

Files\Folders moved on Reboot...
C:\Users\*****\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
         

Dann das Mab-Logfile:

 Malwarebytes Anti-Malware  (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.29.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
***** :: SUMMMSEL [Administrator]

Schutz: Deaktiviert

29.03.2012 12:45:36
mbam-log-2012-03-29 (12-45-36).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 427479
Laufzeit: 55 Minute(n), 34 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 10
D:\Program Files (x86)\Super Meat Boy\Uninstall.exe (Malware.Packer.Krunchy) -> Keine Aktion durchgeführt.
D:\Program Files (x86)\The Binding of Isaac\TDU.exe (Packer.ModifiedUPX) -> Keine Aktion durchgeführt.
C:\TDSSKiller_Quarantine\27.03.2012_16.53.33\susp0006\svc0000\tsk0000.dta (Trojan.Siredef) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\TDSSKiller_Quarantine\27.03.2012_16.55.31\susp0006\svc0000\tsk0000.dta (Trojan.Siredef) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\AppData\Local\29386efa\X (Rootkit.0Access) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\AppData\Local\29386efa\U\800000cf.@ (Rootkit.0Access) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\Sonstiges\U1006.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\Sonstiges\U1007.exe (Malware.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\Sonstiges\Cryptload\router\FRITZ!Box\nc.exe (PUP.Netcat) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\*****\Sonstiges\winject\Winject.exe (HackTool.Agent.H) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Die installierten Programme:

7-Zip 4.65 (x64 edition)	Igor Pavlov	01.01.2010	1,28MB	4.65.00.0
7-Zip 9.10 (x64 edition)	Igor Pavlov	24.12.2009	4,27MB	9.10.00.0
ABBYY FineReader 10 Professional Edition	ABBYY	24.12.2009	583MB	10.501.51.7008
Adobe AIR	Adobe Systems Incorporated	15.11.2011		3.1.0.4880
Adobe Flash Player 11 ActiveX 64-bit	Adobe Systems Incorporated	21.08.2011	6,00MB	11.0.1.98
Adobe Flash Player 11 Plugin 64-bit	Adobe Systems Incorporated	18.02.2012	6,00MB	11.1.102.62
Adobe Reader 9.4.3 - Deutsch	Adobe Systems Incorporated	03.04.2011	164,6MB	9.4.3
Adobe Shockwave Player 11.6	Adobe Systems, Inc.	21.06.2011		11.6.0.626
Allgemeine Runtime Files (x86)	Sereby Corporation	21.08.2011	37,6MB	1.0.3.2
AMD Catalyst Install Manager	Advanced Micro Devices, Inc.	09.03.2012	26,3MB	3.0.868.0
Apple Application Support	Apple Inc.	12.12.2011	61,2MB	2.1.5
Apple Software Update	Apple Inc.	12.12.2011	2,38MB	2.1.3.127
Application Profiles	ATI Technologies, Inc.	09.05.2011	0,24MB	2.0.4141.33979
Audacity 1.3.13 (Unicode)	Audacity Team	28.09.2011	40,2MB	
Battlefield 3™	Electronic Arts	24.10.2011		1.0.0.0
Battlefield: Bad Company™ 2	Electronic Arts	16.01.2011	5.869MB	1.0.0.0
Battlelog Web Plugins	EA Digital Illusions CE AB	16.03.2012		1.116.0
CCleaner	Piriform	28.03.2012		3.17
Combined Community Codec Pack 2009-09-09	CCCP Project	24.12.2009		2009.09.09.0
Die Schlacht um Mittelerde™ II		27.12.2009		
DirectX 9.0c Extra Files (x86, x64)	Sereby Corporation	24.12.2009		1.0.1.1
DirectX for Managed Code	Sereby Corporation	24.12.2009		1.0.0.0
DivX Converter	DivX, Inc.	22.08.2010		7.1.0
DivX Player	DivX, Inc.	22.08.2010		7.2.0
DivX Plus DirectShow Filters	DivX, Inc.	22.08.2010		
DivX-Setup	DivX, Inc. 	22.08.2010		1.0.2.23
Dropbox	Dropbox, Inc.	24.02.2012		1.2.52
Empire Earth		05.06.2011		
ESN Sonar	ESN Social Software AB	08.01.2012		0.70.4
Explorer Suite III		07.05.2010		
Fraps (remove only)		29.09.2011		
Free Music Zilla	FreeMusicZilla.com	28.12.2010		
Free YouTube to MP3 Converter version 3.10.14.1206	DVDVideoSoft Ltd.	29.12.2011	77,6MB	
From Dust	Ubisoft	21.08.2011		1.0.0
Futuremark SystemInfo	Futuremark Corporation	23.12.2009		3.20.1.2
GameRanger	GameRanger Technologies	03.06.2011	3.004MB	
GIMP 2.6.11	The GIMP Team	07.03.2011	107,7MB	2.6.11
GUILD WARS		04.06.2010		
Hamachi 1.0.3.0		11.05.2011		
HandBrake 0.9.5		28.09.2011		0.9.5
Heroes of Newerth	S2 Games	20.03.2012		2.5.12
icPlus		27.01.2011		1.0.0 (de)
ICQ7.5	ICQ	09.05.2011		7.5
ICQAlarm		27.01.2011		1.00.00 (de)
Impulse	Stardock	25.12.2009		
IrfanView (remove only)		24.12.2009		
Java(TM) 6 Update 23 (64-bit)	Oracle	03.01.2011	90,9MB	6.0.230
Java(TM) 6 Update 24	Oracle	04.01.2011	95,0MB	6.0.240
Java(TM) 7	Oracle	21.08.2011	98,9MB	7.0.0
Java(TM) 7 (64-bit)	Oracle	21.08.2011	93,3MB	7.0.0
JDownloader	AppWork UG (haftungsbeschränkt)	02.01.2011		
M Taskbar Hider	Home	03.02.2011		1.0
Magicka	Arrowhead Game Studios AB	23.02.2011		
Malwarebytes Anti-Malware Version 1.60.1.1000	Malwarebytes Corporation	28.03.2012	17,4MB	1.60.1.1000
Mass Effect 2	Electronic Arts, Inc.	24.12.2010		1.02
Mass Effect™ 3	Electronic Arts	06.03.2012		1.01.0.0
Microsoft .NET Framework 1.1		01.11.2010		
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	06.07.2010	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	06.07.2010	2,94MB	4.0.30319
Microsoft .NET Framework 4 Extended	Microsoft Corporation	06.07.2010	52,0MB	4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack	Microsoft Corporation	06.07.2010	10,7MB	4.0.30319
Microsoft Games for Windows - LIVE Redistributable	Microsoft Corporation	16.08.2011	31,3MB	3.5.88.0
Microsoft Games for Windows Marketplace	Microsoft Corporation	16.08.2011	6,04MB	3.5.50.0
Microsoft Office File Validation Add-In	Microsoft Corporation	14.10.2011	7,95MB	14.0.5130.5003
Microsoft Office Professional Edition 2003	Microsoft Corporation	14.03.2012	1.377MB	11.0.8173.0
Microsoft Silverlight	Microsoft Corporation	15.02.2012	128,6MB	4.1.10111.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	23.01.2012	0,24MB	8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	17.08.2011	0,29MB	8.0.56336
Microsoft Visual C++ 2005 Redistributable (x64)	Microsoft Corporation	24.12.2009	0,61MB	8.0.61000
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	24.12.2009	0,25MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148	Microsoft Corporation	24.12.2009	0,77MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	17.08.2011	0,77MB	9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022	Microsoft Corporation	26.06.2010	1,42MB	9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729	Microsoft Corporation	29.01.2011	0,23MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	11.12.2009	0,58MB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	24.12.2009	0,58MB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	17.08.2011	0,59MB	9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219	Microsoft Corporation	15.02.2012	13,8MB	10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219	Microsoft Corporation	21.08.2011	11,1MB	10.0.40219
Microsoft Visual J# 2.0 Redistributable Package	Microsoft Corporation	24.12.2009		
Microsoft XNA Framework Redistributable 3.1	Microsoft Corporation	23.02.2011	7,55MB	3.1.10527.0
MinecraftAlpha		11.05.2011		
Miranda Fusion 3.1.11.0	Miranda Fusion Team	20.03.2012	27,5MB	3.1.11.0
MKVtoolnix 4.7.0	Moritz Bunkus	01.10.2011		4.7.0
Mozilla Firefox 11.0 (x86 de)	Mozilla	17.03.2012	49,4MB	11.0
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	27.12.2009	1,28MB	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	27.12.2009	1,33MB	4.20.9876.0
MSXML 4.0 SP2 Parser and SDK	Microsoft Corporation	26.12.2009	1,23MB	4.20.9818.0
Mumble 1.2.3	Thorvald Natvig	20.10.2011	32,3MB	1.2.3
Need for Speed Underground 2		08.06.2011		
NFS Underground		07.01.2011		
Nokia Connectivity Cable Driver	Nokia	31.01.2010	3,37MB	7.1.17.0
Nokia PC Suite	Nokia	31.01.2010		6.83.14.1
NVIDIA PhysX	NVIDIA Corporation	06.03.2012	86,1MB	9.11.1107
Octoshape add-in for Adobe Flash Player		23.08.2010		
OpenAL		19.10.2010		
Origin	Electronic Arts, Inc.	16.03.2012		8.5.0.4554
Pando Media Booster	Pando Networks Inc.	21.10.2010	5,47MB	2.3.4.3
PC Connectivity Solution	Nokia	31.01.2010	8,90MB	7.7.10.0
PC Inspector File Recovery		12.09.2010		4.0
PunkBuster Services	Even Balance, Inc.	24.10.2011		0.991
QuickTime	Apple Inc.	12.12.2011	73,3MB	7.71.80.42
Railroad Tycoon 3		17.09.2010		1.0
Rainmeter		14.02.2012		2.2 r1116
Ray Adams ATI Tray Tools		30.10.2011		
Razer Copperhead	Razer USA Ltd.	13.08.2010		6.10
Razer Diamondback 3G	Razer USA Ltd.	09.04.2010		5.01
RocketDock 1.3.5	Punk Software	03.02.2011		
Skype Click to Call	Skype Technologies S.A.	29.10.2011	20,9MB	5.6.8442
Skype™ 5.5	Skype Technologies S.A.	29.10.2011	17,1MB	5.5.124
Spelling Dictionaries Support For Adobe Reader 9	Adobe Systems Incorporated	11.03.2010	29,7MB	9.0.0
Star Wars: The Old Republic	Electronic Arts, Inc.	05.10.2011	3,51MB	1.00
Starcraft		06.05.2010		
StarCraft II	Blizzard Entertainment	07.12.2011		1.4.2.20141
Steam	Valve Corporation	01.01.2011	1,49MB	1.0.0.0
SteelSeries Xai Laser Mouse	SteelSeries	07.07.2011	21,3MB	1.4.2
Stickies 7.0a	Zhorn Software	17.04.2011		
Stronghold		13.04.2011		
Stronghold Crusader Extreme	Firefly Studios	18.03.2010		1.20.0000
System Requirements Lab	Husdawg, LLC	31.03.2010	0,60MB	4.1.72.0
Team Fortress 2	Valve	23.06.2011		
TeamSpeak 2 RC2	Dominating Bytes Design	13.01.2010		2.0.32.60
TeamSpeak 3 Client	TeamSpeak Systems GmbH	17.03.2010		
The Witcher 2	CD Projekt Red	20.06.2011		1.00.0000
TI Connect 1.6	Texas Instruments Inc	10.03.2010	27,3MB	1.6
TmNationsForever	Nadeo	06.06.2011		
TuneUp Utilities	TuneUp Software	23.12.2009		9.0.3000.52
Tunngle beta	Tunngle.net GmbH	30.01.2012		
TurboV EVO		23.12.2009		1.01.05
Ubisoft Game Launcher	UBISOFT	21.08.2011		1.0.0.0
Unity Web Player	Unity Technologies ApS	15.03.2010	12,0MB	2.6.1f3_31223
Unreal Tournament 3 (LG)	Epic Games	24.12.2009	7.336MB	1.00.0000
Vegas Pro 10.0 (64-bit)	Sony	31.10.2011	456MB	10.0.738
VIA Plattform-Geräte-Manager	VIA Technologies, Inc.	11.12.2009	2,62MB	1.34
VLC media player 1.1.11	VideoLAN	28.01.2012		1.1.11
Warcraft III		27.12.2009		
Warcraft III: All Products		27.12.2009		
WC3Banlist	Knarf	17.03.2010		3.0
Winamp	Nullsoft, Inc	30.12.2009		5.571 
Winamp Anwendungserkennung	Nullsoft, Inc	30.12.2009	0,12MB	1.0.0.1
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0)	Texas Instruments Inc.	10.03.2010		06/11/2009 1.0.0.0
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1)	Texas Instruments Inc.	10.03.2010		09/02/2009 1.0.0.1
Windows Live ID Sign-in Assistant	Microsoft Corporation	16.08.2011	10,0MB	6.500.3165.0
Windows Media Player Firefox Plugin	Microsoft Corp	01.03.2010	0,59MB	1.0.0.8
WinPcap 4.1.1	CACE Technologies	29.12.2009		4.1.0.1753
WinRAR 4.00 (64-bit)	win.rar GmbH	07.03.2011		4.00.0
         

Und die letzten OTL-Logfiles:
OTL Logfile:

OTL logfile created on: 29.03.2012 13:47:53 - Run 3
OTL by OldTimer - Version 3.2.39.2     Folder = C:\Users\*****\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,99 Gb Total Physical Memory | 6,48 Gb Available Physical Memory | 81,14% Memory free
15,98 Gb Paging File | 14,37 Gb Available in Paging File | 89,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 68,52 Gb Free Space | 35,08% Space Free | Partition Type: NTFS
Drive D: | 270,45 Gb Total Space | 83,10 Gb Free Space | 30,73% Space Free | Partition Type: NTFS
Drive L: | 931,51 Gb Total Space | 902,26 Gb Free Space | 96,86% Space Free | Partition Type: NTFS
 
Computer Name: SUMMMSEL | User Name: ***** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.03.28 23:18:24 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
PRC - [2012.03.18 15:54:01 | 000,924,600 | ---- | M] (Mozilla Corporation) -- D:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012.02.15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012.02.14 23:49:08 | 000,636,032 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
PRC - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.01.09 17:54:47 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2011.04.18 22:25:18 | 001,101,824 | ---- | M] (Zhorn Software) -- D:\Program Files (x86)\stickies\stickies.exe
PRC - [2011.03.27 12:35:16 | 000,929,280 | ---- | M] (Ray Adams) -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe
PRC - [2009.12.24 21:55:12 | 000,090,112 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
PRC - [2009.12.09 14:50:12 | 000,313,672 | ---- | M] (TuneUp Software) -- D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe
PRC - [2009.10.30 13:57:08 | 000,369,200 | ---- | M] (DT Soft Ltd) -- D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2009.09.29 17:18:42 | 000,809,736 | ---- | M] (ABBYY) -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2009.08.20 21:31:56 | 007,256,576 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\TurboV EVO\TurboV_EVO.exe
PRC - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.exe
PRC - [2006.06.15 15:59:54 | 002,764,800 | ---- | M] (Home) -- D:\Program Files (x86)\M Taskbar Hider\M Taskbar Hider 1.0.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.03.18 15:54:00 | 001,969,080 | ---- | M] () -- D:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012.03.12 09:38:20 | 000,071,680 | ---- | M] () -- C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\qbl5qi02.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\gecko11\WINNT_x86-msvc\SSSLauncher.dll
MOD - [2011.04.18 22:25:18 | 000,049,152 | ---- | M] () -- D:\Program Files (x86)\stickies\shook70.dll
MOD - [2011.02.19 23:14:48 | 000,187,904 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\raphook.dll
MOD - [2008.12.10 21:04:54 | 000,253,952 | ---- | M] () -- C:\Program Files (x86)\ASUS\TurboV EVO\pngio.dll
MOD - [2008.04.11 18:33:18 | 000,020,480 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_intelcpu.dll
MOD - [2008.04.09 18:08:46 | 000,016,896 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_amdcore.dll
MOD - [2007.09.14 17:35:34 | 000,020,480 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_cpuload.dll
MOD - [2007.09.02 14:58:52 | 000,495,616 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007.09.02 14:57:36 | 000,069,632 | ---- | M] () -- D:\Program Files (x86)\RocketDock\RocketDock.dll
MOD - [2007.03.07 14:26:34 | 000,077,824 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\support.dll
MOD - [2007.03.07 14:25:26 | 000,024,576 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\kbdhook.dll
MOD - [2007.01.03 22:09:46 | 000,017,408 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_xvlt.dll
MOD - [2006.12.26 19:53:28 | 000,019,456 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_hdddtemp.dll
MOD - [2006.12.25 11:02:24 | 000,024,576 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mongraphsexample.dll
MOD - [2006.06.03 11:00:32 | 000,389,120 | ---- | M] () -- C:\Windows\SysWOW64\actskn43.ocx
MOD - [2005.11.29 19:38:20 | 000,023,552 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\hddtemp.dll
MOD - [2005.11.29 19:34:38 | 000,028,672 | ---- | M] () -- D:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\pciset.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2012.02.15 05:13:00 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009.12.09 14:38:38 | 000,036,168 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.01.09 17:54:47 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011.12.12 22:35:08 | 000,751,464 | ---- | M] (Tunngle.net GmbH) [On_Demand | Stopped] -- D:\Program Files (x86)\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2011.06.03 12:54:08 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.12.24 21:55:12 | 000,090,112 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService)
SRV - [2009.12.24 20:40:16 | 000,607,048 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag) @D:\Program Files (x86)
SRV - [2009.12.09 14:44:18 | 001,394,504 | ---- | M] (TuneUp Software) [Auto | Running] -- D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009.12.09 14:38:30 | 000,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2009.10.29 02:02:00 | 003,407,292 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2009.10.20 20:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2009.09.29 17:18:42 | 000,809,736 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0)
SRV - [2009.08.18 12:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007.03.26 14:06:24 | 000,292,864 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.02.15 05:48:32 | 010,856,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2012.02.15 05:48:32 | 010,856,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.02.15 04:13:12 | 000,327,680 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011.12.10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011.12.05 21:47:30 | 000,095,248 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2011.05.12 21:07:14 | 000,033,344 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.21 07:36:02 | 000,413,800 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.10.22 03:00:00 | 000,460,800 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fwlanusb.sys -- (FWLANUSB)
DRV:64bit: - [2010.10.22 03:00:00 | 000,014,120 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avmeject.sys -- (avmeject)
DRV:64bit: - [2010.07.08 16:18:38 | 000,694,888 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)
DRV:64bit: - [2010.05.06 11:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009.12.25 19:32:08 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009.12.01 15:49:52 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc)
DRV:64bit: - [2009.11.10 15:50:18 | 000,014,336 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\copperhd.sys -- (copperhd)
DRV:64bit: - [2009.10.20 20:19:54 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2009.09.16 08:02:42 | 000,031,232 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV:64bit: - [2009.09.03 17:30:20 | 000,128,512 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tiehdusb.sys -- (TIEHDUSB)
DRV:64bit: - [2009.07.16 05:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.10 05:07:02 | 001,222,144 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.02.11 12:25:02 | 000,006,784 | ---- | M] (SweetLow) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidusbf.sys -- (hidusbf)
DRV:64bit: - [2009.02.09 09:38:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:64bit: - [2009.02.09 09:38:34 | 000,018,944 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:64bit: - [2009.02.09 09:38:34 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2009.02.09 09:38:32 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:64bit: - [2008.09.17 15:14:00 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Entech64.sys -- (ENTECH64)
DRV:64bit: - [2007.08.08 08:31:16 | 000,034,336 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scramby_out.sys -- (scramby_out)
DRV:64bit: - [2007.02.13 17:41:26 | 000,029,480 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\scramby.sys -- (scramby)
DRV:64bit: - [2005.11.07 15:33:12 | 000,021,120 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DB3G.sys -- (Razerlow)
DRV - [2009.10.14 08:24:44 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005.01.01 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [1999.10.12 13:32:42 | 000,014,368 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\SECDRV.SYS -- (Secdrv)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultthis.engineName: "Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {5B52016C-D097-4aec-BE61-9F129D8FDDBA}:2.0
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1.1
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - prefs.js..extensions.enabledItems: {F8A55C97-3DB6-4961-A81D-0DE0080E53CB}:0.9.5
FF - prefs.js..extensions.enabledItems: {B2EA3FAB-912C-48a1-BABD-C5B00BB885BB}:1.8
FF - prefs.js..extensions.enabledItems: FasterFox_Lite@BigRedBrent:3.9.1Lite
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.77
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {c1dffba0-628e-11d9-9669-0800200c9a66}:3.6.3
FF - prefs.js..network.proxy.backup.ftp: ""
FF - prefs.js..network.proxy.backup.ftp_port: ""
FF - prefs.js..network.proxy.backup.gopher: ""
FF - prefs.js..network.proxy.backup.gopher_port: ""
FF - prefs.js..network.proxy.backup.socks: ""
FF - prefs.js..network.proxy.backup.socks_port: ""
FF - prefs.js..network.proxy.backup.ssl: ""
FF - prefs.js..network.proxy.backup.ssl_port: ""
FF - prefs.js..network.proxy.gopher: ""
FF - prefs.js..network.proxy.gopher_port: ""
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: D:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\FFToolbar@bitdefender.com: D:\Program Files\BitDefender\BitDefender 2010\bdaphffext\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: D:\Program Files (x86)\Mozilla Firefox\components [2012.03.18 15:54:01 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: D:\Program Files (x86)\Mozilla Firefox\plugins [2011.12.13 23:07:08 | 000,000,000 | ---D | M]
 
[2009.12.24 19:17:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\*****\AppData\Roaming\mozilla\Extensions
[2012.03.28 19:36:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Profiles\qbl5qi02.default\extensions
[2012.03.13 20:03:24 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Profiles\qbl5qi02.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011.12.06 00:38:48 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Profiles\qbl5qi02.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.03.28 19:36:09 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Profiles\qbl5qi02.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010.12.09 11:53:56 | 000,000,000 | ---D | M] (Download Manager Tweak) -- C:\Users\*****\AppData\Roaming\mozilla\Firefox\Profiles\qbl5qi02.default\extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB}
[2010.08.01 21:28:49 | 000,000,873 | ---- | M] () -- C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\qbl5qi02.default\searchplugins\conduit.xml
[2011.01.28 22:58:47 | 000,001,218 | ---- | M] () -- C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\qbl5qi02.default\searchplugins\kikin-search.xml
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\{64161300-E22B-11DB-8314-0800200C9A66}.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\{B2EA3FAB-912C-48A1-BABD-C5B00BB885BB}.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\EXTENSION@4CHAN.ORG.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\FASTERFOX_LITE@BIGREDBRENT.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI
() (No name found) -- C:\USERS\*****\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QBL5QI02.DEFAULT\EXTENSIONS\STEALTHYEXTENSION@GMAIL.COM.XPI
 
Hosts file not found
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - No CLSID value found.
O4 - HKLM..\Run: [Bonus.SSR.FR10] D:\Program Files (x86)\ABBYY FineReader 10\Bonus.ScreenshotReader.exe (ABBYY.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TurboV EVO] C:\Program Files (x86)\ASUS\TurboV EVO\TurboV_EVO.exe (ASUSTeK Computer Inc.)
O4 - HKCU..\Run: [AtiTrayTools] D:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [MTaskbarHider1.0.exe] D:\Program Files (x86)\M Taskbar Hider\M Taskbar Hider 1.0.exe (Home)
O4 - HKCU..\Run: [RocketDock] D:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [Steam] D:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = D:\Program Files\Rainmeter\Rainmeter.exe ()
O4 - Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk = D:\Program Files (x86)\stickies\stickies.exe (Zhorn Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00  [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMorePrograms = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCABattery = 1
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\*****\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\*****\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - D:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - D:\Program Files (x86)\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} hxxp://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{518D8234-C63F-43E6-965B-4A82595B7898}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7D482EF0-AF6F-4D17-8F6B-2553AEF88AB1}: DhcpNameServer = 7.254.254.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CBB3197F-44FA-40B3-854B-27677141957B}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.03.29 12:49:42 | 000,480,632 | ---- | C] (AVM Berlin) -- C:\Windows\instwcli.dex
[2012.03.29 12:43:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.03.29 12:43:55 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.03.28 23:52:24 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Malwarebytes
[2012.03.28 23:52:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.03.28 23:40:46 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.03.28 23:18:23 | 000,593,920 | ---- | C] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
[2012.03.28 17:49:56 | 000,291,840 | ---- | C] (Notausgang) -- C:\Users\*****\Desktop\HoN_ModMan.exe
[2012.03.27 16:55:02 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012.03.27 14:32:57 | 000,000,000 | -HSD | C] -- C:\Users\*****\AppData\Local\29386efa
[2012.03.21 01:44:29 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Local\Chromium
[2012.03.21 01:43:29 | 000,000,000 | ---D | C] -- C:\Users\*****\Documents\Heroes of Newerth
[2012.03.21 01:43:29 | 000,000,000 | ---D | C] -- C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
[2012.03.21 01:43:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
[2012.03.17 17:41:59 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs
[2012.03.15 15:19:56 | 000,000,000 | ---D | C] -- C:\Users\*****\Desktop\saves
[2012.03.15 03:29:18 | 005,559,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012.03.15 03:29:18 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012.03.15 03:29:17 | 003,913,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012.03.14 20:00:21 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2012.03.14 19:59:24 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012.03.14 19:59:23 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012.03.14 19:59:23 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012.03.14 19:59:22 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2012.03.14 19:59:22 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2012.03.10 19:34:20 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012.03.10 19:29:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2012.03.10 19:29:19 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2012.03.10 19:29:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.03.10 19:29:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2012.03.07 14:35:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2012.03.07 14:22:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mass Effect 3
[2012.03.03 18:24:31 | 000,000,000 | ---D | C] -- C:\Users\*****\Documents\Syndicate
[2012.03.02 02:41:12 | 000,000,000 | ---D | C] -- C:\Users\*****\Desktop\utmp
 
========== Files - Modified Within 30 Days ==========
 
[2012.03.29 13:45:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.29 13:45:05 | 2140,446,719 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.29 12:45:13 | 000,015,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.29 12:45:13 | 000,015,968 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.29 12:44:59 | 001,654,764 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.03.29 12:44:59 | 000,711,896 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.03.29 12:44:59 | 000,664,896 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.03.29 12:44:59 | 000,154,796 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.03.29 12:44:59 | 000,126,818 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.03.29 12:43:56 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.03.28 23:18:24 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\*****\Desktop\OTL.exe
[2012.03.21 13:41:05 | 000,432,568 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.03.20 21:58:54 | 000,282,864 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.03.20 21:58:54 | 000,282,864 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.03.20 21:58:46 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.03.14 00:34:59 | 000,000,600 | ---- | M] () -- C:\Users\*****\PUTTY.RND
[2012.03.06 16:26:24 | 000,000,213 | ---- | M] () -- C:\Users\*****\Desktop\u.ini
[2012.03.01 21:34:17 | 000,019,009 | -HS- | M] () -- C:\Users\*****\Desktop\Folder.jpg
[2012.03.01 21:34:17 | 000,019,009 | -HS- | M] () -- C:\Users\*****\Desktop\AlbumArt_{958645BD-883A-4E64-B7BB-607B52472F44}_Large.jpg
[2012.03.01 21:34:17 | 000,004,636 | -HS- | M] () -- C:\Users\*****\Desktop\AlbumArtSmall.jpg
[2012.03.01 21:34:17 | 000,004,636 | -HS- | M] () -- C:\Users\*****\Desktop\AlbumArt_{958645BD-883A-4E64-B7BB-607B52472F44}_Small.jpg
[2012.03.01 20:37:50 | 010,397,919 | ---- | M] () -- C:\Users\*****\Desktop\Jakarta- One Desire .mp3
[2012.02.28 19:20:26 | 001,631,722 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
 
========== Files Created - No Company Name ==========
 
[2012.03.29 12:43:56 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.03.02 02:41:39 | 000,000,213 | ---- | C] () -- C:\Users\*****\Desktop\u.ini
[2012.03.02 02:41:05 | 001,447,528 | ---- | C] () -- C:\Users\*****\Desktop\u1104.exe
[2012.03.01 21:34:17 | 000,019,009 | -HS- | C] () -- C:\Users\*****\Desktop\AlbumArt_{958645BD-883A-4E64-B7BB-607B52472F44}_Large.jpg
[2012.03.01 21:34:17 | 000,004,636 | -HS- | C] () -- C:\Users\*****\Desktop\AlbumArt_{958645BD-883A-4E64-B7BB-607B52472F44}_Small.jpg
[2012.03.01 20:37:42 | 010,397,919 | ---- | C] () -- C:\Users\*****\Desktop\Jakarta- One Desire .mp3
[2012.02.15 04:36:36 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.02.15 04:36:36 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.02.14 23:05:16 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2012.01.31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.01.04 13:18:36 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
[2011.10.25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll
[2011.09.29 22:33:46 | 000,006,656 | ---- | C] () -- C:\Users\*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011.06.15 23:15:02 | 000,151,124 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011.06.06 17:27:05 | 000,000,264 | ---- | C] () -- C:\Windows\SIERRA.INI
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010.11.02 15:12:25 | 000,000,093 | ---- | C] () -- C:\Users\*****\AppData\Local\fusioncache.dat
[2010.07.20 15:05:12 | 000,000,565 | ---- | C] () -- C:\Users\*****\AppData\Roaming\myMPQ.ini
[2010.06.23 18:34:42 | 000,282,864 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.05.07 15:03:20 | 000,034,697 | ---- | C] () -- C:\Windows\scunin.dat
[2010.05.02 11:00:05 | 000,226,816 | ---- | C] () -- C:\Users\*****\AppData\Local\tsMuxeR.exe
[2010.05.02 11:00:05 | 000,000,825 | ---- | C] () -- C:\Users\*****\AppData\Local\sk9-gijoe-bd9.meta
[2010.05.02 11:00:05 | 000,000,302 | ---- | C] () -- C:\Users\*****\AppData\Local\MovieObject.bdmv
[2010.05.02 11:00:05 | 000,000,120 | ---- | C] () -- C:\Users\*****\AppData\Local\index.bdmv
[2010.04.15 16:00:39 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
 
========== LOP Check ==========
 
[2012.03.27 16:59:03 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\.minecraft
[2011.10.09 00:19:25 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Audacity
[2011.05.02 23:30:11 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Beat Hazard
[2010.02.14 22:33:04 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Bioshock2
[2010.08.02 22:55:43 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\BitDefender
[2010.04.04 19:46:47 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Command and Conquer 4
[2009.12.25 20:35:01 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\DAEMON Tools Lite
[2010.06.28 22:34:15 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\de.3m5.wendel.flcd.FLCDB.4E7DF207D694E815646D9C9DD7DC91A41EB7FD23.1
[2012.03.29 13:45:51 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Dropbox
[2011.12.30 17:13:55 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\DVDVideoSoft
[2011.12.06 00:38:48 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.09.29 17:00:09 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\FireShot
[2010.12.29 01:11:46 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\FMZilla
[2011.06.04 21:31:26 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\GameRanger
[2011.10.17 22:07:13 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\gtk-2.0
[2011.09.29 18:08:21 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\HandBrake
[2011.01.28 23:00:19 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\icPlus
[2012.03.29 12:51:41 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\ICQ
[2011.03.05 14:34:54 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\LolClient
[2011.06.09 23:11:59 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Meine Die Schlacht um Mittelerde™ II-Dateien
[2011.07.12 16:28:59 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Miranda Fusion
[2011.10.02 22:51:27 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\mkvtoolnix
[2011.10.21 22:43:57 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Mumble
[2010.02.01 20:39:57 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Nokia
[2010.02.01 20:49:34 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Nokia Multimedia Player
[2011.10.25 11:38:44 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Origin
[2010.02.01 20:19:02 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\PC Suite
[2011.09.29 15:46:01 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Publish Providers
[2011.03.27 22:46:38 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\PunkBuster
[2011.01.05 21:43:48 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\QuickScan
[2012.03.27 16:59:03 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Rainmeter
[2010.04.15 16:25:47 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Red Alert 3
[2011.08.08 22:57:34 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Screaming Bee
[2011.03.26 21:35:20 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Softpark
[2011.11.01 20:24:52 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Sony
[2009.12.27 00:00:36 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Stardock
[2011.07.08 11:53:30 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\SteelSeries Xai
[2012.03.29 13:45:41 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\stickies
[2010.02.25 23:16:10 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\The Creative Assembly
[2012.01.28 21:13:08 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\TS3Client
[2009.12.24 20:40:13 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\TuneUp Software
[2012.02.06 00:29:56 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Tunngle
[2010.11.02 15:13:33 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Turbine
[2010.03.07 23:13:27 | 000,000,000 | ---D | M] -- C:\Users\*****\AppData\Roaming\Ubisoft
[2012.03.09 17:41:21 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         

--- --- ---


OTL Logfile:

OTL Extras logfile created on: 29.03.2012 13:47:53 - Run 3
OTL by OldTimer - Version 3.2.39.2     Folder = C:\Users\*****\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,99 Gb Total Physical Memory | 6,48 Gb Available Physical Memory | 81,14% Memory free
15,98 Gb Paging File | 14,37 Gb Available in Paging File | 89,95% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 68,52 Gb Free Space | 35,08% Space Free | Partition Type: NTFS
Drive D: | 270,45 Gb Total Space | 83,10 Gb Free Space | 30,73% Space Free | Partition Type: NTFS
Drive L: | 931,51 Gb Total Space | 902,26 Gb Free Space | 96,86% Space Free | Partition Type: NTFS
 
Computer Name: SUMMMSEL | User Name: ***** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "D:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "D:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "D:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "D:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "D:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "D:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Program Files (x86)\Free Music Zilla\FMZilla.exe" = D:\Program Files (x86)\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla -- ()
"D:\Program Files (x86)\Free Music Zilla\FMZilla.exe" = D:\Program Files (x86)\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla -- ()
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0C818871-6337-17AC-CA8C-A3942F15D92A}" = AMD Accelerated Video Transcoding
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1" = Allgemeine Runtime Files (x86)
"{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition)
"{23170F69-40C1-2702-0910-000001000000}" = 7-Zip 9.10 (x64 edition)
"{26A24AE4-039D-4CA4-87B4-2F86416023FF}" = Java(TM) 6 Update 23 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86417000FF}" = Java(TM) 7 (64-bit)
"{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}" = AMD Catalyst Install Manager
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{54FFD5AC-7350-52B9-FB8F-1A8A6CF1FB5B}" = AMD Media Foundation Decoders
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6245BC35-F4BE-1995-BB2E-7847D758504E}" = ATI Problem Report Wizard
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{7B8F9BF0-A1D5-11E0-B4E5-0013D3D69929}" = Vegas Pro 10.0 (64-bit)
"{7F801000-A1D5-11E0-9092-0013D3D69929}" = MSVCRT Redists
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1" = DirectX 9.0c Extra Files (x86, x64)
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A4F467A8-FCD3-B119-7E8D-D5739F946F4C}" = AMD AVIVO64 Codecs
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{AD939C5F-83BC-1B3E-9897-8470D523E6E3}" = AMD Drag and Drop Transcoding
"{C19CD2D6-1CE1-44B5-8430-32D8E26373AB}" = PC Connectivity Solution 64
"{D6DDB606-CD15-98C7-AA65-6B617EE8CDA5}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1" = DirectX for Managed Code
"7511B29C86C398B4D11A0B0E4176CAD68D1B7057" = Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"EC3E466026556D3EB760B01C4772277614354E11" = Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0)
"Explorer Suite_is1" = Explorer Suite III
"icPlus" = icPlus
"ICQAlarm" = ICQAlarm
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"WinRAR archiver" = WinRAR 4.00 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{030C0401-52A9-BE86-D8A7-52C0DA203275}" = CCC Help Swedish
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{066D65EA-ED53-44E4-A96A-F81B6E409D2E}" = PC Connectivity Solution
"{0DD140D3-9563-481E-AA75-BA457CBDAEF2}" = PC Inspector File Recovery
"{0FB0306C-11D8-35F2-9AC9-121FA753F9AD}" = Visual C++ 2008 x64 Runtime - (v9.0.30729.5026)
"{0FB0306C-11D8-35F2-9AC9-121FA753F9AD}.vc_x64runtime_30729_5026" = Visual C++ 2008 x64 Runtime - v9.0.30729.5026
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1E99F5D7-4262-4C7C-9135-F066E7485811}" = System Requirements Lab
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2447500B-22D7-47BD-9B13-1A927F43A267}" = Empire Earth
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{26A24AE4-039D-4CA4-87B4-2F83217000FF}" = Java(TM) 7
"{283153BB-CEE6-EE9C-81E8-4350D73354BA}" = CCC Help Turkish
"{28A946E1-E83B-4662-BC7C-23451851489E}" = Razer Copperhead
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = Die Schlacht um Mittelerde™ II
"{2BA952A8-1D31-C155-9765-9389979D2864}" = Application Profiles
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{39445575-7D3A-52AA-152B-7F9423D1AE69}" = CCC Help German
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3C9A3282-9DAE-F492-13F4-6D4D664AC15F}" = CCC Help Spanish
"{491D92A9-69CA-4EB4-81D3-0106F9337957}" = TurboV EVO
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5236FA8C-4B70-E30E-93EF-F7D3A5E468C7}" = CCC Help Greek
"{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
"{578485F8-60F3-4C61-9183-0698E581B902}" = From Dust
"{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}" = Nokia PC Suite
"{586F0E27-0BC5-34DE-AA0B-96D14397910E}" = CCC Help Russian
"{5AF7EA0B-F009-CC00-E446-C2286AF80471}" = CCC Help Czech
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5FC116F2-4508-A6FC-15FB-C64F05AB0F26}" = CCC Help Chinese Traditional
"{685ACA56-004C-4F80-2BC0-951BF278C03F}" = CCC Help Chinese Standard
"{68A35043-C55A-4237-88C9-37EE1C63ED71}" = Microsoft Visual J# 2.0 Redistributable Package
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A9D1594-7791-48f5-9CAA-DE9BCB968320}" = Mass Effect™ 3
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6D1AFFC2-AC60-BC3B-2DC9-0D80A1E9CB16}" = CCC Help Thai
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77E57197-30EC-444F-B1B8-A99AA2A45794}" = SteelSeries Xai Laser Mouse
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79CFDE3C-4602-85B2-ACF6-83D897B8B33A}" = CCC Help Korean
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E659C5C-4DF1-499B-B802-77BAE9ABE4D4}" = Razer Diamondback 3G
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8972B1C8-B899-0AA0-8596-BFC9AE3311F1}" = CCC Help Finnish
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader Extreme
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{909F8EBC-EC7F-48FF-0085-475D818F0F31}" = Need for Speed Underground 2
"{92482FB3-C05B-41C6-89E7-75D985602A6E}" = System Requirements Lab
"{92BE4E1B-AEFD-DA72-B805-948290A4BB13}" = CCC Help Hungarian
"{9526B61A-1C35-96D1-531B-C8DB1D36C336}" = CCC Help Danish
"{9530AE42-DAE1-4619-9594-B23487285D17}" = NVIDIA PhysX
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A295F81-04C8-FB18-2D1C-A33AA8A442CA}" = CCC Help French
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A8B94669-8654-4126-BD28-D0D2412CDED6}" = TI Connect 1.6
"{A99968BE-C155-474C-0089-33239DEE1CE2}" = NFS Underground
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.3 - Deutsch
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3C8C8EF-77E0-1C0D-1CFA-A39E2E898311}" = CCC Help Italian
"{B5AD9952-F716-9862-7ED7-734E0328CF7C}" = Catalyst Control Center
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{C0E3B891-B7C3-11E0-A2BD-001320F83A25}" = MSVCRT Redists
"{C0E69600-E8D1-784D-829C-788D91D65051}" = CCC Help Polish
"{C37B1C57-DD9B-D1E0-B933-8EA8D56E2222}" = CCC Help Norwegian
"{C3E9887A-23BA-4777-8080-191A5AFCAB74}" = Mumble 1.2.3
"{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}" = Stronghold
"{CA3A3F20-566B-ABB1-A541-3D93C0D09EE5}" = CCC Help Japanese
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D4C4485B-16EB-31A8-C2DE-D778E8E4628B}" = Catalyst Control Center Localization All
"{DAF650C8-AFE5-3460-E1C4-B9716D2DA5D2}" = Catalyst Control Center InstallProxy
"{DE29025A-091F-4998-AD2D-24C84421190F}" = Railroad Tycoon 3
"{E04ACCBC-DF36-364E-87E8-6C24BB981AB8}" = Visual C++ 2008 x86 Runtime - (v9.0.30729.5026)
"{E04ACCBC-DF36-364E-87E8-6C24BB981AB8}.vc_x86runtime_30729_5026" = Visual C++ 2008 x86 Runtime - v9.0.30729.5026
"{E0C6F271-FE15-B2D5-FF42-BCA40700DC51}" = CCC Help English
"{E1D0A4DC-97BD-CE37-3E89-87D3337E55CA}" = CCC Help Dutch
"{E58C571A-D165-AF15-5CBD-B3B77CFD5B61}" = HydraVision
"{E6FA341F-8840-6B18-5BCE-C7CCEBDFE516}" = Catalyst Control Center Graphics Previews Common
"{EA450D5D-95EA-4FD0-B8B0-6D8E68FBE2C7}" = Impulse
"{ED15763E-A6ED-56D2-B0B5-C7D22D4CE248}" = CCC Help Portuguese
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1000000-0001-0000-0000-074957833700}" = ABBYY FineReader 10 Professional Edition
"{F1191B7E-84BF-4325-9FFD-80BD8996ED4B}" = MorphVOX Junior
"{F1CBC6F7-D82D-4DC5-B81C-9A14F418593A}_is1" = WC3Banlist
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}" = Unreal Tournament 3 (LG)
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.13 (Unicode)
"Battlelog Web Plugins" = Battlelog Web Plugins
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2009-09-09
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"ESN Sonar-0.70.4" = ESN Sonar
"Fraps" = Fraps (remove only)
"Free Music Zilla_is1" = Free Music Zilla
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.14.1206
"Guild Wars" = GUILD WARS
"Hamachi" = Hamachi 1.0.3.0
"HandBrake" = HandBrake 0.9.5
"hon" = Heroes of Newerth
"Impulse" = Impulse
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"IrfanView" = IrfanView (remove only)
"JDownloader" = JDownloader
"M Taskbar Hider1.0" = M Taskbar Hider
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft Visual J# 2.0 Redistributable Package" = Microsoft Visual J# 2.0 Redistributable Package
"MinecraftAlpha" = MinecraftAlpha
"MirandaFusion" = Miranda Fusion 3.1.11.0
"MKVtoolnix" = MKVtoolnix 4.7.0
"Mozilla Firefox 11.0 (x86 de)" = Mozilla Firefox 11.0 (x86 de)
"Nokia PC Suite" = Nokia PC Suite
"OpenAL" = OpenAL
"Origin" = Origin
"PunkBusterSvc" = PunkBuster Services
"Rainmeter" = Rainmeter
"rayatitray" = Ray Adams ATI Tray Tools
"RocketDock_is1" = RocketDock 1.3.5
"Starcraft" = Starcraft
"StarCraft II" = StarCraft II
"Steam App 42910" = Magicka
"Steam App 440" = Team Fortress 2
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TmNationsForever_is1" = TmNationsForever
"TuneUp Utilities" = TuneUp Utilities
"Tunngle beta_is1" = Tunngle beta
"VLC media player" = VLC media player 1.1.11
"Warcraft III" = Warcraft III
"Winamp" = Winamp
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinPcapInst" = WinPcap 4.1.1
"ZhornStickies" = Stickies 7.0a
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"GameRanger" = GameRanger
"InstallShield_{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}" = Unreal Tournament 3 (LG)
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"UnityWebPlayer" = Unity Web Player
"Warcraft III" = Warcraft III: All Products
"Winamp Detect" = Winamp Anwendungserkennung
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 27.03.2012 09:16:49 | Computer Name = Summmsel | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: A3F.tmp, Version: 0.0.0.0, Zeitstempel:
 0x4f704f1b  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel:
 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x7efde000  ID des fehlerhaften Prozesses:
 0x42c  Startzeit der fehlerhaften Anwendung: 0x01cd0c1bd868aae1  Pfad der fehlerhaften
 Anwendung: C:\Users\*****\AppData\Local\Temp\A3F.tmp  Pfad des fehlerhaften Moduls:
 unknown  Berichtskennung: 1c0b07d1-780f-11e1-a3b9-90e6ba252950
 
Error - 27.03.2012 10:57:22 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
Error - 27.03.2012 12:05:27 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
Error - 27.03.2012 12:05:27 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
Error - 28.03.2012 11:16:06 | Computer Name = Summmsel | Source = SideBySide | ID = 16842827
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\Program Files
 (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe". Fehler in Manifest-
 oder Richtliniendatei "D:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe"
 in Zeile 2.  Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 
Error - 28.03.2012 11:17:21 | Computer Name = Summmsel | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "D:\Program Files
 (x86)\Nokia\Nokia PC Suite 6\VistaPIM.dll".  Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 29.03.2012 06:52:30 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
Error - 29.03.2012 06:52:31 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
Error - 29.03.2012 06:53:04 | Computer Name = Summmsel | Source = MsiInstaller | ID = 11001
Description = 
 
Error - 29.03.2012 06:54:39 | Computer Name = Summmsel | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
 "System Writer".  Details: AddCoreCsiFiles : GetNextFileMapContent() failed.  System
 Error: Falscher Parameter.  .
 
[ System Events ]
Error - 29.03.2012 07:44:15 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:28 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:29 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:29 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:31 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:34 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:34 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:43 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:43 | Computer Name = Summmsel | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = Fehler beim Lesen der Datei für lokale Hosts.
 
Error - 29.03.2012 07:45:51 | Computer Name = Summmsel | Source = WMPNetworkSvc | ID = 866300
Description = 
 
 
< End of report >
         

--- --- ---


gruß Summmsel

win32.ZAccess

Da würde ich an Deiner Stelle das System gleich neu installieren, da die Bekämpfung diese neue Art der Infektion ohne div. Nebenwirkungen und hinterlassenen Schaden, die immer wieder [auf verschiedene Weise] Probleme bereiten können, ist nicht möglich!
- einen Backdoor mit Rootkitfunktionalität

diese Malware verwendet Rootkit-Technologie und Backdoor-Routine
*was sind Backdoors und Rootkits*

Verhaltensweise:
"speicherresident"

Erklärung:
Speicherresident nennt man Programme oder Programmteile, deren Daten während des Rechnerbetriebs nicht routinemässig auf Datenträger wie die Festplatte geschrieben und bei Bedarf wieder in den Arbeitsspeicher eingelesen werden, sondern die ganze Zeit im Arbeitsspeicher verbleiben.
Dazu gehören im Allgemeinen die für den Rechnerbetrieb zentralen und häufig durchgeführten Teile des Betriebsystems oder beim Programmablauf eines Anwendungsprogrammes ständig wiederkehrende Programmroutinen.
Einerseits verkürzen speicherresidente Programme die Zugriffszeiten, weil die für das Einlesen der Daten vom Datenträger in den Arbeitsspeicher benötigte Zeit entfällt. Andererseits verringern sie die verfügbare Kapazität des Arbeitsspeichers.
Speicherresident sind auch viele Viren, die dafür sorgen, dass das Betriebssytem sie die ganze Zeit im Arbeitsspeicher hält, von wo aus sie andere Programme infizieren können.

Falls du doch für die Systemreinigung entscheidest :

TDSSKiller von Kaspersky

• Lade den TDSSKiller und entpacke das Archiv auf Deinen Desktop.
• Vergewissere Dich, dass die TDSSKiller.exe direkt auf dem Desktop liegt (nicht in einem Ordner auf dem Desktop).
• deaktiviere vorübergehend dein AntiVirus-Programm
• Starte die TDSSKiller.exe durch Doppelklick.
• Nach Beendigung der Arbeit schlägt das Tool vor, das System neu zu starten.
  Bestätige das ggfs. mit Y(es).
  Beim Hochfahren des Systems führt der Treiber alle geplanten Operationen aus löscht sich danach.
• Poste mir den Inhalt von C:\TDSSKiller<random>.txt hier in den Thread.

Hier findest Du eine ausführlichere Anleitung.

Hier das Scan Resultat:

12:42:45.0991 2796	TDSS rootkit removing tool 2.7.23.0 Mar 26 2012 13:40:18
12:42:46.0194 2796	============================================================
12:42:46.0194 2796	Current date / time: 2012/03/30 12:42:46.0194
12:42:46.0194 2796	SystemInfo:
12:42:46.0194 2796	
12:42:46.0194 2796	OS Version: 6.1.7601 ServicePack: 1.0
12:42:46.0194 2796	Product type: Workstation
12:42:46.0194 2796	ComputerName: SUMMMSEL
12:42:46.0194 2796	UserName: *****
12:42:46.0194 2796	Windows directory: C:\Windows
12:42:46.0194 2796	System windows directory: C:\Windows
12:42:46.0194 2796	Running under WOW64
12:42:46.0194 2796	Processor architecture: Intel x64
12:42:46.0194 2796	Number of processors: 4
12:42:46.0194 2796	Page size: 0x1000
12:42:46.0194 2796	Boot type: Normal boot
12:42:46.0194 2796	============================================================
12:42:47.0239 2796	Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:42:47.0254 2796	Drive \Device\Harddisk5\DR5 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
12:42:47.0254 2796	\Device\Harddisk0\DR0:
12:42:47.0254 2796	MBR used
12:42:47.0254 2796	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x186A0000
12:42:47.0254 2796	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x186A0800, BlocksNum 0x21CE4800
12:42:47.0254 2796	\Device\Harddisk5\DR5:
12:42:47.0254 2796	MBR used
12:42:47.0254 2796	\Device\Harddisk5\DR5\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
12:42:47.0317 2796	Initialize success
12:42:47.0317 2796	============================================================
12:42:54.0883 2332	============================================================
12:42:54.0883 2332	Scan started
12:42:54.0883 2332	Mode: Manual; 
12:42:54.0883 2332	============================================================
12:42:56.0786 2332	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
12:42:56.0786 2332	1394ohci - ok
12:42:56.0848 2332	ABBYY.Licensing.FineReader.Professional.10.0 (dccc7bcaad497da2c4607b8035516d95) C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
12:42:56.0864 2332	ABBYY.Licensing.FineReader.Professional.10.0 - ok
12:42:56.0895 2332	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
12:42:56.0911 2332	ACPI - ok
12:42:56.0958 2332	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
12:42:56.0958 2332	AcpiPmi - ok
12:42:57.0004 2332	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
12:42:57.0004 2332	adp94xx - ok
12:42:57.0036 2332	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
12:42:57.0036 2332	adpahci - ok
12:42:57.0051 2332	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
12:42:57.0051 2332	adpu320 - ok
12:42:57.0082 2332	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
12:42:57.0082 2332	AeLookupSvc - ok
12:42:57.0145 2332	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
12:42:57.0145 2332	AFD - ok
12:42:57.0176 2332	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
12:42:57.0176 2332	agp440 - ok
12:42:57.0192 2332	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
12:42:57.0192 2332	ALG - ok
12:42:57.0223 2332	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
12:42:57.0238 2332	aliide - ok
12:42:57.0270 2332	AMD External Events Utility (962227630779043b5c1d4cd157abb912) C:\Windows\system32\atiesrxx.exe
12:42:57.0270 2332	AMD External Events Utility - ok
12:42:57.0316 2332	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
12:42:57.0316 2332	amdide - ok
12:42:57.0348 2332	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
12:42:57.0363 2332	AmdK8 - ok
12:42:57.0660 2332	amdkmdag        (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
12:42:57.0816 2332	amdkmdag - ok
12:42:57.0894 2332	amdkmdap        (2d9005ea0bfd25c740e53c8dd3c069e0) C:\Windows\system32\DRIVERS\atikmpag.sys
12:42:57.0894 2332	amdkmdap - ok
12:42:57.0925 2332	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
12:42:57.0925 2332	AmdPPM - ok
12:42:57.0972 2332	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
12:42:57.0972 2332	amdsata - ok
12:42:57.0987 2332	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
12:42:57.0987 2332	amdsbs - ok
12:42:58.0018 2332	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
12:42:58.0018 2332	amdxata - ok
12:42:58.0096 2332	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
12:42:58.0096 2332	AppID - ok
12:42:58.0112 2332	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
12:42:58.0128 2332	AppIDSvc - ok
12:42:58.0159 2332	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
12:42:58.0159 2332	Appinfo - ok
12:42:58.0221 2332	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
12:42:58.0221 2332	arc - ok
12:42:58.0299 2332	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
12:42:58.0299 2332	arcsas - ok
12:42:58.0362 2332	AsIO            (68726474c69b738eac3a62e06b33addc) C:\Windows\syswow64\drivers\AsIO.sys
12:42:58.0362 2332	AsIO - ok
12:42:58.0471 2332	aspnet_state    (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
12:42:58.0518 2332	aspnet_state - ok
12:42:58.0564 2332	AsSysCtrlService (798a87b2d7ad73b16b7cd968c5d1f18f) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
12:42:58.0564 2332	AsSysCtrlService - ok
12:42:58.0627 2332	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
12:42:58.0642 2332	AsyncMac - ok
12:42:58.0658 2332	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
12:42:58.0658 2332	atapi - ok
12:42:58.0736 2332	AtiHDAudioService (2b3b05c0a7768bf033217eb8f33f9c35) C:\Windows\system32\drivers\AtihdW76.sys
12:42:58.0736 2332	AtiHDAudioService - ok
12:42:58.0892 2332	AtiHdmiService  (2d648572ba9a610952fcafba1e119c2d) C:\Windows\system32\drivers\AtiHdmi.sys
12:42:58.0908 2332	AtiHdmiService - ok
12:42:59.0438 2332	atikmdag        (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
12:42:59.0485 2332	atikmdag - ok
12:42:59.0563 2332	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
12:42:59.0563 2332	AudioEndpointBuilder - ok
12:42:59.0578 2332	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
12:42:59.0578 2332	AudioSrv - ok
12:42:59.0625 2332	avmeject        (1dc2f715792cf33428ad7993acbd224d) C:\Windows\system32\drivers\avmeject.sys
12:42:59.0625 2332	avmeject - ok
12:42:59.0672 2332	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
12:42:59.0672 2332	AxInstSV - ok
12:42:59.0719 2332	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
12:42:59.0734 2332	b06bdrv - ok
12:42:59.0797 2332	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
12:42:59.0797 2332	b57nd60a - ok
12:42:59.0875 2332	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
12:42:59.0875 2332	BDESVC - ok
12:42:59.0906 2332	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
12:42:59.0906 2332	Beep - ok
12:42:59.0968 2332	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
12:42:59.0968 2332	BFE - ok
12:43:00.0031 2332	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
12:43:00.0046 2332	BITS - ok
12:43:00.0109 2332	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
12:43:00.0109 2332	blbdrive - ok
12:43:00.0124 2332	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
12:43:00.0124 2332	bowser - ok
12:43:00.0140 2332	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
12:43:00.0140 2332	BrFiltLo - ok
12:43:00.0156 2332	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
12:43:00.0156 2332	BrFiltUp - ok
12:43:00.0202 2332	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
12:43:00.0202 2332	Browser - ok
12:43:00.0218 2332	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
12:43:00.0234 2332	Brserid - ok
12:43:00.0280 2332	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
12:43:00.0280 2332	BrSerWdm - ok
12:43:00.0296 2332	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
12:43:00.0296 2332	BrUsbMdm - ok
12:43:00.0312 2332	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
12:43:00.0312 2332	BrUsbSer - ok
12:43:00.0312 2332	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
12:43:00.0327 2332	BTHMODEM - ok
12:43:00.0343 2332	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
12:43:00.0343 2332	bthserv - ok
12:43:00.0374 2332	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
12:43:00.0374 2332	cdfs - ok
12:43:00.0436 2332	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
12:43:00.0436 2332	cdrom - ok
12:43:00.0483 2332	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
12:43:00.0483 2332	CertPropSvc - ok
12:43:00.0499 2332	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
12:43:00.0514 2332	circlass - ok
12:43:00.0546 2332	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
12:43:00.0546 2332	CLFS - ok
12:43:00.0592 2332	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:43:00.0592 2332	clr_optimization_v2.0.50727_32 - ok
12:43:00.0624 2332	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:43:00.0624 2332	clr_optimization_v2.0.50727_64 - ok
12:43:00.0733 2332	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:43:00.0842 2332	clr_optimization_v4.0.30319_32 - ok
12:43:00.0920 2332	clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:43:00.0920 2332	clr_optimization_v4.0.30319_64 - ok
12:43:00.0982 2332	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
12:43:00.0982 2332	CmBatt - ok
12:43:00.0998 2332	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
12:43:00.0998 2332	cmdide - ok
12:43:01.0060 2332	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
12:43:01.0076 2332	CNG - ok
12:43:01.0123 2332	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
12:43:01.0123 2332	Compbatt - ok
12:43:01.0201 2332	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
12:43:01.0201 2332	CompositeBus - ok
12:43:01.0216 2332	COMSysApp - ok
12:43:01.0263 2332	copperhd        (44622785d2d2dd8b13e6dc969b6e34a4) C:\Windows\system32\drivers\copperhd.sys
12:43:01.0263 2332	copperhd - ok
12:43:01.0310 2332	cpuz130 - ok
12:43:01.0341 2332	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
12:43:01.0341 2332	crcdisk - ok
12:43:01.0404 2332	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
12:43:01.0404 2332	CryptSvc - ok
12:43:01.0450 2332	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
12:43:01.0450 2332	DcomLaunch - ok
12:43:01.0482 2332	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
12:43:01.0482 2332	defragsvc - ok
12:43:01.0528 2332	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
12:43:01.0528 2332	DfsC - ok
12:43:01.0575 2332	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
12:43:01.0575 2332	Dhcp - ok
12:43:01.0606 2332	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
12:43:01.0606 2332	discache - ok
12:43:01.0622 2332	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
12:43:01.0622 2332	Disk - ok
12:43:01.0638 2332	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
12:43:01.0638 2332	Dnscache - ok
12:43:01.0716 2332	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
12:43:01.0716 2332	dot3svc - ok
12:43:01.0762 2332	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
12:43:01.0778 2332	DPS - ok
12:43:01.0809 2332	DRIVER_B - ok
12:43:01.0840 2332	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
12:43:01.0840 2332	drmkaud - ok
12:43:01.0950 2332	dump_wmimmc - ok
12:43:02.0043 2332	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
12:43:02.0043 2332	DXGKrnl - ok
12:43:02.0090 2332	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
12:43:02.0090 2332	EapHost - ok
12:43:02.0168 2332	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
12:43:02.0184 2332	ebdrv - ok
12:43:02.0230 2332	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
12:43:02.0230 2332	EFS - ok
12:43:02.0277 2332	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
12:43:02.0277 2332	ehRecvr - ok
12:43:02.0308 2332	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
12:43:02.0308 2332	ehSched - ok
12:43:02.0355 2332	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
12:43:02.0355 2332	elxstor - ok
12:43:02.0402 2332	ENTECH64        (12c061d9f9621be916d58191872ec281) C:\Windows\system32\DRIVERS\ENTECH64.sys
12:43:02.0402 2332	ENTECH64 - ok
12:43:02.0433 2332	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
12:43:02.0433 2332	ErrDev - ok
12:43:02.0480 2332	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
12:43:02.0480 2332	EventSystem - ok
12:43:02.0511 2332	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
12:43:02.0527 2332	exfat - ok
12:43:02.0542 2332	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
12:43:02.0542 2332	fastfat - ok
12:43:02.0605 2332	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
12:43:02.0605 2332	Fax - ok
12:43:02.0620 2332	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
12:43:02.0620 2332	fdc - ok
12:43:02.0652 2332	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
12:43:02.0652 2332	fdPHost - ok
12:43:02.0683 2332	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
12:43:02.0683 2332	FDResPub - ok
12:43:02.0714 2332	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
12:43:02.0714 2332	FileInfo - ok
12:43:02.0730 2332	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
12:43:02.0730 2332	Filetrace - ok
12:43:02.0761 2332	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
12:43:02.0761 2332	flpydisk - ok
12:43:02.0808 2332	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
12:43:02.0808 2332	FltMgr - ok
12:43:02.0854 2332	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
12:43:02.0854 2332	FontCache - ok
12:43:02.0917 2332	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:43:02.0917 2332	FontCache3.0.0.0 - ok
12:43:02.0948 2332	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
12:43:02.0948 2332	FsDepends - ok
12:43:02.0979 2332	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
12:43:02.0979 2332	Fs_Rec - ok
12:43:03.0026 2332	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
12:43:03.0026 2332	fvevol - ok
12:43:03.0057 2332	FWLANUSB        (444534cba693dd23c1cc589681e01656) C:\Windows\system32\DRIVERS\fwlanusb.sys
12:43:03.0057 2332	FWLANUSB - ok
12:43:03.0073 2332	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
12:43:03.0073 2332	gagp30kx - ok
12:43:03.0135 2332	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
12:43:03.0135 2332	gpsvc - ok
12:43:03.0198 2332	hamachi         (f8f0851d336c3b88dbd7232b6348e09a) C:\Windows\system32\DRIVERS\hamachi.sys
12:43:03.0198 2332	hamachi - ok
12:43:03.0229 2332	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
12:43:03.0229 2332	hcw85cir - ok
12:43:03.0260 2332	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
12:43:03.0276 2332	HdAudAddService - ok
12:43:03.0307 2332	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
12:43:03.0307 2332	HDAudBus - ok
12:43:03.0338 2332	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
12:43:03.0338 2332	HidBatt - ok
12:43:03.0354 2332	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
12:43:03.0354 2332	HidBth - ok
12:43:03.0369 2332	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
12:43:03.0385 2332	HidIr - ok
12:43:03.0400 2332	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
12:43:03.0400 2332	hidserv - ok
12:43:03.0432 2332	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
12:43:03.0432 2332	HidUsb - ok
12:43:03.0510 2332	hidusbf         (148ad8da85c4e2b0aa5709376cbe0fb6) C:\Windows\system32\DRIVERS\hidusbf.sys
12:43:03.0510 2332	hidusbf - ok
12:43:03.0541 2332	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
12:43:03.0541 2332	hkmsvc - ok
12:43:03.0572 2332	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
12:43:03.0588 2332	HomeGroupListener - ok
12:43:03.0634 2332	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
12:43:03.0634 2332	HomeGroupProvider - ok
12:43:03.0681 2332	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
12:43:03.0681 2332	HpSAMD - ok
12:43:03.0744 2332	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
12:43:03.0744 2332	HTTP - ok
12:43:03.0775 2332	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
12:43:03.0775 2332	hwpolicy - ok
12:43:03.0806 2332	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
12:43:03.0806 2332	i8042prt - ok
12:43:03.0868 2332	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
12:43:03.0868 2332	iaStorV - ok
12:43:03.0931 2332	IDriverT        (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
12:43:03.0931 2332	IDriverT - ok
12:43:04.0009 2332	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:43:04.0009 2332	idsvc - ok
12:43:04.0071 2332	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
12:43:04.0071 2332	iirsp - ok
12:43:04.0134 2332	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
12:43:04.0134 2332	IKEEXT - ok
12:43:04.0165 2332	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
12:43:04.0165 2332	intelide - ok
12:43:04.0196 2332	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
12:43:04.0196 2332	intelppm - ok
12:43:04.0212 2332	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
12:43:04.0212 2332	IPBusEnum - ok
12:43:04.0274 2332	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:43:04.0290 2332	IpFilterDriver - ok
12:43:04.0321 2332	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
12:43:04.0336 2332	iphlpsvc - ok
12:43:04.0352 2332	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
12:43:04.0352 2332	IPMIDRV - ok
12:43:04.0383 2332	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
12:43:04.0383 2332	IPNAT - ok
12:43:04.0399 2332	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
12:43:04.0399 2332	IRENUM - ok
12:43:04.0430 2332	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
12:43:04.0430 2332	isapnp - ok
12:43:04.0461 2332	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
12:43:04.0461 2332	iScsiPrt - ok
12:43:04.0508 2332	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
12:43:04.0508 2332	kbdclass - ok
12:43:04.0539 2332	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
12:43:04.0539 2332	kbdhid - ok
12:43:04.0586 2332	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
12:43:04.0586 2332	KeyIso - ok
12:43:04.0602 2332	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
12:43:04.0602 2332	KSecDD - ok
12:43:04.0617 2332	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
12:43:04.0617 2332	KSecPkg - ok
12:43:04.0633 2332	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
12:43:04.0633 2332	ksthunk - ok
12:43:04.0664 2332	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
12:43:04.0664 2332	KtmRm - ok
12:43:04.0726 2332	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
12:43:04.0726 2332	LanmanServer - ok
12:43:04.0789 2332	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
12:43:04.0789 2332	LanmanWorkstation - ok
12:43:04.0851 2332	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
12:43:04.0851 2332	lltdio - ok
12:43:04.0882 2332	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
12:43:04.0882 2332	lltdsvc - ok
12:43:04.0929 2332	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
12:43:04.0929 2332	lmhosts - ok
12:43:04.0960 2332	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
12:43:04.0960 2332	LSI_FC - ok
12:43:04.0992 2332	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
12:43:04.0992 2332	LSI_SAS - ok
12:43:05.0023 2332	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
12:43:05.0023 2332	LSI_SAS2 - ok
12:43:05.0054 2332	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
12:43:05.0070 2332	LSI_SCSI - ok
12:43:05.0101 2332	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
12:43:05.0101 2332	luafv - ok
12:43:05.0148 2332	MBAMProtector   (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
12:43:05.0148 2332	MBAMProtector - ok
12:43:05.0740 2332	MBAMService     (056b19651bd7b7ce5f89a3ac46dbdc08) D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
12:43:05.0740 2332	MBAMService - ok
12:43:05.0818 2332	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
12:43:05.0818 2332	Mcx2Svc - ok
12:43:05.0865 2332	MDM             (11f714f85530a2bd134074dc30e99fca) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
12:43:05.0865 2332	MDM - ok
12:43:05.0881 2332	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
12:43:05.0881 2332	megasas - ok
12:43:05.0896 2332	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
12:43:05.0912 2332	MegaSR - ok
12:43:05.0928 2332	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
12:43:05.0928 2332	MMCSS - ok
12:43:05.0990 2332	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
12:43:05.0990 2332	Modem - ok
12:43:06.0006 2332	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
12:43:06.0006 2332	monitor - ok
12:43:06.0037 2332	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
12:43:06.0037 2332	mouclass - ok
12:43:06.0068 2332	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
12:43:06.0068 2332	mouhid - ok
12:43:06.0099 2332	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
12:43:06.0099 2332	mountmgr - ok
12:43:06.0146 2332	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
12:43:06.0162 2332	mpio - ok
12:43:06.0177 2332	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
12:43:06.0177 2332	mpsdrv - ok
12:43:06.0224 2332	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
12:43:06.0224 2332	MpsSvc - ok
12:43:06.0255 2332	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
12:43:06.0255 2332	MRxDAV - ok
12:43:06.0271 2332	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
12:43:06.0271 2332	mrxsmb - ok
12:43:06.0333 2332	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:43:06.0333 2332	mrxsmb10 - ok
12:43:06.0349 2332	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:43:06.0349 2332	mrxsmb20 - ok
12:43:06.0380 2332	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
12:43:06.0380 2332	msahci - ok
12:43:06.0396 2332	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
12:43:06.0396 2332	msdsm - ok
12:43:06.0411 2332	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
12:43:06.0411 2332	MSDTC - ok
12:43:06.0443 2332	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
12:43:06.0443 2332	Msfs - ok
12:43:06.0474 2332	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
12:43:06.0474 2332	mshidkmdf - ok
12:43:06.0489 2332	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
12:43:06.0489 2332	msisadrv - ok
12:43:06.0521 2332	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
12:43:06.0536 2332	MSiSCSI - ok
12:43:06.0536 2332	msiserver - ok
12:43:06.0552 2332	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
12:43:06.0552 2332	MSKSSRV - ok
12:43:06.0567 2332	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
12:43:06.0567 2332	MSPCLOCK - ok
12:43:06.0583 2332	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
12:43:06.0583 2332	MSPQM - ok
12:43:06.0630 2332	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
12:43:06.0630 2332	MsRPC - ok
12:43:06.0677 2332	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
12:43:06.0677 2332	mssmbios - ok
12:43:06.0692 2332	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
12:43:06.0692 2332	MSTEE - ok
12:43:06.0723 2332	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
12:43:06.0723 2332	MTConfig - ok
12:43:06.0755 2332	MTsensor        (19b006b181e3875fd254f7b67acf1e7c) C:\Windows\system32\DRIVERS\ASACPI.sys
12:43:06.0755 2332	MTsensor - ok
12:43:06.0770 2332	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
12:43:06.0770 2332	Mup - ok
12:43:06.0817 2332	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
12:43:06.0817 2332	napagent - ok
12:43:06.0895 2332	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
12:43:06.0895 2332	NativeWifiP - ok
12:43:06.0926 2332	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
12:43:06.0942 2332	NDIS - ok
12:43:06.0957 2332	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
12:43:06.0957 2332	NdisCap - ok
12:43:06.0973 2332	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
12:43:06.0973 2332	NdisTapi - ok
12:43:07.0051 2332	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
12:43:07.0051 2332	Ndisuio - ok
12:43:07.0082 2332	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
12:43:07.0082 2332	NdisWan - ok
12:43:07.0113 2332	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
12:43:07.0113 2332	NDProxy - ok
12:43:07.0160 2332	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
12:43:07.0160 2332	NetBIOS - ok
12:43:07.0191 2332	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
12:43:07.0191 2332	NetBT - ok
12:43:07.0254 2332	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
12:43:07.0254 2332	Netlogon - ok
12:43:07.0285 2332	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
12:43:07.0301 2332	Netman - ok
12:43:07.0363 2332	NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:43:07.0363 2332	NetMsmqActivator - ok
12:43:07.0379 2332	NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:43:07.0379 2332	NetPipeActivator - ok
12:43:07.0425 2332	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
12:43:07.0425 2332	netprofm - ok
12:43:07.0503 2332	NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:43:07.0503 2332	NetTcpActivator - ok
12:43:07.0503 2332	NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:43:07.0503 2332	NetTcpPortSharing - ok
12:43:07.0566 2332	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
12:43:07.0566 2332	nfrd960 - ok
12:43:07.0597 2332	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
12:43:07.0597 2332	NlaSvc - ok
12:43:07.0628 2332	nmwcdcx64       (02c1198276c0d4f39e54eb5148af1e2a) C:\Windows\system32\drivers\ccdcmbox64.sys
12:43:07.0628 2332	nmwcdcx64 - ok
12:43:07.0675 2332	nmwcdx64        (d8f00fcc82451bdaa3db93bb62ae6ac3) C:\Windows\system32\drivers\ccdcmbx64.sys
12:43:07.0675 2332	nmwcdx64 - ok
12:43:07.0737 2332	NPF             (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\drivers\npf.sys
12:43:07.0737 2332	NPF - ok
12:43:07.0800 2332	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
12:43:07.0800 2332	Npfs - ok
12:43:07.0831 2332	npggsvc - ok
12:43:07.0862 2332	NPPTNT2 - ok
12:43:07.0878 2332	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
12:43:07.0878 2332	nsi - ok
12:43:07.0893 2332	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
12:43:07.0893 2332	nsiproxy - ok
12:43:07.0940 2332	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
12:43:07.0956 2332	Ntfs - ok
12:43:07.0971 2332	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
12:43:07.0971 2332	Null - ok
12:43:08.0034 2332	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
12:43:08.0049 2332	nvraid - ok
12:43:08.0065 2332	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
12:43:08.0065 2332	nvstor - ok
12:43:08.0112 2332	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
12:43:08.0112 2332	nv_agp - ok
12:43:08.0127 2332	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
12:43:08.0127 2332	ohci1394 - ok
12:43:08.0174 2332	ose             (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:43:08.0174 2332	ose - ok
12:43:08.0237 2332	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
12:43:08.0237 2332	p2pimsvc - ok
12:43:08.0252 2332	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
12:43:08.0268 2332	p2psvc - ok
12:43:08.0299 2332	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
12:43:08.0299 2332	Parport - ok
12:43:08.0330 2332	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
12:43:08.0330 2332	partmgr - ok
12:43:08.0346 2332	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
12:43:08.0346 2332	PcaSvc - ok
12:43:08.0377 2332	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
12:43:08.0377 2332	pci - ok
12:43:08.0408 2332	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
12:43:08.0408 2332	pciide - ok
12:43:08.0424 2332	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
12:43:08.0439 2332	pcmcia - ok
12:43:08.0455 2332	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
12:43:08.0455 2332	pcw - ok
12:43:08.0471 2332	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
12:43:08.0486 2332	PEAUTH - ok
12:43:08.0533 2332	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
12:43:08.0533 2332	PerfHost - ok
12:43:08.0595 2332	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
12:43:08.0611 2332	pla - ok
12:43:08.0642 2332	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
12:43:08.0642 2332	PlugPlay - ok
12:43:08.0705 2332	PnkBstrA - ok
12:43:08.0736 2332	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
12:43:08.0736 2332	PNRPAutoReg - ok
12:43:08.0767 2332	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
12:43:08.0767 2332	PNRPsvc - ok
12:43:08.0814 2332	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
12:43:08.0814 2332	PolicyAgent - ok
12:43:08.0829 2332	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
12:43:08.0829 2332	Power - ok
12:43:08.0861 2332	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
12:43:08.0861 2332	PptpMiniport - ok
12:43:08.0892 2332	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
12:43:08.0892 2332	Processor - ok
12:43:08.0939 2332	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
12:43:08.0954 2332	ProfSvc - ok
12:43:08.0970 2332	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
12:43:08.0970 2332	ProtectedStorage - ok
12:43:09.0017 2332	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
12:43:09.0017 2332	Psched - ok
12:43:09.0063 2332	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
12:43:09.0063 2332	ql2300 - ok
12:43:09.0095 2332	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
12:43:09.0110 2332	ql40xx - ok
12:43:09.0157 2332	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
12:43:09.0157 2332	QWAVE - ok
12:43:09.0173 2332	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
12:43:09.0173 2332	QWAVEdrv - ok
12:43:09.0204 2332	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
12:43:09.0204 2332	RasAcd - ok
12:43:09.0219 2332	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
12:43:09.0219 2332	RasAgileVpn - ok
12:43:09.0235 2332	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
12:43:09.0235 2332	RasAuto - ok
12:43:09.0266 2332	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
12:43:09.0266 2332	Rasl2tp - ok
12:43:09.0329 2332	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
12:43:09.0329 2332	RasMan - ok
12:43:09.0344 2332	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
12:43:09.0344 2332	RasPppoe - ok
12:43:09.0360 2332	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
12:43:09.0360 2332	RasSstp - ok
12:43:09.0391 2332	Razerlow        (81ddbf4fe998ef1f4ba230f7e8d8c67e) C:\Windows\system32\drivers\DB3G.sys
12:43:09.0391 2332	Razerlow - ok
12:43:09.0422 2332	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
12:43:09.0438 2332	rdbss - ok
12:43:09.0485 2332	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
12:43:09.0485 2332	rdpbus - ok
12:43:09.0500 2332	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
12:43:09.0500 2332	RDPCDD - ok
12:43:09.0531 2332	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
12:43:09.0531 2332	RDPENCDD - ok
12:43:09.0547 2332	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
12:43:09.0547 2332	RDPREFMP - ok
12:43:09.0578 2332	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
12:43:09.0578 2332	RDPWD - ok
12:43:09.0656 2332	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
12:43:09.0656 2332	rdyboost - ok
12:43:09.0687 2332	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
12:43:09.0687 2332	RemoteAccess - ok
12:43:09.0703 2332	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
12:43:09.0703 2332	RemoteRegistry - ok
12:43:09.0750 2332	rpcapd          (a780d3eaa74582ea1deb6bd9c7a3d9c9) C:\Program Files (x86)\WinPcap\rpcapd.exe
12:43:09.0750 2332	rpcapd - ok
12:43:09.0843 2332	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
12:43:09.0859 2332	RpcEptMapper - ok
12:43:09.0906 2332	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
12:43:09.0921 2332	RpcLocator - ok
12:43:09.0984 2332	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
12:43:09.0999 2332	RpcSs - ok
12:43:10.0031 2332	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
12:43:10.0031 2332	rspndr - ok
12:43:10.0062 2332	RTL8167         (4fe1cef69d36e913738234303986fbb3) C:\Windows\system32\DRIVERS\Rt64win7.sys
12:43:10.0062 2332	RTL8167 - ok
12:43:10.0155 2332	RTL8192su       (4ce333ac701c4bd2e3eff721c0db2526) C:\Windows\system32\DRIVERS\RTL8192su.sys
12:43:10.0155 2332	RTL8192su - ok
12:43:10.0187 2332	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
12:43:10.0187 2332	SamSs - ok
12:43:10.0202 2332	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
12:43:10.0202 2332	sbp2port - ok
12:43:10.0233 2332	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
12:43:10.0233 2332	SCardSvr - ok
12:43:10.0265 2332	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
12:43:10.0280 2332	scfilter - ok
12:43:10.0358 2332	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
12:43:10.0358 2332	Schedule - ok
12:43:10.0405 2332	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
12:43:10.0405 2332	SCPolicySvc - ok
12:43:10.0436 2332	scramby         (cdde0b41d4c739b8c85e81c39a595a1a) C:\Windows\system32\drivers\scramby.sys
12:43:10.0436 2332	scramby - ok
12:43:10.0452 2332	scramby_out     (3c9a97573d3b8a8450f92636d9846a74) C:\Windows\system32\drivers\scramby_out.sys
12:43:10.0452 2332	scramby_out - ok
12:43:10.0530 2332	ScreamBAudioSvc (490b0b68bb938d5c628ec4a67277be75) C:\Windows\system32\drivers\ScreamingBAudio64.sys
12:43:10.0530 2332	ScreamBAudioSvc - ok
12:43:10.0561 2332	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
12:43:10.0561 2332	SDRSVC - ok
12:43:10.0608 2332	Secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\SECDRV.SYS
12:43:10.0608 2332	Secdrv - ok
12:43:10.0639 2332	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
12:43:10.0639 2332	seclogon - ok
12:43:10.0701 2332	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
12:43:10.0701 2332	SENS - ok
12:43:10.0717 2332	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
12:43:10.0717 2332	SensrSvc - ok
12:43:10.0748 2332	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
12:43:10.0748 2332	Serenum - ok
12:43:10.0764 2332	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
12:43:10.0764 2332	Serial - ok
12:43:10.0779 2332	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
12:43:10.0779 2332	sermouse - ok
12:43:10.0857 2332	ServiceLayer    (78546cd2eca6dd6bdcd4b13048621f88) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
12:43:10.0857 2332	ServiceLayer - ok
12:43:10.0951 2332	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
12:43:10.0951 2332	SessionEnv - ok
12:43:10.0967 2332	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
12:43:10.0967 2332	sffdisk - ok
12:43:10.0998 2332	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
12:43:10.0998 2332	sffp_mmc - ok
12:43:10.0998 2332	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
12:43:10.0998 2332	sffp_sd - ok
12:43:11.0029 2332	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
12:43:11.0029 2332	sfloppy - ok
12:43:11.0045 2332	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
12:43:11.0060 2332	SharedAccess - ok
12:43:11.0076 2332	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
12:43:11.0076 2332	ShellHWDetection - ok
12:43:11.0123 2332	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
12:43:11.0123 2332	SiSRaid2 - ok
12:43:11.0138 2332	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
12:43:11.0154 2332	SiSRaid4 - ok
12:43:11.0169 2332	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
12:43:11.0169 2332	Smb - ok
12:43:11.0216 2332	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
12:43:11.0216 2332	SNMPTRAP - ok
12:43:11.0232 2332	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
12:43:11.0247 2332	spldr - ok
12:43:11.0310 2332	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
12:43:11.0310 2332	Spooler - ok
12:43:11.0403 2332	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
12:43:11.0435 2332	sppsvc - ok
12:43:11.0481 2332	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
12:43:11.0481 2332	sppuinotify - ok
12:43:11.0513 2332	sptd            (602884696850c86434530790b110e8eb) C:\Windows\system32\Drivers\sptd.sys
12:43:11.0513 2332	Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850c86434530790b110e8eb
12:43:11.0513 2332	sptd ( LockedFile.Multi.Generic ) - warning
12:43:11.0513 2332	sptd - detected LockedFile.Multi.Generic (1)
12:43:11.0544 2332	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
12:43:11.0544 2332	srv - ok
12:43:11.0559 2332	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
12:43:11.0575 2332	srv2 - ok
12:43:11.0622 2332	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
12:43:11.0622 2332	srvnet - ok
12:43:11.0653 2332	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
12:43:11.0653 2332	SSDPSRV - ok
12:43:11.0669 2332	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
12:43:11.0669 2332	SstpSvc - ok
12:43:11.0700 2332	Steam Client Service - ok
12:43:11.0731 2332	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
12:43:11.0731 2332	stexstor - ok
12:43:11.0809 2332	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
12:43:11.0825 2332	stisvc - ok
12:43:11.0856 2332	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
12:43:11.0856 2332	swenum - ok
12:43:11.0871 2332	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
12:43:11.0887 2332	swprv - ok
12:43:11.0996 2332	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
12:43:12.0012 2332	SysMain - ok
12:43:12.0043 2332	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
12:43:12.0043 2332	TabletInputService - ok
12:43:12.0090 2332	tap0901t        (b08740047145b9bce15bf75ca0f9718a) C:\Windows\system32\DRIVERS\tap0901t.sys
12:43:12.0090 2332	tap0901t - ok
12:43:12.0105 2332	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
12:43:12.0105 2332	TapiSrv - ok
12:43:12.0137 2332	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
12:43:12.0137 2332	TBS - ok
12:43:12.0199 2332	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
12:43:12.0215 2332	Tcpip - ok
12:43:12.0277 2332	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
12:43:12.0277 2332	TCPIP6 - ok
12:43:12.0324 2332	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
12:43:12.0324 2332	tcpipreg - ok
12:43:12.0339 2332	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
12:43:12.0339 2332	TDPIPE - ok
12:43:12.0371 2332	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
12:43:12.0371 2332	TDTCP - ok
12:43:12.0417 2332	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
12:43:12.0433 2332	tdx - ok
12:43:12.0433 2332	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
12:43:12.0433 2332	TermDD - ok
12:43:12.0480 2332	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
12:43:12.0480 2332	TermService - ok
12:43:12.0527 2332	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
12:43:12.0527 2332	Themes - ok
12:43:12.0542 2332	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
12:43:12.0542 2332	THREADORDER - ok
12:43:12.0573 2332	TIEHDUSB        (199c2e87d9a5ec58d0bcd94e893bf629) C:\Windows\system32\DRIVERS\tiehdusb.sys
12:43:12.0573 2332	TIEHDUSB - ok
12:43:12.0620 2332	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
12:43:12.0620 2332	TrkWks - ok
12:43:12.0667 2332	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
12:43:12.0667 2332	TrustedInstaller - ok
12:43:12.0729 2332	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
12:43:12.0729 2332	tssecsrv - ok
12:43:12.0776 2332	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
12:43:12.0776 2332	TsUsbFlt - ok
12:43:12.0979 2332	TuneUp.Defrag   (4650febe40936f13f1ea6c67ffcff7ec) D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe
12:43:12.0979 2332	TuneUp.Defrag - ok
12:43:13.0057 2332	TuneUp.UtilitiesSvc (99bb325af16e38f1d6a63e7185f00b4c) D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe
12:43:13.0073 2332	TuneUp.UtilitiesSvc - ok
12:43:13.0104 2332	TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) D:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys
12:43:13.0104 2332	TuneUpUtilitiesDrv - ok
12:43:13.0197 2332	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
12:43:13.0197 2332	tunnel - ok
12:43:13.0416 2332	TunngleService  (c114a8d9a3ec5fef60b34ec015828752) D:\Program Files (x86)\Tunngle\TnglCtrl.exe
12:43:13.0431 2332	TunngleService - ok
12:43:13.0509 2332	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
12:43:13.0509 2332	uagp35 - ok
12:43:13.0556 2332	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
12:43:13.0572 2332	udfs - ok
12:43:13.0587 2332	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
12:43:13.0587 2332	UI0Detect - ok
12:43:13.0634 2332	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
12:43:13.0634 2332	uliagpkx - ok
12:43:13.0665 2332	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
12:43:13.0665 2332	umbus - ok
12:43:13.0728 2332	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
12:43:13.0728 2332	UmPass - ok
12:43:13.0743 2332	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
12:43:13.0743 2332	upnphost - ok
12:43:13.0775 2332	upperdev        (9856c38ab8faacca4dd99dac7b42f838) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
12:43:13.0775 2332	upperdev - ok
12:43:13.0806 2332	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
12:43:13.0806 2332	usbccgp - ok
12:43:13.0853 2332	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
12:43:13.0853 2332	usbcir - ok
12:43:13.0899 2332	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
12:43:13.0899 2332	usbehci - ok
12:43:13.0946 2332	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
12:43:13.0946 2332	usbhub - ok
12:43:13.0962 2332	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
12:43:13.0962 2332	usbohci - ok
12:43:14.0040 2332	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
12:43:14.0055 2332	usbprint - ok
12:43:14.0149 2332	usbser          (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys
12:43:14.0149 2332	usbser - ok
12:43:14.0180 2332	UsbserFilt      (89123dc822ac7a708bd4c9e196a37610) C:\Windows\system32\DRIVERS\usbser_lowerfltx64j.sys
12:43:14.0180 2332	UsbserFilt - ok
12:43:14.0211 2332	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:43:14.0211 2332	USBSTOR - ok
12:43:14.0227 2332	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
12:43:14.0227 2332	usbuhci - ok
12:43:14.0258 2332	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
12:43:14.0258 2332	UxSms - ok
12:43:14.0305 2332	UxTuneUp        (a66a7b27d8e2faf6f4ea2debb8aa7440) C:\Windows\System32\uxtuneup.dll
12:43:14.0305 2332	UxTuneUp - ok
12:43:14.0352 2332	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
12:43:14.0352 2332	VaultSvc - ok
12:43:14.0367 2332	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
12:43:14.0367 2332	vdrvroot - ok
12:43:14.0414 2332	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
12:43:14.0414 2332	vds - ok
12:43:14.0461 2332	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
12:43:14.0461 2332	vga - ok
12:43:14.0492 2332	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
12:43:14.0492 2332	VgaSave - ok
12:43:14.0523 2332	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
12:43:14.0523 2332	vhdmp - ok
12:43:14.0586 2332	VIAHdAudAddService (627270f2103d41086bab9675a3315dab) C:\Windows\system32\drivers\viahduaa.sys
12:43:14.0586 2332	VIAHdAudAddService - ok
12:43:14.0633 2332	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
12:43:14.0633 2332	viaide - ok
12:43:14.0664 2332	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
12:43:14.0664 2332	volmgr - ok
12:43:14.0695 2332	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
12:43:14.0711 2332	volmgrx - ok
12:43:14.0726 2332	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
12:43:14.0726 2332	volsnap - ok
12:43:14.0757 2332	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
12:43:14.0757 2332	vsmraid - ok
12:43:14.0835 2332	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
12:43:14.0851 2332	VSS - ok
12:43:14.0898 2332	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
12:43:14.0898 2332	vwifibus - ok
12:43:14.0929 2332	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
12:43:14.0929 2332	vwififlt - ok
12:43:14.0960 2332	vwifimp         (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
12:43:14.0960 2332	vwifimp - ok
12:43:14.0991 2332	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
12:43:15.0007 2332	W32Time - ok
12:43:15.0054 2332	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
12:43:15.0054 2332	WacomPen - ok
12:43:15.0101 2332	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
12:43:15.0101 2332	WANARP - ok
12:43:15.0116 2332	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
12:43:15.0116 2332	Wanarpv6 - ok
12:43:15.0163 2332	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
12:43:15.0179 2332	wbengine - ok
12:43:15.0210 2332	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
12:43:15.0210 2332	WbioSrvc - ok
12:43:15.0272 2332	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
12:43:15.0272 2332	wcncsvc - ok
12:43:15.0288 2332	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
12:43:15.0288 2332	WcsPlugInService - ok
12:43:15.0319 2332	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
12:43:15.0319 2332	Wd - ok
12:43:15.0335 2332	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
12:43:15.0350 2332	Wdf01000 - ok
12:43:15.0366 2332	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
12:43:15.0366 2332	WdiServiceHost - ok
12:43:15.0366 2332	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
12:43:15.0366 2332	WdiSystemHost - ok
12:43:15.0397 2332	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
12:43:15.0413 2332	WebClient - ok
12:43:15.0428 2332	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
12:43:15.0428 2332	Wecsvc - ok
12:43:15.0459 2332	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
12:43:15.0459 2332	wercplsupport - ok
12:43:15.0491 2332	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
12:43:15.0506 2332	WerSvc - ok
12:43:15.0522 2332	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
12:43:15.0522 2332	WfpLwf - ok
12:43:15.0537 2332	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
12:43:15.0537 2332	WIMMount - ok
12:43:15.0569 2332	WinDefend - ok
12:43:15.0569 2332	WinHttpAutoProxySvc - ok
12:43:15.0600 2332	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
12:43:15.0600 2332	Winmgmt - ok
12:43:15.0662 2332	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
12:43:15.0693 2332	WinRM - ok
12:43:15.0771 2332	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
12:43:15.0771 2332	Wlansvc - ok
12:43:15.0881 2332	wlidsvc         (98f138897ef4246381d197cb81846d62) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:43:15.0896 2332	wlidsvc - ok
12:43:15.0943 2332	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
12:43:15.0943 2332	WmiAcpi - ok
12:43:15.0974 2332	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
12:43:15.0974 2332	wmiApSrv - ok
12:43:16.0021 2332	WMPNetworkSvc - ok
12:43:16.0037 2332	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
12:43:16.0037 2332	WPCSvc - ok
12:43:16.0083 2332	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
12:43:16.0083 2332	WPDBusEnum - ok
12:43:16.0130 2332	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
12:43:16.0130 2332	ws2ifsl - ok
12:43:16.0161 2332	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
12:43:16.0177 2332	wscsvc - ok
12:43:16.0193 2332	WSearch - ok
12:43:16.0271 2332	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
12:43:16.0286 2332	wuauserv - ok
12:43:16.0349 2332	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
12:43:16.0349 2332	WudfPf - ok
12:43:16.0395 2332	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
12:43:16.0395 2332	WUDFRd - ok
12:43:16.0427 2332	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
12:43:16.0427 2332	wudfsvc - ok
12:43:16.0442 2332	WwanSvc         (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
12:43:16.0458 2332	WwanSvc - ok
12:43:16.0505 2332	X6va005 - ok
12:43:16.0551 2332	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
12:43:16.0583 2332	\Device\Harddisk0\DR0 - ok
12:43:16.0583 2332	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk5\DR5
12:43:16.0583 2332	\Device\Harddisk5\DR5 - ok
12:43:16.0583 2332	Boot (0x1200)   (a347f2ac0a1a6868ad88fa431af592b6) \Device\Harddisk0\DR0\Partition0
12:43:16.0583 2332	\Device\Harddisk0\DR0\Partition0 - ok
12:43:16.0614 2332	Boot (0x1200)   (0a1c2bab25225408782f21955d0b87d1) \Device\Harddisk0\DR0\Partition1
12:43:16.0614 2332	\Device\Harddisk0\DR0\Partition1 - ok
12:43:16.0614 2332	Boot (0x1200)   (8d55f01ca61834b3c1fbde71c9827c3a) \Device\Harddisk5\DR5\Partition0
12:43:16.0614 2332	\Device\Harddisk5\DR5\Partition0 - ok
12:43:16.0614 2332	============================================================
12:43:16.0614 2332	Scan finished
12:43:16.0614 2332	============================================================
12:43:16.0629 3800	Detected object count: 1
12:43:16.0629 3800	Actual detected object count: 1
12:43:30.0139 3800	C:\Windows\system32\Drivers\sptd.sys - copied to quarantine
12:43:30.0139 3800	HKLM\SYSTEM\ControlSet001\services\sptd - will be deleted on reboot
12:43:30.0248 3800	HKLM\SYSTEM\ControlSet002\services\sptd - will be deleted on reboot
12:43:30.0467 3800	C:\Windows\system32\Drivers\sptd.sys - will be deleted on reboot
12:43:30.0467 3800	sptd ( LockedFile.Multi.Generic ) - User select action: Delete 
12:44:57.0283 3276	Deinitialize success
         

Sieht nicht so aus, als wäre das Problem beseitigt worden. Naja ich fange dann schonmal an meine Daten zu sichern und mich auf ne Runde Pc neu aufsetzten vorzubereiten, vorausgesetzt dir fällt nichts mehr ein

gruß Summmsel

fällt mir noch sicherlich einiges ein...

die Frage ist, ob Du jetzt dein Windows nau aufsetzen willst, oder sollten wir mit Systemcheck & Bereinigung fortfahren? allerdings die sicherste und schnellste Methode wäre natürlich Format C

Naja, wenn du noch was am start hast was hilft, schmeiß ich das vorher an, ist ja für andere die das gleiche Problem haben bestimmt auch interessant zu sehen ob das hilft, aber ansonsten kommt die Formatierungskeule, hatte ich sowieso schon länger vor

gruß Summmsel

Zitat von Summmsel

... aber ansonsten kommt die Formatierungskeule, hatte ich sowieso schon länger vor

dann würd ich sagen, mach lieber kurzen Prozess besser jetzt, da das System nicht mehr verteruenswürdig ist..wenn auch wir schaffen es einigermaße reparieren

Tipps & Rat:

➊
Datensicherung:
► NUR Daten sichern, die nicht ausführbaren Dateien enthalten - Dateiendungen - Dies ist eine Liste von Dateiendungen, die Dateien mit ausführbarem Code bezeichnen können.
- Vorsicht mit den schon vorhandenen Dateien auf die extern gespeicherten Daten und auch jetzt mit dem Virus infizierte Dateien eine Datensicherung anzufertigen
- Am besten alles was dir sehr wichtig, separat (extern) sichern - nicht mischen eventuell früher geschicherten Daten, also vor dem Befall!
- Eventuell gecrackte Software nicht sichern und dann auf neu aufgesetztem System wieder drauf installieren!

- Vor zurückspielen - bevor du mit deinem PC direkt ins Netz gehst...:
- die Autoplay-Funktion für alle Laufwerke deaktivieren/ausschalten -> Autorun/Autoplay gezielt für Laufwerkstypen oder -buchstaben abschalten

Die auf eine externe Festplatte gesicherten Daten, gründlich zu scannen von einem suaberen System aus, am besten mit mehreren Scannern-> Kostenlose Online Scanner - Anleitung

➋
-> Anleitung: Neuaufsetzen des Systems + Absicherung
-> Anleitung zum Neuaufsetzen - Windows XP, Vista und Win7

➌
Ich würde Dir vorsichtshalber raten, dein Passwort zu ändern
z.B. Login-, Mail- oder Website-Passwörter
Tipps:
Die sichere Passwort-Wahl - (sollte man eigentlich regelmäßigen Abständen ca. alle 3-5 Monate ändern)
auch noch hier unter: Sicheres Kennwort (Password)