Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

  00:06:34.0070 0996  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
00:06:36.0183 0996  ============================================================
00:06:36.0183 0996  Current date / time: 2012/10/15 00:06:36.0183
00:06:36.0183 0996  SystemInfo:
00:06:36.0183 0996  
00:06:36.0183 0996  OS Version: 5.1.2600 ServicePack: 3.0
00:06:36.0183 0996  Product type: Workstation
00:06:36.0183 0996  ComputerName: ACER-5J0JDWIJ8Z
00:06:36.0183 0996  UserName: MR
00:06:36.0183 0996  Windows directory: C:\WINDOWS
00:06:36.0183 0996  System windows directory: C:\WINDOWS
00:06:36.0183 0996  Processor architecture: Intel x86
00:06:36.0183 0996  Number of processors: 1
00:06:36.0183 0996  Page size: 0x1000
00:06:36.0183 0996  Boot type: Normal boot
00:06:36.0183 0996  ============================================================
00:07:33.0916 0996  Drive \Device\Harddisk0\DR0 - Size: 0x6FC7C8000 (27.95 Gb), SectorSize: 0x200, Cylinders: 0xE40, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
00:07:36.0460 0996  Drive \Device\Harddisk1\DR8 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
00:07:36.0470 0996  ============================================================
00:07:36.0470 0996  \Device\Harddisk0\DR0:
00:07:39.0324 0996  MBR partitions:
00:07:39.0324 0996  \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x2457405
00:07:39.0324 0996  \Device\Harddisk0\DR0\Partition2: MBR, Type 0xC, StartLBA 0x2457444, BlocksNum 0x1388B3B
00:07:39.0324 0996  \Device\Harddisk1\DR8:
00:07:39.0344 0996  MBR partitions:
00:07:39.0344 0996  \Device\Harddisk1\DR8\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2542D682
00:07:39.0344 0996  ============================================================
00:07:40.0866 0996  C: <-> \Device\Harddisk0\DR0\Partition1
00:07:41.0567 0996  D: <-> \Device\Harddisk0\DR0\Partition2
00:07:41.0627 0996  G: <-> \Device\Harddisk1\DR8\Partition1
00:07:41.0627 0996  ============================================================
00:07:41.0627 0996  Initialize success
00:07:41.0627 0996  ============================================================
00:12:26.0797 0436  ============================================================
00:12:26.0797 0436  Scan started
00:12:26.0797 0436  Mode: Manual; SigCheck; TDLFS; 
00:12:26.0797 0436  ============================================================
00:12:29.0491 0436  ================ Scan system memory ========================
00:12:29.0521 0436  System memory - ok
00:12:29.0531 0436  ================ Scan services =============================
00:12:32.0826 0436  [ 8912B38E7906BDE9999E4BBDC4E65BDC ] ABBYY.Licensing.FineReader.Professional.11.0 C:\Programme\ABBYY FineReader 11\NetworkLicenseServer.exe
00:12:38.0104 0436  ABBYY.Licensing.FineReader.Professional.11.0 - ok
00:12:38.0675 0436  Abiosdsk - ok
00:12:38.0685 0436  abp480n5 - ok
00:12:40.0277 0436  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
00:12:53.0125 0436  ACPI - ok
00:12:53.0195 0436  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
00:12:53.0756 0436  ACPIEC - ok
00:12:56.0430 0436  [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
00:12:56.0610 0436  AdobeFlashPlayerUpdateSvc - ok
00:12:56.0640 0436  adpu160m - ok
00:12:56.0951 0436  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
00:12:57.0241 0436  aec - ok
00:12:57.0822 0436  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
00:12:57.0952 0436  AFD - ok
00:13:00.0206 0436  [ 3E60F847C0C57EEDB7C0639710512CCC ] AgereSoftModem  C:\WINDOWS\system32\DRIVERS\AGRSM.sys
00:13:00.0816 0436  AgereSoftModem - ok
00:13:00.0836 0436  Aha154x - ok
00:13:00.0856 0436  aic78u2 - ok
00:13:00.0876 0436  aic78xx - ok
00:13:03.0070 0436  [ EA8D01E733FDA92147DE62AA04D154A6 ] ALCXWDM         C:\WINDOWS\system32\drivers\ALCXWDM.SYS
00:13:03.0841 0436  ALCXWDM - ok
00:13:04.0492 0436  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
00:13:04.0842 0436  Alerter - ok
00:13:05.0143 0436  [ 190CD73D4984F94D823F9444980513E5 ] ALG             C:\WINDOWS\System32\alg.exe
00:13:05.0443 0436  ALG - ok
00:13:05.0453 0436  AliIde - ok
00:13:05.0473 0436  amsint - ok
00:13:06.0134 0436  [ 42C42796BD1A01D37CD9ED05D9694D2A ] ApfiltrService  C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
00:13:06.0314 0436  ApfiltrService - ok
00:13:06.0615 0436  AppMgmt - ok
00:13:07.0166 0436  [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394         C:\WINDOWS\system32\DRIVERS\arp1394.sys
00:13:07.0436 0436  Arp1394 - ok
00:13:07.0446 0436  asc - ok
00:13:07.0466 0436  asc3350p - ok
00:13:07.0476 0436  asc3550 - ok
00:13:08.0117 0436  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
00:13:08.0207 0436  aspnet_state - ok
00:13:08.0327 0436  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
00:13:08.0527 0436  AsyncMac - ok
00:13:08.0988 0436  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
00:13:09.0269 0436  atapi - ok
00:13:09.0309 0436  Atdisk - ok
00:13:09.0569 0436  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
00:13:09.0819 0436  Atmarpc - ok
00:13:10.0170 0436  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
00:13:10.0370 0436  AudioSrv - ok
00:13:10.0400 0436  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
00:13:10.0641 0436  audstub - ok
00:13:10.0681 0436  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
00:13:10.0951 0436  Beep - ok
00:13:12.0123 0436  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
00:13:12.0393 0436  BITS - ok
00:13:12.0443 0436  Bonjour Service - ok
00:13:12.0533 0436  [ B71549F23736ADF83A571061C47777FD ] Browser         C:\WINDOWS\System32\browser.dll
00:13:12.0593 0436  Browser - ok
00:13:12.0623 0436  [ B5557A53074076E43ED70D5C0653FBF6 ] BTWUSB          C:\WINDOWS\system32\Drivers\btwusb.sys
00:13:12.0653 0436  BTWUSB ( UnsignedFile.Multi.Generic ) - warning
00:13:12.0653 0436  BTWUSB - detected UnsignedFile.Multi.Generic (1)
00:13:12.0693 0436  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
00:13:12.0924 0436  cbidf2k - ok
00:13:12.0984 0436  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
00:13:13.0174 0436  CCDECODE - ok
00:13:13.0194 0436  cd20xrnt - ok
00:13:13.0254 0436  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
00:13:13.0485 0436  Cdaudio - ok
00:13:13.0565 0436  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
00:13:13.0705 0436  Cdfs - ok
00:13:13.0755 0436  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
00:13:13.0945 0436  Cdrom - ok
00:13:13.0955 0436  Changer - ok
00:13:14.0065 0436  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc           C:\WINDOWS\system32\cisvc.exe
00:13:14.0236 0436  CiSvc - ok
00:13:14.0346 0436  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
00:13:14.0526 0436  ClipSrv - ok
00:13:14.0576 0436  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:13:14.0596 0436  clr_optimization_v2.0.50727_32 - ok
00:13:14.0626 0436  [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt          C:\WINDOWS\system32\DRIVERS\CmBatt.sys
00:13:14.0797 0436  CmBatt - ok
00:13:14.0827 0436  CmdIde - ok
00:13:14.0857 0436  [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt        C:\WINDOWS\system32\DRIVERS\compbatt.sys
00:13:15.0027 0436  Compbatt - ok
00:13:15.0077 0436  COMSysApp - ok
00:13:15.0097 0436  Cpqarray - ok
00:13:15.0207 0436  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
00:13:15.0377 0436  CryptSvc - ok
00:13:15.0387 0436  dac2w2k - ok
00:13:15.0407 0436  dac960nt - ok
00:13:15.0488 0436  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
00:13:15.0568 0436  DcomLaunch - ok
00:13:15.0648 0436  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
00:13:15.0878 0436  Dhcp - ok
00:13:15.0938 0436  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
00:13:16.0128 0436  Disk - ok
00:13:16.0249 0436  [ 96A48BDA68BF734AAE79F910AB884A34 ] DKbFltr         C:\WINDOWS\system32\Drivers\DKbFltr.sys
00:13:16.0269 0436  DKbFltr ( UnsignedFile.Multi.Generic ) - warning
00:13:16.0269 0436  DKbFltr - detected UnsignedFile.Multi.Generic (1)
00:13:16.0309 0436  dmadmin - ok
00:13:16.0389 0436  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
00:13:16.0649 0436  dmboot - ok
00:13:16.0749 0436  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
00:13:16.0930 0436  dmio - ok
00:13:17.0040 0436  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
00:13:17.0270 0436  dmload - ok
00:13:17.0360 0436  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
00:13:17.0520 0436  dmserver - ok
00:13:17.0570 0436  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
00:13:17.0751 0436  DMusic - ok
00:13:17.0841 0436  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
00:13:17.0911 0436  Dnscache - ok
00:13:17.0981 0436  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
00:13:18.0181 0436  Dot3svc - ok
00:13:18.0191 0436  dpti2o - ok
00:13:18.0221 0436  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
00:13:18.0412 0436  drmkaud - ok
00:13:18.0502 0436  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost         C:\WINDOWS\System32\eapsvc.dll
00:13:18.0672 0436  EapHost - ok
00:13:18.0752 0436  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc           C:\WINDOWS\System32\ersvc.dll
00:13:18.0932 0436  ERSvc - ok
00:13:19.0063 0436  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
00:13:19.0103 0436  Eventlog - ok
00:13:19.0173 0436  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem     C:\WINDOWS\System32\es.dll
00:13:19.0233 0436  EventSystem - ok
00:13:19.0273 0436  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
00:13:19.0453 0436  Fastfat - ok
00:13:19.0553 0436  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
00:13:19.0603 0436  FastUserSwitchingCompatibility - ok
00:13:19.0704 0436  [ 08B8B302AF0D1B3B8543429BBAC8F21F ] Fax             C:\WINDOWS\system32\fxssvc.exe
00:13:19.0894 0436  Fax - ok
00:13:19.0914 0436  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
00:13:20.0104 0436  Fdc - ok
00:13:20.0124 0436  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
00:13:20.0294 0436  Fips - ok
00:13:20.0304 0436  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
00:13:20.0475 0436  Flpydisk - ok
00:13:20.0505 0436  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
00:13:20.0685 0436  FltMgr - ok
00:13:20.0855 0436  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
00:13:20.0875 0436  FontCache3.0.0.0 - ok
00:13:20.0895 0436  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
00:13:21.0106 0436  Fs_Rec - ok
00:13:21.0146 0436  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
00:13:21.0376 0436  Ftdisk - ok
00:13:21.0436 0436  [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
00:13:21.0456 0436  GEARAspiWDM - ok
00:13:21.0476 0436  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
00:13:21.0646 0436  Gpc - ok
00:13:21.0787 0436  [ F0A0041644A2E026044C6EEEC42B7241 ] gv3             C:\WINDOWS\system32\DRIVERS\gv3.sys
00:13:21.0817 0436  gv3 - ok
00:13:21.0907 0436  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
00:13:22.0117 0436  helpsvc - ok
00:13:22.0167 0436  [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ         C:\WINDOWS\System32\hidserv.dll
00:13:22.0347 0436  HidServ - ok
00:13:22.0458 0436  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
00:13:22.0648 0436  HidUsb - ok
00:13:22.0938 0436  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
00:13:23.0169 0436  hkmsvc - ok
00:13:23.0189 0436  hpn - ok
00:13:23.0259 0436  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
00:13:23.0319 0436  HTTP - ok
00:13:23.0389 0436  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
00:13:23.0559 0436  HTTPFilter - ok
00:13:23.0569 0436  i2omgmt - ok
00:13:23.0589 0436  i2omp - ok
00:13:23.0619 0436  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
00:13:23.0789 0436  i8042prt - ok
00:13:23.0829 0436  [ 759A944AA02F686EC069E6FF5B5636D8 ] ialm            C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
00:13:24.0040 0436  ialm - ok
00:13:24.0130 0436  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:13:24.0190 0436  idsvc - ok
00:13:24.0220 0436  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
00:13:24.0400 0436  Imapi - ok
00:13:24.0561 0436  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\System32\imapi.exe
00:13:24.0731 0436  ImapiService - ok
00:13:24.0831 0436  ini910u - ok
00:13:24.0861 0436  [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
00:13:25.0051 0436  IntelIde - ok
00:13:25.0181 0436  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
00:13:25.0342 0436  intelppm - ok
00:13:25.0452 0436  [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw           C:\WINDOWS\system32\drivers\ip6fw.sys
00:13:25.0612 0436  ip6fw - ok
00:13:25.0722 0436  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
00:13:25.0983 0436  IpFilterDriver - ok
00:13:26.0053 0436  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
00:13:26.0223 0436  IpInIp - ok
00:13:26.0293 0436  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
00:13:26.0463 0436  IpNat - ok
00:13:26.0483 0436  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
00:13:26.0664 0436  IPSec - ok
00:13:26.0714 0436  [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda            C:\WINDOWS\system32\DRIVERS\irda.sys
00:13:26.0894 0436  irda - ok
00:13:26.0934 0436  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
00:13:27.0094 0436  IRENUM - ok
00:13:27.0174 0436  [ 2EFE1DB1EC58A26B0C14BFDA122E246F ] Irmon           C:\WINDOWS\System32\irmon.dll
00:13:27.0345 0436  Irmon - ok
00:13:27.0435 0436  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
00:13:27.0595 0436  isapnp - ok
00:13:27.0765 0436  [ 9AE07549A0D691A103FAF8946554BDB7 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
00:13:27.0795 0436  JavaQuickStarterService - ok
00:13:27.0845 0436  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
00:13:28.0026 0436  Kbdclass - ok
00:13:28.0176 0436  [ B6D6C117D771C98130497265F26D1882 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
00:13:28.0326 0436  kbdhid - ok
00:13:28.0436 0436  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
00:13:28.0606 0436  kmixer - ok
00:13:28.0636 0436  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
00:13:28.0686 0436  KSecDD - ok
00:13:28.0737 0436  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
00:13:28.0807 0436  lanmanserver - ok
00:13:28.0907 0436  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
00:13:28.0967 0436  lanmanworkstation - ok
00:13:28.0977 0436  lbrtfdc - ok
00:13:29.0037 0436  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
00:13:29.0217 0436  LmHosts - ok
00:13:29.0337 0436  [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
00:13:30.0549 0436  MBAMProtector - ok
00:13:30.0629 0436  [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler   C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
00:13:30.0669 0436  MBAMScheduler - ok
00:13:30.0729 0436  [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService     C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
00:13:30.0779 0436  MBAMService - ok
00:13:30.0820 0436  [ B7550A7107281D170CE85524B1488C98 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
00:13:30.0990 0436  Messenger - ok
00:13:31.0020 0436  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
00:13:31.0260 0436  mnmdd - ok
00:13:31.0340 0436  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc         C:\WINDOWS\System32\mnmsrvc.exe
00:13:31.0491 0436  mnmsrvc - ok
00:13:31.0511 0436  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
00:13:31.0671 0436  Modem - ok
00:13:31.0691 0436  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
00:13:31.0851 0436  Mouclass - ok
00:13:31.0891 0436  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
00:13:32.0111 0436  mouhid - ok
00:13:32.0232 0436  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
00:13:32.0382 0436  MountMgr - ok
00:13:32.0482 0436  [ 4D7F2682D29B92A6251B17957AA0B985 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
00:13:32.0502 0436  MozillaMaintenance - ok
00:13:32.0512 0436  mraid35x - ok
00:13:32.0572 0436  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
00:13:32.0752 0436  MRxDAV - ok
00:13:32.0842 0436  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
00:13:32.0933 0436  MRxSmb - ok
00:13:32.0973 0436  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
00:13:33.0133 0436  MSDTC - ok
00:13:33.0213 0436  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
00:13:33.0403 0436  Msfs - ok
00:13:33.0584 0436  MSIServer - ok
00:13:33.0614 0436  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
00:13:33.0774 0436  MSKSSRV - ok
00:13:33.0794 0436  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
00:13:33.0934 0436  MSPCLOCK - ok
00:13:34.0034 0436  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
00:13:34.0214 0436  MSPQM - ok
00:13:34.0244 0436  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
00:13:34.0415 0436  mssmbios - ok
00:13:34.0555 0436  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
00:13:34.0725 0436  MSTEE - ok
00:13:34.0815 0436  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
00:13:34.0865 0436  Mup - ok
00:13:34.0895 0436  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
00:13:35.0086 0436  NABTSFEC - ok
00:13:35.0196 0436  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
00:13:35.0376 0436  napagent - ok
00:13:35.0526 0436  [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate        C:\Programme\Nero\Update\NASvc.exe
00:13:35.0566 0436  NAUpdate - ok
00:13:35.0606 0436  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
00:13:35.0797 0436  NDIS - ok
00:13:35.0837 0436  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
00:13:35.0997 0436  NdisIP - ok
00:13:36.0107 0436  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
00:13:36.0147 0436  NdisTapi - ok
00:13:36.0207 0436  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
00:13:36.0368 0436  Ndisuio - ok
00:13:36.0398 0436  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:13:36.0558 0436  NdisWan - ok
00:13:36.0588 0436  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
00:13:36.0608 0436  NDProxy - ok
00:13:36.0638 0436  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
00:13:36.0828 0436  NetBIOS - ok
00:13:36.0918 0436  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
00:13:37.0089 0436  NetBT - ok
00:13:37.0239 0436  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
00:13:37.0399 0436  NetDDE - ok
00:13:37.0409 0436  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
00:13:37.0559 0436  NetDDEdsdm - ok
00:13:37.0609 0436  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\System32\lsass.exe
00:13:37.0770 0436  Netlogon - ok
00:13:37.0950 0436  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
00:13:38.0120 0436  Netman - ok
00:13:38.0310 0436  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
00:13:38.0330 0436  NetTcpPortSharing - ok
00:13:38.0380 0436  [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394         C:\WINDOWS\system32\DRIVERS\nic1394.sys
00:13:38.0571 0436  NIC1394 - ok
00:13:38.0661 0436  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla             C:\WINDOWS\System32\mswsock.dll
00:13:38.0711 0436  Nla - ok
00:13:38.0791 0436  [ 1926B4EEF80F4A0C8CC8FCBB6B4A7461 ] Nokia USB Generic C:\WINDOWS\system32\drivers\nmwcdc.sys
00:13:38.0921 0436  Nokia USB Generic - ok
00:13:38.0961 0436  [ DF4211B6CA609FF11F43261E04AC92F1 ] Nokia USB Modem C:\WINDOWS\system32\drivers\nmwcdcm.sys
00:13:39.0031 0436  Nokia USB Modem - ok
00:13:39.0071 0436  [ DDFE78EEB4AFCF91EDC52B8F7C7DAD15 ] Nokia USB Phone Parent C:\WINDOWS\system32\drivers\nmwcd.sys
00:13:39.0152 0436  Nokia USB Phone Parent - ok
00:13:39.0182 0436  [ DF4211B6CA609FF11F43261E04AC92F1 ] Nokia USB Port  C:\WINDOWS\system32\drivers\nmwcdcj.sys
00:13:39.0222 0436  Nokia USB Port - ok
00:13:39.0252 0436  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
00:13:39.0392 0436  Npfs - ok
00:13:39.0552 0436  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
00:13:39.0752 0436  Ntfs - ok
00:13:39.0782 0436  [ 15A72D5B8F0B6A718207F14BD5EBB8FF ] NTIDrvr         C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys
00:13:39.0802 0436  NTIDrvr ( UnsignedFile.Multi.Generic ) - warning
00:13:39.0802 0436  NTIDrvr - detected UnsignedFile.Multi.Generic (1)
00:13:39.0822 0436  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp         C:\WINDOWS\System32\lsass.exe
00:13:39.0973 0436  NtLmSsp - ok
00:13:40.0203 0436  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
00:13:40.0393 0436  NtmsSvc - ok
00:13:40.0423 0436  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
00:13:40.0654 0436  Null - ok
00:13:40.0684 0436  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
00:13:40.0914 0436  NwlnkFlt - ok
00:13:40.0944 0436  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
00:13:41.0194 0436  NwlnkFwd - ok
00:13:41.0305 0436  [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
00:13:41.0465 0436  ohci1394 - ok
00:13:41.0655 0436  [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose             C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
00:13:41.0675 0436  ose - ok
00:13:41.0705 0436  [ F84785660305B9B903FB3BCA8BA29837 ] Parport         C:\WINDOWS\system32\DRIVERS\parport.sys
00:13:41.0895 0436  Parport - ok
00:13:41.0946 0436  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
00:13:42.0106 0436  PartMgr - ok
00:13:42.0156 0436  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
00:13:42.0416 0436  ParVdm - ok
00:13:42.0436 0436  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
00:13:42.0586 0436  PCI - ok
00:13:42.0596 0436  PCIDump - ok
00:13:42.0617 0436  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
00:13:42.0827 0436  PCIIde - ok
00:13:42.0877 0436  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\DRIVERS\pcmcia.sys
00:13:43.0037 0436  Pcmcia - ok
00:13:43.0057 0436  PDCOMP - ok
00:13:43.0067 0436  PDFRAME - ok
00:13:43.0077 0436  PDRELI - ok
00:13:43.0097 0436  PDRFRAME - ok
00:13:43.0117 0436  perc2 - ok
00:13:43.0127 0436  perc2hib - ok
00:13:43.0207 0436  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
00:13:43.0227 0436  PlugPlay - ok
00:13:43.0247 0436  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent     C:\WINDOWS\System32\lsass.exe
00:13:43.0398 0436  PolicyAgent - ok
00:13:43.0418 0436  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
00:13:43.0588 0436  PptpMiniport - ok
00:13:43.0628 0436  [ 2CB55427C58679F49AD600FCCBA76360 ] Processor       C:\WINDOWS\system32\DRIVERS\processr.sys
00:13:43.0788 0436  Processor - ok
00:13:43.0808 0436  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
00:13:43.0958 0436  ProtectedStorage - ok
00:13:43.0978 0436  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
00:13:44.0149 0436  PSched - ok
00:13:44.0179 0436  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
00:13:44.0419 0436  Ptilink - ok
00:13:44.0469 0436  [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
00:13:44.0489 0436  PxHelp20 - ok
00:13:44.0509 0436  ql1080 - ok
00:13:44.0519 0436  Ql10wnt - ok
00:13:44.0549 0436  ql12160 - ok
00:13:44.0559 0436  ql1240 - ok
00:13:44.0569 0436  ql1280 - ok
00:13:44.0599 0436  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
00:13:44.0810 0436  RasAcd - ok
00:13:44.0870 0436  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
00:13:45.0030 0436  RasAuto - ok
00:13:45.0060 0436  [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda         C:\WINDOWS\system32\DRIVERS\rasirda.sys
00:13:45.0150 0436  Rasirda - ok
00:13:45.0170 0436  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
00:13:45.0320 0436  Rasl2tp - ok
00:13:45.0370 0436  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
00:13:45.0551 0436  RasMan - ok
00:13:45.0581 0436  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
00:13:45.0741 0436  RasPppoe - ok
00:13:45.0771 0436  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
00:13:46.0011 0436  Raspti - ok
00:13:46.0051 0436  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
00:13:46.0222 0436  Rdbss - ok
00:13:46.0242 0436  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
00:13:46.0442 0436  RDPCDD - ok
00:13:46.0512 0436  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
00:13:46.0552 0436  RDPWD - ok
00:13:46.0612 0436  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
00:13:46.0772 0436  RDSessMgr - ok
00:13:46.0803 0436  [ ED761D453856F795A7FE056E42C36365 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
00:13:46.0973 0436  redbook - ok
00:13:47.0103 0436  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
00:13:47.0283 0436  RemoteAccess - ok
00:13:47.0333 0436  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\System32\locator.exe
00:13:47.0514 0436  RpcLocator - ok
00:13:47.0584 0436  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs           C:\WINDOWS\system32\rpcss.dll
00:13:47.0654 0436  RpcSs - ok
00:13:47.0734 0436  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\System32\rsvp.exe
00:13:48.0004 0436  RSVP - ok
00:13:48.0094 0436  [ 2EF9C0DC26B30B2318B1FC3FAA1F0AE7 ] rtl8139         C:\WINDOWS\system32\DRIVERS\R8139n51.SYS
00:13:48.0134 0436  rtl8139 - ok
00:13:48.0154 0436  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs           C:\WINDOWS\system32\lsass.exe
00:13:48.0335 0436  SamSs - ok
00:13:48.0385 0436  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
00:13:48.0585 0436  SCardSvr - ok
00:13:48.0645 0436  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
00:13:48.0805 0436  Schedule - ok
00:13:48.0966 0436  [ 0F4A80438E7286A0E623582F5F2395BD ] SearchAnonymizer C:\Dokumente und Einstellungen\MR\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe
00:13:48.0986 0436  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - warning
00:13:48.0986 0436  SearchAnonymizer - detected UnsignedFile.Multi.Generic (1)
00:13:49.0036 0436  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
00:13:49.0196 0436  Secdrv - ok
00:13:49.0256 0436  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
00:13:49.0426 0436  seclogon - ok
00:13:49.0486 0436  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
00:13:49.0647 0436  SENS - ok
00:13:49.0677 0436  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
00:13:49.0857 0436  Serial - ok
00:13:49.0987 0436  [ AAC24421FC74D612A7169C4D4A61B48C ] ServiceLayer    C:\Programme\PC Connectivity Solution\ServiceLayer.exe
00:13:50.0017 0436  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
00:13:50.0017 0436  ServiceLayer - detected UnsignedFile.Multi.Generic (1)
00:13:50.0057 0436  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
00:13:50.0237 0436  Sfloppy - ok
00:13:50.0288 0436  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
00:13:50.0498 0436  SharedAccess - ok
00:13:50.0568 0436  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
00:13:50.0598 0436  ShellHWDetection - ok
00:13:50.0618 0436  Simbad - ok
00:13:50.0778 0436  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Programme\Skype\Updater\Updater.exe
00:13:50.0798 0436  SkypeUpdate - ok
00:13:50.0848 0436  [ 707647A1AA0EDB6CBEF61B0C75C28ED3 ] SMCIRDA         C:\WINDOWS\system32\DRIVERS\smcirda.sys
00:13:50.0898 0436  SMCIRDA - ok
00:13:50.0928 0436  Sparrow - ok
00:13:50.0979 0436  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
00:13:51.0159 0436  splitter - ok
00:13:51.0209 0436  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
00:13:51.0269 0436  Spooler - ok
00:13:51.0299 0436  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
00:13:51.0439 0436  sr - ok
00:13:51.0499 0436  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice       C:\WINDOWS\System32\srsvc.dll
00:13:51.0650 0436  srservice - ok
00:13:51.0700 0436  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
00:13:51.0790 0436  Srv - ok
00:13:51.0880 0436  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
00:13:52.0060 0436  SSDPSRV - ok
00:13:52.0150 0436  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
00:13:52.0411 0436  stisvc - ok
00:13:52.0431 0436  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
00:13:52.0601 0436  swenum - ok
00:13:52.0631 0436  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
00:13:52.0801 0436  swmidi - ok
00:13:52.0851 0436  SwPrv - ok
00:13:52.0871 0436  symc810 - ok
00:13:52.0891 0436  symc8xx - ok
00:13:52.0911 0436  sym_hi - ok
00:13:52.0921 0436  sym_u3 - ok
00:13:52.0951 0436  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
00:13:53.0122 0436  sysaudio - ok
00:13:53.0182 0436  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
00:13:53.0342 0436  SysmonLog - ok
00:13:53.0452 0436  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
00:13:53.0612 0436  TapiSrv - ok
00:13:53.0672 0436  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
00:13:53.0732 0436  Tcpip - ok
00:13:53.0783 0436  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
00:13:53.0933 0436  TDPIPE - ok
00:13:53.0953 0436  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
00:13:54.0113 0436  TDTCP - ok
00:13:54.0143 0436  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
00:13:54.0293 0436  TermDD - ok
00:13:54.0393 0436  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService     C:\WINDOWS\System32\termsrv.dll
00:13:54.0564 0436  TermService - ok
00:13:54.0654 0436  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
00:13:54.0674 0436  Themes - ok
00:13:54.0774 0436  [ EFEF22B9577E5051057FDE1AE381B50C ] TomTomHOMEService C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
00:13:54.0794 0436  TomTomHOMEService - ok
00:13:54.0824 0436  TosIde - ok
00:13:54.0904 0436  [ 15FB67EB022A74B30E278D19B03DA3B4 ] TPkd            C:\WINDOWS\system32\drivers\TPkd.sys
00:13:54.0924 0436  TPkd ( UnsignedFile.Multi.Generic ) - warning
00:13:54.0924 0436  TPkd - detected UnsignedFile.Multi.Generic (1)
00:13:54.0994 0436  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
00:13:55.0195 0436  TrkWks - ok
00:13:55.0245 0436  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
00:13:55.0445 0436  Udfs - ok
00:13:55.0455 0436  ultra - ok
00:13:55.0525 0436  [ AB0A7CA90D9E3D6A193905DC1715DED0 ] UMWdf           C:\WINDOWS\System32\wdfmgr.exe
00:13:55.0565 0436  UMWdf - ok
00:13:55.0615 0436  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
00:13:55.0815 0436  Update - ok
00:13:55.0876 0436  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
00:13:56.0046 0436  upnphost - ok
00:13:56.0116 0436  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS             C:\WINDOWS\System32\ups.exe
00:13:56.0276 0436  UPS - ok
00:13:56.0346 0436  [ E919708DB44ED8543A7C017953148330 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
00:13:56.0516 0436  usbaudio - ok
00:13:56.0547 0436  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
00:13:56.0717 0436  usbccgp - ok
00:13:56.0737 0436  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
00:13:56.0897 0436  usbehci - ok
00:13:56.0927 0436  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
00:13:57.0097 0436  usbhub - ok
00:13:57.0127 0436  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
00:13:57.0288 0436  usbprint - ok
00:13:57.0338 0436  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
00:13:57.0498 0436  usbscan - ok
00:13:57.0518 0436  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
00:13:57.0668 0436  USBSTOR - ok
00:13:57.0698 0436  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
00:13:57.0858 0436  usbuhci - ok
00:13:57.0909 0436  [ C90055BD2BB41443462EA715E0876B8D ] V0260VID        C:\WINDOWS\system32\DRIVERS\V0260Vid.sys
00:13:57.0969 0436  V0260VID - ok
00:13:57.0999 0436  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
00:13:58.0179 0436  VgaSave - ok
00:13:58.0189 0436  ViaIde - ok
00:13:58.0219 0436  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
00:13:58.0379 0436  VolSnap - ok
00:13:58.0479 0436  [ 68F106273BE29E7B7EF8266977268E78 ] VSS             C:\WINDOWS\System32\vssvc.exe
00:13:58.0650 0436  VSS - ok
00:13:58.0740 0436  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time         C:\WINDOWS\System32\w32time.dll
00:13:58.0910 0436  W32Time - ok
00:13:59.0000 0436  [ 677AD85E3058C821F5A73CDF7E5B5478 ] w70n51          C:\WINDOWS\system32\DRIVERS\w70n51.sys
00:13:59.0120 0436  w70n51 - ok
00:13:59.0150 0436  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
00:13:59.0331 0436  Wanarp - ok
00:13:59.0341 0436  WDICA - ok
00:13:59.0401 0436  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
00:13:59.0561 0436  wdmaud - ok
00:13:59.0641 0436  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient       C:\WINDOWS\System32\webclnt.dll
00:13:59.0781 0436  WebClient - ok
00:13:59.0871 0436  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
00:14:00.0042 0436  winmgmt - ok
00:14:00.0132 0436  [ 140EF97B64F560FD78643CAE2CDAD838 ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
00:14:00.0172 0436  WmdmPmSN - ok
00:14:00.0222 0436  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\System32\wbem\wmiapsrv.exe
00:14:00.0402 0436  WmiApSrv - ok
00:14:00.0482 0436  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
00:14:00.0652 0436  wscsvc - ok
00:14:00.0713 0436  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
00:14:00.0893 0436  WSTCODEC - ok
00:14:00.0983 0436  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
00:14:01.0153 0436  wuauserv - ok
00:14:01.0243 0436  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
00:14:01.0434 0436  WZCSVC - ok
00:14:01.0504 0436  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
00:14:01.0694 0436  xmlprov - ok
00:14:01.0764 0436  [ 4FF040FE3099D578131CF62E3B822E0D ] {6080A529-897E-4629-A488-ABA0C29B635E} C:\WINDOWS\system32\drivers\ialmsbw.sys
00:14:01.0804 0436  {6080A529-897E-4629-A488-ABA0C29B635E} - ok
00:14:01.0844 0436  [ 9623FE5A34823EF8BE6BA55CB52222E8 ] {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} C:\WINDOWS\system32\drivers\ialmkchw.sys
00:14:01.0884 0436  {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} - ok
00:14:01.0914 0436  [ 4ACDBB1E48986863B34E696B479F7455 ] {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} C:\WINDOWS\system32\drivers\wA301a.sys
00:14:01.0954 0436  {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} - ok
00:14:01.0964 0436  ================ Scan global ===============================
00:14:02.0085 0436  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
00:14:02.0175 0436  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
00:14:02.0235 0436  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
00:14:02.0285 0436  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
00:14:02.0285 0436  [Global] - ok
00:14:02.0285 0436  ================ Scan MBR ==================================
00:14:02.0305 0436  [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk0\DR0
00:14:02.0555 0436  \Device\Harddisk0\DR0 ( TDSS File System ) - warning
00:14:02.0555 0436  \Device\Harddisk0\DR0 - detected TDSS File System (1)
00:14:02.0585 0436  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR8
00:14:02.0796 0436  \Device\Harddisk1\DR8 - ok
00:14:02.0806 0436  ================ Scan VBR ==================================
00:14:02.0836 0436  [ D942CD8972B5F073792F4DE61D328D4B ] \Device\Harddisk0\DR0\Partition1
00:14:02.0836 0436  \Device\Harddisk0\DR0\Partition1 - ok
00:14:02.0866 0436  [ 64DCC1CB2D04F7BE2626705D075BED62 ] \Device\Harddisk0\DR0\Partition2
00:14:02.0866 0436  \Device\Harddisk0\DR0\Partition2 - ok
00:14:02.0886 0436  [ B140085EEC6B2377E4D2B3B56FE57AC5 ] \Device\Harddisk1\DR8\Partition1
00:14:02.0896 0436  \Device\Harddisk1\DR8\Partition1 - ok
00:14:02.0896 0436  ============================================================
00:14:02.0896 0436  Scan finished
00:14:02.0896 0436  ============================================================
00:14:03.0016 3428  Detected object count: 7
00:14:03.0016 3428  Actual detected object count: 7
00:22:37.0776 3428  BTWUSB ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0776 3428  BTWUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0786 3428  DKbFltr ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0786 3428  DKbFltr ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0786 3428  NTIDrvr ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0786 3428  NTIDrvr ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0786 3428  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0786 3428  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0786 3428  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0786 3428  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0786 3428  TPkd ( UnsignedFile.Multi.Generic ) - skipped by user
00:22:37.0786 3428  TPkd ( UnsignedFile.Multi.Generic ) - User select action: Skip 
00:22:37.0796 3428  \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
00:22:37.0796 3428  \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
         

\Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
         

Diesen Eintrag bitte mit dem TDSS-Killer fixen. Aber bitte nur diesen Eintrag!

Um das zu tun musst du den TDSS-Killer neu starten und einen neuen Scan machen. Wenn du danach die Ergebnisse siehst, stellst du bitte diesen Eintrag auf CURE bzw. DELETE (je nachdem was dir angeboten wird, alle anderen bitte auf SKIP lassen! ) und klickst dann unten rechts auf continue

Starte Windows danach neu und mach wieder ein komplett neues Log mit dem TDSS-Killer. Wie immer wieder in CODE-Tags posten.

den TDSS-Killer wieder so einstellen wie beim ersten scan, oder einfach so lassen wie es ist und scanen?

So wie beim ersten mal bitte auch wieder einstellen

 
20:52:21.0163 2572  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
20:52:24.0117 2572  ============================================================
20:52:24.0117 2572  Current date / time: 2012/10/15 20:52:24.0117
20:52:24.0117 2572  SystemInfo:
20:52:24.0117 2572  
20:52:24.0117 2572  OS Version: 5.1.2600 ServicePack: 3.0
20:52:24.0117 2572  Product type: Workstation
20:52:24.0117 2572  ComputerName: ACER-5J0JDWIJ8Z
20:52:24.0117 2572  UserName: MR
20:52:24.0117 2572  Windows directory: C:\WINDOWS
20:52:24.0117 2572  System windows directory: C:\WINDOWS
20:52:24.0117 2572  Processor architecture: Intel x86
20:52:24.0117 2572  Number of processors: 1
20:52:24.0117 2572  Page size: 0x1000
20:52:24.0117 2572  Boot type: Normal boot
20:52:24.0117 2572  ============================================================
20:52:25.0750 2572  Drive \Device\Harddisk0\DR0 - Size: 0x6FC7C8000 (27.95 Gb), SectorSize: 0x200, Cylinders: 0xE40, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
20:52:25.0770 2572  Drive \Device\Harddisk1\DR4 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
20:52:25.0790 2572  Drive \Device\Harddisk2\DR6 - Size: 0xE8E0DB5800 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
20:52:28.0934 2572  ============================================================
20:52:28.0934 2572  \Device\Harddisk0\DR0:
20:52:28.0934 2572  MBR partitions:
20:52:28.0934 2572  \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x2457405
20:52:28.0934 2572  \Device\Harddisk0\DR0\Partition2: MBR, Type 0xC, StartLBA 0x2457444, BlocksNum 0x1388B3B
20:52:28.0934 2572  \Device\Harddisk1\DR4:
20:52:28.0944 2572  MBR partitions:
20:52:28.0944 2572  \Device\Harddisk1\DR4\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2542D682
20:52:28.0944 2572  \Device\Harddisk2\DR6:
20:52:28.0954 2572  MBR partitions:
20:52:28.0954 2572  \Device\Harddisk2\DR6\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800
20:52:28.0954 2572  ============================================================
20:52:28.0954 2572  C: <-> \Device\Harddisk0\DR0\Partition1
20:52:28.0974 2572  D: <-> \Device\Harddisk0\DR0\Partition2
20:52:29.0115 2572  F: <-> \Device\Harddisk2\DR6\Partition1
20:52:29.0185 2572  G: <-> \Device\Harddisk1\DR4\Partition1
20:52:29.0185 2572  ============================================================
20:52:29.0185 2572  Initialize success
20:52:29.0185 2572  ============================================================
20:52:51.0056 3156  ============================================================
20:52:51.0056 3156  Scan started
20:52:51.0056 3156  Mode: Manual; SigCheck; TDLFS; 
20:52:51.0056 3156  ============================================================
20:52:52.0308 3156  ================ Scan system memory ========================
20:52:52.0308 3156  System memory - ok
20:52:52.0308 3156  ================ Scan services =============================
20:52:52.0839 3156  [ 8912B38E7906BDE9999E4BBDC4E65BDC ] ABBYY.Licensing.FineReader.Professional.11.0 C:\Programme\ABBYY FineReader 11\NetworkLicenseServer.exe
20:52:53.0650 3156  ABBYY.Licensing.FineReader.Professional.11.0 - ok
20:52:53.0710 3156  Abiosdsk - ok
20:52:53.0730 3156  abp480n5 - ok
20:52:53.0790 3156  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:52:56.0013 3156  ACPI - ok
20:52:56.0113 3156  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
20:52:56.0314 3156  ACPIEC - ok
20:52:56.0594 3156  [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:52:56.0634 3156  AdobeFlashPlayerUpdateSvc - ok
20:52:56.0654 3156  adpu160m - ok
20:52:56.0704 3156  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
20:52:56.0945 3156  aec - ok
20:52:57.0025 3156  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
20:52:57.0095 3156  AFD - ok
20:52:57.0165 3156  [ 3E60F847C0C57EEDB7C0639710512CCC ] AgereSoftModem  C:\WINDOWS\system32\DRIVERS\AGRSM.sys
20:52:57.0325 3156  AgereSoftModem - ok
20:52:57.0335 3156  Aha154x - ok
20:52:57.0355 3156  aic78u2 - ok
20:52:57.0365 3156  aic78xx - ok
20:52:57.0445 3156  [ EA8D01E733FDA92147DE62AA04D154A6 ] ALCXWDM         C:\WINDOWS\system32\drivers\ALCXWDM.SYS
20:52:57.0615 3156  ALCXWDM - ok
20:52:57.0756 3156  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
20:52:57.0986 3156  Alerter - ok
20:52:58.0026 3156  [ 190CD73D4984F94D823F9444980513E5 ] ALG             C:\WINDOWS\System32\alg.exe
20:52:58.0226 3156  ALG - ok
20:52:58.0236 3156  AliIde - ok
20:52:58.0256 3156  amsint - ok
20:52:58.0337 3156  [ 42C42796BD1A01D37CD9ED05D9694D2A ] ApfiltrService  C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
20:52:58.0387 3156  ApfiltrService - ok
20:52:58.0447 3156  AppMgmt - ok
20:52:58.0497 3156  [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394         C:\WINDOWS\system32\DRIVERS\arp1394.sys
20:52:58.0697 3156  Arp1394 - ok
20:52:58.0707 3156  asc - ok
20:52:58.0727 3156  asc3350p - ok
20:52:58.0737 3156  asc3550 - ok
20:52:58.0877 3156  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
20:52:58.0897 3156  aspnet_state - ok
20:52:58.0927 3156  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:52:59.0108 3156  AsyncMac - ok
20:52:59.0208 3156  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
20:52:59.0398 3156  atapi - ok
20:52:59.0418 3156  Atdisk - ok
20:52:59.0518 3156  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:52:59.0678 3156  Atmarpc - ok
20:52:59.0819 3156  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
20:53:00.0009 3156  AudioSrv - ok
20:53:00.0109 3156  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
20:53:00.0319 3156  audstub - ok
20:53:00.0400 3156  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
20:53:00.0660 3156  Beep - ok
20:53:00.0750 3156  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
20:53:00.0950 3156  BITS - ok
20:53:01.0000 3156  Bonjour Service - ok
20:53:01.0060 3156  [ B71549F23736ADF83A571061C47777FD ] Browser         C:\WINDOWS\System32\browser.dll
20:53:01.0121 3156  Browser - ok
20:53:01.0151 3156  [ B5557A53074076E43ED70D5C0653FBF6 ] BTWUSB          C:\WINDOWS\system32\Drivers\btwusb.sys
20:53:01.0181 3156  BTWUSB ( UnsignedFile.Multi.Generic ) - warning
20:53:01.0181 3156  BTWUSB - detected UnsignedFile.Multi.Generic (1)
20:53:01.0221 3156  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
20:53:01.0501 3156  cbidf2k - ok
20:53:01.0571 3156  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
20:53:01.0741 3156  CCDECODE - ok
20:53:01.0761 3156  cd20xrnt - ok
20:53:01.0781 3156  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
20:53:02.0022 3156  Cdaudio - ok
20:53:02.0102 3156  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
20:53:02.0262 3156  Cdfs - ok
20:53:02.0292 3156  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:53:02.0482 3156  Cdrom - ok
20:53:02.0503 3156  Changer - ok
20:53:02.0623 3156  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc           C:\WINDOWS\system32\cisvc.exe
20:53:02.0793 3156  CiSvc - ok
20:53:02.0903 3156  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
20:53:03.0083 3156  ClipSrv - ok
20:53:03.0234 3156  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:53:03.0254 3156  clr_optimization_v2.0.50727_32 - ok
20:53:03.0284 3156  [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt          C:\WINDOWS\system32\DRIVERS\CmBatt.sys
20:53:03.0444 3156  CmBatt - ok
20:53:03.0454 3156  CmdIde - ok
20:53:03.0484 3156  [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt        C:\WINDOWS\system32\DRIVERS\compbatt.sys
20:53:03.0654 3156  Compbatt - ok
20:53:03.0704 3156  COMSysApp - ok
20:53:03.0734 3156  Cpqarray - ok
20:53:03.0824 3156  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
20:53:04.0015 3156  CryptSvc - ok
20:53:04.0025 3156  dac2w2k - ok
20:53:04.0045 3156  dac960nt - ok
20:53:04.0125 3156  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
20:53:04.0225 3156  DcomLaunch - ok
20:53:04.0285 3156  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
20:53:04.0505 3156  Dhcp - ok
20:53:04.0596 3156  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
20:53:04.0776 3156  Disk - ok
20:53:04.0896 3156  [ 96A48BDA68BF734AAE79F910AB884A34 ] DKbFltr         C:\WINDOWS\system32\Drivers\DKbFltr.sys
20:53:04.0926 3156  DKbFltr ( UnsignedFile.Multi.Generic ) - warning
20:53:04.0926 3156  DKbFltr - detected UnsignedFile.Multi.Generic (1)
20:53:04.0966 3156  dmadmin - ok
20:53:05.0036 3156  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
20:53:05.0297 3156  dmboot - ok
20:53:05.0407 3156  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
20:53:05.0587 3156  dmio - ok
20:53:05.0697 3156  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
20:53:05.0927 3156  dmload - ok
20:53:06.0028 3156  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
20:53:06.0188 3156  dmserver - ok
20:53:06.0328 3156  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
20:53:06.0518 3156  DMusic - ok
20:53:06.0598 3156  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
20:53:06.0659 3156  Dnscache - ok
20:53:06.0739 3156  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
20:53:06.0909 3156  Dot3svc - ok
20:53:06.0929 3156  dpti2o - ok
20:53:06.0989 3156  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
20:53:07.0179 3156  drmkaud - ok
20:53:07.0229 3156  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost         C:\WINDOWS\System32\eapsvc.dll
20:53:07.0390 3156  EapHost - ok
20:53:07.0520 3156  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc           C:\WINDOWS\System32\ersvc.dll
20:53:07.0690 3156  ERSvc - ok
20:53:07.0820 3156  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
20:53:07.0850 3156  Eventlog - ok
20:53:07.0920 3156  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem     C:\WINDOWS\System32\es.dll
20:53:07.0980 3156  EventSystem - ok
20:53:08.0030 3156  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
20:53:08.0251 3156  Fastfat - ok
20:53:08.0321 3156  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
20:53:08.0381 3156  FastUserSwitchingCompatibility - ok
20:53:08.0471 3156  [ 08B8B302AF0D1B3B8543429BBAC8F21F ] Fax             C:\WINDOWS\system32\fxssvc.exe
20:53:08.0661 3156  Fax - ok
20:53:08.0812 3156  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
20:53:09.0032 3156  Fdc - ok
20:53:09.0122 3156  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
20:53:09.0292 3156  Fips - ok
20:53:09.0443 3156  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
20:53:09.0633 3156  Flpydisk - ok
20:53:10.0324 3156  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
20:53:10.0624 3156  FltMgr - ok
20:53:11.0546 3156  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
20:53:11.0716 3156  FontCache3.0.0.0 - ok
20:53:11.0756 3156  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:53:12.0046 3156  Fs_Rec - ok
20:53:12.0307 3156  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:53:12.0527 3156  Ftdisk - ok
20:53:12.0587 3156  [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
20:53:12.0597 3156  GEARAspiWDM - ok
20:53:12.0627 3156  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:53:12.0797 3156  Gpc - ok
20:53:12.0918 3156  [ F0A0041644A2E026044C6EEEC42B7241 ] gv3             C:\WINDOWS\system32\DRIVERS\gv3.sys
20:53:12.0948 3156  gv3 - ok
20:53:13.0048 3156  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
20:53:13.0218 3156  helpsvc - ok
20:53:13.0288 3156  [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ         C:\WINDOWS\System32\hidserv.dll
20:53:13.0468 3156  HidServ - ok
20:53:13.0598 3156  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:53:13.0769 3156  HidUsb - ok
20:53:13.0899 3156  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
20:53:14.0059 3156  hkmsvc - ok
20:53:14.0069 3156  hpn - ok
20:53:14.0199 3156  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
20:53:14.0249 3156  HTTP - ok
20:53:14.0340 3156  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
20:53:14.0510 3156  HTTPFilter - ok
20:53:14.0520 3156  i2omgmt - ok
20:53:14.0530 3156  i2omp - ok
20:53:14.0570 3156  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:53:14.0750 3156  i8042prt - ok
20:53:14.0780 3156  [ 759A944AA02F686EC069E6FF5B5636D8 ] ialm            C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
20:53:14.0960 3156  ialm - ok
20:53:15.0041 3156  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:53:15.0111 3156  idsvc - ok
20:53:15.0141 3156  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
20:53:15.0301 3156  Imapi - ok
20:53:15.0411 3156  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\System32\imapi.exe
20:53:15.0621 3156  ImapiService - ok
20:53:15.0641 3156  ini910u - ok
20:53:15.0681 3156  [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
20:53:15.0842 3156  IntelIde - ok
20:53:15.0882 3156  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:53:16.0052 3156  intelppm - ok
20:53:16.0092 3156  [ 3BB22519A194418D5FEC05D800A19AD0 ] ip6fw           C:\WINDOWS\system32\drivers\ip6fw.sys
20:53:16.0262 3156  ip6fw - ok
20:53:16.0392 3156  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:53:16.0623 3156  IpFilterDriver - ok
20:53:16.0673 3156  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:53:16.0833 3156  IpInIp - ok
20:53:16.0883 3156  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:53:17.0053 3156  IpNat - ok
20:53:17.0073 3156  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:53:17.0254 3156  IPSec - ok
20:53:17.0314 3156  [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda            C:\WINDOWS\system32\DRIVERS\irda.sys
20:53:17.0474 3156  irda - ok
20:53:17.0594 3156  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
20:53:17.0754 3156  IRENUM - ok
20:53:17.0885 3156  [ 2EFE1DB1EC58A26B0C14BFDA122E246F ] Irmon           C:\WINDOWS\System32\irmon.dll
20:53:18.0095 3156  Irmon - ok
20:53:18.0185 3156  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:53:18.0375 3156  isapnp - ok
20:53:18.0596 3156  [ 9AE07549A0D691A103FAF8946554BDB7 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
20:53:18.0626 3156  JavaQuickStarterService - ok
20:53:18.0646 3156  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:53:18.0836 3156  Kbdclass - ok
20:53:18.0866 3156  [ B6D6C117D771C98130497265F26D1882 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
20:53:19.0056 3156  kbdhid - ok
20:53:19.0086 3156  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
20:53:19.0247 3156  kmixer - ok
20:53:19.0287 3156  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
20:53:19.0337 3156  KSecDD - ok
20:53:19.0367 3156  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
20:53:19.0437 3156  lanmanserver - ok
20:53:19.0527 3156  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
20:53:19.0587 3156  lanmanworkstation - ok
20:53:19.0607 3156  lbrtfdc - ok
20:53:19.0657 3156  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
20:53:19.0837 3156  LmHosts - ok
20:53:19.0878 3156  [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
20:53:20.0128 3156  MBAMProtector - ok
20:53:20.0198 3156  [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler   C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
20:53:20.0238 3156  MBAMScheduler - ok
20:53:20.0298 3156  [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService     C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
20:53:20.0348 3156  MBAMService - ok
20:53:20.0398 3156  [ B7550A7107281D170CE85524B1488C98 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
20:53:20.0609 3156  Messenger - ok
20:53:20.0679 3156  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
20:53:20.0909 3156  mnmdd - ok
20:53:20.0989 3156  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc         C:\WINDOWS\System32\mnmsrvc.exe
20:53:21.0129 3156  mnmsrvc - ok
20:53:21.0149 3156  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
20:53:21.0310 3156  Modem - ok
20:53:21.0330 3156  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:53:21.0490 3156  Mouclass - ok
20:53:21.0590 3156  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:53:21.0820 3156  mouhid - ok
20:53:21.0880 3156  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
20:53:22.0041 3156  MountMgr - ok
20:53:22.0111 3156  [ 4D7F2682D29B92A6251B17957AA0B985 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
20:53:22.0141 3156  MozillaMaintenance - ok
20:53:22.0151 3156  mraid35x - ok
20:53:22.0211 3156  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:53:22.0381 3156  MRxDAV - ok
20:53:22.0531 3156  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:53:22.0631 3156  MRxSmb - ok
20:53:22.0682 3156  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC           C:\WINDOWS\System32\msdtc.exe
20:53:22.0902 3156  MSDTC - ok
20:53:22.0972 3156  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
20:53:23.0132 3156  Msfs - ok
20:53:23.0252 3156  MSIServer - ok
20:53:23.0282 3156  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:53:23.0443 3156  MSKSSRV - ok
20:53:23.0453 3156  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:53:23.0603 3156  MSPCLOCK - ok
20:53:23.0663 3156  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
20:53:23.0833 3156  MSPQM - ok
20:53:23.0853 3156  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:53:24.0023 3156  mssmbios - ok
20:53:24.0124 3156  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
20:53:24.0304 3156  MSTEE - ok
20:53:24.0344 3156  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
20:53:24.0374 3156  Mup - ok
20:53:24.0404 3156  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
20:53:24.0574 3156  NABTSFEC - ok
20:53:24.0765 3156  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
20:53:24.0945 3156  napagent - ok
20:53:25.0175 3156  [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate        C:\Programme\Nero\Update\NASvc.exe
20:53:25.0215 3156  NAUpdate - ok
20:53:25.0245 3156  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
20:53:25.0405 3156  NDIS - ok
20:53:25.0436 3156  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
20:53:25.0606 3156  NdisIP - ok
20:53:25.0626 3156  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:53:25.0676 3156  NdisTapi - ok
20:53:25.0716 3156  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:53:25.0876 3156  Ndisuio - ok
20:53:25.0966 3156  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:53:26.0126 3156  NdisWan - ok
20:53:26.0157 3156  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
20:53:26.0177 3156  NDProxy - ok
20:53:26.0207 3156  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
20:53:26.0377 3156  NetBIOS - ok
20:53:26.0477 3156  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
20:53:26.0637 3156  NetBT - ok
20:53:26.0797 3156  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
20:53:26.0938 3156  NetDDE - ok
20:53:26.0948 3156  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
20:53:27.0108 3156  NetDDEdsdm - ok
20:53:27.0148 3156  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\System32\lsass.exe
20:53:27.0308 3156  Netlogon - ok
20:53:27.0378 3156  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
20:53:27.0559 3156  Netman - ok
20:53:27.0759 3156  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:53:27.0789 3156  NetTcpPortSharing - ok
20:53:27.0829 3156  [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394         C:\WINDOWS\system32\DRIVERS\nic1394.sys
20:53:28.0009 3156  NIC1394 - ok
20:53:28.0099 3156  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla             C:\WINDOWS\System32\mswsock.dll
20:53:28.0139 3156  Nla - ok
20:53:28.0179 3156  [ 1926B4EEF80F4A0C8CC8FCBB6B4A7461 ] Nokia USB Generic C:\WINDOWS\system32\drivers\nmwcdc.sys
20:53:28.0300 3156  Nokia USB Generic - ok
20:53:28.0320 3156  [ DF4211B6CA609FF11F43261E04AC92F1 ] Nokia USB Modem C:\WINDOWS\system32\drivers\nmwcdcm.sys
20:53:28.0370 3156  Nokia USB Modem - ok
20:53:28.0410 3156  [ DDFE78EEB4AFCF91EDC52B8F7C7DAD15 ] Nokia USB Phone Parent C:\WINDOWS\system32\drivers\nmwcd.sys
20:53:28.0450 3156  Nokia USB Phone Parent - ok
20:53:28.0480 3156  [ DF4211B6CA609FF11F43261E04AC92F1 ] Nokia USB Port  C:\WINDOWS\system32\drivers\nmwcdcj.sys
20:53:28.0510 3156  Nokia USB Port - ok
20:53:28.0530 3156  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
20:53:28.0720 3156  Npfs - ok
20:53:28.0790 3156  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
20:53:28.0991 3156  Ntfs - ok
20:53:29.0021 3156  [ 15A72D5B8F0B6A718207F14BD5EBB8FF ] NTIDrvr         C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys
20:53:29.0041 3156  NTIDrvr ( UnsignedFile.Multi.Generic ) - warning
20:53:29.0041 3156  NTIDrvr - detected UnsignedFile.Multi.Generic (1)
20:53:29.0061 3156  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp         C:\WINDOWS\System32\lsass.exe
20:53:29.0201 3156  NtLmSsp - ok
20:53:29.0351 3156  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
20:53:29.0551 3156  NtmsSvc - ok
20:53:29.0662 3156  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
20:53:29.0912 3156  Null - ok
20:53:30.0042 3156  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:53:30.0323 3156  NwlnkFlt - ok
20:53:30.0543 3156  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:53:30.0793 3156  NwlnkFwd - ok
20:53:30.0943 3156  [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
20:53:31.0114 3156  ohci1394 - ok
20:53:31.0294 3156  [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose             C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
20:53:31.0314 3156  ose - ok
20:53:31.0344 3156  [ F84785660305B9B903FB3BCA8BA29837 ] Parport         C:\WINDOWS\system32\DRIVERS\parport.sys
20:53:31.0554 3156  Parport - ok
20:53:31.0654 3156  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
20:53:31.0815 3156  PartMgr - ok
20:53:31.0855 3156  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
20:53:32.0095 3156  ParVdm - ok
20:53:32.0115 3156  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
20:53:32.0295 3156  PCI - ok
20:53:32.0305 3156  PCIDump - ok
20:53:32.0325 3156  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
20:53:32.0556 3156  PCIIde - ok
20:53:32.0666 3156  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\DRIVERS\pcmcia.sys
20:53:32.0826 3156  Pcmcia - ok
20:53:32.0836 3156  PDCOMP - ok
20:53:32.0856 3156  PDFRAME - ok
20:53:32.0866 3156  PDRELI - ok
20:53:32.0876 3156  PDRFRAME - ok
20:53:32.0896 3156  perc2 - ok
20:53:32.0906 3156  perc2hib - ok
20:53:32.0996 3156  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
20:53:33.0016 3156  PlugPlay - ok
20:53:33.0036 3156  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent     C:\WINDOWS\System32\lsass.exe
20:53:33.0187 3156  PolicyAgent - ok
20:53:33.0257 3156  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:53:33.0427 3156  PptpMiniport - ok
20:53:33.0457 3156  [ 2CB55427C58679F49AD600FCCBA76360 ] Processor       C:\WINDOWS\system32\DRIVERS\processr.sys
20:53:33.0627 3156  Processor - ok
20:53:33.0637 3156  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
20:53:33.0788 3156  ProtectedStorage - ok
20:53:33.0808 3156  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
20:53:33.0988 3156  PSched - ok
20:53:34.0018 3156  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:53:34.0268 3156  Ptilink - ok
20:53:34.0378 3156  [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
20:53:34.0398 3156  PxHelp20 - ok
20:53:34.0408 3156  ql1080 - ok
20:53:34.0428 3156  Ql10wnt - ok
20:53:34.0438 3156  ql12160 - ok
20:53:34.0458 3156  ql1240 - ok
20:53:34.0468 3156  ql1280 - ok
20:53:34.0509 3156  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:53:34.0739 3156  RasAcd - ok
20:53:34.0879 3156  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
20:53:35.0059 3156  RasAuto - ok
20:53:35.0159 3156  [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda         C:\WINDOWS\system32\DRIVERS\rasirda.sys
20:53:35.0250 3156  Rasirda - ok
20:53:35.0260 3156  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:53:35.0440 3156  Rasl2tp - ok
20:53:35.0550 3156  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
20:53:35.0730 3156  RasMan - ok
20:53:35.0850 3156  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:53:36.0011 3156  RasPppoe - ok
20:53:36.0041 3156  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
20:53:36.0291 3156  Raspti - ok
20:53:36.0361 3156  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:53:36.0521 3156  Rdbss - ok
20:53:36.0642 3156  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:53:36.0822 3156  RDPCDD - ok
20:53:36.0982 3156  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
20:53:37.0012 3156  RDPWD - ok
20:53:37.0072 3156  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
20:53:37.0252 3156  RDSessMgr - ok
20:53:37.0353 3156  [ ED761D453856F795A7FE056E42C36365 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
20:53:37.0553 3156  redbook - ok
20:53:37.0743 3156  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
20:53:37.0913 3156  RemoteAccess - ok
20:53:37.0974 3156  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\System32\locator.exe
20:53:38.0144 3156  RpcLocator - ok
20:53:38.0284 3156  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs           C:\WINDOWS\system32\rpcss.dll
20:53:38.0364 3156  RpcSs - ok
20:53:38.0424 3156  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\System32\rsvp.exe
20:53:38.0655 3156  RSVP - ok
20:53:38.0745 3156  [ 2EF9C0DC26B30B2318B1FC3FAA1F0AE7 ] rtl8139         C:\WINDOWS\system32\DRIVERS\R8139n51.SYS
20:53:38.0785 3156  rtl8139 - ok
20:53:38.0805 3156  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs           C:\WINDOWS\system32\lsass.exe
20:53:38.0995 3156  SamSs - ok
20:53:39.0065 3156  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
20:53:39.0225 3156  SCardSvr - ok
20:53:39.0376 3156  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
20:53:39.0546 3156  Schedule - ok
20:53:39.0756 3156  [ 0F4A80438E7286A0E623582F5F2395BD ] SearchAnonymizer C:\Dokumente und Einstellungen\MR\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe
20:53:39.0776 3156  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - warning
20:53:39.0776 3156  SearchAnonymizer - detected UnsignedFile.Multi.Generic (1)
20:53:39.0826 3156  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:53:40.0006 3156  Secdrv - ok
20:53:40.0167 3156  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
20:53:40.0407 3156  seclogon - ok
20:53:40.0487 3156  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
20:53:40.0647 3156  SENS - ok
20:53:40.0768 3156  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
20:53:40.0918 3156  Serial - ok
20:53:41.0038 3156  [ AAC24421FC74D612A7169C4D4A61B48C ] ServiceLayer    C:\Programme\PC Connectivity Solution\ServiceLayer.exe
20:53:41.0068 3156  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
20:53:41.0068 3156  ServiceLayer - detected UnsignedFile.Multi.Generic (1)
20:53:41.0128 3156  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
20:53:41.0328 3156  Sfloppy - ok
20:53:41.0459 3156  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
20:53:41.0689 3156  SharedAccess - ok
20:53:41.0769 3156  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
20:53:41.0799 3156  ShellHWDetection - ok
20:53:41.0819 3156  Simbad - ok
20:53:41.0969 3156  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Programme\Skype\Updater\Updater.exe
20:53:41.0999 3156  SkypeUpdate - ok
20:53:42.0049 3156  [ 707647A1AA0EDB6CBEF61B0C75C28ED3 ] SMCIRDA         C:\WINDOWS\system32\DRIVERS\smcirda.sys
20:53:42.0099 3156  SMCIRDA - ok
20:53:42.0130 3156  Sparrow - ok
20:53:42.0180 3156  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
20:53:42.0420 3156  splitter - ok
20:53:42.0450 3156  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
20:53:42.0500 3156  Spooler - ok
20:53:42.0530 3156  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
20:53:42.0670 3156  sr - ok
20:53:42.0730 3156  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice       C:\WINDOWS\System32\srsvc.dll
20:53:42.0891 3156  srservice - ok
20:53:42.0931 3156  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
20:53:43.0021 3156  Srv - ok
20:53:43.0101 3156  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
20:53:43.0271 3156  SSDPSRV - ok
20:53:43.0351 3156  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
20:53:43.0582 3156  stisvc - ok
20:53:43.0612 3156  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
20:53:43.0772 3156  swenum - ok
20:53:43.0802 3156  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
20:53:43.0972 3156  swmidi - ok
20:53:44.0032 3156  SwPrv - ok
20:53:44.0062 3156  symc810 - ok
20:53:44.0072 3156  symc8xx - ok
20:53:44.0092 3156  sym_hi - ok
20:53:44.0112 3156  sym_u3 - ok
20:53:44.0142 3156  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
20:53:44.0313 3156  sysaudio - ok
20:53:44.0443 3156  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
20:53:44.0613 3156  SysmonLog - ok
20:53:44.0763 3156  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
20:53:44.0944 3156  TapiSrv - ok
20:53:45.0054 3156  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:53:45.0124 3156  Tcpip - ok
20:53:45.0154 3156  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
20:53:45.0304 3156  TDPIPE - ok
20:53:45.0324 3156  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
20:53:45.0494 3156  TDTCP - ok
20:53:45.0524 3156  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
20:53:45.0665 3156  TermDD - ok
20:53:45.0755 3156  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService     C:\WINDOWS\System32\termsrv.dll
20:53:45.0925 3156  TermService - ok
20:53:46.0055 3156  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
20:53:46.0075 3156  Themes - ok
20:53:46.0175 3156  [ EFEF22B9577E5051057FDE1AE381B50C ] TomTomHOMEService C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
20:53:46.0195 3156  TomTomHOMEService - ok
20:53:46.0205 3156  TosIde - ok
20:53:46.0275 3156  [ 15FB67EB022A74B30E278D19B03DA3B4 ] TPkd            C:\WINDOWS\system32\drivers\TPkd.sys
20:53:46.0295 3156  TPkd ( UnsignedFile.Multi.Generic ) - warning
20:53:46.0295 3156  TPkd - detected UnsignedFile.Multi.Generic (1)
20:53:46.0366 3156  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
20:53:46.0576 3156  TrkWks - ok
20:53:46.0636 3156  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
20:53:46.0786 3156  Udfs - ok
20:53:46.0806 3156  ultra - ok
20:53:46.0946 3156  [ AB0A7CA90D9E3D6A193905DC1715DED0 ] UMWdf           C:\WINDOWS\System32\wdfmgr.exe
20:53:46.0986 3156  UMWdf - ok
20:53:47.0037 3156  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
20:53:47.0227 3156  Update - ok
20:53:47.0337 3156  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
20:53:47.0537 3156  upnphost - ok
20:53:47.0647 3156  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS             C:\WINDOWS\System32\ups.exe
20:53:47.0808 3156  UPS - ok
20:53:47.0948 3156  [ E919708DB44ED8543A7C017953148330 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
20:53:48.0118 3156  usbaudio - ok
20:53:48.0148 3156  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
20:53:48.0308 3156  usbccgp - ok
20:53:48.0338 3156  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:53:48.0489 3156  usbehci - ok
20:53:48.0529 3156  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:53:48.0689 3156  usbhub - ok
20:53:48.0729 3156  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
20:53:48.0889 3156  usbprint - ok
20:53:48.0939 3156  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
20:53:49.0110 3156  usbscan - ok
20:53:49.0130 3156  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:53:49.0270 3156  USBSTOR - ok
20:53:49.0300 3156  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:53:49.0460 3156  usbuhci - ok
20:53:49.0520 3156  [ C90055BD2BB41443462EA715E0876B8D ] V0260VID        C:\WINDOWS\system32\DRIVERS\V0260Vid.sys
20:53:49.0570 3156  V0260VID - ok
20:53:49.0610 3156  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
20:53:49.0770 3156  VgaSave - ok
20:53:49.0781 3156  ViaIde - ok
20:53:49.0811 3156  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
20:53:49.0951 3156  VolSnap - ok
20:53:50.0031 3156  [ 68F106273BE29E7B7EF8266977268E78 ] VSS             C:\WINDOWS\System32\vssvc.exe
20:53:50.0191 3156  VSS - ok
20:53:50.0271 3156  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time         C:\WINDOWS\System32\w32time.dll
20:53:50.0451 3156  W32Time - ok
20:53:50.0542 3156  [ 677AD85E3058C821F5A73CDF7E5B5478 ] w70n51          C:\WINDOWS\system32\DRIVERS\w70n51.sys
20:53:50.0672 3156  w70n51 - ok
20:53:50.0702 3156  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:53:50.0872 3156  Wanarp - ok
20:53:50.0892 3156  WDICA - ok
20:53:50.0942 3156  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
20:53:51.0112 3156  wdmaud - ok
20:53:51.0183 3156  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient       C:\WINDOWS\System32\webclnt.dll
20:53:51.0333 3156  WebClient - ok
20:53:51.0413 3156  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
20:53:51.0593 3156  winmgmt - ok
20:53:51.0693 3156  [ 140EF97B64F560FD78643CAE2CDAD838 ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
20:53:51.0733 3156  WmdmPmSN - ok
20:53:51.0773 3156  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\System32\wbem\wmiapsrv.exe
20:53:51.0944 3156  WmiApSrv - ok
20:53:51.0994 3156  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
20:53:52.0154 3156  wscsvc - ok
20:53:52.0204 3156  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
20:53:52.0374 3156  WSTCODEC - ok
20:53:52.0474 3156  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
20:53:52.0645 3156  wuauserv - ok
20:53:52.0735 3156  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
20:53:52.0955 3156  WZCSVC - ok
20:53:53.0005 3156  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
20:53:53.0185 3156  xmlprov - ok
20:53:53.0256 3156  [ 4FF040FE3099D578131CF62E3B822E0D ] {6080A529-897E-4629-A488-ABA0C29B635E} C:\WINDOWS\system32\drivers\ialmsbw.sys
20:53:53.0296 3156  {6080A529-897E-4629-A488-ABA0C29B635E} - ok
20:53:53.0306 3156  [ 9623FE5A34823EF8BE6BA55CB52222E8 ] {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} C:\WINDOWS\system32\drivers\ialmkchw.sys
20:53:53.0356 3156  {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} - ok
20:53:53.0376 3156  [ 4ACDBB1E48986863B34E696B479F7455 ] {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} C:\WINDOWS\system32\drivers\wA301a.sys
20:53:53.0416 3156  {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} - ok
20:53:53.0416 3156  ================ Scan global ===============================
20:53:53.0536 3156  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
20:53:53.0636 3156  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:53:53.0696 3156  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:53:53.0736 3156  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
20:53:53.0746 3156  [Global] - ok
20:53:53.0746 3156  ================ Scan MBR ==================================
20:53:53.0766 3156  [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk0\DR0
20:53:54.0087 3156  \Device\Harddisk0\DR0 - ok
20:53:54.0117 3156  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR4
20:53:54.0337 3156  \Device\Harddisk1\DR4 - ok
20:53:57.0472 3156  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR6
20:53:57.0962 3156  \Device\Harddisk2\DR6 - ok
20:53:57.0962 3156  ================ Scan VBR ==================================
20:53:58.0002 3156  [ 77B39F30F0D6B363DA6048B9D72F35B7 ] \Device\Harddisk0\DR0\Partition1
20:53:58.0002 3156  \Device\Harddisk0\DR0\Partition1 - ok
20:53:58.0042 3156  [ 64DCC1CB2D04F7BE2626705D075BED62 ] \Device\Harddisk0\DR0\Partition2
20:53:58.0042 3156  \Device\Harddisk0\DR0\Partition2 - ok
20:53:58.0062 3156  [ B140085EEC6B2377E4D2B3B56FE57AC5 ] \Device\Harddisk1\DR4\Partition1
20:53:58.0072 3156  \Device\Harddisk1\DR4\Partition1 - ok
20:53:58.0153 3156  [ EF25E569139DE39A6C0A5B9A20C4DEFB ] \Device\Harddisk2\DR6\Partition1
20:53:58.0163 3156  \Device\Harddisk2\DR6\Partition1 - ok
20:53:58.0173 3156  ============================================================
20:53:58.0173 3156  Scan finished
20:53:58.0173 3156  ============================================================
20:53:58.0313 0524  Detected object count: 6
20:53:58.0313 0524  Actual detected object count: 6
20:56:22.0841 0524  BTWUSB ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0841 0524  BTWUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip 
20:56:22.0851 0524  DKbFltr ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0851 0524  DKbFltr ( UnsignedFile.Multi.Generic ) - User select action: Skip 
20:56:22.0851 0524  NTIDrvr ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0851 0524  NTIDrvr ( UnsignedFile.Multi.Generic ) - User select action: Skip 
20:56:22.0851 0524  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0851 0524  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
20:56:22.0851 0524  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0851 0524  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
20:56:22.0861 0524  TPkd ( UnsignedFile.Multi.Generic ) - skipped by user
20:56:22.0861 0524  TPkd ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

ist das normal das ComboFix über zwei stunden dauert, oder hat es sich aufgehängt?!

nach ein paar stunden tat sich dann gar nichts mehr.
Hab es dann noch mal versucht so wie beschieben, Maus und Tastatur nicht benutzt, aber das selbe.
hab es mal was beobachtet weil ich in der nähe war, der cursor hörte schon nach ca. 10 min auf zu blinken.
was kann ich tun, oder hab ich was falsch gemacht oder übersehen?!

Starte Windows neu, lösch die alte combofix.exe, lade CF neu runter und probier es bitte nochmal.

ich bekomm es einfach nicht hin

combofix kommt nur bis zum durchsuchen von Infizierungen auf dem PC.
egal ob ich den pc 1 stunde oder 8 stunden in ruhe lasse.

ist die combofix.exe noch wo anders zu löschen als auf dem desktop bzw. da wo hin ich sie runtergeladen hab? ich sehe immer nur das ComboFix-Piktogramm ohne exe!

hab ich an irgendwas nicht gedacht es auszuschalten?! Anti-Virus-, malwarebytes und Firewall ist aus.

Letzter Versuch bevor wir CF überspringen: Lade Combofix.exe nochmal neu runter, starte im abgesicherten Modus mit Netzwerktreibern und lass CF da nochmal werkeln

wie mach ich denn das im abgesicherten Modus mit Netzwerktreibern starten?

Sowas hättest du in wenigen Sekunden selbst mit Google gefunden aber hier hast es:


Abgesicherter Modus zur Bereinigung

• Windows mit F8-Taste beim Start in den abgesicherten Modus bringen.
• Starte den Rechner in den abgesicherten Modus mit Netzwerktreibern:
  
  

leider macht combofix da auch nicht mehr.

Dann lassen wir CF sein

Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

• Starte die aswMBR.exe - (aswMBR.exe Anleitung)
  Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
• Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
  Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  
• Klicke auf Scan.
• Warte bitte bis Scan finished successfully im DOS-Fenster steht.
• Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.