GMX Account verschickt Spam-Mails -- keine Listung unter "Gesendet"

cosinus · 25.05.2012, 11:03

Ja klar, dann kann das davon kommen. Also legitim

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

ATTFilter

:OTL
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{338c6927-87b1-11e0-beaa-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{338c6927-87b1-11e0-beaa-806e6f6e6963}\Shell\AutoRun\command - "" = D:\ANNOfinder.exe
O33 - MountPoints2\{8e402583-cbe6-11e0-b320-001d600b4d4d}\Shell - "" = AutoRun
O33 - MountPoints2\{8e402583-cbe6-11e0-b320-001d600b4d4d}\Shell\AutoRun\command - "" = E:\Setup.exe
@Alternate Data Stream - 1130 bytes -> C:\Users\Simon\AppData\Local\HHhMpdXpHPWxS9U:UaloyjOx3bScIQabGGF
@Alternate Data Stream - 1129 bytes -> C:\Users\Simon\AppData\Local\aPwbUnuP:JG1jknzkFwTjWKsgKLMWGqogW
@Alternate Data Stream - 1123 bytes -> C:\Users\Simon\AppData\Local\ARSEZpkBlz:UH2HTTtjitg7WARcJJI3zI
:Commands
[purity]
[emptytemp]
[emptyflash]
[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Cranc v.2 · 25.05.2012, 13:15

Code:

ATTFilter

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{338c6927-87b1-11e0-beaa-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{338c6927-87b1-11e0-beaa-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{338c6927-87b1-11e0-beaa-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{338c6927-87b1-11e0-beaa-806e6f6e6963}\ not found.
File D:\ANNOfinder.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8e402583-cbe6-11e0-b320-001d600b4d4d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8e402583-cbe6-11e0-b320-001d600b4d4d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8e402583-cbe6-11e0-b320-001d600b4d4d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8e402583-cbe6-11e0-b320-001d600b4d4d}\ not found.
File E:\Setup.exe not found.
ADS C:\Users\Simon\AppData\Local\HHhMpdXpHPWxS9U:UaloyjOx3bScIQabGGF deleted successfully.
ADS C:\Users\Simon\AppData\Local\aPwbUnuP:JG1jknzkFwTjWKsgKLMWGqogW deleted successfully.
ADS C:\Users\Simon\AppData\Local\ARSEZpkBlz:UH2HTTtjitg7WARcJJI3zI deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56468 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: Simon
->Temp folder emptied: 1421024966 bytes
->Temporary Internet Files folder emptied: 32052260 bytes
->Java cache emptied: 15661585 bytes
->FireFox cache emptied: 773650487 bytes
->Flash cache emptied: 92757 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 5 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 119824241 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 111702 bytes
RecycleBin emptied: 171833784 bytes
 
Total Files Cleaned = 2.417,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Public
 
User: Simon
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0,00 mb
 
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.43.1 log created on 05252012_130032

Files\Folders moved on Reboot...
C:\Users\Simon\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...

PC hat auch neugestartet.

cosinus · 25.05.2012, 13:17

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C

nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

Cranc v.2 · 25.05.2012, 13:43

Hier die log.txt

Code:

ATTFilter

14:39:29.0340 4800	TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30
14:39:29.0699 4800	============================================================
14:39:29.0699 4800	Current date / time: 2012/05/25 14:39:29.0699
14:39:29.0699 4800	SystemInfo:
14:39:29.0699 4800	
14:39:29.0699 4800	OS Version: 6.1.7601 ServicePack: 1.0
14:39:29.0699 4800	Product type: Workstation
14:39:29.0699 4800	ComputerName: SIMON-PC
14:39:29.0699 4800	UserName: Simon
14:39:29.0699 4800	Windows directory: C:\Windows
14:39:29.0699 4800	System windows directory: C:\Windows
14:39:29.0699 4800	Running under WOW64
14:39:29.0699 4800	Processor architecture: Intel x64
14:39:29.0699 4800	Number of processors: 2
14:39:29.0699 4800	Page size: 0x1000
14:39:29.0699 4800	Boot type: Normal boot
14:39:29.0699 4800	============================================================
14:39:30.0557 4800	Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x11EE4, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000040
14:39:30.0588 4800	Drive \Device\Harddisk1\DR1 - Size: 0x5D27216000 (372.61 Gb), SectorSize: 0x200, Cylinders: 0xBD435, SectorsPerTrack: 0x3F, TracksPerCylinder: 0x10, Type 'K0', Flags 0x00000040
14:39:30.0588 4800	============================================================
14:39:30.0588 4800	\Device\Harddisk0\DR0:
14:39:30.0588 4800	MBR partitions:
14:39:30.0588 4800	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:39:30.0588 4800	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x129E6800
14:39:30.0588 4800	\Device\Harddisk1\DR1:
14:39:30.0588 4800	MBR partitions:
14:39:30.0588 4800	\Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2E938000
14:39:30.0588 4800	============================================================
14:39:30.0619 4800	C: <-> \Device\Harddisk0\DR0\Partition1
14:39:30.0681 4800	B: <-> \Device\Harddisk1\DR1\Partition0
14:39:30.0681 4800	============================================================
14:39:30.0681 4800	Initialize success
14:39:30.0681 4800	============================================================
14:39:40.0353 0944	============================================================
14:39:40.0353 0944	Scan started
14:39:40.0353 0944	Mode: Manual; SigCheck; TDLFS; 
14:39:40.0353 0944	============================================================
14:39:41.0648 0944	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
14:39:41.0804 0944	1394ohci - ok
14:39:41.0851 0944	acedrv11        (a3769020f7e8a70fd3e824c050f33306) C:\Windows\system32\drivers\acedrv11.sys
14:39:56.0234 0944	acedrv11 - ok
14:39:56.0281 0944	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
14:39:56.0312 0944	ACPI - ok
14:39:56.0328 0944	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
14:39:56.0406 0944	AcpiPmi - ok
14:39:56.0453 0944	adfs            (d44bcaf639e4e45307c2bc80715273d5) C:\Windows\system32\drivers\adfs.sys
14:39:56.0468 0944	adfs - ok
14:39:56.0609 0944	Adobe Version Cue CS4 (57a3b9a69f14414ace12afd6ba701773) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
14:39:56.0640 0944	Adobe Version Cue CS4 - ok
14:39:56.0687 0944	AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:39:56.0687 0944	AdobeARMservice - ok
14:39:56.0718 0944	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
14:39:56.0749 0944	adp94xx - ok
14:39:56.0780 0944	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
14:39:56.0796 0944	adpahci - ok
14:39:56.0827 0944	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
14:39:56.0843 0944	adpu320 - ok
14:39:56.0874 0944	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
14:39:56.0999 0944	AeLookupSvc - ok
14:39:57.0061 0944	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
14:39:57.0139 0944	AFD - ok
14:39:57.0170 0944	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
14:39:57.0170 0944	agp440 - ok
14:39:57.0217 0944	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
14:39:57.0279 0944	ALG - ok
14:39:57.0279 0944	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
14:39:57.0295 0944	aliide - ok
14:39:57.0389 0944	ALSysIO - ok
14:39:57.0420 0944	AMD External Events Utility (962227630779043b5c1d4cd157abb912) C:\Windows\system32\atiesrxx.exe
14:39:57.0513 0944	AMD External Events Utility - ok
14:39:57.0591 0944	AMD FUEL Service - ok
14:39:57.0623 0944	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
14:39:57.0623 0944	amdide - ok
14:39:57.0669 0944	amdiox64        (6a2eeb0c4133b20773bb3dd0b7b377b4) C:\Windows\system32\DRIVERS\amdiox64.sys
14:39:57.0669 0944	amdiox64 - ok
14:39:57.0716 0944	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
14:39:57.0779 0944	AmdK8 - ok
14:39:58.0356 0944	amdkmdag        (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
14:39:58.0683 0944	amdkmdag - ok
14:39:58.0793 0944	amdkmdap        (2d9005ea0bfd25c740e53c8dd3c069e0) C:\Windows\system32\DRIVERS\atikmpag.sys
14:39:58.0839 0944	amdkmdap - ok
14:39:58.0871 0944	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
14:39:58.0917 0944	AmdPPM - ok
14:39:58.0964 0944	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
14:39:58.0980 0944	amdsata - ok
14:39:59.0011 0944	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
14:39:59.0027 0944	amdsbs - ok
14:39:59.0042 0944	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
14:39:59.0058 0944	amdxata - ok
14:39:59.0089 0944	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
14:39:59.0151 0944	AppID - ok
14:39:59.0183 0944	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
14:39:59.0229 0944	AppIDSvc - ok
14:39:59.0276 0944	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
14:39:59.0323 0944	Appinfo - ok
14:39:59.0354 0944	AppMgmt         (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
14:39:59.0417 0944	AppMgmt - ok
14:39:59.0448 0944	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
14:39:59.0463 0944	arc - ok
14:39:59.0479 0944	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
14:39:59.0495 0944	arcsas - ok
14:39:59.0510 0944	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
14:39:59.0573 0944	AsyncMac - ok
14:39:59.0604 0944	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
14:39:59.0619 0944	atapi - ok
14:39:59.0666 0944	AtiHDAudioService (2b3b05c0a7768bf033217eb8f33f9c35) C:\Windows\system32\drivers\AtihdW76.sys
14:39:59.0682 0944	AtiHDAudioService - ok
14:40:00.0009 0944	atikmdag        (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
14:40:00.0119 0944	atikmdag - ok
14:40:00.0228 0944	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:40:00.0306 0944	AudioEndpointBuilder - ok
14:40:00.0306 0944	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:40:00.0353 0944	AudioSrv - ok
14:40:00.0399 0944	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
14:40:00.0477 0944	AxInstSV - ok
14:40:00.0540 0944	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
14:40:00.0602 0944	b06bdrv - ok
14:40:00.0633 0944	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
14:40:00.0711 0944	b57nd60a - ok
14:40:00.0743 0944	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
14:40:00.0805 0944	BDESVC - ok
14:40:00.0836 0944	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
14:40:00.0899 0944	Beep - ok
14:40:00.0945 0944	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
14:40:01.0023 0944	BFE - ok
14:40:01.0086 0944	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
14:40:01.0164 0944	BITS - ok
14:40:01.0226 0944	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
14:40:01.0242 0944	blbdrive - ok
14:40:01.0273 0944	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
14:40:01.0304 0944	bowser - ok
14:40:01.0320 0944	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:40:01.0398 0944	BrFiltLo - ok
14:40:01.0398 0944	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:40:01.0413 0944	BrFiltUp - ok
14:40:01.0445 0944	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
14:40:01.0507 0944	Browser - ok
14:40:01.0538 0944	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
14:40:01.0585 0944	Brserid - ok
14:40:01.0601 0944	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
14:40:01.0647 0944	BrSerWdm - ok
14:40:01.0647 0944	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
14:40:01.0663 0944	BrUsbMdm - ok
14:40:01.0663 0944	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
14:40:01.0725 0944	BrUsbSer - ok
14:40:01.0725 0944	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
14:40:01.0741 0944	BTHMODEM - ok
14:40:01.0772 0944	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
14:40:01.0835 0944	bthserv - ok
14:40:01.0866 0944	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
14:40:01.0928 0944	cdfs - ok
14:40:01.0959 0944	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
14:40:02.0006 0944	cdrom - ok
14:40:02.0037 0944	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:40:02.0100 0944	CertPropSvc - ok
14:40:02.0147 0944	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
14:40:02.0178 0944	circlass - ok
14:40:02.0225 0944	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
14:40:02.0256 0944	CLFS - ok
14:40:02.0396 0944	CLPSLS          (882e3973505c441ce000133c821d0edd) C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
14:40:02.0427 0944	CLPSLS - ok
14:40:02.0505 0944	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:40:02.0521 0944	clr_optimization_v2.0.50727_32 - ok
14:40:02.0583 0944	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:40:02.0615 0944	clr_optimization_v2.0.50727_64 - ok
14:40:02.0677 0944	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
14:40:02.0693 0944	CmBatt - ok
14:40:02.0833 0944	cmdAgent        (cee48ccc4d561ddb19c72f9fb55d28d5) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
14:40:02.0880 0944	cmdAgent - ok
14:40:02.0989 0944	cmderd          (7eac5e62f0b93262984d450e0d497b61) C:\Windows\system32\DRIVERS\cmderd.sys
14:40:03.0005 0944	cmderd - ok
14:40:03.0036 0944	cmdGuard        (0599d5a458d4e0e37ab84e9d1c5c73e5) C:\Windows\system32\DRIVERS\cmdguard.sys
14:40:03.0051 0944	cmdGuard - ok
14:40:03.0083 0944	cmdHlp          (2d3e08c7106f748f9eff3dec14142d3e) C:\Windows\system32\DRIVERS\cmdhlp.sys
14:40:03.0083 0944	cmdHlp - ok
14:40:03.0114 0944	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
14:40:03.0161 0944	cmdide - ok
14:40:03.0223 0944	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
14:40:03.0254 0944	CNG - ok
14:40:03.0317 0944	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
14:40:03.0332 0944	Compbatt - ok
14:40:03.0363 0944	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
14:40:03.0395 0944	CompositeBus - ok
14:40:03.0410 0944	COMSysApp - ok
14:40:03.0426 0944	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
14:40:03.0441 0944	crcdisk - ok
14:40:03.0504 0944	Creative ALchemy AL6 Licensing Service (c8bd651e13895b93ed9ec5b4f1df42bc) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
14:40:03.0613 0944	Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - warning
14:40:03.0613 0944	Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic (1)
14:40:03.0644 0944	Creative Audio Engine Licensing Service (c0ead9f8ab83d41ff07303c75589c2b8) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
14:40:03.0675 0944	Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - warning
14:40:03.0675 0944	Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic (1)
14:40:03.0707 0944	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
14:40:03.0769 0944	CryptSvc - ok
14:40:03.0863 0944	CSC             (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
14:40:03.0941 0944	CSC - ok
14:40:03.0987 0944	CscService      (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
14:40:04.0050 0944	CscService - ok
14:40:04.0128 0944	CTAudSvcService (69cdba2b9c397e349a04fa70dd9170a2) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
14:40:04.0159 0944	CTAudSvcService ( UnsignedFile.Multi.Generic ) - warning
14:40:04.0159 0944	CTAudSvcService - detected UnsignedFile.Multi.Generic (1)
14:40:04.0190 0944	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:40:04.0268 0944	DcomLaunch - ok
14:40:04.0299 0944	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
14:40:04.0377 0944	defragsvc - ok
14:40:04.0518 0944	DeviceMonitorService (14bcef1bc82f020cf3f00aa2113d67fd) C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe
14:40:04.0533 0944	DeviceMonitorService - ok
14:40:04.0596 0944	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
14:40:04.0643 0944	DfsC - ok
14:40:04.0705 0944	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
14:40:04.0767 0944	Dhcp - ok
14:40:04.0799 0944	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
14:40:04.0861 0944	discache - ok
14:40:04.0892 0944	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
14:40:04.0908 0944	Disk - ok
14:40:04.0939 0944	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
14:40:05.0017 0944	Dnscache - ok
14:40:05.0064 0944	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
14:40:05.0126 0944	dot3svc - ok
14:40:05.0142 0944	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
14:40:05.0204 0944	DPS - ok
14:40:05.0298 0944	DragonUpdater   (79b8d78f3f3255b2858a79f1bf31adbd) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
14:40:05.0313 0944	DragonUpdater - ok
14:40:05.0345 0944	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
14:40:05.0376 0944	drmkaud - ok
14:40:05.0423 0944	dtsoftbus01     (d3d64cf7b2bceaa34a270f45a3fffb36) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
14:40:05.0454 0944	dtsoftbus01 - ok
14:40:05.0516 0944	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
14:40:05.0547 0944	DXGKrnl - ok
14:40:05.0579 0944	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
14:40:05.0641 0944	EapHost - ok
14:40:05.0766 0944	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
14:40:05.0875 0944	ebdrv - ok
14:40:05.0984 0944	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
14:40:06.0031 0944	EFS - ok
14:40:06.0109 0944	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
14:40:06.0203 0944	ehRecvr - ok
14:40:06.0218 0944	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
14:40:06.0249 0944	ehSched - ok
14:40:06.0312 0944	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
14:40:06.0343 0944	elxstor - ok
14:40:06.0374 0944	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
14:40:06.0405 0944	ErrDev - ok
14:40:06.0452 0944	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
14:40:06.0530 0944	EventSystem - ok
14:40:06.0561 0944	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
14:40:06.0608 0944	exfat - ok
14:40:06.0639 0944	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
14:40:06.0686 0944	fastfat - ok
14:40:06.0717 0944	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
14:40:06.0795 0944	Fax - ok
14:40:06.0811 0944	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
14:40:06.0858 0944	fdc - ok
14:40:06.0889 0944	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
14:40:06.0920 0944	fdPHost - ok
14:40:06.0951 0944	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
14:40:07.0014 0944	FDResPub - ok
14:40:07.0045 0944	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
14:40:07.0061 0944	FileInfo - ok
14:40:07.0076 0944	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
14:40:07.0139 0944	Filetrace - ok
14:40:07.0217 0944	FLEXnet Licensing Service (1f63900e2eb00101b9aca2b7a870704e) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
14:40:07.0232 0944	FLEXnet Licensing Service - ok
14:40:07.0310 0944	FLEXnet Licensing Service 64 (1c3fb052a0bb72edaed90785c34d6eed) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
14:40:07.0326 0944	FLEXnet Licensing Service 64 - ok
14:40:07.0435 0944	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
14:40:07.0435 0944	flpydisk - ok
14:40:07.0482 0944	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
14:40:07.0513 0944	FltMgr - ok
14:40:07.0575 0944	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
14:40:07.0669 0944	FontCache - ok
14:40:07.0731 0944	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:40:07.0809 0944	FontCache3.0.0.0 - ok
14:40:07.0856 0944	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
14:40:07.0872 0944	FsDepends - ok
14:40:07.0887 0944	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
14:40:07.0903 0944	Fs_Rec - ok
14:40:07.0919 0944	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
14:40:07.0950 0944	fvevol - ok
14:40:07.0965 0944	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
14:40:07.0981 0944	gagp30kx - ok
14:40:08.0028 0944	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
14:40:08.0106 0944	gpsvc - ok
14:40:08.0215 0944	gupdate         (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:40:08.0231 0944	gupdate - ok
14:40:08.0231 0944	gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:40:08.0231 0944	gupdatem - ok
14:40:08.0293 0944	HauppaugeTVServer (1dbbf9be473f6ca2f2f4182fccf563dc) C:\PROGRA~2\WinTV\TVServer\HAUPPA~1.EXE
14:40:08.0324 0944	HauppaugeTVServer ( UnsignedFile.Multi.Generic ) - warning
14:40:08.0324 0944	HauppaugeTVServer - detected UnsignedFile.Multi.Generic (1)
14:40:08.0465 0944	hcw10bda        (bac77c58dede086bd204029eff130dd7) C:\Windows\system32\drivers\hcw10bda.sys
14:40:08.0543 0944	hcw10bda - ok
14:40:08.0558 0944	hcw10cir        (a8518733af128859bf2daab6b5c742e5) C:\Windows\system32\drivers\hcw10cir.sys
14:40:08.0621 0944	hcw10cir - ok
14:40:08.0652 0944	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
14:40:08.0699 0944	hcw85cir - ok
14:40:08.0730 0944	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
14:40:08.0792 0944	HdAudAddService - ok
14:40:08.0823 0944	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
14:40:08.0870 0944	HDAudBus - ok
14:40:08.0901 0944	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
14:40:08.0933 0944	HidBatt - ok
14:40:08.0948 0944	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
14:40:08.0964 0944	HidBth - ok
14:40:08.0979 0944	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
14:40:09.0011 0944	HidIr - ok
14:40:09.0042 0944	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
14:40:09.0104 0944	hidserv - ok
14:40:09.0135 0944	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
14:40:09.0151 0944	HidUsb - ok
14:40:09.0182 0944	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
14:40:09.0245 0944	hkmsvc - ok
14:40:09.0276 0944	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
14:40:09.0354 0944	HomeGroupListener - ok
14:40:09.0385 0944	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
14:40:09.0432 0944	HomeGroupProvider - ok
14:40:09.0479 0944	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
14:40:09.0494 0944	HpSAMD - ok
14:40:09.0541 0944	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
14:40:09.0619 0944	HTTP - ok
14:40:09.0650 0944	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
14:40:09.0666 0944	hwpolicy - ok
14:40:09.0697 0944	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
14:40:09.0713 0944	i8042prt - ok
14:40:09.0759 0944	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
14:40:09.0791 0944	iaStorV - ok
14:40:09.0931 0944	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:40:09.0978 0944	idsvc - ok
14:40:10.0009 0944	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
14:40:10.0025 0944	iirsp - ok
14:40:10.0071 0944	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
14:40:10.0149 0944	IKEEXT - ok
14:40:10.0212 0944	inspect         (efff0afd27cc97bf0e5e0bab78419de7) C:\Windows\system32\DRIVERS\inspect.sys
14:40:10.0212 0944	inspect - ok
14:40:10.0259 0944	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
14:40:10.0259 0944	intelide - ok
14:40:10.0305 0944	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
14:40:10.0337 0944	intelppm - ok
14:40:10.0383 0944	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
14:40:10.0430 0944	IPBusEnum - ok
14:40:10.0477 0944	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:40:10.0524 0944	IpFilterDriver - ok
14:40:10.0571 0944	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
14:40:10.0649 0944	iphlpsvc - ok
14:40:10.0695 0944	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
14:40:10.0727 0944	IPMIDRV - ok
14:40:10.0789 0944	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
14:40:10.0851 0944	IPNAT - ok
14:40:10.0867 0944	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
14:40:10.0929 0944	IRENUM - ok
14:40:10.0961 0944	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
14:40:10.0961 0944	isapnp - ok
14:40:11.0007 0944	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
14:40:11.0023 0944	iScsiPrt - ok
14:40:11.0054 0944	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
14:40:11.0054 0944	kbdclass - ok
14:40:11.0085 0944	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
14:40:11.0101 0944	kbdhid - ok
14:40:11.0132 0944	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:40:11.0148 0944	KeyIso - ok
14:40:11.0163 0944	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
14:40:11.0179 0944	KSecDD - ok
14:40:11.0179 0944	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
14:40:11.0210 0944	KSecPkg - ok
14:40:11.0226 0944	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
14:40:11.0288 0944	ksthunk - ok
14:40:11.0319 0944	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
14:40:11.0397 0944	KtmRm - ok
14:40:11.0444 0944	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
14:40:11.0507 0944	LanmanServer - ok
14:40:11.0538 0944	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
14:40:11.0600 0944	LanmanWorkstation - ok
14:40:11.0647 0944	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
14:40:11.0678 0944	lltdio - ok
14:40:11.0709 0944	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
14:40:11.0787 0944	lltdsvc - ok
14:40:11.0803 0944	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
14:40:11.0834 0944	lmhosts - ok
14:40:11.0865 0944	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
14:40:11.0881 0944	LSI_FC - ok
14:40:11.0912 0944	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
14:40:11.0928 0944	LSI_SAS - ok
14:40:11.0943 0944	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:40:11.0959 0944	LSI_SAS2 - ok
14:40:11.0975 0944	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:40:11.0990 0944	LSI_SCSI - ok
14:40:12.0021 0944	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
14:40:12.0084 0944	luafv - ok
14:40:12.0084 0944	lxdi_device - ok
14:40:12.0146 0944	MBAMProtector   (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys
14:40:12.0162 0944	MBAMProtector - ok
14:40:12.0224 0944	MBAMService     (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
14:40:12.0240 0944	MBAMService - ok
14:40:12.0271 0944	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
14:40:12.0302 0944	Mcx2Svc - ok
14:40:12.0333 0944	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
14:40:12.0349 0944	megasas - ok
14:40:12.0365 0944	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
14:40:12.0396 0944	MegaSR - ok
14:40:12.0474 0944	Microsoft Office Groove Audit Service (7c4c76b39d5525c4a465e0be32528e19) C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
14:40:12.0474 0944	Microsoft Office Groove Audit Service - ok
14:40:12.0521 0944	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:40:12.0552 0944	MMCSS - ok
14:40:12.0583 0944	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
14:40:12.0630 0944	Modem - ok
14:40:12.0677 0944	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
14:40:12.0723 0944	monitor - ok
14:40:12.0848 0944	Motorola Device Manager (5ddce3fc5a54a4a58ee693046ebfaef3) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
14:40:12.0864 0944	Motorola Device Manager - ok
14:40:12.0895 0944	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
14:40:12.0911 0944	mouclass - ok
14:40:12.0926 0944	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
14:40:12.0973 0944	mouhid - ok
14:40:12.0989 0944	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
14:40:13.0004 0944	mountmgr - ok
14:40:13.0067 0944	MozillaMaintenance (5b109c18acc43afc1ec22b1c071e4da9) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:40:13.0082 0944	MozillaMaintenance - ok
14:40:13.0113 0944	MpFilter        (c177a7ebf5e8a0b596f618870516cab8) C:\Windows\system32\DRIVERS\MpFilter.sys
14:40:13.0129 0944	MpFilter - ok
14:40:13.0160 0944	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
14:40:13.0176 0944	mpio - ok
14:40:13.0223 0944	MpNWMon         (8fbf6b31fe8af1833d93c5913d5b4d55) C:\Windows\system32\DRIVERS\MpNWMon.sys
14:40:13.0223 0944	MpNWMon - ok
14:40:13.0269 0944	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
14:40:13.0301 0944	mpsdrv - ok
14:40:13.0347 0944	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
14:40:13.0441 0944	MpsSvc - ok
14:40:13.0488 0944	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
14:40:13.0535 0944	MRxDAV - ok
14:40:13.0581 0944	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
14:40:13.0644 0944	mrxsmb - ok
14:40:13.0675 0944	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:40:13.0722 0944	mrxsmb10 - ok
14:40:13.0769 0944	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:40:13.0815 0944	mrxsmb20 - ok
14:40:13.0862 0944	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
14:40:13.0862 0944	msahci - ok
14:40:13.0893 0944	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
14:40:13.0909 0944	msdsm - ok
14:40:13.0940 0944	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
14:40:13.0987 0944	MSDTC - ok
14:40:14.0034 0944	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
14:40:14.0065 0944	Msfs - ok
14:40:14.0081 0944	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
14:40:14.0143 0944	mshidkmdf - ok
14:40:14.0190 0944	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
14:40:14.0205 0944	msisadrv - ok
14:40:14.0237 0944	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
14:40:14.0299 0944	MSiSCSI - ok
14:40:14.0315 0944	msiserver - ok
14:40:14.0346 0944	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
14:40:14.0377 0944	MSKSSRV - ok
14:40:14.0455 0944	MsMpSvc         (157e9e498206a3366baa7e4697bdd947) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
14:40:14.0471 0944	MsMpSvc - ok
14:40:14.0471 0944	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
14:40:14.0533 0944	MSPCLOCK - ok
14:40:14.0564 0944	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
14:40:14.0595 0944	MSPQM - ok
14:40:14.0627 0944	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
14:40:14.0642 0944	MsRPC - ok
14:40:14.0673 0944	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
14:40:14.0689 0944	mssmbios - ok
14:40:14.0705 0944	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
14:40:14.0751 0944	MSTEE - ok
14:40:14.0767 0944	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
14:40:14.0783 0944	MTConfig - ok
14:40:14.0814 0944	MTsensor        (03b7145c889603537e9ffeabb1ad1089) C:\Windows\system32\DRIVERS\ASACPI.sys
14:40:14.0861 0944	MTsensor - ok
14:40:14.0907 0944	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
14:40:14.0907 0944	Mup - ok
14:40:14.0954 0944	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
14:40:15.0017 0944	napagent - ok
14:40:15.0048 0944	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
14:40:15.0110 0944	NativeWifiP - ok
14:40:15.0157 0944	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
14:40:15.0204 0944	NDIS - ok
14:40:15.0235 0944	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
14:40:15.0266 0944	NdisCap - ok
14:40:15.0282 0944	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
14:40:15.0313 0944	NdisTapi - ok
14:40:15.0344 0944	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
14:40:15.0407 0944	Ndisuio - ok
14:40:15.0438 0944	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
14:40:15.0500 0944	NdisWan - ok
14:40:15.0563 0944	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
14:40:15.0594 0944	NDProxy - ok
14:40:15.0625 0944	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
14:40:15.0672 0944	NetBIOS - ok
14:40:15.0734 0944	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
14:40:15.0765 0944	NetBT - ok
14:40:15.0797 0944	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:40:15.0812 0944	Netlogon - ok
14:40:15.0843 0944	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
14:40:15.0906 0944	Netman - ok
14:40:15.0953 0944	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
14:40:16.0015 0944	netprofm - ok
14:40:16.0093 0944	netr28ux        (26672f93749ac9fd28da1b0f94efa78d) C:\Windows\system32\DRIVERS\netr28ux.sys
14:40:16.0155 0944	netr28ux - ok
14:40:16.0280 0944	NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:40:16.0374 0944	NetTcpPortSharing - ok
14:40:16.0421 0944	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
14:40:16.0436 0944	nfrd960 - ok
14:40:16.0467 0944	NisDrv          (5f7d72cbcdd025af1f38fdeee5646968) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
14:40:16.0483 0944	NisDrv - ok
14:40:16.0577 0944	NisSrv          (566ddd5d82520da01d75f81428ac4c38) C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
14:40:16.0592 0944	NisSrv - ok
14:40:16.0608 0944	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
14:40:16.0686 0944	NlaSvc - ok
14:40:16.0733 0944	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
14:40:16.0764 0944	Npfs - ok
14:40:16.0795 0944	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
14:40:16.0857 0944	nsi - ok
14:40:16.0873 0944	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
14:40:16.0935 0944	nsiproxy - ok
14:40:17.0013 0944	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
14:40:17.0076 0944	Ntfs - ok
14:40:17.0185 0944	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
14:40:17.0232 0944	Null - ok
14:40:17.0294 0944	NVENETFD        (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys
14:40:17.0341 0944	NVENETFD - ok
14:40:17.0388 0944	NVNET           (0ad267a4674805b61a5d7b911d2a978a) C:\Windows\system32\DRIVERS\nvmf6264.sys
14:40:17.0403 0944	NVNET - ok
14:40:17.0450 0944	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
14:40:17.0466 0944	nvraid - ok
14:40:17.0497 0944	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
14:40:17.0513 0944	nvstor - ok
14:40:17.0528 0944	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
14:40:17.0544 0944	nv_agp - ok
14:40:17.0637 0944	odserv          (1f0e05dff4f5a833168e49be1256f002) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:40:17.0669 0944	odserv - ok
14:40:17.0715 0944	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
14:40:17.0747 0944	ohci1394 - ok
14:40:17.0793 0944	ose             (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:40:17.0809 0944	ose - ok
14:40:17.0871 0944	P17             (edd1dcd36f6115acc6935c3f88ff54d7) C:\Windows\system32\drivers\P17.sys
14:40:17.0965 0944	P17 - ok
14:40:17.0996 0944	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:40:18.0074 0944	p2pimsvc - ok
14:40:18.0105 0944	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
14:40:18.0137 0944	p2psvc - ok
14:40:18.0183 0944	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
14:40:18.0199 0944	Parport - ok
14:40:18.0230 0944	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
14:40:18.0246 0944	partmgr - ok
14:40:18.0261 0944	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
14:40:18.0308 0944	PcaSvc - ok
14:40:18.0355 0944	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
14:40:18.0371 0944	pci - ok
14:40:18.0386 0944	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
14:40:18.0386 0944	pciide - ok
14:40:18.0417 0944	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
14:40:18.0449 0944	pcmcia - ok
14:40:18.0464 0944	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
14:40:18.0464 0944	pcw - ok
14:40:18.0495 0944	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
14:40:18.0573 0944	PEAUTH - ok
14:40:18.0651 0944	PeerDistSvc     (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
14:40:18.0745 0944	PeerDistSvc - ok
14:40:18.0807 0944	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
14:40:18.0917 0944	PerfHost - ok
14:40:19.0041 0944	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
14:40:19.0119 0944	pla - ok
14:40:19.0166 0944	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
14:40:19.0244 0944	PlugPlay - ok
14:40:19.0275 0944	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
14:40:19.0307 0944	PNRPAutoReg - ok
14:40:19.0338 0944	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:40:19.0353 0944	PNRPsvc - ok
14:40:19.0400 0944	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
14:40:19.0478 0944	PolicyAgent - ok
14:40:19.0509 0944	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
14:40:19.0572 0944	Power - ok
14:40:19.0634 0944	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
14:40:19.0681 0944	PptpMiniport - ok
14:40:19.0712 0944	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
14:40:19.0743 0944	Processor - ok
14:40:19.0977 0944	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
14:40:20.0055 0944	ProfSvc - ok
14:40:20.0087 0944	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:40:20.0102 0944	ProtectedStorage - ok
14:40:20.0118 0944	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
14:40:20.0165 0944	Psched - ok
14:40:20.0274 0944	PST Service     (ea735bf6df13a857a83c99bf27a422ad) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
14:40:20.0289 0944	PST Service ( UnsignedFile.Multi.Generic ) - warning
14:40:20.0289 0944	PST Service - detected UnsignedFile.Multi.Generic (1)
14:40:20.0367 0944	PxHlpa64        (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys
14:40:20.0367 0944	PxHlpa64 - ok
14:40:20.0445 0944	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
14:40:20.0523 0944	ql2300 - ok
14:40:20.0633 0944	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
14:40:20.0648 0944	ql40xx - ok
14:40:20.0695 0944	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
14:40:20.0742 0944	QWAVE - ok
14:40:20.0773 0944	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
14:40:20.0804 0944	QWAVEdrv - ok
14:40:20.0835 0944	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
14:40:20.0882 0944	RasAcd - ok
14:40:20.0929 0944	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
14:40:20.0960 0944	RasAgileVpn - ok
14:40:21.0007 0944	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
14:40:21.0069 0944	RasAuto - ok
14:40:21.0101 0944	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
14:40:21.0163 0944	Rasl2tp - ok
14:40:21.0225 0944	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
14:40:21.0272 0944	RasMan - ok
14:40:21.0319 0944	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
14:40:21.0381 0944	RasPppoe - ok
14:40:21.0413 0944	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
14:40:21.0475 0944	RasSstp - ok
14:40:21.0522 0944	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
14:40:21.0600 0944	rdbss - ok
14:40:21.0631 0944	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
14:40:21.0678 0944	rdpbus - ok
14:40:21.0709 0944	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
14:40:21.0787 0944	RDPCDD - ok
14:40:21.0834 0944	RDPDR           (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
14:40:21.0881 0944	RDPDR - ok
14:40:21.0912 0944	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
14:40:21.0959 0944	RDPENCDD - ok
14:40:21.0990 0944	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
14:40:22.0021 0944	RDPREFMP - ok
14:40:22.0161 0944	RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
14:40:22.0255 0944	RdpVideoMiniport - ok
14:40:22.0286 0944	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
14:40:22.0317 0944	RDPWD - ok
14:40:22.0364 0944	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
14:40:22.0380 0944	rdyboost - ok
14:40:22.0411 0944	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
14:40:22.0473 0944	RemoteAccess - ok
14:40:22.0520 0944	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
14:40:22.0583 0944	RemoteRegistry - ok
14:40:22.0614 0944	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
14:40:22.0692 0944	RpcEptMapper - ok
14:40:22.0723 0944	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
14:40:22.0770 0944	RpcLocator - ok
14:40:22.0910 0944	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:40:22.0957 0944	RpcSs - ok
14:40:22.0973 0944	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
14:40:23.0019 0944	rspndr - ok
14:40:23.0051 0944	s3cap           (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
14:40:23.0097 0944	s3cap - ok
14:40:23.0129 0944	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:40:23.0144 0944	SamSs - ok
14:40:23.0175 0944	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
14:40:23.0191 0944	sbp2port - ok
14:40:23.0238 0944	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
14:40:23.0300 0944	SCardSvr - ok
14:40:23.0347 0944	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
14:40:23.0394 0944	scfilter - ok
14:40:23.0456 0944	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
14:40:23.0534 0944	Schedule - ok
14:40:23.0565 0944	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:40:23.0597 0944	SCPolicySvc - ok
14:40:23.0628 0944	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
14:40:23.0690 0944	SDRSVC - ok
14:40:23.0737 0944	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
14:40:23.0768 0944	secdrv - ok
14:40:23.0815 0944	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
14:40:23.0862 0944	seclogon - ok
14:40:23.0909 0944	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
14:40:23.0955 0944	SENS - ok
14:40:23.0987 0944	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
14:40:24.0002 0944	SensrSvc - ok
14:40:24.0018 0944	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
14:40:24.0065 0944	Serenum - ok
14:40:24.0096 0944	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
14:40:24.0127 0944	Serial - ok
14:40:24.0143 0944	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
14:40:24.0174 0944	sermouse - ok
14:40:24.0236 0944	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
14:40:24.0283 0944	SessionEnv - ok
14:40:24.0314 0944	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
14:40:24.0361 0944	sffdisk - ok
14:40:24.0377 0944	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
14:40:24.0408 0944	sffp_mmc - ok
14:40:24.0455 0944	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
14:40:24.0470 0944	sffp_sd - ok
14:40:24.0501 0944	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
14:40:24.0501 0944	sfloppy - ok
14:40:24.0564 0944	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
14:40:24.0611 0944	SharedAccess - ok
14:40:24.0673 0944	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
14:40:24.0735 0944	ShellHWDetection - ok
14:40:24.0767 0944	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:40:24.0767 0944	SiSRaid2 - ok
14:40:24.0782 0944	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
14:40:24.0798 0944	SiSRaid4 - ok
14:40:24.0829 0944	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
14:40:24.0891 0944	Smb - ok
14:40:24.0923 0944	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
14:40:24.0969 0944	SNMPTRAP - ok
14:40:25.0235 0944	speedfan        (12583af6cbe0050651eaf2723b3ad7b3) C:\Windows\syswow64\speedfan.sys
14:40:25.0235 0944	speedfan - ok
14:40:25.0297 0944	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
14:40:25.0313 0944	spldr - ok
14:40:25.0359 0944	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
14:40:25.0391 0944	Spooler - ok
14:40:25.0562 0944	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
14:40:25.0656 0944	sppsvc - ok
14:40:25.0765 0944	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
14:40:25.0843 0944	sppuinotify - ok
14:40:25.0905 0944	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
14:40:25.0952 0944	srv - ok
14:40:25.0983 0944	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
14:40:26.0046 0944	srv2 - ok
14:40:26.0077 0944	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
14:40:26.0124 0944	srvnet - ok
14:40:26.0155 0944	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
14:40:26.0217 0944	SSDPSRV - ok
14:40:26.0249 0944	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
14:40:26.0280 0944	SstpSvc - ok
14:40:26.0311 0944	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
14:40:26.0327 0944	stexstor - ok
14:40:26.0373 0944	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
14:40:26.0436 0944	stisvc - ok
14:40:26.0467 0944	storflt         (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
14:40:26.0467 0944	storflt - ok
14:40:26.0498 0944	storvsc         (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
14:40:26.0514 0944	storvsc - ok
14:40:26.0545 0944	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
14:40:26.0561 0944	swenum - ok
14:40:26.0654 0944	SwitchBoard     (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
14:40:26.0701 0944	SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
14:40:26.0701 0944	SwitchBoard - detected UnsignedFile.Multi.Generic (1)
14:40:26.0748 0944	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
14:40:26.0810 0944	swprv - ok
14:40:26.0841 0944	Synth3dVsc - ok
14:40:26.0904 0944	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
14:40:26.0997 0944	SysMain - ok
14:40:27.0107 0944	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
14:40:27.0138 0944	TabletInputService - ok
14:40:27.0169 0944	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
14:40:27.0231 0944	TapiSrv - ok
14:40:27.0278 0944	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
14:40:27.0309 0944	TBS - ok
14:40:27.0419 0944	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
14:40:27.0481 0944	Tcpip - ok
14:40:27.0590 0944	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
14:40:27.0621 0944	TCPIP6 - ok
14:40:27.0684 0944	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
14:40:27.0746 0944	tcpipreg - ok
14:40:27.0793 0944	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
14:40:27.0824 0944	TDPIPE - ok
14:40:27.0855 0944	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
14:40:27.0887 0944	TDTCP - ok
14:40:27.0933 0944	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
14:40:27.0980 0944	tdx - ok
14:40:28.0105 0944	TeamViewer6     (1c46c27e9f1938b9589859c70450d275) C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
14:40:28.0152 0944	TeamViewer6 - ok
14:40:28.0261 0944	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
14:40:28.0261 0944	TermDD - ok
14:40:28.0308 0944	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
14:40:28.0386 0944	TermService - ok
14:40:28.0417 0944	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
14:40:28.0433 0944	Themes - ok
14:40:28.0464 0944	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:40:28.0495 0944	THREADORDER - ok
14:40:28.0526 0944	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
14:40:28.0589 0944	TrkWks - ok
14:40:28.0635 0944	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
14:40:28.0698 0944	TrustedInstaller - ok
14:40:28.0745 0944	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
14:40:28.0791 0944	tssecsrv - ok
14:40:28.0838 0944	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
14:40:28.0869 0944	TsUsbFlt - ok
14:40:28.0869 0944	tsusbhub - ok
14:40:28.0901 0944	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
14:40:28.0963 0944	tunnel - ok
14:40:29.0010 0944	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
14:40:29.0025 0944	uagp35 - ok
14:40:29.0057 0944	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
14:40:29.0135 0944	udfs - ok
14:40:29.0166 0944	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
14:40:29.0181 0944	UI0Detect - ok
14:40:29.0228 0944	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
14:40:29.0244 0944	uliagpkx - ok
14:40:29.0259 0944	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
14:40:29.0275 0944	umbus - ok
14:40:29.0306 0944	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
14:40:29.0337 0944	UmPass - ok
14:40:29.0384 0944	UmRdpService    (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
14:40:29.0431 0944	UmRdpService - ok
14:40:29.0462 0944	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
14:40:29.0540 0944	upnphost - ok
14:40:29.0587 0944	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\drivers\usbccgp.sys
14:40:29.0618 0944	usbccgp - ok
14:40:29.0649 0944	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
14:40:29.0665 0944	usbcir - ok
14:40:29.0696 0944	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
14:40:29.0743 0944	usbehci - ok
14:40:29.0774 0944	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
14:40:29.0821 0944	usbhub - ok
14:40:29.0837 0944	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
14:40:29.0852 0944	usbohci - ok
14:40:29.0883 0944	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
14:40:29.0915 0944	usbprint - ok
14:40:29.0961 0944	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:40:29.0993 0944	USBSTOR - ok
14:40:30.0008 0944	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
14:40:30.0055 0944	usbuhci - ok
14:40:30.0086 0944	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
14:40:30.0149 0944	UxSms - ok
14:40:30.0211 0944	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:40:30.0227 0944	VaultSvc - ok
14:40:30.0258 0944	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
14:40:30.0273 0944	vdrvroot - ok
14:40:30.0305 0944	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
14:40:30.0351 0944	vds - ok
14:40:30.0383 0944	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
14:40:30.0398 0944	vga - ok
14:40:30.0414 0944	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
14:40:30.0461 0944	VgaSave - ok
14:40:30.0461 0944	VGPU - ok
14:40:30.0507 0944	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
14:40:30.0539 0944	vhdmp - ok
14:40:30.0570 0944	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
14:40:30.0570 0944	viaide - ok
14:40:30.0601 0944	vmbus           (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
14:40:30.0617 0944	vmbus - ok
14:40:30.0648 0944	VMBusHID        (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
14:40:30.0663 0944	VMBusHID - ok
14:40:30.0679 0944	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
14:40:30.0695 0944	volmgr - ok
14:40:30.0726 0944	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
14:40:30.0757 0944	volmgrx - ok
14:40:30.0804 0944	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
14:40:30.0819 0944	volsnap - ok
14:40:30.0851 0944	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
14:40:30.0866 0944	vsmraid - ok
14:40:30.0944 0944	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
14:40:31.0038 0944	VSS - ok
14:40:31.0163 0944	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
14:40:31.0194 0944	vwifibus - ok
14:40:31.0225 0944	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
14:40:31.0241 0944	vwififlt - ok
14:40:31.0272 0944	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
14:40:31.0319 0944	W32Time - ok
14:40:31.0350 0944	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
14:40:31.0350 0944	WacomPen - ok
14:40:31.0381 0944	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:40:31.0459 0944	WANARP - ok
14:40:31.0459 0944	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:40:31.0490 0944	Wanarpv6 - ok
14:40:31.0568 0944	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
14:40:31.0677 0944	wbengine - ok
14:40:31.0771 0944	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
14:40:31.0802 0944	WbioSrvc - ok
14:40:31.0833 0944	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
14:40:31.0880 0944	wcncsvc - ok
14:40:31.0911 0944	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
14:40:31.0943 0944	WcsPlugInService - ok
14:40:32.0005 0944	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
14:40:32.0021 0944	Wd - ok
14:40:32.0052 0944	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
14:40:32.0083 0944	Wdf01000 - ok
14:40:32.0099 0944	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:40:32.0208 0944	WdiServiceHost - ok
14:40:32.0208 0944	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:40:32.0223 0944	WdiSystemHost - ok
14:40:32.0255 0944	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
14:40:32.0317 0944	WebClient - ok
14:40:32.0364 0944	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
14:40:32.0426 0944	Wecsvc - ok
14:40:32.0457 0944	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
14:40:32.0504 0944	wercplsupport - ok
14:40:32.0535 0944	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
14:40:32.0598 0944	WerSvc - ok
14:40:32.0676 0944	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
14:40:32.0723 0944	WfpLwf - ok
14:40:32.0754 0944	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
14:40:32.0754 0944	WIMMount - ok
14:40:32.0785 0944	WinDefend - ok
14:40:32.0801 0944	WinHttpAutoProxySvc - ok
14:40:32.0847 0944	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
14:40:32.0910 0944	Winmgmt - ok
14:40:33.0019 0944	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
14:40:33.0128 0944	WinRM - ok
14:40:33.0253 0944	WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
14:40:33.0269 0944	WinUsb - ok
14:40:33.0331 0944	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
14:40:33.0378 0944	Wlansvc - ok
14:40:33.0409 0944	WmBEnum         (680a7846370000d20d7e74917d5b7936) C:\Windows\system32\drivers\WmBEnum.sys
14:40:33.0425 0944	WmBEnum - ok
14:40:33.0456 0944	WmFilter        (14c35ba8189c6f65d839163aa285e954) C:\Windows\system32\drivers\WmFilter.sys
14:40:33.0456 0944	WmFilter - ok
14:40:33.0487 0944	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
14:40:33.0534 0944	WmiAcpi - ok
14:40:33.0596 0944	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
14:40:33.0627 0944	wmiApSrv - ok
14:40:33.0690 0944	WMPNetworkSvc - ok
14:40:33.0721 0944	WmVirHid        (8488dd91a3ee54a8e29f02ad7bb8201e) C:\Windows\system32\drivers\WmVirHid.sys
14:40:33.0737 0944	WmVirHid - ok
14:40:33.0752 0944	WmXlCore        (14802b3a30aa849c97cb968ccc813bf3) C:\Windows\system32\drivers\WmXlCore.sys
14:40:33.0752 0944	WmXlCore - ok
14:40:33.0783 0944	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
14:40:33.0815 0944	WPCSvc - ok
14:40:33.0846 0944	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
14:40:33.0861 0944	WPDBusEnum - ok
14:40:33.0877 0944	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
14:40:33.0908 0944	ws2ifsl - ok
14:40:33.0939 0944	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
14:40:34.0002 0944	wscsvc - ok
14:40:34.0002 0944	WSearch - ok
14:40:34.0095 0944	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
14:40:34.0220 0944	wuauserv - ok
14:40:34.0345 0944	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
14:40:34.0407 0944	WudfPf - ok
14:40:34.0423 0944	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
14:40:34.0470 0944	WUDFRd - ok
14:40:34.0501 0944	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
14:40:34.0532 0944	wudfsvc - ok
14:40:34.0563 0944	WwanSvc         (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
14:40:34.0610 0944	WwanSvc - ok
14:40:34.0673 0944	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
14:40:34.0875 0944	\Device\Harddisk0\DR0 - ok
14:40:34.0891 0944	MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1
14:40:34.0938 0944	\Device\Harddisk1\DR1 - ok
14:40:34.0938 0944	Boot (0x1200)   (815405d175a32db08c04c21d4b01ac38) \Device\Harddisk0\DR0\Partition0
14:40:34.0938 0944	\Device\Harddisk0\DR0\Partition0 - ok
14:40:34.0969 0944	Boot (0x1200)   (c7d1b430a3a1f48038b0fe5e04583544) \Device\Harddisk0\DR0\Partition1
14:40:34.0969 0944	\Device\Harddisk0\DR0\Partition1 - ok
14:40:35.0000 0944	Boot (0x1200)   (192ccefa9e5465846740a40152048e4c) \Device\Harddisk1\DR1\Partition0
14:40:35.0000 0944	\Device\Harddisk1\DR1\Partition0 - ok
14:40:35.0000 0944	============================================================
14:40:35.0000 0944	Scan finished
14:40:35.0000 0944	============================================================
14:40:35.0016 5088	Detected object count: 6
14:40:35.0016 5088	Actual detected object count: 6
14:41:48.0508 5088	Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0508 5088	Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:41:48.0523 5088	Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0523 5088	Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:41:48.0523 5088	CTAudSvcService ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0523 5088	CTAudSvcService ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:41:48.0523 5088	HauppaugeTVServer ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0523 5088	HauppaugeTVServer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:41:48.0523 5088	PST Service ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0523 5088	PST Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:41:48.0523 5088	SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
14:41:48.0523 5088	SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus · 25.05.2012, 14:52

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

Lade dir ComboFix hier herunter auf deinen Desktop.

Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Cranc v.2 · 26.05.2012, 01:52

Ausgeführt und die log schaut so aus:

Code:

ATTFilter

ComboFix 12-05-25.03 - Simon 26.05.2012   2:33.1.2 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1033.18.4095.2742 [GMT 2:00]
ausgeführt von:: c:\users\Simon\Desktop\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {458BB331-2324-0753-3D5F-1472EB102AC0}
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Simon\4.0
c:\windows\system32\drivers\etc\hosts.ics
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-04-26 bis 2012-05-26  ))))))))))))))))))))))))))))))
.
.
2012-05-26 00:40 . 2012-05-26 00:40	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-05-25 11:00 . 2012-05-25 11:00	--------	d-----w-	C:\_OTL
2012-05-25 10:57 . 2012-05-08 17:02	8955792	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{29A2D94F-FE53-4B53-8480-EF7ECC9C6226}\mpengine.dll
2012-05-24 20:44 . 2012-05-24 20:44	--------	d-----w-	c:\program files (x86)\Motorola Media Link
2012-05-24 20:42 . 2012-05-24 20:42	--------	d-----w-	c:\users\Simon\AppData\Roaming\Motorola Mobility
2012-05-24 20:41 . 2012-05-24 20:41	--------	d-----w-	c:\program files\Motorola Inc
2012-05-21 16:24 . 2012-05-21 16:24	--------	d-----w-	c:\program files (x86)\ESET
2012-05-19 15:23 . 2012-05-25 10:48	--------	d-----w-	c:\users\Simon\.gstreamer-0.10
2012-05-19 15:22 . 2012-05-19 15:22	--------	d-----w-	c:\users\Simon\AppData\Local\Motorola
2012-05-19 15:22 . 2012-05-19 15:22	--------	d-----w-	c:\program files (x86)\Common Files\Nero
2012-05-19 15:22 . 2012-05-24 20:44	--------	d-----w-	c:\programdata\Nero
2012-05-19 15:22 . 2012-05-19 15:22	--------	d-----w-	c:\programdata\Motorola
2012-05-19 15:22 . 2012-05-24 20:42	--------	d-----w-	c:\program files (x86)\Motorola Mobility
2012-05-19 15:22 . 2012-05-26 00:42	--------	d-----w-	C:\Temp
2012-05-19 15:21 . 2012-05-19 15:21	--------	d-----w-	c:\program files\Common Files\Motorola Shared
2012-05-19 15:21 . 2012-05-25 10:46	--------	d-----w-	c:\program files (x86)\Motorola
2012-05-19 15:21 . 2012-05-19 15:22	--------	d-----w-	c:\users\Simon\AppData\Roaming\Motorola
2012-05-19 15:20 . 2012-05-25 10:48	--------	d-----w-	c:\users\Simon\AppData\Roaming\MotoCast
2012-05-19 09:16 . 2012-05-19 09:16	--------	d-----w-	c:\users\Simon\AppData\Roaming\Malwarebytes
2012-05-19 09:15 . 2012-05-19 09:15	--------	d-----w-	c:\programdata\Malwarebytes
2012-05-19 09:15 . 2012-05-19 09:16	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2012-05-19 09:15 . 2012-04-04 13:56	24904	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-05-12 17:43 . 2012-05-12 18:25	--------	d-----w-	c:\programdata\CPA_VA
2012-05-12 17:38 . 2012-05-12 18:01	--------	d-----w-	c:\users\Simon\AppData\Local\Comodo
2012-05-12 17:38 . 2012-05-16 21:05	--------	d-----w-	c:\program files (x86)\Comodo
2012-05-12 17:37 . 2012-05-12 17:37	348160	----a-w-	c:\windows\SysWow64\msvcr71.dll
2012-05-12 17:37 . 2012-05-12 17:37	1700352	----a-w-	c:\windows\SysWow64\gdiplus.dll
2012-04-27 11:02 . 2012-04-27 11:02	--------	d-----w-	c:\users\Simon\AppData\Local\Targem
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-09 11:08 . 2012-04-05 13:38	419488	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-09 11:07 . 2011-05-26 21:28	70304	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-08 17:02 . 2011-05-28 09:15	8955792	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-03-14 20:45 . 2012-03-14 20:45	1948672	----a-w-	c:\windows\SysWow64\sx-csp.dll
2012-03-11 21:13 . 2011-10-21 16:28	41200	----a-w-	c:\windows\system32\cmdcsr.dll
2012-03-11 19:13 . 2012-03-11 19:13	577824	----a-w-	c:\windows\system32\drivers\cmdGuard.sys
2012-03-11 19:13 . 2012-03-11 19:13	43248	----a-w-	c:\windows\system32\drivers\cmdhlp.sys
2012-03-11 19:13 . 2012-03-11 19:13	22696	----a-w-	c:\windows\system32\drivers\cmderd.sys
2012-03-11 19:13 . 2012-03-11 19:13	301224	----a-w-	c:\windows\SysWow64\guard32.dll
2012-03-11 19:13 . 2012-03-11 19:13	389840	----a-w-	c:\windows\system32\guard64.dll
2012-02-27 16:23 . 2011-10-22 17:43	472808	----a-w-	c:\windows\SysWow64\deployJava1.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AML Device Install.lnk - c:\program files (x86)\AMD AVT\bin\kdbsync.exe [2012-1-31 10752]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-17 136176]
R2 hcw10cir;Hauppauge CIR Receiver;c:\windows\system32\drivers\hcw10cir.sys [x]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 ALSysIO;ALSysIO;c:\users\Simon\AppData\Local\Temp\ALSysIO64.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-05-26 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-05-26 79360]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-08-31 1038088]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-17 136176]
R3 hcw10bda;Hauppauge USB-Live2 (111xxx);c:\windows\system32\drivers\hcw10bda.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-24 113136]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [x]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [x]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-02-14 361984]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-11-23 1267000]
S2 DeviceMonitorService;DeviceMonitorService;c:\program files (x86)\Motorola Media Link\Lite\NServiceEntry.exe [2012-05-14 87368]
S2 DragonUpdater;COMODO Dragon Update Service;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe [2012-05-16 412304]
S2 lxdi_device;lxdi_device;c:\windows\system32\lxdicoms.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2012-05-18 116632]
S2 PST Service;PST Service;c:\program files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2011-09-02 65657]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netr28ux;Belkin USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-05-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-17 14:02]
.
2012-05-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-17 14:02]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-03-11 9569096]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\guard64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{398C0B66-A980-4A70-B90F-DD899A97DDAF}: NameServer = 156.154.70.25,156.154.71.25
TCP: Interfaces\{E22B2CEE-3C79-43F6-9EA8-A4DEBA104D2B}: NameServer = 8.26.56.26,156.154.70.22
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\3yecqz8f.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlDbg10.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlDbg10.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlDbg10.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlDbg10.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\progra~2\WinTV\TVServer\HAUPPA~1.EXE
c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-05-26  02:47:41 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-05-26 00:47
.
Vor Suchlauf: 22.637.375.488 bytes free
Nach Suchlauf: 21.969.059.840 bytes free
.
- - End Of File - - 73A96B8B1FFA4F47A9E62F5D14456B92

Und? Was sagst du?

cosinus · 26.05.2012, 14:33

Zitat:

AV: COMODO Antivirus *Disabled/Updated* {458BB331-2324-0753-3D5F-1472EB102AC0}
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB}

Hast du das alles noch installiert? Sowas sollte man nicht machen, mit mehreren Virenscannern wie zB MSE und Comodo kannst du dein System in die Knie zwingen. Deinstalliere umgehend eins der beiden, ich würde dir empfehlen COMODO zu deinstallieren

GMX Account verschickt Spam-Mails -- keine Listung unter "Gesendet"

Plagegeister aller Art und deren Bekämpfung: GMX Account verschickt Spam-Mails -- keine Listung unter "Gesendet"