Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Trojaner Bundespolizei 2x50€ über Ukash

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 14.07.2012, 14:06   #1
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Hallo zusammen, hallo Larusso,

seit letztem Mal bin ich vorsichtiger geworden, jetzt hat es meinen Bruder erwischt.


Folgendes Problem tritt auf:

Nach dem Hochfahren des Laptops erscheint kurz der Desktop. Anschließend öffnet sich ein Fenster, in dem man aufgefordert wird, 2 x 50 € via Ukash angeblich an die Bundespolizei zu überweisen.

Computer ist vollständig gesperrt, nichtmal der Taskmanager lässt sich starten.

Ist das der Verschlüsselungstrojaner? Was sollen wir tun?

Ich hoffe, das war ausführlich und zugleich kurz genug.

Vielen Dank schon mal für die Unterstützung.

Beste Grüße
Phil

Jetzt habe ich den oben beschriebenen Scan mit Malwarebytes durchgeführt.
Hier die dazugehörigen Log-Files:

Malwarebytes Anti-Malware (Test) 1.62.0.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: v2012.07.12.08

Windows 7 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
Alex :: ALEX-PC [Administrator]

Schutz: Deaktiviert

12.07.2012 17:56:22
mbam-log-2012-07-12 (17-56-22).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 215791
Laufzeit: 3 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|{08BC4517-B486-7316-1792-8CB9A46C8708} (Trojan.ZbotR.Gen) -> Daten: C:\Users\Alex\AppData\Roaming\Peav\qair.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|{D7746E83-1621-82F6-612B-F52090C7846C} (Trojan.ZbotR.Gen) -> Daten: C:\Users\Alex\AppData\Roaming\Daidq\cyyco.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Alex\Downloads\SoftonicDownloader_fuer_red-eclipse.exe (PUP.ToolbarDownloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Alex\0.05911214225287442.exe (Trojan.Agent.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SkypePM not found.
File C:\Users\Peter\AppData\Local\Skype\SkypePM.exe not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Alex
->Flash cache emptied: 8343882 bytes

User: All Users

User: AppData

User: Default
->Flash cache emptied: 56466 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 8,00 mb


[EMPTYTEMP]

User: Alex
->Temp folder emptied: 3485745498 bytes
->Temporary Internet Files folder emptied: 3496316281 bytes
->Java cache emptied: 8119363 bytes
->FireFox cache emptied: 43964385 bytes
->Google Chrome cache emptied: 271530952 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: AppData

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 308558523 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36068370 bytes
RecycleBin emptied: 11171394466 bytes

Total Files Cleaned = 17.950,00 mb


OTL by OldTimer - Version 3.2.53.1 log created on 07122012_172856

Files\Folders moved on Reboot...
C:\Users\Alex\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Alex\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

Files\Folders moved on Reboot...
C:\Users\Alex\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...
File C:\Users\Alex\AppData\Local\Temp\FXSAPIDebugLogFile.txt not found!

Registry entries deleted on Reboot...

Alt 15.07.2012, 17:44   #2
t'john
/// Helfer-Team
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash





1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

2. Schritt
Systemscan mit OTL (bebilderte Anleitung)

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden)- Doppelklick auf die OTL.exe
- Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
- Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
- Unter Extra Registry, wähle bitte Use SafeList
- Klicke nun auf Run Scan links oben
- Wenn der Scan beendet wurde werden 2 Logfiles erstellt
- Poste die Logfiles hier in den Thread.
__________________

__________________

Alt 15.07.2012, 22:03   #3
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Hallo t'john,

oben beschriebener Laptop hat wohl einen Blitzschlag abbekommen...läuft gar nicht mehr.

Wir haben aber noch ein anderes Gerät, das auch befallen scheint.

Hierfür die Logfiles:

Malwarebytes Anti Malware:

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.15.09

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Hornochse :: HORNOCHSE-PC [Administrator]

15.07.2012 20:56:05
mbam-log-2012-07-15 (22-27-33).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 339508
Laufzeit: 1 Stunde(n), 28 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 1
C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe153.dll (Trojan.Banker) -> Keine Aktion durchgeführt.

Infizierte Registrierungsschlüssel: 4
HKCR\CLSID\{20C28584-8F10-4D92-987C-0A1008E2435A} (Trojan.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{20C28584-8F10-4D92-987C-0A1008E2435A} (Trojan.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{20C28584-8F10-4D92-987C-0A1008E2435A} (Trojan.Agent) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{20C28584-8F10-4D92-987C-0A1008E2435A} (Trojan.Agent) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Userinit (Trojan.Agent) -> Daten: C:\Users\Hornochse\AppData\Roaming\appconf32.exe -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 8
C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe153.dll (Trojan.Banker) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\AppData\Local\Temp\wpbt0.dll (Spyware.Zbot.DG) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\AppData\Roaming\appconf32.exe (Trojan.Agent) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\AppData\Roaming\AcroIEHelpe153.dll (Trojan.Agent) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CWYIYFIV\contacts[1].exe (Spyware.Zbot.DG) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\Downloads\SoftonicDownloader_fuer_ace-of-spades (1).exe (PUP.ToolbarDownloader) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\Downloads\SoftonicDownloader_fuer_ace-of-spades.exe (PUP.ToolbarDownloader) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk (Trojan.Ransom.Gen) -> Keine Aktion durchgeführt.

(Ende)



Logfiles Oldtimer:OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 15.07.2012 22:33:36 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\Hornochse\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1013,45 Mb Total Physical Memory | 94,55 Mb Available Physical Memory | 9,33% Memory free
2,24 Gb Paging File | 0,87 Gb Available in Paging File | 39,04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 102,48 Gb Total Space | 53,09 Gb Free Space | 51,80% Space Free | Partition Type: NTFS
 
Computer Name: HORNOCHSE-PC | User Name: Hornochse | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Hornochse\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SoftwareDistribution\Download\Install\AM_Delta.exe (Microsoft Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Users\Hornochse\AppData\Roaming\Spotify\spotify.exe (Spotify Ltd)
PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - c:\Programme\Microsoft Security Client\MpCmdRun.exe (Microsoft Corporation)
PRC - c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Programme\Google\Google Toolbar\GoogleToolbarUser_32.exe (Google Inc.)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\System32\MpSigStub.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Programme\sony\VAIO Update 5\VAIOUpdt.exe (Sony Corporation)
PRC - C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Windows\System32\FsUsbExService.Exe (Teruten)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Programme\sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
PRC - C:\Programme\sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation)
PRC - C:\Programme\sony\VAIO Power Management\SPMgr.exe (Sony Corporation)
PRC - C:\Programme\sony\ISB Utility\ISBMgr.exe (Sony Corporation)
PRC - C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Programme\Apoint\ApntEx.exe (Alps Electric Co., Ltd.)
PRC - C:\Programme\Apoint\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - C:\Programme\sony\Wireless Switch Setting Utility\Switcher.exe (Sony Corporation)
PRC - C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sony Corporation)
PRC - C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe (Sony Corporation)
PRC - C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Sony Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Hornochse\AppData\Roaming\10001.066\components\AcroFF066.dll ()
MOD - C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe168.dll ()
MOD - C:\Users\HORNOC~1\AppData\Local\Temp\wpbt0.dll ()
MOD - C:\Users\Hornochse\AppData\Roaming\Spotify\Data\libcef.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\System32\igfxTMM.dll ()
MOD - C:\Windows\System32\hccutils.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (CLTNetCnService) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon File not found
SRV - (NisSrv) -- c:\Programme\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV - (BBSvc) -- C:\Programme\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Programme\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (SQLWriter) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
SRV - (MSSQL$VAIO_VEDB) SQL Server (VAIO_VEDB) -- C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
SRV - (SQLBrowser) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
SRV - (MSSQLServerADHelper) -- C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe (Microsoft Corporation)
SRV - (MSCamSvc) -- C:\Programme\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (FsUsbExService) -- C:\Windows\System32\FsUsbExService.Exe (Teruten)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (VAIO Event Service) -- C:\Programme\sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (SSScsiSV) -- C:\Programme\Common Files\Sony Shared\AvLib\SSScsiSV.exe (Sony Corporation)
SRV - (SonicStage Back-End Service) -- C:\Programme\Common Files\Sony Shared\AvLib\SsBeSvc.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-AppServer) -- C:\Programme\sony\VAIO Media Integrated Server\VMISrv.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-UCLS-UPnP) VAIO Media Content Collection (UPnP) -- C:\Programme\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-UPnP) VAIO Media Integrated Server (UPnP) -- C:\Programme\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-UCLS-AppServer) -- C:\Programme\sony\VAIO Media Integrated Server\UCLS.exe (Sony Corporation)
SRV - (VAIO Entertainment TV Device Arbitration Service) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-UCLS-HTTP) VAIO Media Content Collection (HTTP) -- C:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-IntegratedServer-HTTP) VAIO Media Integrated Server (HTTP) -- C:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe (Sony Corporation)
SRV - (VAIOMediaPlatform-Mobile-Gateway) -- C:\Program Files\sony\VAIO Media Integrated Server\Platform\VmGateway.exe (Sony Corporation)
SRV - (MSCSPTISRV) -- C:\Programme\Common Files\Sony Shared\AvLib\MSCSPTISRV.exe (Sony Corporation)
SRV - (SPTISRV) -- C:\Programme\Common Files\Sony Shared\AvLib\SPTISRV.exe (Sony Corporation)
SRV - (PACSPTISVR) -- C:\Programme\Common Files\Sony Shared\AvLib\PACSPTISVR.exe ()
SRV - (Vcsw) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe (Sony Corporation)
SRV - (VzFw) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe (Sony Corporation)
SRV - (VzCdbSvc) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe (Sony Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (zxudkpom) -- C:\Windows\system32\drivers\zxudkpom.sys File not found
DRV - (zxsjuuaj) -- C:\Windows\system32\drivers\zxsjuuaj.sys File not found
DRV - (zxitcnkr) -- C:\Windows\system32\drivers\zxitcnkr.sys File not found
DRV - (zxhbinch) -- C:\Windows\system32\drivers\zxhbinch.sys File not found
DRV - (zwdedesy) -- C:\Windows\system32\drivers\zwdedesy.sys File not found
DRV - (zvdkqedh) -- C:\Windows\system32\drivers\zvdkqedh.sys File not found
DRV - (zuctgmjg) -- C:\Windows\system32\drivers\zuctgmjg.sys File not found
DRV - (ztpmmksv) -- C:\Windows\system32\drivers\ztpmmksv.sys File not found
DRV - (zrrchwzd) -- C:\Windows\system32\drivers\zrrchwzd.sys File not found
DRV - (zrmtfdpp) -- C:\Windows\system32\drivers\zrmtfdpp.sys File not found
DRV - (zqfegoce) -- C:\Windows\system32\drivers\zqfegoce.sys File not found
DRV - (zpgpgrpu) -- C:\Windows\system32\drivers\zpgpgrpu.sys File not found
DRV - (zofvpcpb) -- C:\Windows\system32\drivers\zofvpcpb.sys File not found
DRV - (zoayhorf) -- C:\Windows\system32\drivers\zoayhorf.sys File not found
DRV - (zkcqblwm) -- C:\Windows\system32\drivers\zkcqblwm.sys File not found
DRV - (zjomwuex) -- C:\Windows\system32\drivers\zjomwuex.sys File not found
DRV - (ziodlcvr) -- C:\Windows\system32\drivers\ziodlcvr.sys File not found
DRV - (zhvdkssp) -- C:\Windows\system32\drivers\zhvdkssp.sys File not found
DRV - (zhgvmwwl) -- C:\Windows\system32\drivers\zhgvmwwl.sys File not found
DRV - (zgguyrwp) -- C:\Windows\system32\drivers\zgguyrwp.sys File not found
DRV - (zepdogyc) -- C:\Windows\system32\drivers\zepdogyc.sys File not found
DRV - (zddfqfao) -- C:\Windows\system32\drivers\zddfqfao.sys File not found
DRV - (zcxjanqn) -- C:\Windows\system32\drivers\zcxjanqn.sys File not found
DRV - (zcqdbpeb) -- C:\Windows\system32\drivers\zcqdbpeb.sys File not found
DRV - (zbahpufg) -- C:\Windows\system32\drivers\zbahpufg.sys File not found
DRV - (yzfhikap) -- C:\Windows\system32\drivers\yzfhikap.sys File not found
DRV - (yyzdtlar) -- C:\Windows\system32\drivers\yyzdtlar.sys File not found
DRV - (yvgpttas) -- C:\Windows\system32\drivers\yvgpttas.sys File not found
DRV - (yubxjcky) -- C:\Windows\system32\drivers\yubxjcky.sys File not found
DRV - (ytpcvykc) -- C:\Windows\system32\drivers\ytpcvykc.sys File not found
DRV - (ysudkhhx) -- C:\Windows\system32\drivers\ysudkhhx.sys File not found
DRV - (ysjhmhoo) -- C:\Windows\system32\drivers\ysjhmhoo.sys File not found
DRV - (yscxtdwp) -- C:\Windows\system32\drivers\yscxtdwp.sys File not found
DRV - (ysasyyrz) -- C:\Windows\system32\drivers\ysasyyrz.sys File not found
DRV - (yrhcakxa) -- C:\Windows\system32\drivers\yrhcakxa.sys File not found
DRV - (yrdmyfcu) -- C:\Windows\system32\drivers\yrdmyfcu.sys File not found
DRV - (ypptricg) -- C:\Windows\system32\drivers\ypptricg.sys File not found
DRV - (ypazmidf) -- C:\Windows\system32\drivers\ypazmidf.sys File not found
DRV - (yozbhvpt) -- C:\Windows\system32\drivers\yozbhvpt.sys File not found
DRV - (ymigkqnb) -- C:\Windows\system32\drivers\ymigkqnb.sys File not found
DRV - (ymhegvdh) -- C:\Windows\system32\drivers\ymhegvdh.sys File not found
DRV - (ykkisxmv) -- C:\Windows\system32\drivers\ykkisxmv.sys File not found
DRV - (yjjrrtgo) -- C:\Windows\system32\drivers\yjjrrtgo.sys File not found
DRV - (yidijiya) -- C:\Windows\system32\drivers\yidijiya.sys File not found
DRV - (ygcubqlm) -- C:\Windows\system32\drivers\ygcubqlm.sys File not found
DRV - (yfmoiqob) -- C:\Windows\system32\drivers\yfmoiqob.sys File not found
DRV - (ydrqvfkt) -- C:\Windows\system32\drivers\ydrqvfkt.sys File not found
DRV - (ybrfkblr) -- C:\Windows\system32\drivers\ybrfkblr.sys File not found
DRV - (ybmebrbs) -- C:\Windows\system32\drivers\ybmebrbs.sys File not found
DRV - (ybhhosqp) -- C:\Windows\system32\drivers\ybhhosqp.sys File not found
DRV - (yaumvcel) -- C:\Windows\system32\drivers\yaumvcel.sys File not found
DRV - (yaeidifo) -- C:\Windows\system32\drivers\yaeidifo.sys File not found
DRV - (xzbhbgnv) -- C:\Windows\system32\drivers\xzbhbgnv.sys File not found
DRV - (xzatnqok) -- C:\Windows\system32\drivers\xzatnqok.sys File not found
DRV - (xyzuqkme) -- C:\Windows\system32\drivers\xyzuqkme.sys File not found
DRV - (xvoujzhz) -- C:\Windows\system32\drivers\xvoujzhz.sys File not found
DRV - (xvcsppno) -- C:\Windows\system32\drivers\xvcsppno.sys File not found
DRV - (xukadgrh) -- C:\Windows\system32\drivers\xukadgrh.sys File not found
DRV - (xuimremg) -- C:\Windows\system32\drivers\xuimremg.sys File not found
DRV - (xtnajelk) -- C:\Windows\system32\drivers\xtnajelk.sys File not found
DRV - (xqfjflpt) -- C:\Windows\system32\drivers\xqfjflpt.sys File not found
DRV - (xprzpnwa) -- C:\Windows\system32\drivers\xprzpnwa.sys File not found
DRV - (xnhmpthr) -- C:\Windows\system32\drivers\xnhmpthr.sys File not found
DRV - (xnallhhy) -- C:\Windows\system32\drivers\xnallhhy.sys File not found
DRV - (xjxtyyab) -- C:\Windows\system32\drivers\xjxtyyab.sys File not found
DRV - (xjosndzq) -- C:\Windows\system32\drivers\xjosndzq.sys File not found
DRV - (xhnisqxk) -- C:\Windows\system32\drivers\xhnisqxk.sys File not found
DRV - (xgxojtfk) -- C:\Windows\system32\drivers\xgxojtfk.sys File not found
DRV - (xgpxtkzb) -- C:\Windows\system32\drivers\xgpxtkzb.sys File not found
DRV - (xgjapuvc) -- C:\Windows\system32\drivers\xgjapuvc.sys File not found
DRV - (xfhknpyn) -- C:\Windows\system32\drivers\xfhknpyn.sys File not found
DRV - (xevgosxx) -- C:\Windows\system32\drivers\xevgosxx.sys File not found
DRV - (xeislfsw) -- C:\Windows\system32\drivers\xeislfsw.sys File not found
DRV - (xczablzs) -- C:\Windows\system32\drivers\xczablzs.sys File not found
DRV - (xcvymxnf) -- C:\Windows\system32\drivers\xcvymxnf.sys File not found
DRV - (xcsifhan) -- C:\Windows\system32\drivers\xcsifhan.sys File not found
DRV - (xcsfaxcm) -- C:\Windows\system32\drivers\xcsfaxcm.sys File not found
DRV - (xclwypyk) -- C:\Windows\system32\drivers\xclwypyk.sys File not found
DRV - (xbzebnxn) -- C:\Windows\system32\drivers\xbzebnxn.sys File not found
DRV - (xbgvpzvf) -- C:\Windows\system32\drivers\xbgvpzvf.sys File not found
DRV - (xatotysx) -- C:\Windows\system32\drivers\xatotysx.sys File not found
DRV - (xapbbmtf) -- C:\Windows\system32\drivers\xapbbmtf.sys File not found
DRV - (xamczksp) -- C:\Windows\system32\drivers\xamczksp.sys File not found
DRV - (xaczmbfi) -- C:\Windows\system32\drivers\xaczmbfi.sys File not found
DRV - (xacibglf) -- C:\Windows\system32\drivers\xacibglf.sys File not found
DRV - (wzeiztev) -- C:\Windows\system32\drivers\wzeiztev.sys File not found
DRV - (wyuscdue) -- C:\Windows\system32\drivers\wyuscdue.sys File not found
DRV - (wxiltzci) -- C:\Windows\system32\drivers\wxiltzci.sys File not found
DRV - (wvoahymi) -- C:\Windows\system32\drivers\wvoahymi.sys File not found
DRV - (wuasexok) -- C:\Windows\system32\drivers\wuasexok.sys File not found
DRV - (wtfkorlj) -- C:\Windows\system32\drivers\wtfkorlj.sys File not found
DRV - (wtdthxgb) -- C:\Windows\system32\drivers\wtdthxgb.sys File not found
DRV - (wsurnhrl) -- C:\Windows\system32\drivers\wsurnhrl.sys File not found
DRV - (wslgdacs) -- C:\Windows\system32\drivers\wslgdacs.sys File not found
DRV - (wsjumttr) -- C:\Windows\system32\drivers\wsjumttr.sys File not found
DRV - (wsamnxda) -- C:\Windows\system32\drivers\wsamnxda.sys File not found
DRV - (wqpjpmqu) -- C:\Windows\system32\drivers\wqpjpmqu.sys File not found
DRV - (wplrzdrp) -- C:\Windows\system32\drivers\wplrzdrp.sys File not found
DRV - (wpdmtwsx) -- C:\Windows\system32\drivers\wpdmtwsx.sys File not found
DRV - (wpaqfqwz) -- C:\Windows\system32\drivers\wpaqfqwz.sys File not found
DRV - (wndpfkvw) -- C:\Windows\system32\drivers\wndpfkvw.sys File not found
DRV - (wmxzppee) -- C:\Windows\system32\drivers\wmxzppee.sys File not found
DRV - (wmmihhgp) -- C:\Windows\system32\drivers\wmmihhgp.sys File not found
DRV - (wmginqfb) -- C:\Windows\system32\drivers\wmginqfb.sys File not found
DRV - (wmdfltou) -- C:\Windows\system32\drivers\wmdfltou.sys File not found
DRV - (wlboytvs) -- C:\Windows\system32\drivers\wlboytvs.sys File not found
DRV - (wkbglymk) -- C:\Windows\system32\drivers\wkbglymk.sys File not found
DRV - (wjxypzbq) -- C:\Windows\system32\drivers\wjxypzbq.sys File not found
DRV - (wjbepiwm) -- C:\Windows\system32\drivers\wjbepiwm.sys File not found
DRV - (wivdelkf) -- C:\Windows\system32\drivers\wivdelkf.sys File not found
DRV - (whfipwpm) -- C:\Windows\system32\drivers\whfipwpm.sys File not found
DRV - (wfwdefhc) -- C:\Windows\system32\drivers\wfwdefhc.sys File not found
DRV - (wflxzktl) -- C:\Windows\system32\drivers\wflxzktl.sys File not found
DRV - (wersuelm) -- C:\Windows\system32\drivers\wersuelm.sys File not found
DRV - (weahopuj) -- C:\Windows\system32\drivers\weahopuj.sys File not found
DRV - (wdqjlsia) -- C:\Windows\system32\drivers\wdqjlsia.sys File not found
DRV - (wcmkupns) -- C:\Windows\system32\drivers\wcmkupns.sys File not found
DRV - (wbxavevw) -- C:\Windows\system32\drivers\wbxavevw.sys File not found
DRV - (wbufyykm) -- C:\Windows\system32\drivers\wbufyykm.sys File not found
DRV - (wayunwxb) -- C:\Windows\system32\drivers\wayunwxb.sys File not found
DRV - (vzxkbqav) -- C:\Windows\system32\drivers\vzxkbqav.sys File not found
DRV - (vztbnqpf) -- C:\Windows\system32\drivers\vztbnqpf.sys File not found
DRV - (vymnksxq) -- C:\Windows\system32\drivers\vymnksxq.sys File not found
DRV - (vyifjxrg) -- C:\Windows\system32\drivers\vyifjxrg.sys File not found
DRV - (vyaousnd) -- C:\Windows\system32\drivers\vyaousnd.sys File not found
DRV - (vxjegnpy) -- C:\Windows\system32\drivers\vxjegnpy.sys File not found
DRV - (vxgduaux) -- C:\Windows\system32\drivers\vxgduaux.sys File not found
DRV - (vwnehuyx) -- C:\Windows\system32\drivers\vwnehuyx.sys File not found
DRV - (vwdxubjf) -- C:\Windows\system32\drivers\vwdxubjf.sys File not found
DRV - (vvpttxgf) -- C:\Windows\system32\drivers\vvpttxgf.sys File not found
DRV - (vvnemelp) -- C:\Windows\system32\drivers\vvnemelp.sys File not found
DRV - (vvmlqjjf) -- C:\Windows\system32\drivers\vvmlqjjf.sys File not found
DRV - (vuqdqeul) -- C:\Windows\system32\drivers\vuqdqeul.sys File not found
DRV - (vtwitefv) -- C:\Windows\system32\drivers\vtwitefv.sys File not found
DRV - (vtdnvshq) -- C:\Windows\system32\drivers\vtdnvshq.sys File not found
DRV - (vsdtijak) -- C:\Windows\system32\drivers\vsdtijak.sys File not found
DRV - (vqlnvyez) -- C:\Windows\system32\drivers\vqlnvyez.sys File not found
DRV - (vqgifqui) -- C:\Windows\system32\drivers\vqgifqui.sys File not found
DRV - (vpjjkmfg) -- C:\Windows\system32\drivers\vpjjkmfg.sys File not found
DRV - (vmsengjh) -- C:\Windows\system32\drivers\vmsengjh.sys File not found
DRV - (vkumsiwd) -- C:\Windows\system32\drivers\vkumsiwd.sys File not found
DRV - (vkluadac) -- C:\Windows\system32\drivers\vkluadac.sys File not found
DRV - (vkcvsnno) -- C:\Windows\system32\drivers\vkcvsnno.sys File not found
DRV - (vjhsozmx) -- C:\Windows\system32\drivers\vjhsozmx.sys File not found
DRV - (vhfyigmv) -- C:\Windows\system32\drivers\vhfyigmv.sys File not found
DRV - (vfvkykfc) -- C:\Windows\system32\drivers\vfvkykfc.sys File not found
DRV - (vfurjxwt) -- C:\Windows\system32\drivers\vfurjxwt.sys File not found
DRV - (vfccaljp) -- C:\Windows\system32\drivers\vfccaljp.sys File not found
DRV - (vcuuxtmk) -- C:\Windows\system32\drivers\vcuuxtmk.sys File not found
DRV - (vcrbzjye) -- C:\Windows\system32\drivers\vcrbzjye.sys File not found
DRV - (vcinhaaj) -- C:\Windows\system32\drivers\vcinhaaj.sys File not found
DRV - (vbxetaem) -- C:\Windows\system32\drivers\vbxetaem.sys File not found
DRV - (uyxwowuu) -- C:\Windows\system32\drivers\uyxwowuu.sys File not found
DRV - (uywyadpt) -- C:\Windows\system32\drivers\uywyadpt.sys File not found
DRV - (uyrprhuo) -- C:\Windows\system32\drivers\uyrprhuo.sys File not found
DRV - (uyjxabwc) -- C:\Windows\system32\drivers\uyjxabwc.sys File not found
DRV - (uygrvxjz) -- C:\Windows\system32\drivers\uygrvxjz.sys File not found
DRV - (uxpehuww) -- C:\Windows\system32\drivers\uxpehuww.sys File not found
DRV - (uxmymdpj) -- C:\Windows\system32\drivers\uxmymdpj.sys File not found
DRV - (uxjzfsrq) -- C:\Windows\system32\drivers\uxjzfsrq.sys File not found
DRV - (uwzrpaxq) -- C:\Windows\system32\drivers\uwzrpaxq.sys File not found
DRV - (uwcdaobc) -- C:\Windows\system32\drivers\uwcdaobc.sys File not found
DRV - (uvurpndv) -- C:\Windows\system32\drivers\uvurpndv.sys File not found
DRV - (uvqxdayj) -- C:\Windows\system32\drivers\uvqxdayj.sys File not found
DRV - (uuxaiujo) -- C:\Windows\system32\drivers\uuxaiujo.sys File not found
DRV - (uukrcpmx) -- C:\Windows\system32\drivers\uukrcpmx.sys File not found
DRV - (usrxsswg) -- C:\Windows\system32\drivers\usrxsswg.sys File not found
DRV - (usifkghw) -- C:\Windows\system32\drivers\usifkghw.sys File not found
DRV - (upxnobvw) -- C:\Windows\system32\drivers\upxnobvw.sys File not found
DRV - (upkpgler) -- C:\Windows\system32\drivers\upkpgler.sys File not found
DRV - (upelrods) -- C:\Windows\system32\drivers\upelrods.sys File not found
DRV - (uoqtgfbx) -- C:\Windows\system32\drivers\uoqtgfbx.sys File not found
DRV - (unqfmneu) -- C:\Windows\system32\drivers\unqfmneu.sys File not found
DRV - (umzxkgvb) -- C:\Windows\system32\drivers\umzxkgvb.sys File not found
DRV - (umjdwynz) -- C:\Windows\system32\drivers\umjdwynz.sys File not found
DRV - (umfvumpq) -- C:\Windows\system32\drivers\umfvumpq.sys File not found
DRV - (ulkename) -- C:\Windows\system32\drivers\ulkename.sys File not found
DRV - (uljghlha) -- C:\Windows\system32\drivers\uljghlha.sys File not found
DRV - (uleifpmy) -- C:\Windows\system32\drivers\uleifpmy.sys File not found
DRV - (ujwqngxb) -- C:\Windows\system32\drivers\ujwqngxb.sys File not found
DRV - (ujucwnpz) -- C:\Windows\system32\drivers\ujucwnpz.sys File not found
DRV - (ujrsawpu) -- C:\Windows\system32\drivers\ujrsawpu.sys File not found
DRV - (ujexgljf) -- C:\Windows\system32\drivers\ujexgljf.sys File not found
DRV - (uirdklgk) -- C:\Windows\system32\drivers\uirdklgk.sys File not found
DRV - (ugzoejof) -- C:\Windows\system32\drivers\ugzoejof.sys File not found
DRV - (ugzcxpvz) -- C:\Windows\system32\drivers\ugzcxpvz.sys File not found
DRV - (ugcydnqk) -- C:\Windows\system32\drivers\ugcydnqk.sys File not found
DRV - (uebeymmb) -- C:\Windows\system32\drivers\uebeymmb.sys File not found
DRV - (uduybpwr) -- C:\Windows\system32\drivers\uduybpwr.sys File not found
DRV - (udevkuff) -- C:\Windows\system32\drivers\udevkuff.sys File not found
DRV - (ubejwsmp) -- C:\Windows\system32\drivers\ubejwsmp.sys File not found
DRV - (uasdzcci) -- C:\Windows\system32\drivers\uasdzcci.sys File not found
DRV - (tzwadfiy) -- C:\Windows\system32\drivers\tzwadfiy.sys File not found
DRV - (tzrrnrop) -- C:\Windows\system32\drivers\tzrrnrop.sys File not found
DRV - (tyopnnrq) -- C:\Windows\system32\drivers\tyopnnrq.sys File not found
DRV - (tyctlxaw) -- C:\Windows\system32\drivers\tyctlxaw.sys File not found
DRV - (twekxhwp) -- C:\Windows\system32\drivers\twekxhwp.sys File not found
DRV - (twcnhbcu) -- C:\Windows\system32\drivers\twcnhbcu.sys File not found
DRV - (twarlcta) -- C:\Windows\system32\drivers\twarlcta.sys File not found
DRV - (tvtksqbn) -- C:\Windows\system32\drivers\tvtksqbn.sys File not found
DRV - (ttyzkzdi) -- C:\Windows\system32\drivers\ttyzkzdi.sys File not found
DRV - (tsmjhqvk) -- C:\Windows\system32\drivers\tsmjhqvk.sys File not found
DRV - (trzbfsao) -- C:\Windows\system32\drivers\trzbfsao.sys File not found
DRV - (trwfkexh) -- C:\Windows\system32\drivers\trwfkexh.sys File not found
DRV - (trlfzrct) -- C:\Windows\system32\drivers\trlfzrct.sys File not found
DRV - (trjdmima) -- C:\Windows\system32\drivers\trjdmima.sys File not found
DRV - (tqrvignj) -- C:\Windows\system32\drivers\tqrvignj.sys File not found
DRV - (tpjfjszj) -- C:\Windows\system32\drivers\tpjfjszj.sys File not found
DRV - (tnboeuxr) -- C:\Windows\system32\drivers\tnboeuxr.sys File not found
DRV - (tnbocydl) -- C:\Windows\system32\drivers\tnbocydl.sys File not found
DRV - (tlyfywah) -- C:\Windows\system32\drivers\tlyfywah.sys File not found
DRV - (tllwxyrl) -- C:\Windows\system32\drivers\tllwxyrl.sys File not found
DRV - (tkrawgzc) -- C:\Windows\system32\drivers\tkrawgzc.sys File not found
DRV - (tkeqdyaq) -- C:\Windows\system32\drivers\tkeqdyaq.sys File not found
DRV - (tkblkosv) -- C:\Windows\system32\drivers\tkblkosv.sys File not found
DRV - (tjhwtskq) -- C:\Windows\system32\drivers\tjhwtskq.sys File not found
DRV - (tjetftzc) -- C:\Windows\system32\drivers\tjetftzc.sys File not found
DRV - (tidqqrlf) -- C:\Windows\system32\drivers\tidqqrlf.sys File not found
DRV - (thvqmyey) -- C:\Windows\system32\drivers\thvqmyey.sys File not found
DRV - (tgrmcjyk) -- C:\Windows\system32\drivers\tgrmcjyk.sys File not found
DRV - (tgenhjqz) -- C:\Windows\system32\drivers\tgenhjqz.sys File not found
DRV - (tfpvtjpx) -- C:\Windows\system32\drivers\tfpvtjpx.sys File not found
DRV - (tfogarjx) -- C:\Windows\system32\drivers\tfogarjx.sys File not found
DRV - (tdioiqus) -- C:\Windows\system32\drivers\tdioiqus.sys File not found
DRV - (tbtslxak) -- C:\Windows\system32\drivers\tbtslxak.sys File not found
DRV - (tbkaklcj) -- C:\Windows\system32\drivers\tbkaklcj.sys File not found
DRV - (szllqmbq) -- C:\Windows\system32\drivers\szllqmbq.sys File not found
DRV - (szlhpkny) -- C:\Windows\system32\drivers\szlhpkny.sys File not found
DRV - (synrpgwf) -- C:\Windows\system32\drivers\synrpgwf.sys File not found
DRV - (sxukobrj) -- C:\Windows\system32\drivers\sxukobrj.sys File not found
DRV - (svrirqsk) -- C:\Windows\system32\drivers\svrirqsk.sys File not found
DRV - (svovaaev) -- C:\Windows\system32\drivers\svovaaev.sys File not found
DRV - (sugvhfiy) -- C:\Windows\system32\drivers\sugvhfiy.sys File not found
DRV - (sufmgeao) -- C:\Windows\system32\drivers\sufmgeao.sys File not found
DRV - (ssdqqnal) -- C:\Windows\system32\drivers\ssdqqnal.sys File not found
DRV - (srgowute) -- C:\Windows\system32\drivers\srgowute.sys File not found
DRV - (sregzcep) -- C:\Windows\system32\drivers\sregzcep.sys File not found
DRV - (sqrjuius) -- C:\Windows\system32\drivers\sqrjuius.sys File not found
DRV - (sqirrdld) -- C:\Windows\system32\drivers\sqirrdld.sys File not found
DRV - (sozqlgde) -- C:\Windows\system32\drivers\sozqlgde.sys File not found
DRV - (snlaklzh) -- C:\Windows\system32\drivers\snlaklzh.sys File not found
DRV - (snjpxffg) -- C:\Windows\system32\drivers\snjpxffg.sys File not found
DRV - (sneloxdm) -- C:\Windows\system32\drivers\sneloxdm.sys File not found
DRV - (slrcmiju) -- C:\Windows\system32\drivers\slrcmiju.sys File not found
DRV - (sljgolyi) -- C:\Windows\system32\drivers\sljgolyi.sys File not found
DRV - (skucbuec) -- C:\Windows\system32\drivers\skucbuec.sys File not found
DRV - (sknnbkub) -- C:\Windows\system32\drivers\sknnbkub.sys File not found
DRV - (sjuhmeup) -- C:\Windows\system32\drivers\sjuhmeup.sys File not found
DRV - (shiuykvq) -- C:\Windows\system32\drivers\shiuykvq.sys File not found
DRV - (sgebjybh) -- C:\Windows\system32\drivers\sgebjybh.sys File not found
DRV - (sfqagskn) -- C:\Windows\system32\drivers\sfqagskn.sys File not found
DRV - (seztnsye) -- C:\Windows\system32\drivers\seztnsye.sys File not found
DRV - (seyphgmk) -- C:\Windows\system32\drivers\seyphgmk.sys File not found
DRV - (sejcnvwd) -- C:\Windows\system32\drivers\sejcnvwd.sys File not found
DRV - (sdlylgbf) -- C:\Windows\system32\drivers\sdlylgbf.sys File not found
DRV - (sdeqnepj) -- C:\Windows\system32\drivers\sdeqnepj.sys File not found
DRV - (scokjpcy) -- C:\Windows\system32\drivers\scokjpcy.sys File not found
DRV - (scitgaqj) -- C:\Windows\system32\drivers\scitgaqj.sys File not found
DRV - (sbdbixea) -- C:\Windows\system32\drivers\sbdbixea.sys File not found
DRV - (rzqbpqot) -- C:\Windows\system32\drivers\rzqbpqot.sys File not found
DRV - (rzchaksh) -- C:\Windows\system32\drivers\rzchaksh.sys File not found
DRV - (ryfqmrks) -- C:\Windows\system32\drivers\ryfqmrks.sys File not found
DRV - (rybrseee) -- C:\Windows\system32\drivers\rybrseee.sys File not found
DRV - (rxrsxdqg) -- C:\Windows\system32\drivers\rxrsxdqg.sys File not found
DRV - (rxqlvlru) -- C:\Windows\system32\drivers\rxqlvlru.sys File not found
DRV - (rxdeyiey) -- C:\Windows\system32\drivers\rxdeyiey.sys File not found
DRV - (rwhhipwl) -- C:\Windows\system32\drivers\rwhhipwl.sys File not found
DRV - (rwcmclms) -- C:\Windows\system32\drivers\rwcmclms.sys File not found
DRV - (rvmrtccp) -- C:\Windows\system32\drivers\rvmrtccp.sys File not found
DRV - (rvjhuufx) -- C:\Windows\system32\drivers\rvjhuufx.sys File not found
DRV - (rucglypj) -- C:\Windows\system32\drivers\rucglypj.sys File not found
DRV - (rtxdklao) -- C:\Windows\system32\drivers\rtxdklao.sys File not found
DRV - (rtqwuoii) -- C:\Windows\system32\drivers\rtqwuoii.sys File not found
DRV - (rsgxcfot) -- C:\Windows\system32\drivers\rsgxcfot.sys File not found
DRV - (rrhjtcir) -- C:\Windows\system32\drivers\rrhjtcir.sys File not found
DRV - (rqybxypa) -- C:\Windows\system32\drivers\rqybxypa.sys File not found
DRV - (rnlcucze) -- C:\Windows\system32\drivers\rnlcucze.sys File not found
DRV - (rjcsjmlt) -- C:\Windows\system32\drivers\rjcsjmlt.sys File not found
DRV - (rihjepdv) -- C:\Windows\system32\drivers\rihjepdv.sys File not found
DRV - (rgvzvxbc) -- C:\Windows\system32\drivers\rgvzvxbc.sys File not found
DRV - (rgoedmxq) -- C:\Windows\system32\drivers\rgoedmxq.sys File not found
DRV - (rfxukkxi) -- C:\Windows\system32\drivers\rfxukkxi.sys File not found
DRV - (rfxtpnew) -- C:\Windows\system32\drivers\rfxtpnew.sys File not found
DRV - (rdsuccnf) -- C:\Windows\system32\drivers\rdsuccnf.sys File not found
DRV - (rcbnaosv) -- C:\Windows\system32\drivers\rcbnaosv.sys File not found
DRV - (rcbfyodg) -- C:\Windows\system32\drivers\rcbfyodg.sys File not found
DRV - (rbxhgets) -- C:\Windows\system32\drivers\rbxhgets.sys File not found
DRV - (rbnxsiem) -- C:\Windows\system32\drivers\rbnxsiem.sys File not found
DRV - (rbhyiyuo) -- C:\Windows\system32\drivers\rbhyiyuo.sys File not found
DRV - (rbfmaqvc) -- C:\Windows\system32\drivers\rbfmaqvc.sys File not found
DRV - (qyosdhst) -- C:\Windows\system32\drivers\qyosdhst.sys File not found
DRV - (qxwxormf) -- C:\Windows\system32\drivers\qxwxormf.sys File not found
DRV - (qxgdtepd) -- C:\Windows\system32\drivers\qxgdtepd.sys File not found
DRV - (qxeabwws) -- C:\Windows\system32\drivers\qxeabwws.sys File not found
DRV - (qwztvyjb) -- C:\Windows\system32\drivers\qwztvyjb.sys File not found
DRV - (qwzldrlm) -- C:\Windows\system32\drivers\qwzldrlm.sys File not found
DRV - (qwwjsrpa) -- C:\Windows\system32\drivers\qwwjsrpa.sys File not found
DRV - (qwnzlbyz) -- C:\Windows\system32\drivers\qwnzlbyz.sys File not found
DRV - (qwbullwa) -- C:\Windows\system32\drivers\qwbullwa.sys File not found
DRV - (qvtphohg) -- C:\Windows\system32\drivers\qvtphohg.sys File not found
DRV - (qvhpwfoq) -- C:\Windows\system32\drivers\qvhpwfoq.sys File not found
DRV - (quvotptr) -- C:\Windows\system32\drivers\quvotptr.sys File not found
DRV - (quvbdifn) -- C:\Windows\system32\drivers\quvbdifn.sys File not found
DRV - (quphgiwt) -- C:\Windows\system32\drivers\quphgiwt.sys File not found
DRV - (qtyjdlsg) -- C:\Windows\system32\drivers\qtyjdlsg.sys File not found
DRV - (qtslccjl) -- C:\Windows\system32\drivers\qtslccjl.sys File not found
DRV - (qsfkskuu) -- C:\Windows\system32\drivers\qsfkskuu.sys File not found
DRV - (qrztltuj) -- C:\Windows\system32\drivers\qrztltuj.sys File not found
DRV - (qrjyqnjz) -- C:\Windows\system32\drivers\qrjyqnjz.sys File not found
DRV - (qqcawrvg) -- C:\Windows\system32\drivers\qqcawrvg.sys File not found
DRV - (qpzdewlv) -- C:\Windows\system32\drivers\qpzdewlv.sys File not found
DRV - (qpuqtarw) -- C:\Windows\system32\drivers\qpuqtarw.sys File not found
DRV - (qptgpxlr) -- C:\Windows\system32\drivers\qptgpxlr.sys File not found
DRV - (qpfjbytn) -- C:\Windows\system32\drivers\qpfjbytn.sys File not found
DRV - (qorvtdfj) -- C:\Windows\system32\drivers\qorvtdfj.sys File not found
DRV - (qojruayp) -- C:\Windows\system32\drivers\qojruayp.sys File not found
DRV - (qodvdati) -- C:\Windows\system32\drivers\qodvdati.sys File not found
DRV - (qnzutzhc) -- C:\Windows\system32\drivers\qnzutzhc.sys File not found
DRV - (qlztziqp) -- C:\Windows\system32\drivers\qlztziqp.sys File not found
DRV - (qkshnyjo) -- C:\Windows\system32\drivers\qkshnyjo.sys File not found
DRV - (qjzsdtuq) -- C:\Windows\system32\drivers\qjzsdtuq.sys File not found
DRV - (qjwjneua) -- C:\Windows\system32\drivers\qjwjneua.sys File not found
DRV - (qhkofamh) -- C:\Windows\system32\drivers\qhkofamh.sys File not found
DRV - (qfxqbtfk) -- C:\Windows\system32\drivers\qfxqbtfk.sys File not found
DRV - (qfofzllh) -- C:\Windows\system32\drivers\qfofzllh.sys File not found
DRV - (qfkxdxcz) -- C:\Windows\system32\drivers\qfkxdxcz.sys File not found
DRV - (qdredtbo) -- C:\Windows\system32\drivers\qdredtbo.sys File not found
DRV - (qdkgbegb) -- C:\Windows\system32\drivers\qdkgbegb.sys File not found
DRV - (qdciakwl) -- C:\Windows\system32\drivers\qdciakwl.sys File not found
DRV - (qcdjtatn) -- C:\Windows\system32\drivers\qcdjtatn.sys File not found
DRV - (qbgevfls) -- C:\Windows\system32\drivers\qbgevfls.sys File not found
DRV - (qawegfua) -- C:\Windows\system32\drivers\qawegfua.sys File not found
DRV - (qaqmynds) -- C:\Windows\system32\drivers\qaqmynds.sys File not found
DRV - (qaqdegjy) -- C:\Windows\system32\drivers\qaqdegjy.sys File not found
DRV - (pztudedh) -- C:\Windows\system32\drivers\pztudedh.sys File not found
DRV - (pzovfaqh) -- C:\Windows\system32\drivers\pzovfaqh.sys File not found
DRV - (pzlzgjsh) -- C:\Windows\system32\drivers\pzlzgjsh.sys File not found
DRV - (pyxgvstm) -- C:\Windows\system32\drivers\pyxgvstm.sys File not found
DRV - (pvnsfzbt) -- C:\Windows\system32\drivers\pvnsfzbt.sys File not found
DRV - (pvkxcwwt) -- C:\Windows\system32\drivers\pvkxcwwt.sys File not found
DRV - (puzgmydw) -- C:\Windows\system32\drivers\puzgmydw.sys File not found
DRV - (punumucf) -- C:\Windows\system32\drivers\punumucf.sys File not found
DRV - (ptmqcvkg) -- C:\Windows\system32\drivers\ptmqcvkg.sys File not found
DRV - (przrmktm) -- C:\Windows\system32\drivers\przrmktm.sys File not found
DRV - (prqostly) -- C:\Windows\system32\drivers\prqostly.sys File not found
DRV - (prauqtaj) -- C:\Windows\system32\drivers\prauqtaj.sys File not found
DRV - (pqhotvhm) -- C:\Windows\system32\drivers\pqhotvhm.sys File not found
DRV - (pqbbolek) -- C:\Windows\system32\drivers\pqbbolek.sys File not found
DRV - (pppjbdjh) -- C:\Windows\system32\drivers\pppjbdjh.sys File not found
DRV - (ppkeikty) -- C:\Windows\system32\drivers\ppkeikty.sys File not found
DRV - (poxokgsk) -- C:\Windows\system32\drivers\poxokgsk.sys File not found
DRV - (poswpbxp) -- C:\Windows\system32\drivers\poswpbxp.sys File not found
DRV - (pokhtcae) -- C:\Windows\system32\drivers\pokhtcae.sys File not found
DRV - (pnplblyi) -- C:\Windows\system32\drivers\pnplblyi.sys File not found
DRV - (pnnpcsry) -- C:\Windows\system32\drivers\pnnpcsry.sys File not found
DRV - (pmycgwuu) -- C:\Windows\system32\drivers\pmycgwuu.sys File not found
DRV - (pmxrfjua) -- C:\Windows\system32\drivers\pmxrfjua.sys File not found
DRV - (plqlwlrp) -- C:\Windows\system32\drivers\plqlwlrp.sys File not found
DRV - (plicrbtt) -- C:\Windows\system32\drivers\plicrbtt.sys File not found
DRV - (pknvmivg) -- C:\Windows\system32\drivers\pknvmivg.sys File not found
DRV - (pkliaiii) -- C:\Windows\system32\drivers\pkliaiii.sys File not found
DRV - (piuhtqod) -- C:\Windows\system32\drivers\piuhtqod.sys File not found
DRV - (pifzwvvo) -- C:\Windows\system32\drivers\pifzwvvo.sys File not found
DRV - (phwtefiz) -- C:\Windows\system32\drivers\phwtefiz.sys File not found
DRV - (pgdabuvz) -- C:\Windows\system32\drivers\pgdabuvz.sys File not found
DRV - (pfohazts) -- C:\Windows\system32\drivers\pfohazts.sys File not found
DRV - (pdeoxwgn) -- C:\Windows\system32\drivers\pdeoxwgn.sys File not found
DRV - (pcwkupxr) -- C:\Windows\system32\drivers\pcwkupxr.sys File not found
DRV - (pbshynrx) -- C:\Windows\system32\drivers\pbshynrx.sys File not found
DRV - (pbiqqvps) -- C:\Windows\system32\drivers\pbiqqvps.sys File not found
DRV - (pbididnd) -- C:\Windows\system32\drivers\pbididnd.sys File not found
DRV - (pazovxqi) -- C:\Windows\system32\drivers\pazovxqi.sys File not found
DRV - (pagdorha) -- C:\Windows\system32\drivers\pagdorha.sys File not found
DRV - (ozsuqmne) -- C:\Windows\system32\drivers\ozsuqmne.sys File not found
DRV - (oyhvzbtl) -- C:\Windows\system32\drivers\oyhvzbtl.sys File not found
DRV - (oxzyexcx) -- C:\Windows\system32\drivers\oxzyexcx.sys File not found
DRV - (owygcqqb) -- C:\Windows\system32\drivers\owygcqqb.sys File not found
DRV - (owxyaaho) -- C:\Windows\system32\drivers\owxyaaho.sys File not found
DRV - (ovvvtshh) -- C:\Windows\system32\drivers\ovvvtshh.sys File not found
DRV - (ovvdwqhn) -- C:\Windows\system32\drivers\ovvdwqhn.sys File not found
DRV - (ouyclecm) -- C:\Windows\system32\drivers\ouyclecm.sys File not found
DRV - (ouuyewbs) -- C:\Windows\system32\drivers\ouuyewbs.sys File not found
DRV - (otuvsnjt) -- C:\Windows\system32\drivers\otuvsnjt.sys File not found
DRV - (otpmaaka) -- C:\Windows\system32\drivers\otpmaaka.sys File not found
DRV - (ordxouqx) -- C:\Windows\system32\drivers\ordxouqx.sys File not found
DRV - (oqibqbce) -- C:\Windows\system32\drivers\oqibqbce.sys File not found
DRV - (oppqebbp) -- C:\Windows\system32\drivers\oppqebbp.sys File not found
DRV - (oobihelq) -- C:\Windows\system32\drivers\oobihelq.sys File not found
DRV - (onlghdak) -- C:\Windows\system32\drivers\onlghdak.sys File not found
DRV - (olzokgji) -- C:\Windows\system32\drivers\olzokgji.sys File not found
DRV - (olmazfvb) -- C:\Windows\system32\drivers\olmazfvb.sys File not found
DRV - (ollqtcef) -- C:\Windows\system32\drivers\ollqtcef.sys File not found
DRV - (olhbxntc) -- C:\Windows\system32\drivers\olhbxntc.sys File not found
DRV - (okjrvvyd) -- C:\Windows\system32\drivers\okjrvvyd.sys File not found
DRV - (okbignal) -- C:\Windows\system32\drivers\okbignal.sys File not found
DRV - (oibbznwz) -- C:\Windows\system32\drivers\oibbznwz.sys File not found
DRV - (ohwqwmeg) -- C:\Windows\system32\drivers\ohwqwmeg.sys File not found
DRV - (ohqiqwom) -- C:\Windows\system32\drivers\ohqiqwom.sys File not found
DRV - (ognpitmh) -- C:\Windows\system32\drivers\ognpitmh.sys File not found
DRV - (ofrszdqu) -- C:\Windows\system32\drivers\ofrszdqu.sys File not found
DRV - (ofkngqsz) -- C:\Windows\system32\drivers\ofkngqsz.sys File not found
DRV - (oeldwwfg) -- C:\Windows\system32\drivers\oeldwwfg.sys File not found
DRV - (odsshemk) -- C:\Windows\system32\drivers\odsshemk.sys File not found
DRV - (ocoupntn) -- C:\Windows\system32\drivers\ocoupntn.sys File not found
DRV - (obavaijb) -- C:\Windows\system32\drivers\obavaijb.sys File not found
DRV - (oarvkegg) -- C:\Windows\system32\drivers\oarvkegg.sys File not found
DRV - (oanvtwgj) -- C:\Windows\system32\drivers\oanvtwgj.sys File not found
DRV - (nzaqdxqe) -- C:\Windows\system32\drivers\nzaqdxqe.sys File not found
DRV - (nyxblplj) -- C:\Windows\system32\drivers\nyxblplj.sys File not found
DRV - (nxyiaeav) -- C:\Windows\system32\drivers\nxyiaeav.sys File not found
DRV - (nxybfcxf) -- C:\Windows\system32\drivers\nxybfcxf.sys File not found
DRV - (nxqtkkvn) -- C:\Windows\system32\drivers\nxqtkkvn.sys File not found
DRV - (nwzzobqt) -- C:\Windows\system32\drivers\nwzzobqt.sys File not found
DRV - (nwqsozfx) -- C:\Windows\system32\drivers\nwqsozfx.sys File not found
DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (nvovkmqp) -- C:\Windows\system32\drivers\nvovkmqp.sys File not found
DRV - (nuvsyzga) -- C:\Windows\system32\drivers\nuvsyzga.sys File not found
DRV - (nstxdqkn) -- C:\Windows\system32\drivers\nstxdqkn.sys File not found
DRV - (nsgmiycu) -- C:\Windows\system32\drivers\nsgmiycu.sys File not found
DRV - (nqwjtvjd) -- C:\Windows\system32\drivers\nqwjtvjd.sys File not found
DRV - (nqmfgdno) -- C:\Windows\system32\drivers\nqmfgdno.sys File not found
DRV - (nposbfne) -- C:\Windows\system32\drivers\nposbfne.sys File not found
DRV - (nomsabmw) -- C:\Windows\system32\drivers\nomsabmw.sys File not found
DRV - (nommloeb) -- C:\Windows\system32\drivers\nommloeb.sys File not found
DRV - (nnohbyxj) -- C:\Windows\system32\drivers\nnohbyxj.sys File not found
DRV - (nnctmagn) -- C:\Windows\system32\drivers\nnctmagn.sys File not found
DRV - (nnbopyjr) -- C:\Windows\system32\drivers\nnbopyjr.sys File not found
DRV - (nmplcgtx) -- C:\Windows\system32\drivers\nmplcgtx.sys File not found
DRV - (nmofnbnk) -- C:\Windows\system32\drivers\nmofnbnk.sys File not found
DRV - (nlydclgf) -- C:\Windows\system32\drivers\nlydclgf.sys File not found
DRV - (nlrxkmkp) -- C:\Windows\system32\drivers\nlrxkmkp.sys File not found
DRV - (nlkhtfzp) -- C:\Windows\system32\drivers\nlkhtfzp.sys File not found
DRV - (njjmdmdj) -- C:\Windows\system32\drivers\njjmdmdj.sys File not found
DRV - (njgofvjr) -- C:\Windows\system32\drivers\njgofvjr.sys File not found
DRV - (ngombplo) -- C:\Windows\system32\drivers\ngombplo.sys File not found
DRV - (ngnhqtzs) -- C:\Windows\system32\drivers\ngnhqtzs.sys File not found
DRV - (nfnicrwm) -- C:\Windows\system32\drivers\nfnicrwm.sys File not found
DRV - (nervmubi) -- C:\Windows\system32\drivers\nervmubi.sys File not found
DRV - (neptfyia) -- C:\Windows\system32\drivers\neptfyia.sys File not found
DRV - (nctinnfj) -- C:\Windows\system32\drivers\nctinnfj.sys File not found
DRV - (najpyovy) -- C:\Windows\system32\drivers\najpyovy.sys File not found
DRV - (naftsdgq) -- C:\Windows\system32\drivers\naftsdgq.sys File not found
DRV - (mztljlyk) -- C:\Windows\system32\drivers\mztljlyk.sys File not found
DRV - (mzsidsmt) -- C:\Windows\system32\drivers\mzsidsmt.sys File not found
DRV - (mzrebixn) -- C:\Windows\system32\drivers\mzrebixn.sys File not found
DRV - (myvyfeyq) -- C:\Windows\system32\drivers\myvyfeyq.sys File not found
DRV - (mypskyjb) -- C:\Windows\system32\drivers\mypskyjb.sys File not found
DRV - (myoqulum) -- C:\Windows\system32\drivers\myoqulum.sys File not found
DRV - (myfdioyr) -- C:\Windows\system32\drivers\myfdioyr.sys File not found
DRV - (mxxttbrv) -- C:\Windows\system32\drivers\mxxttbrv.sys File not found
DRV - (mwpjwfgz) -- C:\Windows\system32\drivers\mwpjwfgz.sys File not found
DRV - (mvvpzyuw) -- C:\Windows\system32\drivers\mvvpzyuw.sys File not found
DRV - (mvbsslvl) -- C:\Windows\system32\drivers\mvbsslvl.sys File not found
DRV - (muihrqeu) -- C:\Windows\system32\drivers\muihrqeu.sys File not found
DRV - (mtulanxu) -- C:\Windows\system32\drivers\mtulanxu.sys File not found
DRV - (mthassln) -- C:\Windows\system32\drivers\mthassln.sys File not found
DRV - (msopuclq) -- C:\Windows\system32\drivers\msopuclq.sys File not found
DRV - (msltkilc) -- C:\Windows\system32\drivers\msltkilc.sys File not found
DRV - (mshuijob) -- C:\Windows\system32\drivers\mshuijob.sys File not found
DRV - (mryhdwba) -- C:\Windows\system32\drivers\mryhdwba.sys File not found
DRV - (mrhbusvq) -- C:\Windows\system32\drivers\mrhbusvq.sys File not found
DRV - (mrahjdgu) -- C:\Windows\system32\drivers\mrahjdgu.sys File not found
DRV - (mqtjgnhx) -- C:\Windows\system32\drivers\mqtjgnhx.sys File not found
DRV - (mpuyfwnq) -- C:\Windows\system32\drivers\mpuyfwnq.sys File not found
DRV - (MpKslafea51e4) -- c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{6138ECEF-CE8A-4024-9F8A-0E63BD673459}\MpKslafea51e4.sys File not found
DRV - (mozoebft) -- C:\Windows\system32\drivers\mozoebft.sys File not found
DRV - (mozgvtka) -- C:\Windows\system32\drivers\mozgvtka.sys File not found
DRV - (moklawzf) -- C:\Windows\system32\drivers\moklawzf.sys File not found
DRV - (mnvqzaiy) -- C:\Windows\system32\drivers\mnvqzaiy.sys File not found
DRV - (mngtazxp) -- C:\Windows\system32\drivers\mngtazxp.sys File not found
DRV - (mlnqkjcz) -- C:\Windows\system32\drivers\mlnqkjcz.sys File not found
DRV - (mkrntsfn) -- C:\Windows\system32\drivers\mkrntsfn.sys File not found
DRV - (mkqnnvdl) -- C:\Windows\system32\drivers\mkqnnvdl.sys File not found
DRV - (mjtssjet) -- C:\Windows\system32\drivers\mjtssjet.sys File not found
DRV - (midppwsa) -- C:\Windows\system32\drivers\midppwsa.sys File not found
DRV - (mgvfvsen) -- C:\Windows\system32\drivers\mgvfvsen.sys File not found
DRV - (mgsqaslq) -- C:\Windows\system32\drivers\mgsqaslq.sys File not found
DRV - (mgjqvfti) -- C:\Windows\system32\drivers\mgjqvfti.sys File not found
DRV - (mfyqhahe) -- C:\Windows\system32\drivers\mfyqhahe.sys File not found
DRV - (mfgfbnbd) -- C:\Windows\system32\drivers\mfgfbnbd.sys File not found
DRV - (mefjkygt) -- C:\Windows\system32\drivers\mefjkygt.sys File not found
DRV - (mdzuoogh) -- C:\Windows\system32\drivers\mdzuoogh.sys File not found
DRV - (mddlnlts) -- C:\Windows\system32\drivers\mddlnlts.sys File not found
DRV - (mddftkak) -- C:\Windows\system32\drivers\mddftkak.sys File not found
DRV - (mcvididw) -- C:\Windows\system32\drivers\mcvididw.sys File not found
DRV - (mcprvtvx) -- C:\Windows\system32\drivers\mcprvtvx.sys File not found
DRV - (mcaavpql) -- C:\Windows\system32\drivers\mcaavpql.sys File not found
DRV - (mbzvebpm) -- C:\Windows\system32\drivers\mbzvebpm.sys File not found
DRV - (maqbkudw) -- C:\Windows\system32\drivers\maqbkudw.sys File not found
DRV - (magdyzgg) -- C:\Windows\system32\drivers\magdyzgg.sys File not found
DRV - (lydnxzbm) -- C:\Windows\system32\drivers\lydnxzbm.sys File not found
DRV - (lxuxjjeo) -- C:\Windows\system32\drivers\lxuxjjeo.sys File not found
DRV - (lxhtkuga) -- C:\Windows\system32\drivers\lxhtkuga.sys File not found
DRV - (lxbwiitg) -- C:\Windows\system32\drivers\lxbwiitg.sys File not found
DRV - (lvitgmog) -- C:\Windows\system32\drivers\lvitgmog.sys File not found
DRV - (ltlmpiat) -- C:\Windows\system32\drivers\ltlmpiat.sys File not found
DRV - (ltjrxvpb) -- C:\Windows\system32\drivers\ltjrxvpb.sys File not found
DRV - (lsgslkbs) -- C:\Windows\system32\drivers\lsgslkbs.sys File not found
DRV - (lsfwvugo) -- C:\Windows\system32\drivers\lsfwvugo.sys File not found
DRV - (lsdrizcg) -- C:\Windows\system32\drivers\lsdrizcg.sys File not found
DRV - (lrmmuaql) -- C:\Windows\system32\drivers\lrmmuaql.sys File not found
DRV - (lqivifjq) -- C:\Windows\system32\drivers\lqivifjq.sys File not found
DRV - (lpuldbql) -- C:\Windows\system32\drivers\lpuldbql.sys File not found
DRV - (loityflw) -- C:\Windows\system32\drivers\loityflw.sys File not found
DRV - (lockbubk) -- C:\Windows\system32\drivers\lockbubk.sys File not found
DRV - (loaovxex) -- C:\Windows\system32\drivers\loaovxex.sys File not found
DRV - (lnwfemrf) -- C:\Windows\system32\drivers\lnwfemrf.sys File not found
DRV - (lnmwlgpv) -- C:\Windows\system32\drivers\lnmwlgpv.sys File not found
DRV - (lnkcbdac) -- C:\Windows\system32\drivers\lnkcbdac.sys File not found
DRV - (lljbvrzp) -- C:\Windows\system32\drivers\lljbvrzp.sys File not found
DRV - (ljsljgfh) -- C:\Windows\system32\drivers\ljsljgfh.sys File not found
DRV - (ljjhvque) -- C:\Windows\system32\drivers\ljjhvque.sys File not found
DRV - (ljijgdbo) -- C:\Windows\system32\drivers\ljijgdbo.sys File not found
DRV - (ljcruqkx) -- C:\Windows\system32\drivers\ljcruqkx.sys File not found
DRV - (livzoylz) -- C:\Windows\system32\drivers\livzoylz.sys File not found
DRV - (lirmoiij) -- C:\Windows\system32\drivers\lirmoiij.sys File not found
DRV - (lhzaxtnp) -- C:\Windows\system32\drivers\lhzaxtnp.sys File not found
DRV - (lfjrjnux) -- C:\Windows\system32\drivers\lfjrjnux.sys File not found
DRV - (lesjvthj) -- C:\Windows\system32\drivers\lesjvthj.sys File not found
DRV - (leaixgkl) -- C:\Windows\system32\drivers\leaixgkl.sys File not found
DRV - (lcfgzzog) -- C:\Windows\system32\drivers\lcfgzzog.sys File not found
DRV - (lbzyvoge) -- C:\Windows\system32\drivers\lbzyvoge.sys File not found
DRV - (lavqncsn) -- C:\Windows\system32\drivers\lavqncsn.sys File not found
DRV - (lagatxvx) -- C:\Windows\system32\drivers\lagatxvx.sys File not found
DRV - (kzrdpkad) -- C:\Windows\system32\drivers\kzrdpkad.sys File not found
DRV - (kzedmzhy) -- C:\Windows\system32\drivers\kzedmzhy.sys File not found
DRV - (kyrargeh) -- C:\Windows\system32\drivers\kyrargeh.sys File not found
DRV - (kxqxyfzc) -- C:\Windows\system32\drivers\kxqxyfzc.sys File not found
DRV - (kxqbnoll) -- C:\Windows\system32\drivers\kxqbnoll.sys File not found
DRV - (kxhumgrm) -- C:\Windows\system32\drivers\kxhumgrm.sys File not found
DRV - (kxbmrmlq) -- C:\Windows\system32\drivers\kxbmrmlq.sys File not found
DRV - (kwbyskwj) -- C:\Windows\system32\drivers\kwbyskwj.sys File not found
DRV - (kvrhreyt) -- C:\Windows\system32\drivers\kvrhreyt.sys File not found
DRV - (ktbirayk) -- C:\Windows\system32\drivers\ktbirayk.sys File not found
DRV - (ksvnzpdh) -- C:\Windows\system32\drivers\ksvnzpdh.sys File not found
DRV - (kskmuotf) -- C:\Windows\system32\drivers\kskmuotf.sys File not found
DRV - (ksjsgmvf) -- C:\Windows\system32\drivers\ksjsgmvf.sys File not found
DRV - (krmyuzjp) -- C:\Windows\system32\drivers\krmyuzjp.sys File not found
DRV - (kqaahvls) -- C:\Windows\system32\drivers\kqaahvls.sys File not found
DRV - (kpsgipre) -- C:\Windows\system32\drivers\kpsgipre.sys File not found
DRV - (kokmrude) -- C:\Windows\system32\drivers\kokmrude.sys File not found
DRV - (kogsrrsd) -- C:\Windows\system32\drivers\kogsrrsd.sys File not found
DRV - (knuzukse) -- C:\Windows\system32\drivers\knuzukse.sys File not found
DRV - (knhwdkfw) -- C:\Windows\system32\drivers\knhwdkfw.sys File not found
DRV - (kmmfdrsr) -- C:\Windows\system32\drivers\kmmfdrsr.sys File not found
DRV - (klnfsigb) -- C:\Windows\system32\drivers\klnfsigb.sys File not found
DRV - (kklyrwyc) -- C:\Windows\system32\drivers\kklyrwyc.sys File not found
DRV - (kjrqavrw) -- C:\Windows\system32\drivers\kjrqavrw.sys File not found
DRV - (kjbddxog) -- C:\Windows\system32\drivers\kjbddxog.sys File not found
DRV - (kiairoao) -- C:\Windows\system32\drivers\kiairoao.sys File not found
DRV - (khoqhhca) -- C:\Windows\system32\drivers\khoqhhca.sys File not found
DRV - (kgjjqjet) -- C:\Windows\system32\drivers\kgjjqjet.sys File not found
DRV - (kghfngqb) -- C:\Windows\system32\drivers\kghfngqb.sys File not found
DRV - (kgdfnyre) -- C:\Windows\system32\drivers\kgdfnyre.sys File not found
DRV - (kfqinehi) -- C:\Windows\system32\drivers\kfqinehi.sys File not found
DRV - (kdqvshvz) -- C:\Windows\system32\drivers\kdqvshvz.sys File not found
DRV - (kczixjae) -- C:\Windows\system32\drivers\kczixjae.sys File not found
DRV - (kcytbvgw) -- C:\Windows\system32\drivers\kcytbvgw.sys File not found
DRV - (kchcznxc) -- C:\Windows\system32\drivers\kchcznxc.sys File not found
DRV - (kcadoqqo) -- C:\Windows\system32\drivers\kcadoqqo.sys File not found
DRV - (kaebdpth) -- C:\Windows\system32\drivers\kaebdpth.sys File not found
DRV - (jzupvsjd) -- C:\Windows\system32\drivers\jzupvsjd.sys File not found
DRV - (jxtuneqa) -- C:\Windows\system32\drivers\jxtuneqa.sys File not found
DRV - (jvjnbtzs) -- C:\Windows\system32\drivers\jvjnbtzs.sys File not found
DRV - (jvahefnj) -- C:\Windows\system32\drivers\jvahefnj.sys File not found
DRV - (juylcsdc) -- C:\Windows\system32\drivers\juylcsdc.sys File not found
DRV - (juqcfzfs) -- C:\Windows\system32\drivers\juqcfzfs.sys File not found
DRV - (juitsmjs) -- C:\Windows\system32\drivers\juitsmjs.sys File not found
DRV - (juboqqvc) -- C:\Windows\system32\drivers\juboqqvc.sys File not found
DRV - (jtfqphyw) -- C:\Windows\system32\drivers\jtfqphyw.sys File not found
DRV - (jsxtvyud) -- C:\Windows\system32\drivers\jsxtvyud.sys File not found
DRV - (jsmhefch) -- C:\Windows\system32\drivers\jsmhefch.sys File not found
DRV - (jsljkcfo) -- C:\Windows\system32\drivers\jsljkcfo.sys File not found
DRV - (jsfokrer) -- C:\Windows\system32\drivers\jsfokrer.sys File not found
DRV - (jrsyvzuk) -- C:\Windows\system32\drivers\jrsyvzuk.sys File not found
DRV - (jqvnmibd) -- C:\Windows\system32\drivers\jqvnmibd.sys File not found
DRV - (jqdjimxz) -- C:\Windows\system32\drivers\jqdjimxz.sys File not found
DRV - (jpjneumo) -- C:\Windows\system32\drivers\jpjneumo.sys File not found
DRV - (jobslcoa) -- C:\Windows\system32\drivers\jobslcoa.sys File not found
DRV - (jnpnowiu) -- C:\Windows\system32\drivers\jnpnowiu.sys File not found
DRV - (jnmaplhk) -- C:\Windows\system32\drivers\jnmaplhk.sys File not found
DRV - (jmjqsbfr) -- C:\Windows\system32\drivers\jmjqsbfr.sys File not found
DRV - (jifmbyqr) -- C:\Windows\system32\drivers\jifmbyqr.sys File not found
DRV - (jghojqfq) -- C:\Windows\system32\drivers\jghojqfq.sys File not found
DRV - (jfxkyyjt) -- C:\Windows\system32\drivers\jfxkyyjt.sys File not found
DRV - (jetdfzsz) -- C:\Windows\system32\drivers\jetdfzsz.sys File not found
DRV - (jegewtws) -- C:\Windows\system32\drivers\jegewtws.sys File not found
DRV - (jeevldvx) -- C:\Windows\system32\drivers\jeevldvx.sys File not found
DRV - (jdneljlx) -- C:\Windows\system32\drivers\jdneljlx.sys File not found
DRV - (jdenfzoc) -- C:\Windows\system32\drivers\jdenfzoc.sys File not found
DRV - (jbxtliye) -- C:\Windows\system32\drivers\jbxtliye.sys File not found
DRV - (jbthbdtx) -- C:\Windows\system32\drivers\jbthbdtx.sys File not found
DRV - (jbnmrwhn) -- C:\Windows\system32\drivers\jbnmrwhn.sys File not found
DRV - (japgcyuw) -- C:\Windows\system32\drivers\japgcyuw.sys File not found
DRV - (jaffkgwq) -- C:\Windows\system32\drivers\jaffkgwq.sys File not found
DRV - (izwnmwcl) -- C:\Windows\system32\drivers\izwnmwcl.sys File not found
DRV - (izorkpva) -- C:\Windows\system32\drivers\izorkpva.sys File not found
DRV - (iwpokkmw) -- C:\Windows\system32\drivers\iwpokkmw.sys File not found
DRV - (iuggokxo) -- C:\Windows\system32\drivers\iuggokxo.sys File not found
DRV - (isvyqrum) -- C:\Windows\system32\drivers\isvyqrum.sys File not found
DRV - (isurmkrv) -- C:\Windows\system32\drivers\isurmkrv.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (ipidqnua) -- C:\Windows\system32\drivers\ipidqnua.sys File not found
DRV - (iotixsxt) -- C:\Windows\system32\drivers\iotixsxt.sys File not found
DRV - (iodzgozc) -- C:\Windows\system32\drivers\iodzgozc.sys File not found
DRV - (inkgpnkn) -- C:\Windows\system32\drivers\inkgpnkn.sys File not found
DRV - (inejyecp) -- C:\Windows\system32\drivers\inejyecp.sys File not found
DRV - (imtugajm) -- C:\Windows\system32\drivers\imtugajm.sys File not found
DRV - (imiidesz) -- C:\Windows\system32\drivers\imiidesz.sys File not found
DRV - (iluwbrlr) -- C:\Windows\system32\drivers\iluwbrlr.sys File not found
DRV - (ilmgfpmc) -- C:\Windows\system32\drivers\ilmgfpmc.sys File not found
DRV - (ilisselo) -- C:\Windows\system32\drivers\ilisselo.sys File not found
DRV - (ilaekutc) -- C:\Windows\system32\drivers\ilaekutc.sys File not found
DRV - (iktxjjep) -- C:\Windows\system32\drivers\iktxjjep.sys File not found
DRV - (ijudvvuw) -- C:\Windows\system32\drivers\ijudvvuw.sys File not found
DRV - (iidzvrmc) -- C:\Windows\system32\drivers\iidzvrmc.sys File not found
DRV - (ihwlmazv) -- C:\Windows\system32\drivers\ihwlmazv.sys File not found
DRV - (igvmqljq) -- C:\Windows\system32\drivers\igvmqljq.sys File not found
DRV - (idaijtbj) -- C:\Windows\system32\drivers\idaijtbj.sys File not found
DRV - (icyxetmh) -- C:\Windows\system32\drivers\icyxetmh.sys File not found
DRV - (icikdhtq) -- C:\Windows\system32\drivers\icikdhtq.sys File not found
DRV - (icgxuorq) -- C:\Windows\system32\drivers\icgxuorq.sys File not found
DRV - (iaejjool) -- C:\Windows\system32\drivers\iaejjool.sys File not found
DRV - (hzkgegcu) -- C:\Windows\system32\drivers\hzkgegcu.sys File not found
DRV - (hywvamvm) -- C:\Windows\system32\drivers\hywvamvm.sys File not found
DRV - (hyoajxpu) -- C:\Windows\system32\drivers\hyoajxpu.sys File not found
DRV - (hxdaxpxo) -- C:\Windows\system32\drivers\hxdaxpxo.sys File not found
DRV - (hvwnxtvb) -- C:\Windows\system32\drivers\hvwnxtvb.sys File not found
DRV - (huvmmkmj) -- C:\Windows\system32\drivers\huvmmkmj.sys File not found
DRV - (hujxitkb) -- C:\Windows\system32\drivers\hujxitkb.sys File not found
DRV - (htlelzrw) -- C:\Windows\system32\drivers\htlelzrw.sys File not found
DRV - (htkfrbmz) -- C:\Windows\system32\drivers\htkfrbmz.sys File not found
DRV - (htilyoqm) -- C:\Windows\system32\drivers\htilyoqm.sys File not found
DRV - (hshaucuu) -- C:\Windows\system32\drivers\hshaucuu.sys File not found
DRV - (hsgmkpkf) -- C:\Windows\system32\drivers\hsgmkpkf.sys File not found
DRV - (hryadeyf) -- C:\Windows\system32\drivers\hryadeyf.sys File not found
DRV - (hrtbcfsg) -- C:\Windows\system32\drivers\hrtbcfsg.sys File not found
DRV - (hqqokcbo) -- C:\Windows\system32\drivers\hqqokcbo.sys File not found
DRV - (hqjgwjpm) -- C:\Windows\system32\drivers\hqjgwjpm.sys File not found
DRV - (hprfpgbm) -- C:\Windows\system32\drivers\hprfpgbm.sys File not found
DRV - (hopcnttg) -- C:\Windows\system32\drivers\hopcnttg.sys File not found
DRV - (hnoghgog) -- C:\Windows\system32\drivers\hnoghgog.sys File not found
DRV - (hnmybibm) -- C:\Windows\system32\drivers\hnmybibm.sys File not found
DRV - (hmxpojgv) -- C:\Windows\system32\drivers\hmxpojgv.sys File not found
DRV - (hlobyped) -- C:\Windows\system32\drivers\hlobyped.sys File not found
DRV - (hlfrzokg) -- C:\Windows\system32\drivers\hlfrzokg.sys File not found
DRV - (hldurrqy) -- C:\Windows\system32\drivers\hldurrqy.sys File not found
DRV - (hjjtwory) -- C:\Windows\system32\drivers\hjjtwory.sys File not found
DRV - (hhnvqxbv) -- C:\Windows\system32\drivers\hhnvqxbv.sys File not found
DRV - (hhnmnqgb) -- C:\Windows\system32\drivers\hhnmnqgb.sys File not found
DRV - (hhhmiyqd) -- C:\Windows\system32\drivers\hhhmiyqd.sys File not found
DRV - (hgqhzoqd) -- C:\Windows\system32\drivers\hgqhzoqd.sys File not found
DRV - (hesneint) -- C:\Windows\system32\drivers\hesneint.sys File not found
DRV - (helxpxzw) -- C:\Windows\system32\drivers\helxpxzw.sys File not found
DRV - (hdoohqii) -- C:\Windows\system32\drivers\hdoohqii.sys File not found
DRV - (hdairdfn) -- C:\Windows\system32\drivers\hdairdfn.sys File not found
DRV - (hcyarwvd) -- C:\Windows\system32\drivers\hcyarwvd.sys File not found
DRV - (hbxataoo) -- C:\Windows\system32\drivers\hbxataoo.sys File not found
DRV - (hbrgiwtl) -- C:\Windows\system32\drivers\hbrgiwtl.sys File not found
DRV - (hakmytpz) -- C:\Windows\system32\drivers\hakmytpz.sys File not found
DRV - (gzxmweqj) -- C:\Windows\system32\drivers\gzxmweqj.sys File not found
DRV - (gzcjzkuo) -- C:\Windows\system32\drivers\gzcjzkuo.sys File not found
DRV - (gzbgdlix) -- C:\Windows\system32\drivers\gzbgdlix.sys File not found
DRV - (gyqbhtuk) -- C:\Windows\system32\drivers\gyqbhtuk.sys File not found
DRV - (gyejkdnc) -- C:\Windows\system32\drivers\gyejkdnc.sys File not found
DRV - (gxruoryb) -- C:\Windows\system32\drivers\gxruoryb.sys File not found
DRV - (gxodvhpi) -- C:\Windows\system32\drivers\gxodvhpi.sys File not found
DRV - (gxejbjkz) -- C:\Windows\system32\drivers\gxejbjkz.sys File not found
DRV - (gwwtciax) -- C:\Windows\system32\drivers\gwwtciax.sys File not found
DRV - (gwaeaalb) -- C:\Windows\system32\drivers\gwaeaalb.sys File not found
DRV - (gupxwhvl) -- C:\Windows\system32\drivers\gupxwhvl.sys File not found
DRV - (gukicrxm) -- C:\Windows\system32\drivers\gukicrxm.sys File not found
DRV - (gsodrcpc) -- C:\Windows\system32\drivers\gsodrcpc.sys File not found
DRV - (gsiavpgs) -- C:\Windows\system32\drivers\gsiavpgs.sys File not found
DRV - (gryhiczo) -- C:\Windows\system32\drivers\gryhiczo.sys File not found
DRV - (grnizfky) -- C:\Windows\system32\drivers\grnizfky.sys File not found
DRV - (grfwigan) -- C:\Windows\system32\drivers\grfwigan.sys File not found
DRV - (gqxqwynb) -- C:\Windows\system32\drivers\gqxqwynb.sys File not found
DRV - (gpybhlpr) -- C:\Windows\system32\drivers\gpybhlpr.sys File not found
DRV - (gopssrfi) -- C:\Windows\system32\drivers\gopssrfi.sys File not found
DRV - (gohukynx) -- C:\Windows\system32\drivers\gohukynx.sys File not found
DRV - (gmwpsgae) -- C:\Windows\system32\drivers\gmwpsgae.sys File not found
DRV - (gmeygisg) -- C:\Windows\system32\drivers\gmeygisg.sys File not found
DRV - (gmaqnbfi) -- C:\Windows\system32\drivers\gmaqnbfi.sys File not found
DRV - (glocgfaa) -- C:\Windows\system32\drivers\glocgfaa.sys File not found
DRV - (gkwnygoa) -- C:\Windows\system32\drivers\gkwnygoa.sys File not found
DRV - (gkfjnthc) -- C:\Windows\system32\drivers\gkfjnthc.sys File not found
DRV - (giqvubas) -- C:\Windows\system32\drivers\giqvubas.sys File not found
DRV - (gipguoqz) -- C:\Windows\system32\drivers\gipguoqz.sys File not found
DRV - (ghaniegs) -- C:\Windows\system32\drivers\ghaniegs.sys File not found
DRV - (ggzadjyi) -- C:\Windows\system32\drivers\ggzadjyi.sys File not found
DRV - (ggrugkbd) -- C:\Windows\system32\drivers\ggrugkbd.sys File not found
DRV - (ggfopkxs) -- C:\Windows\system32\drivers\ggfopkxs.sys File not found
DRV - (gfuqoudp) -- C:\Windows\system32\drivers\gfuqoudp.sys File not found
DRV - (gfrcjxdl) -- C:\Windows\system32\drivers\gfrcjxdl.sys File not found
DRV - (gezewaed) -- C:\Windows\system32\drivers\gezewaed.sys File not found
DRV - (gdsvqqcz) -- C:\Windows\system32\drivers\gdsvqqcz.sys File not found
DRV - (gciwiitm) -- C:\Windows\system32\drivers\gciwiitm.sys File not found
DRV - (gbbpwtex) -- C:\Windows\system32\drivers\gbbpwtex.sys File not found
DRV - (gawtdlpr) -- C:\Windows\system32\drivers\gawtdlpr.sys File not found
DRV - (gailyapn) -- C:\Windows\system32\drivers\gailyapn.sys File not found
DRV - (fxuzskih) -- C:\Windows\system32\drivers\fxuzskih.sys File not found
DRV - (fxlqmmkc) -- C:\Windows\system32\drivers\fxlqmmkc.sys File not found
DRV - (fwfbegfj) -- C:\Windows\system32\drivers\fwfbegfj.sys File not found
DRV - (futbctua) -- C:\Windows\system32\drivers\futbctua.sys File not found
DRV - (fuhwtxiu) -- C:\Windows\system32\drivers\fuhwtxiu.sys File not found
DRV - (fubeobon) -- C:\Windows\system32\drivers\fubeobon.sys File not found
DRV - (ftgapnet) -- C:\Windows\system32\drivers\ftgapnet.sys File not found
DRV - (fselxmxt) -- C:\Windows\system32\drivers\fselxmxt.sys File not found
DRV - (fqhijknq) -- C:\Windows\system32\drivers\fqhijknq.sys File not found
DRV - (fqasmciu) -- C:\Windows\system32\drivers\fqasmciu.sys File not found
DRV - (fpuyzshm) -- C:\Windows\system32\drivers\fpuyzshm.sys File not found
DRV - (fpsgdgmx) -- C:\Windows\system32\drivers\fpsgdgmx.sys File not found
DRV - (foetkbiv) -- C:\Windows\system32\drivers\foetkbiv.sys File not found
DRV - (flrargnr) -- C:\Windows\system32\drivers\flrargnr.sys File not found
DRV - (fkoogvml) -- C:\Windows\system32\drivers\fkoogvml.sys File not found
DRV - (fkkbitmj) -- C:\Windows\system32\drivers\fkkbitmj.sys File not found
DRV - (fjvfgjkc) -- C:\Windows\system32\drivers\fjvfgjkc.sys File not found
DRV - (finkkfaw) -- C:\Windows\system32\drivers\finkkfaw.sys File not found
DRV - (fimwujjo) -- C:\Windows\system32\drivers\fimwujjo.sys File not found
DRV - (fhkrkthm) -- C:\Windows\system32\drivers\fhkrkthm.sys File not found
DRV - (fgmbqose) -- C:\Windows\system32\drivers\fgmbqose.sys File not found
DRV - (fdjfnaxo) -- C:\Windows\system32\drivers\fdjfnaxo.sys File not found
DRV - (fbudxvna) -- C:\Windows\system32\drivers\fbudxvna.sys File not found
DRV - (fbktjbow) -- C:\Windows\system32\drivers\fbktjbow.sys File not found
DRV - (fbdsvplt) -- C:\Windows\system32\drivers\fbdsvplt.sys File not found
DRV - (faxutjlc) -- C:\Windows\system32\drivers\faxutjlc.sys File not found
DRV - (faglzzsu) -- C:\Windows\system32\drivers\faglzzsu.sys File not found
DRV - (ezkkteni) -- C:\Windows\system32\drivers\ezkkteni.sys File not found
DRV - (ezavxofj) -- C:\Windows\system32\drivers\ezavxofj.sys File not found
DRV - (exqodhhr) -- C:\Windows\system32\drivers\exqodhhr.sys File not found
DRV - (exqcjebl) -- C:\Windows\system32\drivers\exqcjebl.sys File not found
DRV - (exonfeqg) -- C:\Windows\system32\drivers\exonfeqg.sys File not found
DRV - (exgsrvdk) -- C:\Windows\system32\drivers\exgsrvdk.sys File not found
DRV - (ewqrhchp) -- C:\Windows\system32\drivers\ewqrhchp.sys File not found
DRV - (euofofwb) -- C:\Windows\system32\drivers\euofofwb.sys File not found
DRV - (eulaupop) -- C:\Windows\system32\drivers\eulaupop.sys File not found
DRV - (etxioljb) -- C:\Windows\system32\drivers\etxioljb.sys File not found
DRV - (etgbzkmc) -- C:\Windows\system32\drivers\etgbzkmc.sys File not found
DRV - (esebujbo) -- C:\Windows\system32\drivers\esebujbo.sys File not found
DRV - (erzhensk) -- C:\Windows\system32\drivers\erzhensk.sys File not found
DRV - (erjofcjs) -- C:\Windows\system32\drivers\erjofcjs.sys File not found
DRV - (eqdnfuat) -- C:\Windows\system32\drivers\eqdnfuat.sys File not found
DRV - (epaguqub) -- C:\Windows\system32\drivers\epaguqub.sys File not found
DRV - (eozkqqej) -- C:\Windows\system32\drivers\eozkqqej.sys File not found
DRV - (eovnjfus) -- C:\Windows\system32\drivers\eovnjfus.sys File not found
DRV - (eottyshl) -- C:\Windows\system32\drivers\eottyshl.sys File not found
DRV - (eoqikpyd) -- C:\Windows\system32\drivers\eoqikpyd.sys File not found
DRV - (envgdxgq) -- C:\Windows\system32\drivers\envgdxgq.sys File not found
DRV - (emecadtz) -- C:\Windows\system32\drivers\emecadtz.sys File not found
DRV - (emboyvjf) -- C:\Windows\system32\drivers\emboyvjf.sys File not found
DRV - (elutuquz) -- C:\Windows\system32\drivers\elutuquz.sys File not found
DRV - (eexnpnom) -- C:\Windows\system32\drivers\eexnpnom.sys File not found
DRV - (edqwyvpp) -- C:\Windows\system32\drivers\edqwyvpp.sys File not found
DRV - (edlvdrfs) -- C:\Windows\system32\drivers\edlvdrfs.sys File not found
DRV - (eczhhnpy) -- C:\Windows\system32\drivers\eczhhnpy.sys File not found
DRV - (ecvlhjfr) -- C:\Windows\system32\drivers\ecvlhjfr.sys File not found
DRV - (ectwcktf) -- C:\Windows\system32\drivers\ectwcktf.sys File not found
DRV - (ebqgobvl) -- C:\Windows\system32\drivers\ebqgobvl.sys File not found
DRV - (ebgvflhd) -- C:\Windows\system32\drivers\ebgvflhd.sys File not found
DRV - (eamulzsw) -- C:\Windows\system32\drivers\eamulzsw.sys File not found
DRV - (eajxiezv) -- C:\Windows\system32\drivers\eajxiezv.sys File not found
DRV - (eagjdgeg) -- C:\Windows\system32\drivers\eagjdgeg.sys File not found
DRV - (dxtkkcca) -- C:\Windows\system32\drivers\dxtkkcca.sys File not found
DRV - (dxldetzw) -- C:\Windows\system32\drivers\dxldetzw.sys File not found
DRV - (dvmveoqc) -- C:\Windows\system32\drivers\dvmveoqc.sys File not found
DRV - (dvgyqcao) -- C:\Windows\system32\drivers\dvgyqcao.sys File not found
DRV - (duuluitf) -- C:\Windows\system32\drivers\duuluitf.sys File not found
DRV - (dqusmplr) -- C:\Windows\system32\drivers\dqusmplr.sys File not found
DRV - (dqbrinwk) -- C:\Windows\system32\drivers\dqbrinwk.sys File not found
DRV - (dqarmupj) -- C:\Windows\system32\drivers\dqarmupj.sys File not found
DRV - (dpxjtrdb) -- C:\Windows\system32\drivers\dpxjtrdb.sys File not found
DRV - (dpwibhty) -- C:\Windows\system32\drivers\dpwibhty.sys File not found
DRV - (dnjcjyja) -- C:\Windows\system32\drivers\dnjcjyja.sys File not found
DRV - (dnbazpud) -- C:\Windows\system32\drivers\dnbazpud.sys File not found
DRV - (dmynkmwc) -- C:\Windows\system32\drivers\dmynkmwc.sys File not found
DRV - (dlvwppet) -- C:\Windows\system32\drivers\dlvwppet.sys File not found
DRV - (dlminrcy) -- C:\Windows\system32\drivers\dlminrcy.sys File not found
DRV - (dkeecokh) -- C:\Windows\system32\drivers\dkeecokh.sys File not found
DRV - (djixqorr) -- C:\Windows\system32\drivers\djixqorr.sys File not found
DRV - (diphprbg) -- C:\Windows\system32\drivers\diphprbg.sys File not found
DRV - (dhytlogn) -- C:\Windows\system32\drivers\dhytlogn.sys File not found
DRV - (dhtbctmx) -- C:\Windows\system32\drivers\dhtbctmx.sys File not found
DRV - (dgxwippm) -- C:\Windows\system32\drivers\dgxwippm.sys File not found
DRV - (dgasomsx) -- C:\Windows\system32\drivers\dgasomsx.sys File not found
DRV - (dejuyjor) -- C:\Windows\system32\drivers\dejuyjor.sys File not found
DRV - (ddggddpr) -- C:\Windows\system32\drivers\ddggddpr.sys File not found
DRV - (dbthjajb) -- C:\Windows\system32\drivers\dbthjajb.sys File not found
DRV - (daxujupg) -- C:\Windows\system32\drivers\daxujupg.sys File not found
DRV - (daqwhsgu) -- C:\Windows\system32\drivers\daqwhsgu.sys File not found
DRV - (czqgaobj) -- C:\Windows\system32\drivers\czqgaobj.sys File not found
DRV - (czlhxgix) -- C:\Windows\system32\drivers\czlhxgix.sys File not found
DRV - (czkgmuwj) -- C:\Windows\system32\drivers\czkgmuwj.sys File not found
DRV - (cynjnxmp) -- C:\Windows\system32\drivers\cynjnxmp.sys File not found
DRV - (cymshgqo) -- C:\Windows\system32\drivers\cymshgqo.sys File not found
DRV - (cwnhdpha) -- C:\Windows\system32\drivers\cwnhdpha.sys File not found
DRV - (cvxtsclr) -- C:\Windows\system32\drivers\cvxtsclr.sys File not found
DRV - (cvufjqnf) -- C:\Windows\system32\drivers\cvufjqnf.sys File not found
DRV - (cvsftbya) -- C:\Windows\system32\drivers\cvsftbya.sys File not found
DRV - (cuwhatbn) -- C:\Windows\system32\drivers\cuwhatbn.sys File not found
DRV - (csvtatwl) -- C:\Windows\system32\drivers\csvtatwl.sys File not found
DRV - (crfoicng) -- C:\Windows\system32\drivers\crfoicng.sys File not found
DRV - (cpvywcxp) -- C:\Windows\system32\drivers\cpvywcxp.sys File not found
DRV - (cpodbkye) -- C:\Windows\system32\drivers\cpodbkye.sys File not found
DRV - (cpalgupk) -- C:\Windows\system32\drivers\cpalgupk.sys File not found
DRV - (cozehpra) -- C:\Windows\system32\drivers\cozehpra.sys File not found
DRV - (cnteikbm) -- C:\Windows\system32\drivers\cnteikbm.sys File not found
DRV - (cnslxnis) -- C:\Windows\system32\drivers\cnslxnis.sys File not found
DRV - (cmlkyixr) -- C:\Windows\system32\drivers\cmlkyixr.sys File not found
DRV - (clgncqdv) -- C:\Windows\system32\drivers\clgncqdv.sys File not found
DRV - (ckloxitp) -- C:\Windows\system32\drivers\ckloxitp.sys File not found
DRV - (ckihgkjo) -- C:\Windows\system32\drivers\ckihgkjo.sys File not found
DRV - (cjzrxxhd) -- C:\Windows\system32\drivers\cjzrxxhd.sys File not found
DRV - (cjoywfja) -- C:\Windows\system32\drivers\cjoywfja.sys File not found
DRV - (cjknqszb) -- C:\Windows\system32\drivers\cjknqszb.sys File not found
DRV - (cizyhcfq) -- C:\Windows\system32\drivers\cizyhcfq.sys File not found
DRV - (chykpnbj) -- C:\Windows\system32\drivers\chykpnbj.sys File not found
DRV - (cgmbredk) -- C:\Windows\system32\drivers\cgmbredk.sys File not found
DRV - (cfgqtyry) -- C:\Windows\system32\drivers\cfgqtyry.sys File not found
DRV - (cerahawt) -- C:\Windows\system32\drivers\cerahawt.sys File not found
DRV - (cehwojam) -- C:\Windows\system32\drivers\cehwojam.sys File not found
DRV - (cdpgiika) -- C:\Windows\system32\drivers\cdpgiika.sys File not found
DRV - (cbdokawp) -- C:\Windows\system32\drivers\cbdokawp.sys File not found
DRV - (bzjihoxh) -- C:\Windows\system32\drivers\bzjihoxh.sys File not found
DRV - (byugieuj) -- C:\Windows\system32\drivers\byugieuj.sys File not found
DRV - (byhthagx) -- C:\Windows\system32\drivers\byhthagx.sys File not found
DRV - (bxlrrxzu) -- C:\Windows\system32\drivers\bxlrrxzu.sys File not found
DRV - (bxbqhrnp) -- C:\Windows\system32\drivers\bxbqhrnp.sys File not found
DRV - (bwdsaxwx) -- C:\Windows\system32\drivers\bwdsaxwx.sys File not found
DRV - (buhkbbrz) -- C:\Windows\system32\drivers\buhkbbrz.sys File not found
DRV - (btmzsotk) -- C:\Windows\system32\drivers\btmzsotk.sys File not found
DRV - (btlpwljx) -- C:\Windows\system32\drivers\btlpwljx.sys File not found
DRV - (brgitmmi) -- C:\Windows\system32\drivers\brgitmmi.sys File not found
DRV - (bqypaeoj) -- C:\Windows\system32\drivers\bqypaeoj.sys File not found
DRV - (bpyywtne) -- C:\Windows\system32\drivers\bpyywtne.sys File not found
DRV - (boqtuntv) -- C:\Windows\system32\drivers\boqtuntv.sys File not found
DRV - (bnehwrcp) -- C:\Windows\system32\drivers\bnehwrcp.sys File not found
DRV - (blbdrive) -- C:\Windows\system32\drivers\blbdrive.sys File not found
DRV - (bksnvnnd) -- C:\Windows\system32\drivers\bksnvnnd.sys File not found
DRV - (bjwomxue) -- C:\Windows\system32\drivers\bjwomxue.sys File not found
DRV - (bjuimgcg) -- C:\Windows\system32\drivers\bjuimgcg.sys File not found
DRV - (bjqxbywc) -- C:\Windows\system32\drivers\bjqxbywc.sys File not found
DRV - (bjgfspnx) -- C:\Windows\system32\drivers\bjgfspnx.sys File not found
DRV - (bjaoivco) -- C:\Windows\system32\drivers\bjaoivco.sys File not found
DRV - (bizgzcut) -- C:\Windows\system32\drivers\bizgzcut.sys File not found
DRV - (bivpkdle) -- C:\Windows\system32\drivers\bivpkdle.sys File not found
DRV - (bikzakso) -- C:\Windows\system32\drivers\bikzakso.sys File not found
DRV - (bikgatir) -- C:\Windows\system32\drivers\bikgatir.sys File not found
DRV - (bhwogbpg) -- C:\Windows\system32\drivers\bhwogbpg.sys File not found
DRV - (bhggiiar) -- C:\Windows\system32\drivers\bhggiiar.sys File not found
DRV - (bgbjmydc) -- C:\Windows\system32\drivers\bgbjmydc.sys File not found
DRV - (bfywygds) -- C:\Windows\system32\drivers\bfywygds.sys File not found
DRV - (bfjaehqq) -- C:\Windows\system32\drivers\bfjaehqq.sys File not found
DRV - (bfgiouui) -- C:\Windows\system32\drivers\bfgiouui.sys File not found
DRV - (bepmgjkl) -- C:\Windows\system32\drivers\bepmgjkl.sys File not found
DRV - (bdhbgexh) -- C:\Windows\system32\drivers\bdhbgexh.sys File not found
DRV - (bdgilewb) -- C:\Windows\system32\drivers\bdgilewb.sys File not found
DRV - (bdfbcmuw) -- C:\Windows\system32\drivers\bdfbcmuw.sys File not found
DRV - (bclaucni) -- C:\Windows\system32\drivers\bclaucni.sys File not found
DRV - (bcirsnyh) -- C:\Windows\system32\drivers\bcirsnyh.sys File not found
DRV - (bcfxlipk) -- C:\Windows\system32\drivers\bcfxlipk.sys File not found
DRV - (bbxoqtno) -- C:\Windows\system32\drivers\bbxoqtno.sys File not found
DRV - (bbqblmln) -- C:\Windows\system32\drivers\bbqblmln.sys File not found
DRV - (bbowcslz) -- C:\Windows\system32\drivers\bbowcslz.sys File not found
DRV - (bboemagj) -- C:\Windows\system32\drivers\bboemagj.sys File not found
DRV - (bbnzyfrf) -- C:\Windows\system32\drivers\bbnzyfrf.sys File not found
DRV - (bawrbdsf) -- C:\Windows\system32\drivers\bawrbdsf.sys File not found
DRV - (bakscjxf) -- C:\Windows\system32\drivers\bakscjxf.sys File not found
DRV - (azpxhlcv) -- C:\Windows\system32\drivers\azpxhlcv.sys File not found
DRV - (aytoqxdv) -- C:\Windows\system32\drivers\aytoqxdv.sys File not found
DRV - (ayjsnuny) -- C:\Windows\system32\drivers\ayjsnuny.sys File not found
DRV - (awdubqqu) -- C:\Windows\system32\drivers\awdubqqu.sys File not found
DRV - (avvxkwxh) -- C:\Windows\system32\drivers\avvxkwxh.sys File not found
DRV - (avpexzwo) -- C:\Windows\system32\drivers\avpexzwo.sys File not found
DRV - (avovhgzx) -- C:\Windows\system32\drivers\avovhgzx.sys File not found
DRV - (auqdnvzw) -- C:\Windows\system32\drivers\auqdnvzw.sys File not found
DRV - (atjqdfun) -- C:\Windows\system32\drivers\atjqdfun.sys File not found
DRV - (asvbutse) -- C:\Windows\system32\drivers\asvbutse.sys File not found
DRV - (ashiygis) -- C:\Windows\system32\drivers\ashiygis.sys File not found
DRV - (asdjaunc) -- C:\Windows\system32\drivers\asdjaunc.sys File not found
DRV - (arzcvbst) -- C:\Windows\system32\drivers\arzcvbst.sys File not found
DRV - (arfywxxw) -- C:\Windows\system32\drivers\arfywxxw.sys File not found
DRV - (aqtqpnnt) -- C:\Windows\system32\drivers\aqtqpnnt.sys File not found
DRV - (apqyupke) -- C:\Windows\system32\drivers\apqyupke.sys File not found
DRV - (aoulmjmi) -- C:\Windows\system32\drivers\aoulmjmi.sys File not found
DRV - (anruosaq) -- C:\Windows\system32\drivers\anruosaq.sys File not found
DRV - (annyrymq) -- C:\Windows\system32\drivers\annyrymq.sys File not found
DRV - (anjkieil) -- C:\Windows\system32\drivers\anjkieil.sys File not found
DRV - (akiepsum) -- C:\Windows\system32\drivers\akiepsum.sys File not found
DRV - (akhqjujl) -- C:\Windows\system32\drivers\akhqjujl.sys File not found
DRV - (akewrjhd) -- C:\Windows\system32\drivers\akewrjhd.sys File not found
DRV - (ajzdffsm) -- C:\Windows\system32\drivers\ajzdffsm.sys File not found
DRV - (ajgxbcxz) -- C:\Windows\system32\drivers\ajgxbcxz.sys File not found
DRV - (ajgqacto) -- C:\Windows\system32\drivers\ajgqacto.sys File not found
DRV - (ajgarlnd) -- C:\Windows\system32\drivers\ajgarlnd.sys File not found
DRV - (ajdaojvi) -- C:\Windows\system32\drivers\ajdaojvi.sys File not found
DRV - (aiyoecxj) -- C:\Windows\system32\drivers\aiyoecxj.sys File not found
DRV - (ahvxrcey) -- C:\Windows\system32\drivers\ahvxrcey.sys File not found
DRV - (ahdhchll) -- C:\Windows\system32\drivers\ahdhchll.sys File not found
DRV - (agifilod) -- C:\Windows\system32\drivers\agifilod.sys File not found
DRV - (afxbkjll) -- C:\Windows\system32\drivers\afxbkjll.sys File not found
DRV - (affmdyod) -- C:\Windows\system32\drivers\affmdyod.sys File not found
DRV - (aesmhqct) -- C:\Windows\system32\drivers\aesmhqct.sys File not found
DRV - (adynxikb) -- C:\Windows\system32\drivers\adynxikb.sys File not found
DRV - (adpzyfgk) -- C:\Windows\system32\drivers\adpzyfgk.sys File not found
DRV - (acwcgkpc) -- C:\Windows\system32\drivers\acwcgkpc.sys File not found
DRV - (acemcnos) -- C:\Windows\system32\drivers\acemcnos.sys File not found
DRV - (ablvrjni) -- C:\Windows\system32\drivers\ablvrjni.sys File not found
DRV - (aanxogyk) -- C:\Windows\system32\drivers\aanxogyk.sys File not found
DRV - (MBAMSwissArmy) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (Uim_IM) -- C:\Windows\System32\drivers\Uim_IM.sys (Paragon)
DRV - (UimBus) -- C:\Windows\System32\drivers\UimBus.sys (Windows (R) 2000 DDK provider)
DRV - (MSHUSBVideo) -- C:\Windows\System32\drivers\nx6000.sys (Microsoft Corporation)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (ss_bmdm) -- C:\Windows\System32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\Windows\System32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\Windows\System32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (KMWDFILTER) -- C:\Windows\System32\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)
DRV - (ti21sony) -- C:\Windows\System32\drivers\ti21sony.sys (Texas Instruments)
DRV - (SNC) -- C:\Windows\System32\drivers\SonyNC.sys (Sony Corporation)
DRV - (NETw3v32) Intel(R) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)
DRV - (ApfiltrService) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (DMICall) -- C:\Windows\System32\drivers\DMICall.sys (Sony Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.club-vaio.com
IE - HKLM\..\SearchScopes,DefaultScope = {47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}
IE - HKLM\..\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}: "URL" = hxxp://www.google.de/search?hl=de&q={searchTerms}&meta=
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}
IE - HKCU\..\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SNYK_deDE414
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKCU\..\SearchScopes\Plasmoo: "URL" = hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "DVDVideoSoftTB Customized Web Search"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Hornochse\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.03.12 22:02:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.03.12 21:59:33 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\extensions\\{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}: C:\Users\Hornochse\AppData\Roaming\10001.066 [2012.07.15 21:03:37 | 000,000,000 | ---D | M]
 
[2012.03.12 22:02:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hornochse\AppData\Roaming\mozilla\Extensions
[2012.03.12 22:03:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Hornochse\AppData\Roaming\mozilla\Firefox\Profiles\v89qzxlt.default\extensions
[2011.05.24 11:32:14 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Hornochse\AppData\Roaming\mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.04.26 12:09:40 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Hornochse\AppData\Roaming\mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.02.18 19:06:16 | 000,000,000 | ---D | M] (IMinent Toolbar) -- C:\Users\Hornochse\AppData\Roaming\mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
[2011.04.26 12:09:57 | 000,000,000 | ---D | M] (Plasmoo Search Engine) -- C:\Users\Hornochse\AppData\Roaming\mozilla\Firefox\Profiles\v89qzxlt.default\extensions\engine@plasmoo.com
[2012.03.12 22:02:44 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.07.15 21:03:37 | 000,000,000 | ---D | M] (Java Link Helper) -- C:\USERS\HORNOCHSE\APPDATA\ROAMING\10001.066
[2011.01.18 02:08:36 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012.02.16 16:55:53 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.03.12 21:59:18 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.02.16 13:02:53 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.16 12:48:01 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.16 13:02:53 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.16 13:02:53 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.16 13:02:53 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.16 13:02:53 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - homepage: hxxp://plasmoo.com
CHR - default_search_provider: Plasmoo (Enabled)
CHR - default_search_provider: search_url = hxxp://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms}
CHR - default_search_provider: suggest_url = 
CHR - homepage: hxxp://plasmoo.com
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Hornochse\AppData\Local\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Hornochse\AppData\Local\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Hornochse\AppData\Local\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: BitDefender QuickScan (Enabled) = C:\Users\Hornochse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.99_0\npqscan.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Bitdefender QuickScan = C:\Users\Hornochse\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.115_0\
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O4 - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [Facebook Update] C:\Users\Hornochse\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [Spotify] C:\Users\Hornochse\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKCU..\Run: [Userinit] C:\Users\Hornochse\AppData\Roaming\appconf32.exe ()
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Hornochse\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{63322D96-B808-49C1-BA74-E67EB9A64D31}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{75150A78-C350-47D0-A029-3EEC5D8DD586}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.07.15 22:31:08 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Hornochse\Desktop\OTL.exe
[2012.07.15 22:28:35 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\Desktop\Virusbekämpfung
[2012.07.15 21:03:37 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10001.066
[2012.07.15 20:55:09 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.15 20:47:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.15 20:46:56 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.07.15 20:46:55 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.06.25 15:14:10 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10001.058
[2012.06.24 18:32:57 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10001.056
[2012.06.23 16:00:06 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.06.23 16:00:05 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.06.23 15:59:23 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012.06.23 15:59:23 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012.06.23 15:59:22 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012.06.23 15:59:02 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.06.23 15:59:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012.06.22 20:15:56 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10001.055
[2012.06.21 22:33:47 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10001.054
[2012.06.20 12:08:03 | 000,000,000 | ---D | C] -- C:\xmldm
[2012.06.19 22:28:00 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10053
[2012.06.18 22:21:16 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10052
[2012.06.17 21:21:45 | 000,000,000 | ---D | C] -- C:\Users\Hornochse\AppData\Roaming\10051
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Hornochse\AppData\Roaming\*.tmp files -> C:\Users\Hornochse\AppData\Roaming\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.07.15 22:45:09 | 000,000,048 | ---- | M] () -- C:\Users\Hornochse\AppData\Roaming\blckdom.res
[2012.07.15 22:44:54 | 000,043,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kaacwqmw.sys
[2012.07.15 22:44:49 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job
[2012.07.15 22:44:37 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.07.15 22:37:53 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.15 22:37:53 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.15 22:31:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Hornochse\Desktop\OTL.exe
[2012.07.15 21:03:24 | 000,167,104 | ---- | M] () -- C:\Users\Hornochse\AppData\Roaming\AcroIEHelpe168.dll
[2012.07.15 21:03:24 | 000,006,400 | ---- | M] () -- C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe168.dll
[2012.07.15 20:57:00 | 000,001,154 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job
[2012.07.15 20:56:01 | 000,001,132 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job
[2012.07.15 20:55:26 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012.07.15 20:52:34 | 000,002,062 | ---- | M] () -- C:\Users\Hornochse\Desktop\Google Chrome.lnk
[2012.07.15 20:51:22 | 000,000,906 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.15 20:40:06 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.07.15 20:37:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.15 20:37:17 | 1063,444,480 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.06.27 16:11:08 | 004,503,728 | ---- | M] () -- C:\ProgramData\0tbpw.pad
[2012.06.27 15:35:36 | 000,007,224 | ---- | M] () -- C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe153.dll
[2012.06.25 14:29:41 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job
[2012.06.16 03:23:07 | 000,326,144 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Hornochse\AppData\Roaming\*.tmp files -> C:\Users\Hornochse\AppData\Roaming\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.07.15 21:03:24 | 000,167,104 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\AcroIEHelpe168.dll
[2012.07.15 21:03:24 | 000,006,400 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe168.dll
[2012.07.15 20:47:29 | 000,000,906 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.15 20:37:17 | 1063,444,480 | -HS- | C] () -- C:\hiberfil.sys
[2012.06.27 16:06:27 | 000,001,720 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012.06.27 16:06:24 | 004,503,728 | ---- | C] () -- C:\ProgramData\0tbpw.pad
[2012.06.27 15:35:36 | 000,007,224 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\BAcroIEHelpe153.dll
[2012.06.12 23:33:09 | 000,000,048 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\blckdom.res
[2012.03.12 16:44:27 | 000,000,680 | ---- | C] () -- C:\Users\Hornochse\AppData\Local\d3d9caps.dat
[2011.04.14 09:18:07 | 000,000,032 | ---- | C] () -- C:\Windows\System32\EUOD.DAT
[2011.01.28 22:38:28 | 000,014,336 | ---- | C] () -- C:\Users\Hornochse\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.28 22:27:41 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011.01.28 22:27:40 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2011.01.17 10:46:16 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2011.01.17 10:44:48 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2011.01.17 10:44:48 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011.01.16 20:20:47 | 000,019,968 | ---- | C] () -- C:\Windows\System32\Cpuinf32.dll
[2011.01.16 20:17:50 | 000,532,480 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Sony.dll
[2008.12.09 17:23:13 | 000,053,704 | RHS- | C] () -- C:\Users\Hornochse\AppData\Roaming\appconf32.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 540 bytes -> C:\Windows\System32\drivers\kaacwqmw.sys:changelist

< End of report >
         
--- --- ---


und
OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 15.07.2012 22:33:36 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\Hornochse\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1013,45 Mb Total Physical Memory | 94,55 Mb Available Physical Memory | 9,33% Memory free
2,24 Gb Paging File | 0,87 Gb Available in Paging File | 39,04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 102,48 Gb Total Space | 53,09 Gb Free Space | 51,80% Space Free | Partition Type: NTFS
 
Computer Name: HORNOCHSE-PC | User Name: Hornochse | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{21BD85DB-8965-410B-A3E5-28D11ADDC561}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe | 
"{28CFDEA3-1FFE-445E-BD6B-A4637549DBF5}" = protocol=6 | dir=in | app=c:\program files\google\google talk\googletalk.exe | 
"{30CAC280-B7C7-460E-83D4-DF4BEA179011}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{3B38AC7A-DCD0-4749-8B2E-04CA88BB155F}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{43490E81-CDF3-431B-BDB1-A488B1E7E8D2}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{53DCFB50-E3D9-4C2A-8CA4-14B46B15201D}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{59CCEE54-53B7-4477-B088-AF86FBAA395B}" = dir=in | app=c:\users\hornochse\appdata\local\facebook\video\skype\facebookvideocalling.exe | 
"{69BC1499-64D0-4BEB-9B09-984CE7939F25}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{6D3723AC-15B9-4BBF-99E8-6D45CD83A2A4}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe | 
"{7C9DDA84-39BD-489E-8948-69D834B8E77B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{7DE48F36-4100-4752-A0FA-29E1559BD09A}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{8F64E31D-E8A2-4AB0-AC32-CC7A31C5CD83}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{9A68F12A-99E1-4D61-BA01-913857FA4D94}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{AB7B2D5E-40E8-4AB2-B501-90E96FF7899D}" = protocol=17 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsasvr.exe | 
"{B853D6C8-BE18-4F9F-BA31-E6B14A1C8375}" = protocol=17 | dir=in | app=c:\program files\google\google talk\googletalk.exe | 
"{D84F9B45-DA15-4151-85B2-E649328EA555}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{DB006990-0CCA-4585-833E-B5493CF2448F}" = protocol=6 | dir=in | app=c:\program files\samsung\samsung new pc studio\npsvsvr.exe | 
"{F327FE1C-EA46-419B-9D8C-32739879DBED}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"TCP Query User{801CD1C3-E334-4B9E-B5CF-F25667F693A5}C:\users\hornochse\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\hornochse\appdata\roaming\spotify\spotify.exe | 
"TCP Query User{B3DD5F13-1DF9-43C3-AE33-AEDB78FB33EE}C:\users\hornochse\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\hornochse\appdata\roaming\spotify\spotify.exe | 
"UDP Query User{4EF2616E-7B8A-4A0A-9B62-D7F58610B58F}C:\users\hornochse\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\hornochse\appdata\roaming\spotify\spotify.exe | 
"UDP Query User{B84D932A-FD4F-4104-BB93-6D80DC875D8A}C:\users\hornochse\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\hornochse\appdata\roaming\spotify\spotify.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}" = Sony Video Shared Library
"{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}" = Microsoft SQL Server 2005 Express Edition (VAIO_VEDB)
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack
"{13A5E785-5197-4EAD-8EE3-D660271E49BC}" = Feedback Tool
"{16D0F2D2-242C-4885-BEF1-4B1655C141AE}" = Bing Bar
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1BEF9285-5530-426B-A5F1-5836B95C7EB1}" = VAIO Original Screen Saver
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2063C2E8-3812-4BBD-9998-6610F80C1DD4}" = VAIO Media AC3 Decoder 1.0
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}" = Wireless Switch Setting Utility
"{2A2FF7F5-6F0E-4A5D-A881-39365E718BD6}" = VAIO Cozy Orange Wallpaper
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}" = Google Earth
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = Browser Address Error Redirector
"{47957648-B46A-4211-85E1-01A15B6A1B45}" = Ace of Spades
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EA2F95F-A537-4d17-9E7F-6B3FF8D9BBE3}" = Microsoft Works
"{500162A0-4DD5-460A-BAFD-895AAE48C532}" = VAIO Media Content Collection 6.0
"{500C3FDC-5E5F-485F-BDF5-2C445839CBE0}" = 
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client DE-DE Language Pack
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{55B781F0-060E-11D4-99D7-00C04FCCB775}" = 
"{560F6B2E-F0DF-44E5-8190-A4A161F0E205}" = VAIO Media 6.0
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5855C127-1F20-404D-B7FB-1FD84D7EAB5E}" = VAIO Media Redistribution 6.0
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{59452470-A902-477F-9338-9B88101681BD}" = Setting Utility Series
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5E343EF6-D27C-4CFC-9FAE-9AAFB541BCEE}" = VAIO Photo 2007
"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam
"{6B1F20F2-6321-4669-A58C-33DF8E7517FF}" = VAIO Entertainment Platform
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{785EB1D4-ECEC-4195-99B4-73C47E187721}" = VAIO Media Integrated Server 6.0
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{934A3213-1CB6-4264-84A2-EE080C017BCA}" = VAIO Tender Green Wallpaper
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97BCD719-6ECB-458F-97D6-F38D2E07375E}" = VAIO Aqua Breeze Wallpaper
"{9E319E96-ED8E-4B01-9775-C521A1869A25}" = VAIO Power Management
"{9E407618-D9CD-4F39-9490-9ED45294073D}" = Click to DVD 2.0.05 Menu Data
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Alps Pointing-device for VAIO
"{9FA8B5F5-4BDC-4CF4-9202-AA97FF79AE98}" = VAIO Media
"{A0EB195B-5876-48E6-879D-33D4B2102610}" = SonicStage 4.3
"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A947C2B3-7445-42C4-9063-EE704CACCB22}" = VAIO Hardware Diagnostics
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{AC76BA86-7AD7-1031-7B44-A80000000002}" = Adobe Reader 8 - Deutsch
"{AF9A04EB-7D8E-41DE-9EDE-4AB9BB2B71B6}" = VAIO Media Registration Tool 6.0
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{C183A21C-395A-490F-99D4-CCAB35E32859}" = 
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E809063C-51A3-4269-8984-D1EB742F2151}" = Click to DVD 2.6.00
"{E89D31F3-7F6C-47A3-8669-0A8DDE27B664}" = VAIO Media Registration Tool
"{EF3D45BB-2260-4008-88EA-492E7744A9DF}" = Sony Utilities DLL
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}" = VAIO Event Service
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}" = Microsoft SQL Server Native Client
"{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}" = 
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FC37C108-821D-4EDE-8F40-D5B497586805}" = VAIO Control Center
"{FCCB0B43-7A6D-49A4-A5B3-B10F592F4EB6}" = LAN-Express AS IEEE 802.11 Wireless LAN
"{FDE96E86-7780-431C-92F7-679C6A7CEC51}" = Microsoft SQL Server VSS Writer
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Windows-Treiberpaket - Nokia pccsmcfd  (10/12/2007 6.85.4.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
"OpenMG HotFix4.7-07-13-22-01" = OpenMG Limited Patch 4.7-07-13-24-01
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software
"Uninstall_is1" = Uninstall 1.0.0.1
"WinLiveSuite_Wave3" = Windows Live Essentials
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Spotify" = Spotify
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 11.05.2012 00:35:21 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 13c4  Anfangszeit: 01cd2ed7c91579a9  Zeitpunkt
 der Beendigung: 1123
 
Error - 11.05.2012 01:55:08 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 12ec  Anfangszeit: 01cd2f3710bcf530  Zeitpunkt
 der Beendigung: 2412
 
Error - 11.05.2012 15:01:03 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 818  Anfangszeit: 01cd2f38982fae80  Zeitpunkt
 der Beendigung: 1327
 
Error - 12.05.2012 01:41:01 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: bb4  Anfangszeit: 01cd2ffb59aa8680  Zeitpunkt
 der Beendigung: 999
 
Error - 13.05.2012 09:52:28 | Computer Name = Hornochse-PC | Source = Google Update | ID = 20
Description = 
 
Error - 13.05.2012 12:43:25 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 146c  Anfangszeit: 01cd30986e6fb7f0  Zeitpunkt
 der Beendigung: 9581
 
Error - 13.05.2012 14:18:41 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 13d4  Anfangszeit: 01cd312788456ff0  Zeitpunkt
 der Beendigung: 6070
 
Error - 13.05.2012 14:26:38 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 55c  Anfangszeit: 01cd3134d6a6f9e0  Zeitpunkt
 der Beendigung: 10382
 
Error - 15.05.2012 19:24:12 | Computer Name = Hornochse-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16421 arbeitet nicht mehr 
mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet
 "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen 
über das Problem zu suchen.  Prozess-ID: 11f0  Anfangszeit: 01cd32eb3c9e19b0  Zeitpunkt
 der Beendigung: 8
 
Error - 20.05.2012 17:33:45 | Computer Name = Hornochse-PC | Source = System Restore | ID = 8193
Description = 
 
[ System Events ]
Error - 01.07.2012 11:54:46 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 01.07.2012 11:54:46 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 01.07.2012 11:54:46 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 01.07.2012 11:54:46 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 01.07.2012 11:54:46 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 01.07.2012 12:04:14 | Computer Name = Hornochse-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 01.07.2012 12:04:14 | Computer Name = Hornochse-PC | Source = Microsoft Antimalware | ID = 2001
Description = Beim Aktualisieren der Signaturen wurde von %%860 ein Fehler festgestellt.

	Neue
 Signaturversion:      Vorherige Signaturversion: 1.129.549.0     Aktualisierungsquelle: %%859

	Aktualisierungsphase:
 %%852     Quellpfad: Default URL     Signaturtyp: %%800     Aktualisierungstyp: %%803     Benutzer:
 NT-AUTORITÄT\SYSTEM     Aktuelle Modulversion:      Vorherige Modulversion: 1.1.8502.0     Fehlercode:
 0x8007043c     Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet
 werden. 
 
Error - 15.07.2012 14:37:22 | Computer Name = Hornochse-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am 01.07.2012 um 18:09:16 unerwartet heruntergefahren.
 
Error - 15.07.2012 14:39:01 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 15.07.2012 14:39:01 | Computer Name = Hornochse-PC | Source = Service Control Manager | ID = 7026
Description = 
 
 
< End of report >
         
--- --- ---



Vielen Dank für deine Hilfe.

Grüße
Phil
__________________

Alt 16.07.2012, 13:06   #4
t'john
/// Helfer-Team
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Gibt es einen Grund warum Du die Funde nicht geloescht hast?

Fixen mit OTL

Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).

  • Deaktiviere etwaige Virenscanner wie Avira, Kaspersky etc.
  • Starte die OTL.exe.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Kopiere folgendes Skript in das Textfeld unterhalb von Benuterdefinierte Scans/Fixes:


Code:
ATTFilter
:OTL
IE - HKLM\..\SearchScopes,DefaultScope = {47A69BFA-63EF-41C2-B09F-7F84F19B5FDF} 
IE - HKLM\..\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}: "URL" = http://www.google.de/search?hl=de&q={searchTerms}&meta= 
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 
IE - HKCU\..\SearchScopes,DefaultScope = {47A69BFA-63EF-41C2-B09F-7F84F19B5FDF} 
IE - HKCU\..\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SNYK_deDE414 
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050 
IE - HKCU\..\SearchScopes\Plasmoo: "URL" = http://plasmoo.com/index.htm?SearchMashine=true&q={searchTerms} 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 
FF - prefs.js..browser.search.defaultthis.engineName: "DVDVideoSoftTB Customized Web Search" 
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" 
FF - prefs.js..browser.search.selectedEngine: "DVDVideoSoftTB Customized Web Search" 
FF - prefs.js..browser.search.update: false 
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2269050&SearchSource=13" 
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2 
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2 
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) 
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) 
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) 
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) 
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll 
O4 - HKLM..\Run: [NPSStartup] File not found 
O4 - HKCU..\Run: [Facebook Update] C:\Users\Hornochse\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) 
O4 - HKCU..\Run: [Spotify] C:\Users\Hornochse\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) 
O4 - HKCU..\Run: [Userinit] C:\Users\Hornochse\AppData\Roaming\appconf32.exe () 
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) 
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation) 
O32 - HKLM CDRom: AutoRun - 1 
[2008.12.09 17:23:13 | 000,053,704 | RHS- | C] () -- C:\Users\Hornochse\AppData\Roaming\appconf32.exe 
@Alternate Data Stream - 540 bytes -> C:\Windows\System32\drivers\kaacwqmw.sys:changelist 
[2012.07.15 22:44:49 | 000,001,136 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job 
[2012.07.15 22:44:37 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job 
[2012.07.15 22:45:09 | 000,000,048 | ---- | M] () -- C:\Users\Hornochse\AppData\Roaming\blckdom.res 
[2012.07.15 20:57:00 | 000,001,154 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job 
[2012.07.15 20:56:01 | 000,001,132 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job 
[2012.07.15 20:40:06 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job 
[2012.06.27 16:11:08 | 004,503,728 | ---- | M] () -- C:\ProgramData\0tbpw.pad 
[2012.06.25 14:29:41 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job 
[2012.06.27 16:06:27 | 000,001,720 | ---- | C] () -- C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk 
[2012.06.27 16:06:24 | 004,503,728 | ---- | C] () -- C:\ProgramData\0tbpw.pad 
[2008.12.09 17:23:13 | 000,053,704 | RHS- | C] () -- C:\Users\Hornochse\AppData\Roaming\appconf32.exe 
:Files

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]
         
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Wenn OTL einen Neustart verlangt, bitte zulassen.
  • Kopiere den Inhalt des Logfiles hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\_OTL\MovedFiles\

Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
__________________
Mfg, t'john
Das TB unterstützen

Alt 16.07.2012, 17:08   #5
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Hallo t'john,

nein, warum ich sie nicht gelöscht hab, dafür hab ich keine Erklärung.

Hier die Logs von OTL:

Code:
ATTFilter
All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47A69BFA-63EF-41C2-B09F-7F84F19B5FDF}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "DVDVideoSoftTB Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "DVDVideoSoftTB Customized Web Search" removed from browser.search.selectedEngine
Prefs.js: false removed from browser.search.update
Prefs.js: "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13" removed from browser.startup.homepage
Prefs.js: engine@conduit.com:3.3.3.2 removed from extensions.enabledItems
Prefs.js: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.3.2 removed from extensions.enabledItems
Prefs.js: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll not found.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Users\Hornochse\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll not found.
File C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NPSStartup deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update deleted successfully.
C:\Users\Hornochse\AppData\Local\Facebook\Update\FacebookUpdate.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify deleted successfully.
C:\Users\Hornochse\AppData\Roaming\Spotify\Spotify.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Userinit not found.
File C:\Users\Hornochse\AppData\Roaming\appconf32.exe not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\Windows\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon\ deleted successfully.
C:\Windows\System32\VESWinlogon.dll moved successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File C:\Users\Hornochse\AppData\Roaming\appconf32.exe not found.
Unable to delete ADS C:\Windows\System32\drivers\kaacwqmw.sys:changelist .
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Users\Hornochse\AppData\Roaming\blckdom.res moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003UA.job moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\ProgramData\0tbpw.pad moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3394552714-174292016-736106197-1003Core.job moved successfully.
File C:\Users\Hornochse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found.
File C:\ProgramData\0tbpw.pad not found.
File C:\Users\Hornochse\AppData\Roaming\appconf32.exe not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:\Users\Hornochse\Desktop\cmd.bat deleted successfully.
C:\Users\Hornochse\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 116 bytes
 
User: Default User
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Hornochse
->Temp folder emptied: 1029013127 bytes
->Temporary Internet Files folder emptied: 1978242722 bytes
->Java cache emptied: 1260837 bytes
->FireFox cache emptied: 8837383 bytes
->Google Chrome cache emptied: 338050285 bytes
->Flash cache emptied: 5928 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 216187119 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 3.406,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Hornochse
->Flash cache emptied: 0 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
 
OTL by OldTimer - Version 3.2.54.0 log created on 07162012_175428

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\JET2DF2.tmp not found!

PendingFileRenameOperations files...
File C:\Windows\temp\JET2DF2.tmp not found!

Registry entries deleted on Reboot...
         

Beste Grüße
Phil


Alt 16.07.2012, 17:23   #6
t'john
/// Helfer-Team
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Sehr gut!

Wie laeuft der Rechner?

1. Schritt

FUNDE LOESCHEN!
Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:

Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.
__________________
--> Trojaner Bundespolizei 2x50€ über Ukash

Alt 16.07.2012, 21:11   #7
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Hi t'john,

Rechner läuft soweit stabil. Danke!!!

Hier die Logs:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.07.16.10

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Hornochse :: HORNOCHSE-PC [Administrator]

Schutz: Aktiviert

16.07.2012 21:08:52
mbam-log-2012-07-16 (22-08-00).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 315299
Laufzeit: 55 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Users\Hornochse\Downloads\SoftonicDownloader_fuer_ace-of-spades (1).exe (PUP.ToolbarDownloader) -> Keine Aktion durchgeführt.
C:\Users\Hornochse\Downloads\SoftonicDownloader_fuer_ace-of-spades.exe (PUP.ToolbarDownloader) -> Keine Aktion durchgeführt.

(Ende)
         
Code:
ATTFilter
# AdwCleaner v1.702 - Logfile created 07/16/2012 at 20:56:45
# Updated 13/07/2012 by Xplode
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# User : Hornochse - HORNOCHSE-PC
# Running from : C:\Users\Hornochse\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Hornochse\AppData\Local\Conduit
Folder Found : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\Conduit
Folder Found : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\ConduitEngine
Folder Found : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Found : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}

***** [Registry] *****
[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Found : HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Description
Key Found : HKLM\SOFTWARE\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v10.0.2 (de)

Profile name : default 
File : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\prefs.js

Found : user_pref("CT2269050..clientLogIsEnabled", false);
Found : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2269050.AppTrackingLastCheckTime", "Sun Mar 27 2011 12:26:15 GMT+0200");
Found : user_pref("CT2269050.CT2269050", "CT2269050");
Found : user_pref("CT2269050.CurrentServerDate", "25-3-2011");
Found : user_pref("CT2269050.DialogsAlignMode", "LTR");
Found : user_pref("CT2269050.DialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:35 GMT+0100");
Found : user_pref("CT2269050.DownloadReferralCookieData", "");
Found : user_pref("CT2269050.EMailNotifierPollDate", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.FirstServerDate", "25-3-2011");
Found : user_pref("CT2269050.FirstTime", true);
Found : user_pref("CT2269050.FirstTimeFF3", true);
Found : user_pref("CT2269050.FixPageNotFoundErrors", true);
Found : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2269050.HasUserGlobalKeys", true);
Found : user_pref("CT2269050.Initialize", true);
Found : user_pref("CT2269050.InitializeCommonPrefs", true);
Found : user_pref("CT2269050.InstallationAndCookieDataSentCount", 2);
Found : user_pref("CT2269050.InstallationId", "StubInstaller");
Found : user_pref("CT2269050.InstallationType", "ConduitIntegration");
Found : user_pref("CT2269050.InstalledDate", "Sun Mar 27 2011 12:26:20 GMT+0200");
Found : user_pref("CT2269050.InvalidateCache", false);
Found : user_pref("CT2269050.IsGrouping", false);
Found : user_pref("CT2269050.IsMulticommunity", false);
Found : user_pref("CT2269050.IsOpenThankYouPage", true);
Found : user_pref("CT2269050.IsOpenUninstallPage", true);
Found : user_pref("CT2269050.LanguagePackLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2269050.LastLogin_3.3.3.2", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.LatestVersion", "3.2.5.2");
Found : user_pref("CT2269050.Locale", "en");
Found : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Found : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Found : user_pref("CT2269050.RadioIsPodcast", false);
Found : user_pref("CT2269050.RadioLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Found : user_pref("CT2269050.RadioMediaID", "12473383");
Found : user_pref("CT2269050.RadioMediaType", "Media Player");
Found : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Found : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Found : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Found : user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
Found : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Found : user_pref("CT2269050.SearchInNewTabEnabled", true);
Found : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2269050.ServiceMapLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.SettingsLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.SettingsLastUpdate", "1300785496");
Found : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri Mar 25 2011 17:45:32 GMT+0100");
Found : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Found : user_pref("CT2269050.UserID", "UN04879024851606173");
Found : user_pref("CT2269050.WeatherNetwork", "");
Found : user_pref("CT2269050.WeatherPollDate", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("CT2269050.WeatherUnit", "C");
Found : user_pref("CT2269050.alertChannelId", "666138");
Found : user_pref("CT2269050.approveUntrustedApps", true);
Found : user_pref("CT2269050.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Found : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.isAppTrackingManagerOn", true);
Found : user_pref("CT2269050.myStuffEnabled", true);
Found : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2269050.testingCtid", "");
Found : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Fri Mar 25 2011 17:45:37 GMT+0100");
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Found : user_pref("CommunityToolbar.EngineOwner", "CT2269050");
Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "dvdvideosofttb");
Found : user_pref("CommunityToolbar.IsEngineShown", true);
Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2269050");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "dvdvideosofttb");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2269050");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:34 GMT+01[...]
Found : user_pref("CommunityToolbar.alert.alertEnabled", true);
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Mar 27 2011 12:26:12 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.locale", "");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 0);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "1aaa4672-ff9e-45a7-9c38-f3cad1d169b9");
Found : user_pref("CommunityToolbar.globalUserId", "bca284ba-0cfb-49e2-ba28-f906c13445a1");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
Found : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Sun Mar 27 2011 12:26:16 GMT+0200");
Found : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:34 GMT+0100");
Found : user_pref("ConduitEngine.FirstServerDate", "03/25/2011 19");
Found : user_pref("ConduitEngine.FirstTime", true);
Found : user_pref("ConduitEngine.FirstTimeFF3", true);
Found : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Found : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Found : user_pref("ConduitEngine.Initialize", true);
Found : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Found : user_pref("ConduitEngine.InstalledDate", "Fri Mar 25 2011 17:45:35 GMT+0100");
Found : user_pref("ConduitEngine.IsMulticommunity", false);
Found : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Found : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Found : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Found : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Found : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("ConduitEngine.UserID", "UN01977653352509512");
Found : user_pref("ConduitEngine.engineLocale", "de");
Found : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Found : user_pref("ConduitEngine.initDone", true);
Found : user_pref("ConduitEngine.isAppTrackingManagerOn", true);

-\\ Google Chrome v20.0.1132.57

File : C:\Users\Hornochse\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [14076 octets] - [16/07/2012 20:56:45]

########## EOF - C:\AdwCleaner[R1].txt - [14205 octets] ##########
         

Beste Grüße
Phil

Alt 16.07.2012, 21:32   #8
t'john
/// Helfer-Team
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Sehr gut!

  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.



dann:

Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 17.07.2012, 10:40   #9
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Hi t'john,

im Folgenden zuerst die Logfiles von ADW:

Code:
ATTFilter
# AdwCleaner v1.702 - Logfile created 07/17/2012 at 11:22:56
# Updated 13/07/2012 by Xplode
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# User : Hornochse - HORNOCHSE-PC
# Running from : C:\Users\Hornochse\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\Hornochse\AppData\Local\Conduit
Folder Deleted : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\Conduit
Folder Deleted : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\ConduitEngine
Folder Deleted : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Deleted : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}

***** [Registry] *****
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Description
Key Deleted : HKLM\SOFTWARE\Iminent
Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v10.0.2 (de)

Profile name : default 
File : C:\Users\Hornochse\AppData\Roaming\Mozilla\Firefox\Profiles\v89qzxlt.default\prefs.js

Deleted : user_pref("CT2269050..clientLogIsEnabled", false);
Deleted : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2269050.AppTrackingLastCheckTime", "Sun Mar 27 2011 12:26:15 GMT+0200");
Deleted : user_pref("CT2269050.CT2269050", "CT2269050");
Deleted : user_pref("CT2269050.CurrentServerDate", "25-3-2011");
Deleted : user_pref("CT2269050.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2269050.DialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:35 GMT+0100");
Deleted : user_pref("CT2269050.DownloadReferralCookieData", "");
Deleted : user_pref("CT2269050.EMailNotifierPollDate", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.FirstServerDate", "25-3-2011");
Deleted : user_pref("CT2269050.FirstTime", true);
Deleted : user_pref("CT2269050.FirstTimeFF3", true);
Deleted : user_pref("CT2269050.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2269050.HasUserGlobalKeys", true);
Deleted : user_pref("CT2269050.Initialize", true);
Deleted : user_pref("CT2269050.InitializeCommonPrefs", true);
Deleted : user_pref("CT2269050.InstallationAndCookieDataSentCount", 2);
Deleted : user_pref("CT2269050.InstallationId", "StubInstaller");
Deleted : user_pref("CT2269050.InstallationType", "ConduitIntegration");
Deleted : user_pref("CT2269050.InstalledDate", "Sun Mar 27 2011 12:26:20 GMT+0200");
Deleted : user_pref("CT2269050.InvalidateCache", false);
Deleted : user_pref("CT2269050.IsGrouping", false);
Deleted : user_pref("CT2269050.IsMulticommunity", false);
Deleted : user_pref("CT2269050.IsOpenThankYouPage", true);
Deleted : user_pref("CT2269050.IsOpenUninstallPage", true);
Deleted : user_pref("CT2269050.LanguagePackLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2269050.LastLogin_3.3.3.2", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.LatestVersion", "3.2.5.2");
Deleted : user_pref("CT2269050.Locale", "en");
Deleted : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2269050.RadioIsPodcast", false);
Deleted : user_pref("CT2269050.RadioLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Deleted : user_pref("CT2269050.RadioMediaID", "12473383");
Deleted : user_pref("CT2269050.RadioMediaType", "Media Player");
Deleted : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Deleted : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Deleted : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Deleted : user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
Deleted : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Deleted : user_pref("CT2269050.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2269050.ServiceMapLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.SettingsLastUpdate", "1300785496");
Deleted : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri Mar 25 2011 17:45:32 GMT+0100");
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Deleted : user_pref("CT2269050.UserID", "UN04879024851606173");
Deleted : user_pref("CT2269050.WeatherNetwork", "");
Deleted : user_pref("CT2269050.WeatherPollDate", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("CT2269050.WeatherUnit", "C");
Deleted : user_pref("CT2269050.alertChannelId", "666138");
Deleted : user_pref("CT2269050.approveUntrustedApps", true);
Deleted : user_pref("CT2269050.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Deleted : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2269050.myStuffEnabled", true);
Deleted : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2269050.testingCtid", "");
Deleted : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Fri Mar 25 2011 17:45:37 GMT+0100");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2269050");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "dvdvideosofttb");
Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2269050");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "dvdvideosofttb");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2269050");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:34 GMT+01[...]
Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Mar 27 2011 12:26:12 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.locale", "");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 0);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Mar 27 2011 12:26:05 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "1aaa4672-ff9e-45a7-9c38-f3cad1d169b9");
Deleted : user_pref("CommunityToolbar.globalUserId", "bca284ba-0cfb-49e2-ba28-f906c13445a1");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Sun Mar 27 2011 12:26:16 GMT+0200");
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri Mar 25 2011 17:45:34 GMT+0100");
Deleted : user_pref("ConduitEngine.FirstServerDate", "03/25/2011 19");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstalledDate", "Fri Mar 25 2011 17:45:35 GMT+0100");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("ConduitEngine.UserID", "UN01977653352509512");
Deleted : user_pref("ConduitEngine.engineLocale", "de");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Mar 27 2011 12:26:06 GMT+0200");
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);

-\\ Google Chrome v20.0.1132.57

File : C:\Users\Hornochse\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [14207 octets] - [16/07/2012 20:56:45]
AdwCleaner[S1].txt - [14463 octets] - [17/07/2012 11:22:56]

########## EOF - C:\AdwCleaner[S1].txt - [14592 octets] ##########
         
Grüße

Hier noch der Bericht von Emsisoft:

Code:
ATTFilter
Emsisoft Anti-Malware - Version 6.6
Letztes Update: 17.07.2012 11:57:06

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Rootkits, Speicher, Traces, C:\
Archiv Scan: An
ADS Scan: An

Scan Beginn:	17.07.2012 11:58:02


Gescannt	559116
Gefunden	0

Scan Ende:	17.07.2012 13:05:29
Scan Zeit:	1:07:27
         
Grüße
Phil

Alt 17.07.2012, 15:44   #10
t'john
/// Helfer-Team
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Sehr gut!

damit bist Du sauber und entlassen!


Deinstalliere:
Emsisoft Anti-Malware


Tool-Bereinigung mit OTL


Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.
  • Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
  • Speichere es auf Deinem Desktop.
  • Doppelklick auf OTL.exe um das Programm auszuführen.
    Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
  • Klicke auf den Button "Bereinigung"
  • OTL fragt eventuell nach einem Neustart.
    Sollte es dies tun, so lasse dies bitte zu.
Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.



Lektuere zum abarbeiten:
http://www.trojaner-board.de/90880-d...tallation.html
http://www.trojaner-board.de/105213-...tellungen.html
PluginCheck
http://www.trojaner-board.de/96344-a...-rechners.html
Secunia Online Software Inspector
http://www.trojaner-board.de/71715-k...iendungen.html
http://www.trojaner-board.de/83238-a...sschalten.html
__________________
Mfg, t'john
Das TB unterstützen

Alt 18.07.2012, 05:39   #11
cartron
 
Trojaner Bundespolizei 2x50€ über Ukash - Standard

Trojaner Bundespolizei 2x50€ über Ukash



Vielen Dank für die Hilfe

und viel Erfolg noch in weiteren Schlachten gegen die Cyberbedrohungen.


Beste Grüße
Phil

Antwort

Themen zu Trojaner Bundespolizei 2x50€ über Ukash
2x 50 €, angeblich, bruder, bundespolizei, ctfmon.lnk, erschein, erscheint, fenster, gesperrt, hallo zusammen, heuristiks/extra, heuristiks/shuriken, hochfahren, hoffe, laptops, larusso, letztem, problem, schließe, starte, taskma, taskmanager, tritt, troja, trojan.agent.ge, trojaner, verschlüsselungs, vollständig, zugleich, zusammen, öffnet




Ähnliche Themen: Trojaner Bundespolizei 2x50€ über Ukash


  1. Bundespolizei/GVU/UKASH-Trojaner
    Plagegeister aller Art und deren Bekämpfung - 14.05.2013 (23)
  2. Ukash Bundespolizei Trojaner
    Plagegeister aller Art und deren Bekämpfung - 05.12.2012 (35)
  3. Bundespolizei-Trojaner (Ukash etc.) auf Win XP
    Plagegeister aller Art und deren Bekämpfung - 27.11.2012 (15)
  4. Bundespolizei-Trojaner Ukash
    Log-Analyse und Auswertung - 27.09.2012 (2)
  5. GUV Trojaner / ukash / Bundespolizei
    Log-Analyse und Auswertung - 26.09.2012 (17)
  6. Trojaner Bundespolizei Ukash
    Plagegeister aller Art und deren Bekämpfung - 19.09.2012 (5)
  7. Trojaner: Bundespolizei - 100€ Ukash
    Log-Analyse und Auswertung - 30.08.2012 (9)
  8. Trojaner Bundespolizei, Ukash 100€
    Plagegeister aller Art und deren Bekämpfung - 01.08.2012 (5)
  9. Bundespolizei-Trojaner (ukash)
    Plagegeister aller Art und deren Bekämpfung - 31.07.2012 (19)
  10. XP Trojaner bundespolizei Ukash
    Log-Analyse und Auswertung - 30.07.2012 (13)
  11. UKash Bundespolizei Trojaner
    Plagegeister aller Art und deren Bekämpfung - 26.07.2012 (1)
  12. Ukash-Bundespolizei Trojaner
    Log-Analyse und Auswertung - 03.07.2012 (15)
  13. Bundespolizei Ukash Trojaner
    Plagegeister aller Art und deren Bekämpfung - 12.06.2012 (29)
  14. Ukash Bundespolizei Trojaner
    Plagegeister aller Art und deren Bekämpfung - 05.11.2011 (1)
  15. Bundespolizei Trojaner (UKash)
    Plagegeister aller Art und deren Bekämpfung - 09.09.2011 (3)
  16. Bundespolizei - BKA - UKASH - Trojaner
    Log-Analyse und Auswertung - 04.07.2011 (18)
  17. Bundespolizei Ukash Trojaner WIE?
    Plagegeister aller Art und deren Bekämpfung - 01.06.2011 (25)

Zum Thema Trojaner Bundespolizei 2x50€ über Ukash - Hallo zusammen, hallo Larusso, seit letztem Mal bin ich vorsichtiger geworden, jetzt hat es meinen Bruder erwischt. Folgendes Problem tritt auf: Nach dem Hochfahren des Laptops erscheint kurz der Desktop. - Trojaner Bundespolizei 2x50€ über Ukash...
Archiv
Du betrachtest: Trojaner Bundespolizei 2x50€ über Ukash auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.