| |
| |||||||
Log-Analyse und Auswertung: Analyse und Bereinigung Betriebssystem Windows Vista 32-BitWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
10.10.2012, 19:20
| #1 |
 |  Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Hallo M-K-D-B, ich versuche mal für mein Laptop: TOSHIBA Serie: Satellite P300D -13N / Mother Board-Modell: PSPDCE -01600WGR / CPU: AMD Turion(tm) X2 Dual-Core Mobile RM-70 2,00 GHz, 2 Kerne / Arbeitsspeicher 4,00 GB / Systemtyp 32 Bit-Betriebssystem / GPU: ATI Mobility Radeon HD 3650, Vers. 7.14.10.0567 / Windows Vista Home Premium -32 Bit, Version 6.0.6002 Service Pack 2 ...Dir die ersten Systemdaten aufzuführen. Ebenso eine Auflistung der installierten Software als "install - Editor" als Anhang. Wie gesagt, musste ich am letzten Sonntag meinen Router von der Dt. Telekom (V502W) neu konfigurieren, da WLAN plötzlich nicht mehr funktionierte. Auch ist das Hochfahren des Systems sehr langsam geworden 2-3 min. bis zur Eingabe des Windows Passwortes. Ich wäre Dir sehr dankbar, wenn ich mit Deiner Unterstützung eine Systemanalyse durchführen könnte und anschließend evtl. notwendige Bereinigungen. Gruss Simplex
__________________ Das Grösste und Schönste, ist das Einfache!  Geändert von Simplex (10.10.2012 um 19:31 Uhr) |
|
10.10.2012, 19:25
| #2 |
| /// TB-Ausbilder   | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen. Bitte beachte folgende Hinweise:
Vielen Dank für die ersten Informationen. Na dann schaun wir mal, ob wirklich Malware der Grund für deine Probleme sind.  Schritt 1 Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop (falls noch nicht vorhanden).
Code:
ATTFilter activex
netsvcs
msconfig
drivers32
safebootminimal
safebootnetwork
CREATERESTOREPOINT
Schritt 2 Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop.
Klicke den Re-enable Button nicht ohne Anweisung. Schritt 3 Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit. Schritt 4 Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen. Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Bitte poste mit deiner nächsten Antwort
|
|
10.10.2012, 19:48
| #3 | |||
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Hallo M-K-D-B,
__________________danke, dass Du Dich meiner annimmst und mich als PC-Laien an die Hand nimmst .....habe schon jetzt Herzklopfen wegen meiner Unkenntnis i. S. Computer! Ich werde ernsthaft bemüht sein jede Deiner Aktionen zu verstehen und genauestens ausführen ....folgerichtig werde ich langsamer sein als normal. Ich beginne morgen, wenn ich ausgeschlafen bin und keinen Stress habe. Gruss Simplex Hi M-K-D-B,Moin, moin M-K-D-B, Hatte Sorge Ich würde Nicht mit der Logdatei von OTL-Scan klar kommen und bin Raus aus dem Bett und vor Höhle Rechner .... wollte es selber wissen, ob ich zu dusselig bin für diese Technologie! Nachfolgend die zwei OTL-Scan-Logdateien: 1). OTL.Txt Code:
ATTFilter OTL logfile created on: 11.10.2012 04:28:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\******* *****\Downloads\TB-Systemanalyse und -bereinigung
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,22 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 66,10% Memory free
6,63 Gb Paging File | 5,42 Gb Available in Paging File | 81,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,41 Gb Total Space | 121,46 Gb Free Space | 81,29% Space Free | Partition Type: NTFS
Drive E: | 147,21 Gb Total Space | 139,57 Gb Free Space | 94,81% Space Free | Partition Type: NTFS
Computer Name: ******* *****-PC | User Name: ******* ***** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.10.10 21:17:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\******* *****\Downloads\TB-Systemanalyse und -bereinigung\OTL (1).exe
PRC - [2012.09.07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.09.07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012.08.17 21:43:06 | 000,218,880 | ---- | M] (Kaspersky Lab ZAO) -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.05.29 13:09:52 | 001,528,672 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
PRC - [2012.05.29 13:09:52 | 001,220,960 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
PRC - [2011.03.28 20:31:16 | 000,193,920 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.04.17 00:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2008.01.17 16:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\Toshiba\Power Saver\TosCoSrv.exe
PRC - [2007.12.03 17:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\Toshiba\SMARTLogService\TosIPCSrv.exe
========== Modules (No Company Name) ==========
MOD - [2012.09.05 17:54:28 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2012.08.17 21:38:56 | 000,479,160 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
MOD - [2012.05.24 10:45:42 | 000,138,112 | ---- | M] () -- C:\Programme\IObit\Advanced SystemCare 5\ASCv5ExtMenu.dll
========== Services (SafeList) ==========
SRV - [2012.10.01 17:17:40 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.07 17:04:46 | 000,676,936 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.09.07 17:04:46 | 000,399,432 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.09.07 01:25:13 | 000,343,024 | ---- | M] () [Disabled | Stopped] -- C:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe -- (ALDITALKVerbindungsassistent_Service)
SRV - [2012.08.17 21:43:06 | 000,218,880 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe -- (AVP)
SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.06.19 13:44:22 | 000,777,728 | ---- | M] (Eastman Kodak Company) [Disabled | Stopped] -- C:\Programme\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe -- (Kodak AiO Status Monitor Service)
SRV - [2012.06.18 21:13:46 | 000,394,712 | ---- | M] (Eastman Kodak Company) [Disabled | Stopped] -- C:\Programme\Kodak\AiO\Center\EKAiOHostService.exe -- (Kodak AiO Network Discovery Service)
SRV - [2012.05.29 13:09:52 | 001,528,672 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012.05.26 12:04:52 | 000,913,792 | ---- | M] (IObit) [Auto | Stopped] -- C:\Programme\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5)
SRV - [2011.09.27 21:03:28 | 000,295,192 | ---- | M] (Logitech, Inc.) [Disabled | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2011.03.28 20:31:14 | 001,713,536 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2008.04.17 00:19:48 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2008.04.11 11:57:14 | 000,124,264 | ---- | M] (TOSHIBA CORPORATION) [Disabled | Stopped] -- c:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2008.04.11 00:51:58 | 000,083,312 | ---- | M] (TOSHIBA Corporation) [Disabled | Stopped] -- C:\Programme\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.01.17 16:27:34 | 000,431,456 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Programme\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007.12.03 17:03:52 | 000,126,976 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Programme\Toshiba\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service)
SRV - [2007.11.21 17:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Disabled | Stopped] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2007.02.12 16:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Disabled | Stopped] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)
SRV - [2006.08.23 16:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Disabled | Stopped] -- C:\Programme\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012.09.27 19:18:53 | 000,587,096 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2012.09.18 13:48:45 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2012.09.18 13:48:45 | 000,025,944 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2012.09.07 17:04:46 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.09.07 01:13:42 | 000,100,224 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewsercd.sys -- (ewsercd)
DRV - [2012.09.05 17:54:29 | 000,014,352 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2012.09.05 17:54:27 | 003,552,768 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2012.08.13 16:49:44 | 000,144,344 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2012.08.02 15:09:30 | 000,024,408 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2012.06.19 17:28:12 | 000,136,024 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2012.06.08 11:38:12 | 000,043,608 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2012.05.08 15:21:42 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.09.02 08:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2011.09.02 08:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2011.03.18 18:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan)
DRV - [2008.12.13 11:27:50 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008.05.07 11:20:10 | 000,145,952 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2008.04.23 17:15:26 | 000,131,712 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2008.04.15 10:13:14 | 000,051,160 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2008.04.10 21:25:30 | 000,285,184 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
DRV - [2008.03.25 13:54:02 | 000,041,472 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2008.03.19 11:38:24 | 000,074,112 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2008.03.18 18:02:18 | 000,292,864 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rtl8187B.sys -- (RTL8187B)
DRV - [2008.03.04 10:32:00 | 000,188,416 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2008.01.22 20:57:48 | 000,054,144 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007.12.17 11:45:20 | 000,018,432 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2007.11.29 09:45:44 | 000,036,608 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2007.11.27 10:39:40 | 000,164,400 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007.11.09 14:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2007.10.18 14:25:00 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007.10.17 07:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007.10.02 11:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007.04.23 10:50:50 | 000,025,896 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\RtlProt.sys -- (RtlProt)
DRV - [2007.04.09 17:13:00 | 000,008,192 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\QIOMem.sys -- (QIOMem)
DRV - [2007.01.15 17:57:08 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\livecamv.sys -- (RLDesignVirtualAudioCableWdm)
DRV - [2006.10.23 16:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006.10.18 11:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2005.01.07 05:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {008A3354-2167-48ED-AD52-9E3CEB1B9927}
IE - HKLM\..\SearchScopes\{008A3354-2167-48ED-AD52-9E3CEB1B9927}: "URL" = hxxp://www.google.de/search?q={searchTerms}&rls=com.microsoft:*:IE-SearchBox&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7;
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\..\SearchScopes,DefaultScope = {008A3354-2167-48ED-AD52-9E3CEB1B9927}
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\..\SearchScopes\{008A3354-2167-48ED-AD52-9E3CEB1B9927}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7TSEA_deDE500
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rlz=1I7TSEA_deDE500&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = hxxp://127.0.0.1:4664/search&s=AGs1Xqa3pRMFx0fqX9ZWv0LLIlw?q={searchTerms}
IE - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.selectedEngine: "Wikipedia (de)"
FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.9
FF - prefs.js..extensions.enabledAddons: piclens@cooliris.com:1.12.3.55472
FF - prefs.js..extensions.enabledAddons: elemhidehelper@adblockplus.org:1.1.4
FF - prefs.js..extensions.enabledAddons: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.2.0
FF - prefs.js..extensions.enabledAddons: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.5
FF - prefs.js..extensions.enabledAddons: {582195F5-92E7-40a0-A127-DB71295901D7}:0.6.4.1
FF - prefs.js..extensions.enabledAddons: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.18
FF - prefs.js..extensions.enabledAddons: searchy@searchy:2.5.0
FF - prefs.js..extensions.enabledAddons: ich@maltegoetz.de:1.4.2
FF - prefs.js..extensions.enabledAddons: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.5.4
FF - prefs.js..extensions.enabledAddons: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:5.9
FF - prefs.js..extensions.enabledAddons: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.3
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?sourceid=navclient&hl=de&q="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2012.09.06 01:16:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2012.09.06 01:16:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2012.09.06 01:16:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\anti_banner@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2012.09.06 01:16:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\online_banking@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2012.09.06 01:16:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.08 15:27:48 | 000,000,000 | ---D | M]
[2012.10.11 02:41:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\Extensions
[2012.09.06 19:18:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions
[2012.09.06 01:57:42 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012.09.06 02:06:47 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2012.09.06 01:53:31 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.09.06 02:03:35 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\ich@maltegoetz.de
[2012.09.06 02:05:12 | 000,000,000 | ---D | M] (SpeedFox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\jid1-uabu5A9hduqzCw@jetpack
[2012.09.06 01:55:00 | 000,000,000 | ---D | M] (Cooliris) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\rhh8twnq.default\extensions\piclens@cooliris.com
[2012.10.10 13:13:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions
[2012.10.10 13:13:14 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012.09.12 21:58:17 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2012.10.05 17:02:33 | 000,000,000 | ---D | M] (WOT) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012.09.16 11:35:16 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012.10.02 01:17:48 | 000,000,000 | ---D | M] (Wörterbuch Deutsch (de-DE), Hunspell-unterstützt) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\de_DE@dicts.j3e.de
[2012.10.02 01:09:16 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\de-DE@dictionaries.addons.mozilla.org
[2012.09.15 11:47:46 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\ich@maltegoetz.de
[2012.09.12 21:30:15 | 000,000,000 | ---D | M] (SpeedFox) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\jid1-uabu5A9hduqzCw@jetpack
[2012.09.12 21:14:22 | 000,000,000 | ---D | M] (Cooliris) -- C:\Users\******* *****\AppData\Roaming\mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\extensions\piclens@cooliris.com
[2012.09.06 01:56:31 | 000,091,769 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\elemhidehelper@adblockplus.org.xpi
[2012.09.06 02:02:29 | 000,114,656 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\searchy@searchy.xpi
[2012.09.06 02:00:11 | 000,242,709 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi
[2012.09.06 18:00:34 | 000,527,931 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2012.09.06 02:01:05 | 000,061,403 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
[2012.09.06 19:08:16 | 000,145,352 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2012.09.06 19:18:14 | 000,634,964 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.09.06 01:59:10 | 000,685,019 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\rhh8twnq.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi
[2012.09.12 21:18:17 | 000,091,769 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\elemhidehelper@adblockplus.org.xpi
[2012.09.12 21:26:23 | 000,114,656 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\searchy@searchy.xpi
[2012.09.12 23:32:23 | 000,012,710 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\youtube_downloader@anishsane.googlepages.com.xpi
[2012.09.12 21:22:35 | 000,242,709 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi
[2012.10.10 13:13:14 | 000,529,404 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2012.09.25 20:12:36 | 000,061,406 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
[2012.09.12 23:25:40 | 000,145,352 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2012.09.12 23:13:55 | 000,634,964 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.09.12 21:21:30 | 000,685,019 | ---- | M] () (No name found) -- C:\Users\******* *****\AppData\Roaming\mozilla\firefox\profiles\tbct8rhz.Standard-Benutzer\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}.xpi
[2012.09.08 15:27:48 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.09.05 22:47:09 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.03.18 19:56:37 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Safe Money Plugin) - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [EMET Notifier] C:\Programme\EMET\EMET_notifier.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HSON] C:\Programme\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [TPwrMain] C:\Programme\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1591530547-3273788228-829058510-1000..\Run: [Advanced SystemCare 5] C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe (IObit)
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Programme\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Programme\Toshiba\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm ()
O9 - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - hxxp://rover.ebay.com/rover/1/707-44556-9400-3/4 File not found
O9 - Extra Button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - hxxp://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home File not found
O9 - Extra Button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1591530547-3273788228-829058510-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{455938CF-7898-43B2-B5A6-42E41A6D3CBD}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AE0C0433-21D0-41B7-897A-39DB7903749F}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\******* *****\Pictures\Picasa\Hintergründe\picasabackground.bmp
O24 - Desktop BackupWallPaper: C:\Users\******* *****\Pictures\Picasa\Hintergründe\picasabackground.bmp
O27 - HKLM IFEO\alditalkverbindungsassistent.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\bip_camera1.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\dmflauncher.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\dvdmf.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\eccenter1.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\googledesktop.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\googledesktopsetup.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\setup.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\todisc.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\tosbtproc1.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\toshddvd.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\tosramutil.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\uninstaller.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\usrguide.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\wirelessftp1.exe: Debugger - C:\Program Files\TuneUp Utilities 2012\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{9c6ed00a-f835-11e1-83de-001e689fc719}\Shell - "" = AutoRun
O33 - MountPoints2\{9c6ed00a-f835-11e1-83de-001e689fc719}\Shell\AutoRun\command - "" = D:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{9c6ed049-f835-11e1-83de-001e689fc719}\Shell - "" = AutoRun
O33 - MountPoints2\{9c6ed049-f835-11e1-83de-001e689fc719}\Shell\AutoRun\command - "" = D:\.\Autorun.exe AUTORUN=1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk - C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe - (TOSHIBA CORPORATION.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Launcher.lnk - C:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe - ()
MsConfig - StartUpFolder: C:^Users^******* *****^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Produktregistrierung.lnk - C:\Programme\Common Files\Logishrd\eReg\SetPoint\eReg.exe - (Leader Technologies/Logitech)
MsConfig - StartUpReg: 00TCrdMain - hkey= - key= - File not found
MsConfig - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: Apoint - hkey= - key= - C:\Programme\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
MsConfig - StartUpReg: Camera Assistant Software - hkey= - key= - C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
MsConfig - StartUpReg: cfFncEnabler.exe - hkey= - key= - File not found
MsConfig - StartUpReg: Conime - hkey= - key= - File not found
MsConfig - StartUpReg: ehTray.exe - hkey= - key= - C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
MsConfig - StartUpReg: EKIJ5000StatusMonitor - hkey= - key= - File not found
MsConfig - StartUpReg: EvtMgr6 - hkey= - key= - C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
MsConfig - StartUpReg: Google Desktop Search - hkey= - key= - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
MsConfig - StartUpReg: HDMICtrlMan - hkey= - key= - C:\Programme\Toshiba\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.)
MsConfig - StartUpReg: ITSecMng - hkey= - key= - File not found
MsConfig - StartUpReg: Picasa Media Detector - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
MsConfig - StartUpReg: SmoothView - hkey= - key= - File not found
Drivers32: msacm.dvacm - C:\Programme\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
SafeBootMin: AppMgmt - File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MCODS -
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012.10.10 22:12:02 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012.10.10 22:11:53 | 003,602,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012.10.10 22:11:53 | 003,550,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012.10.08 18:58:58 | 000,000,000 | ---D | C] -- C:\Users\******* *****\FirefoxPortable
[2012.10.02 16:59:56 | 000,000,000 | ---D | C] -- C:\Users\******* *****\Documents\Protokoll zu Malware
[2012.10.02 14:43:15 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Roaming\Malwarebytes
[2012.10.02 14:42:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.10.02 14:42:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.10.02 14:42:45 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.10.02 14:42:45 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.10.01 23:28:06 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\{44E102E4-3BD7-4B7A-8DC1-BA479C8FEF5B}
[2012.10.01 16:43:31 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\Macromedia
[2012.09.22 18:51:38 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2012.09.22 12:04:49 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enhanced Mitigation Experience Toolkit
[2012.09.22 12:04:49 | 000,000,000 | ---D | C] -- C:\Program Files\EMET
[2012.09.22 10:57:51 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.09.22 10:57:49 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.09.22 10:57:49 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.09.22 10:57:49 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.09.22 10:57:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.09.22 10:57:48 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.09.22 10:57:48 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.09.22 10:57:46 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.09.18 21:26:05 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\{56D3CF0E-C364-4F9C-AE06-5EDC0F00C61E}
[2012.09.18 21:07:45 | 000,000,000 | ---D | C] -- C:\Users\******* *****\Documents\Bluetooth
[2012.09.17 10:53:51 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\{0845B176-AEC0-4EAD-8447-AC6DBCF52CB3}
[2012.09.12 14:45:52 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\Microsoft Games
[2012.09.12 14:01:27 | 000,000,000 | ---D | C] -- C:\Users\******* *****\Documents\Empfangene Dateien
[2012.09.12 14:00:49 | 000,000,000 | ---D | C] -- C:\Users\******* *****\Documents\Eigene Dateien
[2012.09.12 13:55:08 | 000,000,000 | ---D | C] -- C:\Users\******* *****\Documents\Programm Aktivierung
[2012.09.11 16:00:59 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\{B85C93F2-3D63-41EA-9E76-D6C5E1BCE710}
[2012.09.11 16:00:59 | 000,000,000 | ---D | C] -- C:\Users\******* *****\AppData\Local\{253760DF-4E37-4DDD-AB4C-7625F001CB24}
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.10.11 04:26:49 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.10.11 04:26:49 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.10.11 03:35:01 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.10.11 02:27:12 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.10.11 02:26:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.10.10 23:34:08 | 000,000,901 | ---- | M] () -- C:\Users\******* *****\Desktop\tdsskiller (4) - Verknüpfung.lnk
[2012.10.10 23:33:58 | 000,000,881 | ---- | M] () -- C:\Users\******* *****\Desktop\aswMBR (3) - Verknüpfung.lnk
[2012.10.10 23:33:48 | 000,000,891 | ---- | M] () -- C:\Users\******* *****\Desktop\Defogger (2) - Verknüpfung.lnk
[2012.10.10 23:33:08 | 000,000,866 | ---- | M] () -- C:\Users\******* *****\Desktop\OTL (1) - Verknüpfung.lnk
[2012.10.10 22:05:57 | 000,026,861 | ---- | M] () -- C:\Users\******* *****\Documents\Trojaner-Board 10.2012.odt
[2012.10.09 18:07:42 | 000,022,850 | ---- | M] () -- C:\Users\******* *****\Documents\Olli wg. Ff.odt
[2012.10.05 13:19:39 | 000,346,848 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.10.05 13:08:56 | 000,000,680 | ---- | M] () -- C:\Users\******* *****\AppData\Local\d3d9caps.dat
[2012.10.02 10:49:06 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.10.01 17:17:40 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.10.01 17:17:40 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.09.29 23:32:42 | 000,015,930 | ---- | M] () -- C:\Users\******* *****\Documents\Palästina un-Mitglied.odt
[2012.09.27 21:06:33 | 000,027,571 | ---- | M] () -- C:\Users\******* *****\Documents\Ernährung.odt
[2012.09.27 19:18:53 | 000,587,096 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2012.09.26 20:01:26 | 000,022,478 | ---- | M] () -- C:\Users\******* *****\Documents\Doppelagent.odt
[2012.09.18 13:48:45 | 000,025,944 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klmouflt.sys
[2012.09.18 13:48:45 | 000,025,944 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klkbdflt.sys
[2012.09.13 15:28:08 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.10.10 23:34:08 | 000,000,901 | ---- | C] () -- C:\Users\******* *****\Desktop\tdsskiller (4) - Verknüpfung.lnk
[2012.10.10 23:33:58 | 000,000,881 | ---- | C] () -- C:\Users\******* *****\Desktop\aswMBR (3) - Verknüpfung.lnk
[2012.10.10 23:33:48 | 000,000,891 | ---- | C] () -- C:\Users\******* *****\Desktop\Defogger (2) - Verknüpfung.lnk
[2012.10.10 23:33:08 | 000,000,866 | ---- | C] () -- C:\Users\******* *****\Desktop\OTL (1) - Verknüpfung.lnk
[2012.10.10 21:40:05 | 000,026,861 | ---- | C] () -- C:\Users\******* *****\Documents\Trojaner-Board 10.2012.odt
[2012.10.08 22:20:55 | 000,022,850 | ---- | C] () -- C:\Users\******* *****\Documents\Olli wg. Ff.odt
[2012.10.05 13:08:56 | 000,000,680 | ---- | C] () -- C:\Users\******* *****\AppData\Local\d3d9caps.dat
[2012.10.01 17:17:43 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.29 23:19:53 | 000,015,930 | ---- | C] () -- C:\Users\******* *****\Documents\Palästina un-Mitglied.odt
[2012.09.27 21:06:31 | 000,027,571 | ---- | C] () -- C:\Users\******* *****\Documents\Ernährung.odt
[2012.09.19 22:12:38 | 000,022,478 | ---- | C] () -- C:\Users\******* *****\Documents\Doppelagent.odt
[2012.09.07 22:39:14 | 000,031,616 | ---- | C] () -- C:\Windows\System32\drivers\livecamv.sys
[2012.09.07 03:43:21 | 000,000,000 | ---- | C] () -- C:\Users\******* *****\AppData\Roaming\wklnhst.dat
[2012.09.05 23:09:36 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2012.09.05 23:09:36 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012.09.05 20:34:01 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2012.09.05 19:26:07 | 000,024,576 | ---- | C] () -- C:\Users\******* *****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.09.05 03:01:50 | 000,131,072 | ---- | C] () -- C:\Windows\System32\EnumDevLib.dll
[2012.09.05 02:39:42 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
========== ZeroAccess Check ==========
[2006.11.02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Custom Scans ==========
< >
< End of report >
Code:
ATTFilter OTL Extras logfile created on: 11.10.2012 04:28:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\******* *****\Downloads\TB-Systemanalyse und -bereinigung
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,22 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 66,10% Memory free
6,63 Gb Paging File | 5,42 Gb Available in Paging File | 81,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,41 Gb Total Space | 121,46 Gb Free Space | 81,29% Space Free | Partition Type: NTFS
Drive E: | 147,21 Gb Total Space | 139,57 Gb Free Space | 94,81% Space Free | Partition Type: NTFS
Computer Name: ************-PC | User Name: ******* ***** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1591530547-3273788228-829058510-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{5F4659B9-4440-411C-8C80-73216059CCBB}" = lport=5353 | protocol=17 | dir=in | name=bonjour port 5353 |
"{7FA1B8F0-819D-49F4-9638-CBDF4CC6E890}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{D98757CD-6D33-4F4F-89C9-BFF0B5150AD0}" = lport=9322 | protocol=6 | dir=in | name=ekdiscovery |
"{E6D6048B-263A-435A-BCC1-EA7555F567BC}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04DE9FA9-FFF8-4991-A5F1-B519FEFA054B}" = protocol=6 | dir=in | app=c:\program files\kodak\aio\center\kodak.statistics.exe |
"{0A8C435E-3404-4B13-AEB0-C7F29DBFDAB5}" = protocol=6 | dir=in | app=c:\programdata\kodak\installer\setup.exe |
"{1B80F2D8-385A-48FB-8AAE-BB9B18A36349}" = protocol=6 | dir=in | app=c:\program files\kodak\aio\center\aiohomecenter.exe |
"{28FE07B8-D9A7-461A-A243-4E78C7206B09}" = protocol=17 | dir=in | app=c:\program files\kodak\aio\center\kodak.statistics.exe |
"{6E72987A-E7E6-450C-B859-812BAB133C1C}" = protocol=6 | dir=in | app=c:\program files\kodak\aio\center\networkprinterdiscovery.exe |
"{95CDEDBA-73D2-4675-9C2F-36CA7C8DCDFE}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{9BBBA742-EBE9-4AB3-B518-59807B76F3F3}" = protocol=17 | dir=in | app=c:\program files\kodak\aio\center\aiohomecenter.exe |
"{9F80D27E-86FF-4BB4-A854-9DE7DF4700FD}" = protocol=17 | dir=in | app=c:\programdata\kodak\installer\setup.exe |
"{C82DA83E-A97F-42FF-99B2-0F611EE785D7}" = protocol=17 | dir=in | app=c:\program files\kodak\aio\firmware\kodakaioupdater.exe |
"{E6FA788C-6416-4C21-B98C-A7E13AE16F4F}" = protocol=6 | dir=in | app=c:\program files\kodak\aio\firmware\kodakaioupdater.exe |
"{F519D3CB-64F5-4DDA-8AEE-307119FD9D11}" = protocol=17 | dir=in | app=c:\program files\kodak\aio\center\networkprinterdiscovery.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02CA24DD-C8B0-4280-BE53-7862869C2EB1}" = Realtek WiFi Protected Setup Library
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0645A454-AD44-4F0D-99CF-6B762735AD1F}" = aioprnt
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D5D0BEE-FBA9-4928-A50D-6CDFAB827755}" = TOSHIBA ConfigFree
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{14DC0059-00F1-4F62-BD1A-AB23CD51A95E}" = Adobe AIR
"{156E98D0-1AEC-4013-A41A-94A1A01BFD68}" = O2Micro Flash Memory Card Reader Driver (x86)
"{15D9406C-4151-2826-781F-9187C835756E}" = Skins
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1C971EE3-B4C4-4367-9676-57549919C6CE}" = TOSHIBA Benutzerhandbücher
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}" = OpenOffice.org 3.4.1
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{27EF8E7F-88D1-4ec5-ADE2-7E447FDF114E}" = Kodak AIO Printer
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{2BB45CD2-19FE-1D81-0EB2-2CA43AFFB6A2}" = ccc-core-static
"{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{376348C2-E372-48BC-A138-E896757BD86A}" = aioscnnr
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCC52F3-5B8E-9F6E-2717-2A23D006617B}" = Catalyst Control Center Localization German
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{3FD81C9E-C086-D974-FB9C-3D8C5ACF4403}" = ccc-utility
"{48B41C3A-9A92-4B81-B653-C97FEB85C910}" = C4USelfUpdater
"{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
"{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013
"{56BA241F-580C-43D2-8403-947241AAE633}" = center
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{5DBB2872-F77C-619E-0BE4-F21CFBEEDE0C}" = Catalyst Control Center Core Implementation
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder
"{777BE01D-64F2-8615-49C6-5FBE4BE5B33C}" = Catalyst Control Center Graphics Full New
"{7CD8E2EF-AD40-7BD3-13E5-2B2847E568DD}" = ATI Catalyst Install Manager
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{895722FE-25FE-4854-95AC-B0C42F9DBEDA}" = REALTEK RTL8187B Wireless LAN Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B56EFD7-7B62-2AF8-DAB4-CF588668B581}" = CCC Help German
"{8C208B1A-349C-4ABA-B52C-D8A32E503C17}" = Catalyst Control Center - Branding
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{940421FC-FD85-0F4D-6FD4-DDBEA06009A9}" = Catalyst Control Center Graphics Full Existing
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = CD/DVD Drive Acoustic Silencer
"{A0FB03BC-5623-798A-0F7D-11E56BE1A652}" = Catalyst Control Center Graphics Light
"{A11DC312-C485-8DE8-9DBB-D037228124D6}" = Catalyst Control Center Graphics Previews Vista
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Disc Creator
"{BE94C681-68E2-4561-8ABC-8D2E799168B4}" = essentials
"{BFBCF96F-7361-486A-965C-54B17AC35421}" = ocr
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CE026CFE-73FE-4FED-9D5F-2C8D4DB512B0}" = TuneUp Utilities Language Pack (de-DE)
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{DE7A5DDF-47B3-42FF-A082-E158DEA37392}" = EMET
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0F274B7-592B-4669-8FB8-8D9825A09858}" = KODAK All-in-One Software
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E648FE50-7E0B-45E2-92ED-AB1FD4493293}" = Adobe Flash Player 11 Plugin
"{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{EF53BFAB-4C10-40DB-A82D-9B07111715C6}" = aioscnnr
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F81AB80B-5BB7-4E36-8BA5-E07541CE1BFC}" = HDMI Control Manager
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Advanced SystemCare 5_is1" = Advanced SystemCare 5
"ALDITALKVerbindungsassistent" = ALDI TALK Verbindungsassistent
"CCleaner" = CCleaner
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_5051&SUBSYS_1179" = HDAUDIO Soft Data Fax Modem with SmartCP
"Google Desktop" = Google Desktop
"InstallShield_{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
"InstallShield_{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder
"InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Internet Security 2013
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.0.1400
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 4.0 (x86 de)" = Mozilla Firefox 4.0 (x86 de)
"Picasa 3" = Picasa 3
"sp6" = Logitech SetPoint 6.32
"Speccy" = Speccy
"SpeedFan" = SpeedFan (remove only)
"TuneUp Utilities 2012" = TuneUp Utilities 2012
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
"WinLiveSuite" = Windows Live Essentials
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 06.10.2012 18:56:10 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
Error - 06.10.2012 19:04:07 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
Error - 06.10.2012 20:26:00 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
Error - 06.10.2012 20:45:19 | Computer Name = ************-PC | Source = EventSystem | ID = 4621
Description =
Error - 07.10.2012 05:12:03 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
Error - 07.10.2012 05:17:08 | Computer Name = ************-PC | Source = EventSystem | ID = 4621
Description =
Error - 07.10.2012 05:19:43 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
Error - 07.10.2012 05:31:10 | Computer Name = ************-PC | Source = RasClient | ID = 20227
Description =
Error - 07.10.2012 05:31:38 | Computer Name = ************-PC | Source = RasClient | ID = 20227
Description =
Error - 07.10.2012 06:58:04 | Computer Name = ************-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =
Error - 05.09.2012 17:45:11 | Computer Name = ************-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =
< End of report >
....weitere folgen, wenn ich  !Ich habe bestmöglich meinen Klarnamen in ******* ***** überschrieben, weil ich das als Sicherheitstipp hierzuforum gelesen habe. Mit meinen allerbesten Grüßen Simplex Hallo, nach kurzer Kaffeepause begann ich mit Schritt 2. und schon gibt es ein Problem. Der Scan wurde als Administrator gestartet: ....und es kommt sofort die Meldung Zitat:
Und schon kommt die nächste Meldung: Zitat:
Es erscheint gleich -ca. nach 10 bis 15 sec. die Meldung: Zitat:
 Gruß Simplex Nachtrag: 11/10/2012 - 12:36 Uhr Diese Logdatei habe ich gerade eben entdeckt: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:31 on 11/10/2012 (******* *****)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
__________________ |
|
11.10.2012, 13:40
| #4 |
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, das mit DeFogger hat schon seine Richtigkeit. Mir scheint aber, dass du meine Anweisungen nicht genau gelesen hast.  Du sollst alle Tools, auf dem Desktop speichern und nicht hier: C:\Users\******* *****\Downloads\TB-Systemanalyse und -bereinigung Du brauchst jetzt aber OTL nicht nochmal starten. Fahre bitte mit den Schritten 3 und 4 fort und post die Logdateien. |
|
11.10.2012, 15:33
| #5 | |
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Hey, Oh, sorry, ich habe einen Downloading gestartet und dann von dort (DOWNLOAD) kopiert in den Dateiordner "DESKTOP" und von dort wieder - mit der linken Maustaste angeklickt und dann mit der rechten Maustaste über "SENDEN an DESKTOP" (Verknüpfung erstellen) ....alle vier Programm-Symbole sind jetzt auf dem Desktop und ich habe von dort das Programm OTL und Defogger (immer als Administrator) gestartet. Bin jetzt doch verunsichert, ....war das falsch und wie würde sonst ein Tool auf dem Desktop abgespeichert werden??? Bitte um Nachsicht; ich bin sehr bemüht und lese genauestens, nur die sachgerechte Umsetzung ist mir leider nicht immer bekannt. Ich versuche mich jetzt an Schritt 3. + 4. ....bis bald. Gruß Simplex Bevor ich Schritt 3. + 4. in Angriff nehme, eine Frage: Ich habe hierzu die Anleitung gelesen und da steht, dass: Zitat:
__________________ Das Grösste und Schönste, ist das Einfache! |
|
11.10.2012, 17:35
| #6 | |||
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, wie es mir scheint, machst du dir das Leben nur unnötig "kompliziert". Zitat:
Somit war das hier: Zitat:
Zitat:
Extras > Einstellungen > Allgemein > Downloads Unter Internet Explorer: Hier kannst du beim Download "Speichern unter" auswählen. Wegen aswMBR: Wenn du diese exe Datei auch im Download Ordner abgespeichert hast, dann kannst du darauf rechtsklicken -> kopieren auswählen, zum Desktop gehen und dort mit rechtsklick -> einfügen wählen. AV deaktivieren ist nicht unbedingt notwendig für aswMBR und TDSSKiller. Halte dich nicht mit derartigen Kleinigkeiten auf... und im nächsten Post will ich die beiden Logdateien von aswMBr und TDSSKiller sehen. |
|
11.10.2012, 17:47
| #7 |
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit --------------------------------------------------------------------------------------------------------------------------------------- 11/10/2012 - 18:25 Uhr Hey, M-K-D-B, es ist der Schritt 3. astrein abgelaufen - null problemo! Scan als Administrator ausgeführt - ohne Deaktivierung Anti-Virenschutz und Beanstandung durch den Firewall! Schritt 3. Logdatei aswMBR Version 0.9.9.1665 Code:
ATTFilter aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-11 17:43:00
-----------------------------
17:43:00.827 OS Version: Windows 6.0.6002 Service Pack 2
17:43:00.827 Number of processors: 2 586 0x301
17:43:00.827 ComputerName: MANFREDTHIEL-PC UserName: Manfred Thiel
17:43:03.557 Initialize success
17:45:57.924 AVAST engine defs: 12101100
17:52:37.050 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
17:52:37.050 Disk 0 Vendor: TOSHIBA_MK3252GSX LV010M Size: 305245MB BusType: 3
17:52:37.128 Disk 0 MBR read successfully
17:52:37.128 Disk 0 MBR scan
17:52:37.159 Disk 0 Windows VISTA default MBR code
17:52:37.174 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048
17:52:37.206 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 153000 MB offset 3074048
17:52:37.252 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 150743 MB offset 316418048
17:52:37.284 Disk 0 scanning sectors +625139712
17:52:37.377 Disk 0 scanning C:\Windows\system32\drivers
17:52:51.464 Service scanning
17:53:05.847 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 5
17:53:06.159 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 5
17:53:06.268 Service klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys **LOCKED** 5
17:53:06.378 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 5
17:53:06.440 Service kltdi C:\Windows\system32\DRIVERS\kltdi.sys **LOCKED** 5
17:53:06.534 Service kneps C:\Windows\system32\DRIVERS\kneps.sys **LOCKED** 5
17:53:30.979 Modules scanning
17:53:40.916 Disk 0 trace - called modules:
17:53:40.978 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys
17:53:40.994 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85e3e030]
17:53:41.010 3 CLASSPNP.SYS[8330e8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x85daf5e0]
17:53:42.336 AVAST engine scan C:\Windows
17:53:45.705 AVAST engine scan C:\Windows\system32
17:58:04.119 AVAST engine scan C:\Windows\system32\drivers
17:58:21.186 AVAST engine scan C:\Users\Manfred Thiel
18:02:53.062 AVAST engine scan C:\ProgramData
18:05:26.988 Scan finished successfully
18:09:50.357 Disk 0 MBR has been saved successfully to "C:\Users\Manfred Thiel\Desktop\MBR.dat"
18:09:50.357 The log file has been saved successfully to "C:\Users\Manfred Thiel\Desktop\aswMBR.txt"
Code:
ATTFilter 3ÀŽÐ¼ |ŽÀŽØ¾ |¿ ¹ üó¤Ph Ëû¹ ½¾€~ | …ƒÅâñ͈V UÆFÆF ´A»ªUÍ]rûUªu ÷Á tþFf`€~ t&fh fÿvh h |h h ´BŠV ‹ôÍŸƒÄžë¸» |ŠV ŠvŠNŠnÍfas þN… €~ €„Š ²€ë‚U2äŠV Í]ëœ>þ}Uªunÿv èŠ … °Ñædè °ßæ`èx °ÿædèq ¸ »Íf#Àu;fûTCPAu2ùr,fh» fh fh fSfSfUfh fh | fah ÍZ2öê | Í*·ë*¶ë*µ2ä ‹ð¬< tü» ´Íëò+Éädë $àø$ÃInvalid partition table Error loading operating system Missing operating system bz™ö^Ï ! 'Y¿ à. €Y¿þÿÿ è. @* þÿÿþÿÿ (Ü ¸f Uª
Mit besten freudigen Grüßen Simplex ----------------------------------------------------------------------------------------------------------------------------------- 11/10/2012 - 19:30 Uhr Fertig....geschafft pust und  Als Administrator ausgeführt jedoch ohne Deaktivierung des Anti-Virenschutz und Firewall ....kein Problem! Schritt 4. TDSSKiller.28.10.0 Code:
ATTFilter 19:13:44.0324 4308 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
19:13:44.0745 4308 ============================================================
19:13:44.0745 4308 Current date / time: 2012/10/11 19:13:44.0745
19:13:44.0745 4308 SystemInfo:
19:13:44.0745 4308
19:13:44.0745 4308 OS Version: 6.0.6002 ServicePack: 2.0
19:13:44.0745 4308 Product type: Workstation
19:13:44.0745 4308 ComputerName: MANFREDTHIEL-PC
19:13:44.0745 4308 UserName: Manfred Thiel
19:13:44.0745 4308 Windows directory: C:\Windows
19:13:44.0745 4308 System windows directory: C:\Windows
19:13:44.0745 4308 Processor architecture: Intel x86
19:13:44.0745 4308 Number of processors: 2
19:13:44.0745 4308 Page size: 0x1000
19:13:44.0745 4308 Boot type: Normal boot
19:13:44.0745 4308 ============================================================
19:13:46.0196 4308 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:13:46.0211 4308 ============================================================
19:13:46.0211 4308 \Device\Harddisk0\DR0:
19:13:46.0258 4308 MBR partitions:
19:13:46.0258 4308 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x12AD4000
19:13:46.0258 4308 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x12DC2800, BlocksNum 0x1266B800
19:13:46.0258 4308 ============================================================
19:13:46.0352 4308 C: <-> \Device\Harddisk0\DR0\Partition1
19:13:46.0430 4308 E: <-> \Device\Harddisk0\DR0\Partition2
19:13:46.0430 4308 ============================================================
19:13:46.0430 4308 Initialize success
19:13:46.0430 4308 ============================================================
19:14:17.0411 5708 ============================================================
19:14:17.0411 5708 Scan started
19:14:17.0411 5708 Mode: Manual;
19:14:17.0411 5708 ============================================================
19:14:18.0269 5708 ================ Scan system memory ========================
19:14:18.0269 5708 System memory - ok
19:14:18.0269 5708 ================ Scan services =============================
19:14:18.0488 5708 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
19:14:18.0488 5708 ACPI - ok
19:14:18.0597 5708 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:14:18.0597 5708 AdobeARMservice - ok
19:14:18.0675 5708 [ 76D5A3D2A50402A0B9B6ED13C4371E79 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:14:18.0706 5708 AdobeFlashPlayerUpdateSvc - ok
19:14:18.0769 5708 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:14:18.0769 5708 adp94xx - ok
19:14:18.0815 5708 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:14:18.0815 5708 adpahci - ok
19:14:18.0862 5708 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
19:14:18.0862 5708 adpu160m - ok
19:14:18.0893 5708 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:14:18.0909 5708 adpu320 - ok
19:14:19.0018 5708 [ 96D6CDD0B32846E8CFBE592F4F32E608 ] AdvancedSystemCareService5 C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
19:14:19.0018 5708 AdvancedSystemCareService5 - ok
19:14:19.0049 5708 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:14:19.0049 5708 AeLookupSvc - ok
19:14:19.0096 5708 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
19:14:19.0096 5708 AFD - ok
19:14:19.0112 5708 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:14:19.0112 5708 agp440 - ok
19:14:19.0143 5708 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
19:14:19.0143 5708 aic78xx - ok
19:14:19.0205 5708 [ B95A1D7FF4F7FDE7E5E4062F4061ED6F ] ALDITALKVerbindungsassistent_Service C:\Program Files\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
19:14:19.0205 5708 ALDITALKVerbindungsassistent_Service - ok
19:14:19.0252 5708 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
19:14:19.0252 5708 ALG - ok
19:14:19.0268 5708 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
19:14:19.0268 5708 aliide - ok
19:14:19.0315 5708 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
19:14:19.0315 5708 amdagp - ok
19:14:19.0330 5708 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
19:14:19.0330 5708 amdide - ok
19:14:19.0361 5708 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
19:14:19.0361 5708 AmdK7 - ok
19:14:19.0377 5708 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:14:19.0377 5708 AmdK8 - ok
19:14:19.0424 5708 [ 45F47F79AD3F587A334345FD2969354B ] ApfiltrService C:\Windows\system32\DRIVERS\Apfiltr.sys
19:14:19.0424 5708 ApfiltrService - ok
19:14:19.0455 5708 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
19:14:19.0455 5708 Appinfo - ok
19:14:19.0486 5708 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
19:14:19.0502 5708 arc - ok
19:14:19.0533 5708 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:14:19.0533 5708 arcsas - ok
19:14:19.0549 5708 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:14:19.0564 5708 AsyncMac - ok
19:14:19.0595 5708 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
19:14:19.0595 5708 atapi - ok
19:14:19.0658 5708 [ 2580AC48801134B6EEDD6EE6AEA96C95 ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
19:14:19.0673 5708 Ati External Event Utility - ok
19:14:19.0814 5708 [ 5E4232783F05EBAE72D22A91907A76F4 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
19:14:19.0861 5708 atikmdag - ok
19:14:19.0907 5708 [ 6BEAFF815380AC626F43B582830CC1C4 ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
19:14:19.0907 5708 AtiPcie - ok
19:14:19.0970 5708 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:14:19.0970 5708 AudioEndpointBuilder - ok
19:14:19.0985 5708 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
19:14:20.0001 5708 Audiosrv - ok
19:14:20.0266 5708 [ F1CA8ED683D6945EFDC4492AB60B1460 ] AVP C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
19:14:20.0282 5708 AVP - ok
19:14:20.0329 5708 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
19:14:20.0344 5708 Beep - ok
19:14:20.0391 5708 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
19:14:20.0407 5708 BFE - ok
19:14:20.0500 5708 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
19:14:20.0547 5708 BITS - ok
19:14:20.0578 5708 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
19:14:20.0578 5708 blbdrive - ok
19:14:20.0625 5708 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:14:20.0625 5708 bowser - ok
19:14:20.0672 5708 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
19:14:20.0672 5708 BrFiltLo - ok
19:14:20.0703 5708 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
19:14:20.0703 5708 BrFiltUp - ok
19:14:20.0750 5708 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
19:14:20.0750 5708 Browser - ok
19:14:20.0781 5708 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
19:14:20.0781 5708 Brserid - ok
19:14:20.0812 5708 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
19:14:20.0828 5708 BrSerWdm - ok
19:14:20.0875 5708 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
19:14:20.0875 5708 BrUsbMdm - ok
19:14:20.0890 5708 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
19:14:20.0890 5708 BrUsbSer - ok
19:14:20.0921 5708 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:14:20.0921 5708 BTHMODEM - ok
19:14:20.0968 5708 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:14:20.0968 5708 cdfs - ok
19:14:21.0015 5708 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:14:21.0031 5708 cdrom - ok
19:14:21.0062 5708 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
19:14:21.0077 5708 CertPropSvc - ok
19:14:21.0124 5708 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
19:14:21.0124 5708 circlass - ok
19:14:21.0171 5708 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
19:14:21.0171 5708 CLFS - ok
19:14:21.0249 5708 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:14:21.0249 5708 clr_optimization_v2.0.50727_32 - ok
19:14:21.0327 5708 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:14:21.0327 5708 clr_optimization_v4.0.30319_32 - ok
19:14:21.0389 5708 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:14:21.0389 5708 CmBatt - ok
19:14:21.0421 5708 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:14:21.0421 5708 cmdide - ok
19:14:21.0452 5708 [ B6E7991E3D6146C04C85CD31AF22A381 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys
19:14:21.0467 5708 CnxtHdAudService - ok
19:14:21.0499 5708 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:14:21.0499 5708 Compbatt - ok
19:14:21.0514 5708 COMSysApp - ok
19:14:21.0592 5708 [ D10D01B2DFCD8D2F32A32ED29E8DA1C2 ] ConfigFree Service C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
19:14:21.0592 5708 ConfigFree Service - ok
19:14:21.0639 5708 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:14:21.0655 5708 crcdisk - ok
19:14:21.0701 5708 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
19:14:21.0701 5708 Crusoe - ok
19:14:21.0764 5708 [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:14:21.0764 5708 CryptSvc - ok
19:14:21.0857 5708 [ 4F74B04E15BD660BA8BA98C1B94DB67B ] CtClsFlt C:\Windows\system32\DRIVERS\CtClsFlt.sys
19:14:21.0857 5708 CtClsFlt - ok
19:14:21.0935 5708 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:14:21.0982 5708 DcomLaunch - ok
19:14:22.0029 5708 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:14:22.0029 5708 DfsC - ok
19:14:22.0138 5708 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
19:14:22.0216 5708 DFSR - ok
19:14:22.0263 5708 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
19:14:22.0263 5708 Dhcp - ok
19:14:22.0310 5708 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
19:14:22.0310 5708 disk - ok
19:14:22.0357 5708 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:14:22.0357 5708 Dnscache - ok
19:14:22.0403 5708 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:14:22.0403 5708 dot3svc - ok
19:14:22.0450 5708 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
19:14:22.0450 5708 DPS - ok
19:14:22.0481 5708 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:14:22.0481 5708 drmkaud - ok
19:14:22.0544 5708 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:14:22.0544 5708 DXGKrnl - ok
19:14:22.0575 5708 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
19:14:22.0591 5708 E1G60 - ok
19:14:22.0606 5708 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
19:14:22.0622 5708 EapHost - ok
19:14:22.0653 5708 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
19:14:22.0669 5708 Ecache - ok
19:14:22.0747 5708 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:14:22.0762 5708 ehRecvr - ok
19:14:22.0778 5708 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
19:14:22.0793 5708 ehSched - ok
19:14:22.0825 5708 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
19:14:22.0825 5708 ehstart - ok
19:14:22.0918 5708 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:14:22.0918 5708 elxstor - ok
19:14:22.0996 5708 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
19:14:23.0027 5708 EMDMgmt - ok
19:14:23.0043 5708 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:14:23.0059 5708 ErrDev - ok
19:14:23.0121 5708 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
19:14:23.0137 5708 EventSystem - ok
19:14:23.0183 5708 [ E66710639A292F6341D63B01EE8E8037 ] ewsercd C:\Windows\system32\DRIVERS\ewsercd.sys
19:14:23.0199 5708 ewsercd - ok
19:14:23.0246 5708 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
19:14:23.0246 5708 exfat - ok
19:14:23.0293 5708 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:14:23.0293 5708 fastfat - ok
19:14:23.0339 5708 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:14:23.0339 5708 fdc - ok
19:14:23.0386 5708 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
19:14:23.0402 5708 fdPHost - ok
19:14:23.0402 5708 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
19:14:23.0417 5708 FDResPub - ok
19:14:23.0433 5708 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:14:23.0433 5708 FileInfo - ok
19:14:23.0464 5708 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:14:23.0464 5708 Filetrace - ok
19:14:23.0495 5708 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:14:23.0495 5708 flpydisk - ok
19:14:23.0527 5708 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:14:23.0527 5708 FltMgr - ok
19:14:23.0573 5708 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
19:14:23.0605 5708 FontCache - ok
19:14:23.0636 5708 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:14:23.0636 5708 FontCache3.0.0.0 - ok
19:14:23.0683 5708 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:14:23.0683 5708 Fs_Rec - ok
19:14:23.0714 5708 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:14:23.0714 5708 gagp30kx - ok
19:14:23.0729 5708 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\Windows\system32\giveio.sys
19:14:23.0745 5708 giveio - ok
19:14:23.0823 5708 [ 9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F ] GoogleDesktopManager-051210-111108 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
19:14:23.0823 5708 GoogleDesktopManager-051210-111108 - ok
19:14:23.0885 5708 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
19:14:23.0917 5708 gpsvc - ok
19:14:23.0995 5708 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
19:14:23.0995 5708 gupdate - ok
19:14:24.0010 5708 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
19:14:24.0010 5708 gupdatem - ok
19:14:24.0057 5708 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
19:14:24.0073 5708 gusvc - ok
19:14:24.0135 5708 [ 3F90E001369A07243763BD5A523D8722 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:14:24.0135 5708 HdAudAddService - ok
19:14:24.0229 5708 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:14:24.0229 5708 HDAudBus - ok
19:14:24.0260 5708 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:14:24.0260 5708 HidBth - ok
19:14:24.0307 5708 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
19:14:24.0307 5708 HidIr - ok
19:14:24.0353 5708 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
19:14:24.0353 5708 hidserv - ok
19:14:24.0385 5708 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:14:24.0385 5708 HidUsb - ok
19:14:24.0416 5708 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:14:24.0416 5708 hkmsvc - ok
19:14:24.0447 5708 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
19:14:24.0447 5708 HpCISSs - ok
19:14:24.0494 5708 [ FADD7095163CB3CB4073793EBB50FE75 ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
19:14:24.0509 5708 HSF_DPV - ok
19:14:24.0541 5708 [ 058783BEDD17615D1FECE09F77960436 ] HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys
19:14:24.0541 5708 HSXHWAZL - ok
19:14:24.0587 5708 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:14:24.0587 5708 HTTP - ok
19:14:24.0634 5708 [ 92CA47DA32009CCC00A5ADED04ABBD78 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
19:14:24.0634 5708 hwdatacard - ok
19:14:24.0665 5708 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
19:14:24.0665 5708 i2omp - ok
19:14:24.0697 5708 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:14:24.0697 5708 i8042prt - ok
19:14:24.0728 5708 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
19:14:24.0728 5708 iaStorV - ok
19:14:24.0775 5708 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
19:14:24.0790 5708 IDriverT - ok
19:14:24.0853 5708 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:14:24.0868 5708 idsvc - ok
19:14:24.0931 5708 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:14:24.0931 5708 iirsp - ok
19:14:24.0962 5708 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
19:14:24.0977 5708 IKEEXT - ok
19:14:25.0009 5708 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
19:14:25.0009 5708 intelide - ok
19:14:25.0024 5708 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:14:25.0024 5708 intelppm - ok
19:14:25.0071 5708 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:14:25.0071 5708 IPBusEnum - ok
19:14:25.0102 5708 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:14:25.0102 5708 IpFilterDriver - ok
19:14:25.0149 5708 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:14:25.0149 5708 iphlpsvc - ok
19:14:25.0165 5708 IpInIp - ok
19:14:25.0211 5708 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
19:14:25.0211 5708 IPMIDRV - ok
19:14:25.0227 5708 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
19:14:25.0227 5708 IPNAT - ok
19:14:25.0243 5708 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:14:25.0258 5708 IRENUM - ok
19:14:25.0274 5708 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:14:25.0274 5708 isapnp - ok
19:14:25.0305 5708 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
19:14:25.0305 5708 iScsiPrt - ok
19:14:25.0336 5708 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
19:14:25.0336 5708 iteatapi - ok
19:14:25.0336 5708 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
19:14:25.0336 5708 iteraid - ok
19:14:25.0352 5708 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:14:25.0352 5708 kbdclass - ok
19:14:25.0383 5708 [ 18247836959BA67E3511B62846B9C2E0 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
19:14:25.0383 5708 kbdhid - ok
19:14:25.0399 5708 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
19:14:25.0399 5708 KeyIso - ok
19:14:25.0461 5708 [ EA26CB00F83686856F2C79673C00C686 ] kl1 C:\Windows\system32\DRIVERS\kl1.sys
19:14:25.0461 5708 kl1 - ok
19:14:25.0508 5708 [ 654BDF113971B6DFAEA21D5554EBF5F6 ] KLIF C:\Windows\system32\DRIVERS\klif.sys
19:14:25.0523 5708 KLIF - ok
19:14:25.0539 5708 [ AF127FE7DD5ED2BBC9049FD8A00DEFC2 ] KLIM6 C:\Windows\system32\DRIVERS\klim6.sys
19:14:25.0539 5708 KLIM6 - ok
19:14:25.0586 5708 [ 24AEBAD59D1DE8A7CC36E8F09F999362 ] klkbdflt C:\Windows\system32\DRIVERS\klkbdflt.sys
19:14:25.0586 5708 klkbdflt - ok
19:14:25.0601 5708 [ A58507C2827C3AE1D4CCB2746AAB349F ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys
19:14:25.0601 5708 klmouflt - ok
19:14:25.0633 5708 [ B20DB17BC4E54B78EAB16D15B058E75B ] kltdi C:\Windows\system32\DRIVERS\kltdi.sys
19:14:25.0633 5708 kltdi - ok
19:14:25.0679 5708 [ 71A38C123600172511C26BFABD0EF579 ] kneps C:\Windows\system32\DRIVERS\kneps.sys
19:14:25.0679 5708 kneps - ok
19:14:25.0773 5708 [ 162A5E3A691B903111526147C8D29E6D ] Kodak AiO Network Discovery Service C:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
19:14:25.0789 5708 Kodak AiO Network Discovery Service - ok
19:14:25.0835 5708 [ B5E53FCA219A6491E9A1BA146A5D2452 ] Kodak AiO Status Monitor Service C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
19:14:25.0851 5708 Kodak AiO Status Monitor Service - ok
19:14:25.0913 5708 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:14:25.0913 5708 KSecDD - ok
19:14:25.0991 5708 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
19:14:25.0991 5708 KtmRm - ok
19:14:26.0038 5708 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
19:14:26.0038 5708 LanmanServer - ok
19:14:26.0085 5708 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:14:26.0101 5708 LanmanWorkstation - ok
19:14:26.0194 5708 [ 910344E2A984010435AE84783B25E5EB ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
19:14:26.0194 5708 LBTServ - ok
19:14:26.0225 5708 [ 01CC7FB6E790EF044B411377F3A1FF41 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys
19:14:26.0241 5708 LHidFilt - ok
19:14:26.0272 5708 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:14:26.0272 5708 lltdio - ok
19:14:26.0319 5708 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:14:26.0319 5708 lltdsvc - ok
19:14:26.0350 5708 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:14:26.0350 5708 lmhosts - ok
19:14:26.0366 5708 [ A2E7EAE8898D7B4B8C302B8F4E836BB5 ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys
19:14:26.0366 5708 LMouFilt - ok
19:14:26.0413 5708 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:14:26.0428 5708 LSI_FC - ok
19:14:26.0444 5708 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:14:26.0444 5708 LSI_SAS - ok
19:14:26.0475 5708 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:14:26.0475 5708 LSI_SCSI - ok
19:14:26.0506 5708 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
19:14:26.0506 5708 luafv - ok
19:14:26.0537 5708 [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
19:14:26.0537 5708 MBAMProtector - ok
19:14:26.0600 5708 [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:14:26.0615 5708 MBAMScheduler - ok
19:14:26.0647 5708 [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
19:14:26.0662 5708 MBAMService - ok
19:14:26.0693 5708 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:14:26.0693 5708 Mcx2Svc - ok
19:14:26.0725 5708 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
19:14:26.0725 5708 mdmxsdk - ok
19:14:26.0740 5708 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
19:14:26.0740 5708 megasas - ok
19:14:26.0771 5708 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
19:14:26.0771 5708 MegaSR - ok
19:14:26.0787 5708 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
19:14:26.0803 5708 MMCSS - ok
19:14:26.0803 5708 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
19:14:26.0803 5708 Modem - ok
19:14:26.0818 5708 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:14:26.0818 5708 monitor - ok
19:14:26.0834 5708 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:14:26.0834 5708 mouclass - ok
19:14:26.0865 5708 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:14:26.0865 5708 mouhid - ok
19:14:26.0881 5708 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
19:14:26.0881 5708 MountMgr - ok
19:14:26.0912 5708 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
19:14:26.0927 5708 mpio - ok
19:14:26.0959 5708 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:14:26.0959 5708 mpsdrv - ok
19:14:27.0005 5708 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
19:14:27.0005 5708 MpsSvc - ok
19:14:27.0021 5708 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
19:14:27.0021 5708 Mraid35x - ok
19:14:27.0052 5708 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:14:27.0052 5708 MRxDAV - ok
19:14:27.0099 5708 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:14:27.0099 5708 mrxsmb - ok
19:14:27.0115 5708 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:14:27.0115 5708 mrxsmb10 - ok
19:14:27.0130 5708 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:14:27.0130 5708 mrxsmb20 - ok
19:14:27.0146 5708 [ 5457DCFA7C0DA43522F4D9D4049C1472 ] msahci C:\Windows\system32\drivers\msahci.sys
19:14:27.0146 5708 msahci - ok
19:14:27.0177 5708 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:14:27.0193 5708 msdsm - ok
19:14:27.0193 5708 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
19:14:27.0208 5708 MSDTC - ok
19:14:27.0208 5708 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:14:27.0208 5708 Msfs - ok
19:14:27.0224 5708 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:14:27.0239 5708 msisadrv - ok
19:14:27.0271 5708 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:14:27.0271 5708 MSiSCSI - ok
19:14:27.0286 5708 msiserver - ok
19:14:27.0302 5708 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:14:27.0302 5708 MSKSSRV - ok
19:14:27.0333 5708 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:14:27.0333 5708 MSPCLOCK - ok
19:14:27.0364 5708 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:14:27.0364 5708 MSPQM - ok
19:14:27.0411 5708 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:14:27.0411 5708 MsRPC - ok
19:14:27.0458 5708 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:14:27.0458 5708 mssmbios - ok
19:14:27.0489 5708 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:14:27.0489 5708 MSTEE - ok
19:14:27.0520 5708 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
19:14:27.0520 5708 Mup - ok
19:14:27.0551 5708 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
19:14:27.0567 5708 napagent - ok
19:14:27.0598 5708 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:14:27.0598 5708 NativeWifiP - ok
19:14:27.0645 5708 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:14:27.0661 5708 NDIS - ok
19:14:27.0692 5708 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:14:27.0692 5708 NdisTapi - ok
19:14:27.0707 5708 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:14:27.0707 5708 Ndisuio - ok
19:14:27.0739 5708 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:14:27.0739 5708 NdisWan - ok
19:14:27.0770 5708 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:14:27.0770 5708 NDProxy - ok
19:14:27.0785 5708 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:14:27.0785 5708 NetBIOS - ok
19:14:27.0832 5708 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
19:14:27.0832 5708 netbt - ok
19:14:27.0848 5708 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
19:14:27.0848 5708 Netlogon - ok
19:14:27.0926 5708 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
19:14:27.0941 5708 Netman - ok
19:14:28.0004 5708 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
19:14:28.0004 5708 netprofm - ok
19:14:28.0035 5708 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:14:28.0051 5708 NetTcpPortSharing - ok
19:14:28.0097 5708 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:14:28.0097 5708 nfrd960 - ok
19:14:28.0160 5708 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:14:28.0160 5708 NlaSvc - ok
19:14:28.0191 5708 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:14:28.0207 5708 Npfs - ok
19:14:28.0222 5708 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
19:14:28.0222 5708 nsi - ok
19:14:28.0253 5708 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:14:28.0253 5708 nsiproxy - ok
19:14:28.0331 5708 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:14:28.0331 5708 Ntfs - ok
19:14:28.0378 5708 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
19:14:28.0378 5708 ntrigdigi - ok
19:14:28.0409 5708 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
19:14:28.0409 5708 Null - ok
19:14:28.0441 5708 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:14:28.0441 5708 nvraid - ok
19:14:28.0456 5708 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:14:28.0456 5708 nvstor - ok
19:14:28.0472 5708 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:14:28.0472 5708 nv_agp - ok
19:14:28.0487 5708 NwlnkFlt - ok
19:14:28.0487 5708 NwlnkFwd - ok
19:14:28.0550 5708 [ D955D5DE998DB2476BF0892BE3A96C26 ] o2flash C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
19:14:28.0550 5708 o2flash - ok
19:14:28.0565 5708 [ 78575368974962042472F18B24D3CF28 ] O2MDRDR C:\Windows\system32\DRIVERS\o2media.sys
19:14:28.0565 5708 O2MDRDR - ok
19:14:28.0597 5708 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
19:14:28.0597 5708 ohci1394 - ok
19:14:28.0628 5708 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
19:14:28.0643 5708 p2pimsvc - ok
19:14:28.0659 5708 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
19:14:28.0659 5708 p2psvc - ok
19:14:28.0690 5708 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
19:14:28.0690 5708 Parport - ok
19:14:28.0721 5708 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:14:28.0721 5708 partmgr - ok
19:14:28.0737 5708 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
19:14:28.0737 5708 Parvdm - ok
19:14:28.0768 5708 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
19:14:28.0768 5708 PcaSvc - ok
19:14:28.0784 5708 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
19:14:28.0784 5708 pci - ok
19:14:28.0799 5708 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
19:14:28.0799 5708 pciide - ok
19:14:28.0815 5708 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:14:28.0831 5708 pcmcia - ok
19:14:28.0862 5708 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:14:28.0877 5708 PEAUTH - ok
19:14:28.0940 5708 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
19:14:28.0971 5708 pla - ok
19:14:29.0033 5708 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:14:29.0033 5708 PlugPlay - ok
19:14:29.0065 5708 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
19:14:29.0080 5708 PNRPAutoReg - ok
19:14:29.0111 5708 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
19:14:29.0111 5708 PNRPsvc - ok
19:14:29.0143 5708 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:14:29.0158 5708 PolicyAgent - ok
19:14:29.0189 5708 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:14:29.0205 5708 PptpMiniport - ok
19:14:29.0236 5708 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\DRIVERS\processr.sys
19:14:29.0236 5708 Processor - ok
19:14:29.0283 5708 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
19:14:29.0283 5708 ProfSvc - ok
19:14:29.0299 5708 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
19:14:29.0299 5708 ProtectedStorage - ok
19:14:29.0345 5708 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
19:14:29.0345 5708 PSched - ok
19:14:29.0377 5708 [ 674EBA70A52C02696E503B0A57AE6372 ] QIOMem C:\Windows\system32\DRIVERS\QIOMem.sys
19:14:29.0377 5708 QIOMem - ok
19:14:29.0423 5708 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:14:29.0439 5708 ql2300 - ok
19:14:29.0501 5708 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:14:29.0501 5708 ql40xx - ok
19:14:29.0548 5708 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
19:14:29.0564 5708 QWAVE - ok
19:14:29.0595 5708 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:14:29.0595 5708 QWAVEdrv - ok
19:14:29.0626 5708 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:14:29.0626 5708 RasAcd - ok
19:14:29.0657 5708 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
19:14:29.0673 5708 RasAuto - ok
19:14:29.0689 5708 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:14:29.0689 5708 Rasl2tp - ok
19:14:29.0751 5708 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
19:14:29.0767 5708 RasMan - ok
19:14:29.0813 5708 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:14:29.0813 5708 RasPppoe - ok
19:14:29.0829 5708 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:14:29.0829 5708 RasSstp - ok
19:14:29.0876 5708 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:14:29.0876 5708 rdbss - ok
19:14:29.0923 5708 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:14:29.0923 5708 RDPCDD - ok
19:14:29.0954 5708 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
19:14:29.0954 5708 rdpdr - ok
19:14:29.0969 5708 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:14:29.0969 5708 RDPENCDD - ok
19:14:30.0016 5708 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:14:30.0016 5708 RDPWD - ok
19:14:30.0079 5708 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:14:30.0079 5708 RemoteAccess - ok
19:14:30.0125 5708 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:14:30.0141 5708 RemoteRegistry - ok
19:14:30.0172 5708 [ F5CD7457FA2F0D1078992CCB77A546C4 ] RLDesignVirtualAudioCableWdm C:\Windows\system32\DRIVERS\livecamv.sys
19:14:30.0172 5708 RLDesignVirtualAudioCableWdm - ok
19:14:30.0203 5708 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
19:14:30.0203 5708 RpcLocator - ok
19:14:30.0219 5708 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
19:14:30.0235 5708 RpcSs - ok
19:14:30.0266 5708 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:14:30.0266 5708 rspndr - ok
19:14:30.0297 5708 [ 5139A6C37C2D854E7B0EE6FA1F93CCDA ] RTL8187B C:\Windows\system32\DRIVERS\RTL8187B.sys
19:14:30.0297 5708 RTL8187B - ok
19:14:30.0344 5708 [ 0D60B8C10A2C5E8DD620B3FDEB1CDA64 ] RtlProt C:\Windows\system32\DRIVERS\rtlprot.sys
19:14:30.0344 5708 RtlProt - ok
19:14:30.0344 5708 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
19:14:30.0359 5708 SamSs - ok
19:14:30.0375 5708 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:14:30.0375 5708 sbp2port - ok
19:14:30.0406 5708 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:14:30.0406 5708 SCardSvr - ok
19:14:30.0453 5708 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
19:14:30.0469 5708 Schedule - ok
19:14:30.0484 5708 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
19:14:30.0500 5708 SCPolicySvc - ok
19:14:30.0515 5708 [ 8F36B54688C31EED4580129040C6A3D3 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
19:14:30.0531 5708 sdbus - ok
19:14:30.0562 5708 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:14:30.0562 5708 SDRSVC - ok
19:14:30.0609 5708 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:14:30.0609 5708 secdrv - ok
19:14:30.0625 5708 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
19:14:30.0640 5708 seclogon - ok
19:14:30.0656 5708 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
19:14:30.0671 5708 SENS - ok
19:14:30.0687 5708 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
19:14:30.0687 5708 Serenum - ok
19:14:30.0718 5708 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
19:14:30.0718 5708 Serial - ok
19:14:30.0749 5708 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:14:30.0749 5708 sermouse - ok
19:14:30.0812 5708 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
19:14:30.0827 5708 SessionEnv - ok
19:14:30.0874 5708 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:14:30.0874 5708 sffdisk - ok
19:14:30.0890 5708 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:14:30.0890 5708 sffp_mmc - ok
19:14:30.0937 5708 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:14:30.0937 5708 sffp_sd - ok
19:14:30.0968 5708 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
19:14:30.0968 5708 sfloppy - ok
19:14:31.0061 5708 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:14:31.0061 5708 SharedAccess - ok
19:14:31.0093 5708 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:14:31.0108 5708 ShellHWDetection - ok
19:14:31.0124 5708 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
19:14:31.0124 5708 sisagp - ok
19:14:31.0139 5708 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
19:14:31.0139 5708 SiSRaid2 - ok
19:14:31.0155 5708 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:14:31.0155 5708 SiSRaid4 - ok
19:14:31.0264 5708 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
19:14:31.0342 5708 slsvc - ok
19:14:31.0358 5708 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
19:14:31.0358 5708 SLUINotify - ok
19:14:31.0405 5708 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:14:31.0405 5708 Smb - ok
19:14:31.0436 5708 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:14:31.0451 5708 SNMPTRAP - ok
19:14:31.0498 5708 [ 3FA2E254BFBCE52B3C6F1BF23AAB6911 ] speedfan C:\Windows\system32\speedfan.sys
19:14:31.0498 5708 speedfan - ok
19:14:31.0529 5708 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
19:14:31.0529 5708 spldr - ok
19:14:31.0576 5708 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
19:14:31.0576 5708 Spooler - ok
19:14:31.0592 5708 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
19:14:31.0592 5708 srv - ok
19:14:31.0623 5708 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:14:31.0623 5708 srv2 - ok
19:14:31.0639 5708 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:14:31.0639 5708 srvnet - ok
19:14:31.0701 5708 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:14:31.0701 5708 SSDPSRV - ok
19:14:31.0732 5708 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:14:31.0748 5708 SstpSvc - ok
19:14:31.0795 5708 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
19:14:31.0810 5708 stisvc - ok
19:14:31.0826 5708 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:14:31.0826 5708 swenum - ok
19:14:31.0873 5708 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
19:14:31.0888 5708 swprv - ok
19:14:31.0935 5708 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
19:14:31.0935 5708 Symc8xx - ok
19:14:31.0966 5708 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
19:14:31.0966 5708 Sym_hi - ok
19:14:32.0013 5708 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
19:14:32.0013 5708 Sym_u3 - ok
19:14:32.0091 5708 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
19:14:32.0122 5708 SysMain - ok
19:14:32.0169 5708 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:14:32.0185 5708 TabletInputService - ok
19:14:32.0231 5708 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:14:32.0247 5708 TapiSrv - ok
19:14:32.0278 5708 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
19:14:32.0278 5708 TBS - ok
19:14:32.0341 5708 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:14:32.0356 5708 Tcpip - ok
19:14:32.0387 5708 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
19:14:32.0403 5708 Tcpip6 - ok
19:14:32.0434 5708 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:14:32.0434 5708 tcpipreg - ok
19:14:32.0450 5708 [ 1825BCEB47BF41C5A9F0E44DE82FC27A ] tdcmdpst C:\Windows\system32\DRIVERS\tdcmdpst.sys
19:14:32.0465 5708 tdcmdpst - ok
19:14:32.0497 5708 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:14:32.0497 5708 TDPIPE - ok
19:14:32.0512 5708 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:14:32.0528 5708 TDTCP - ok
19:14:32.0559 5708 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:14:32.0559 5708 tdx - ok
19:14:32.0575 5708 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:14:32.0575 5708 TermDD - ok
19:14:32.0621 5708 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
19:14:32.0637 5708 TermService - ok
19:14:32.0668 5708 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
19:14:32.0668 5708 Themes - ok
19:14:32.0699 5708 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
19:14:32.0699 5708 THREADORDER - ok
19:14:32.0746 5708 [ B146492A882A25A2DF1DB4668FCED6C8 ] TNaviSrv C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
19:14:32.0746 5708 TNaviSrv - ok
19:14:32.0777 5708 [ C5AC715B65B01788ABC22D10749DDDD8 ] TODDSrv C:\Windows\system32\TODDSrv.exe
19:14:32.0793 5708 TODDSrv - ok
19:14:32.0855 5708 [ DA6903958CBDC091FFCBBCA70CCFF34C ] TosCoSrv C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
19:14:32.0871 5708 TosCoSrv - ok
19:14:32.0918 5708 [ 8E10E654E354CF330ED75882769A0107 ] TOSHIBA Bluetooth Service c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
19:14:32.0918 5708 TOSHIBA Bluetooth Service - ok
19:14:32.0965 5708 [ 22690DFFC7F2A18279A7A0489AA02BAC ] TOSHIBA SMART Log Service C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
19:14:32.0965 5708 TOSHIBA SMART Log Service - ok
19:14:33.0011 5708 [ 2C15B4856F929AC7DD144044D8334B54 ] tosporte C:\Windows\system32\DRIVERS\tosporte.sys
19:14:33.0011 5708 tosporte - ok
19:14:33.0058 5708 [ CD6E9C27ADC6B37B0B3DF29CC83E15A7 ] tosrfbd C:\Windows\system32\DRIVERS\tosrfbd.sys
19:14:33.0058 5708 tosrfbd - ok
19:14:33.0089 5708 [ 181E217A7A326817D97946D045B3CB46 ] tosrfbnp C:\Windows\system32\Drivers\tosrfbnp.sys
19:14:33.0089 5708 tosrfbnp - ok
19:14:33.0136 5708 [ E90ACE3B4FA7A85F992BC21EB779C407 ] Tosrfcom C:\Windows\system32\Drivers\tosrfcom.sys
19:14:33.0136 5708 Tosrfcom - ok
19:14:33.0167 5708 [ 5C4103544612E5011EF46301B93D1AA6 ] tosrfec C:\Windows\system32\DRIVERS\tosrfec.sys
19:14:33.0183 5708 tosrfec - ok
19:14:33.0214 5708 [ D3F87C46C7C9E5DB99FBD3D17121B891 ] Tosrfhid C:\Windows\system32\DRIVERS\Tosrfhid.sys
19:14:33.0214 5708 Tosrfhid - ok
19:14:33.0245 5708 [ C52FD27B9ADF3A1F22CB90E6BCF9B0CB ] tosrfnds C:\Windows\system32\DRIVERS\tosrfnds.sys
19:14:33.0245 5708 tosrfnds - ok
19:14:33.0277 5708 [ 156D63F6898E4D95F2962F2B72862868 ] TosRfSnd C:\Windows\system32\drivers\tosrfsnd.sys
19:14:33.0277 5708 TosRfSnd - ok
19:14:33.0308 5708 [ 98C04A6432CE9C2AD328F57B9384D348 ] Tosrfusb C:\Windows\system32\DRIVERS\tosrfusb.sys
19:14:33.0308 5708 Tosrfusb - ok
19:14:33.0339 5708 [ 1EA5F27C29405BF49799FECA77186DA9 ] tos_sps32 C:\Windows\system32\DRIVERS\tos_sps32.sys
19:14:33.0339 5708 tos_sps32 - ok
19:14:33.0370 5708 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
19:14:33.0370 5708 TrkWks - ok
19:14:33.0417 5708 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:14:33.0433 5708 TrustedInstaller - ok
19:14:33.0464 5708 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:14:33.0464 5708 tssecsrv - ok
19:14:33.0604 5708 [ AF5F31156EE89D35AD6EC3179A805D23 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
19:14:33.0667 5708 TuneUp.UtilitiesSvc - ok
19:14:33.0713 5708 [ F2107C9D85EC0DF116939CCCE06AE697 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys
19:14:33.0713 5708 TuneUpUtilitiesDrv - ok
19:14:33.0745 5708 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
19:14:33.0760 5708 tunmp - ok
19:14:33.0791 5708 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:14:33.0791 5708 tunnel - ok
19:14:33.0823 5708 [ 792A8B80F8188ABA4B2BE271583F3E46 ] TVALZ C:\Windows\system32\DRIVERS\TVALZ_O.SYS
19:14:33.0838 5708 TVALZ - ok
19:14:33.0885 5708 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:14:33.0885 5708 uagp35 - ok
19:14:33.0932 5708 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:14:33.0947 5708 udfs - ok
19:14:33.0979 5708 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:14:33.0994 5708 UI0Detect - ok
19:14:34.0072 5708 [ 332D341D92B933600D41953B08360DFB ] UleadBurningHelper C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
19:14:34.0072 5708 UleadBurningHelper - ok
19:14:34.0135 5708 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:14:34.0135 5708 uliagpkx - ok
19:14:34.0181 5708 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
19:14:34.0181 5708 uliahci - ok
19:14:34.0213 5708 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
19:14:34.0228 5708 UlSata - ok
19:14:34.0259 5708 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
19:14:34.0275 5708 ulsata2 - ok
19:14:34.0291 5708 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:14:34.0291 5708 umbus - ok
19:14:34.0337 5708 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
19:14:34.0369 5708 upnphost - ok
19:14:34.0400 5708 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
19:14:34.0415 5708 usbaudio - ok
19:14:34.0462 5708 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:14:34.0462 5708 usbccgp - ok
19:14:34.0478 5708 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:14:34.0478 5708 usbcir - ok
19:14:34.0525 5708 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:14:34.0525 5708 usbehci - ok
19:14:34.0540 5708 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:14:34.0540 5708 usbhub - ok
19:14:34.0556 5708 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
19:14:34.0556 5708 usbohci - ok
19:14:34.0603 5708 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:14:34.0603 5708 usbprint - ok
19:14:34.0649 5708 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
19:14:34.0649 5708 usbscan - ok
19:14:34.0681 5708 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:14:34.0681 5708 USBSTOR - ok
19:14:34.0727 5708 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
19:14:34.0727 5708 usbuhci - ok
19:14:34.0759 5708 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:14:34.0774 5708 usbvideo - ok
19:14:34.0805 5708 [ 8C5094A8AB24DE7496C7C19942F2DF04 ] UVCFTR C:\Windows\system32\Drivers\UVCFTR_S.SYS
19:14:34.0805 5708 UVCFTR - ok
19:14:34.0837 5708 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
19:14:34.0852 5708 UxSms - ok
19:14:34.0899 5708 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
19:14:34.0915 5708 vds - ok
19:14:34.0946 5708 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:14:34.0946 5708 vga - ok
19:14:34.0961 5708 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
19:14:34.0977 5708 VgaSave - ok
19:14:34.0993 5708 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
19:14:34.0993 5708 viaagp - ok
19:14:35.0039 5708 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
19:14:35.0039 5708 ViaC7 - ok
19:14:35.0071 5708 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
19:14:35.0071 5708 viaide - ok
19:14:35.0117 5708 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:14:35.0117 5708 volmgr - ok
19:14:35.0133 5708 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:14:35.0149 5708 volmgrx - ok
19:14:35.0180 5708 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:14:35.0180 5708 volsnap - ok
19:14:35.0227 5708 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:14:35.0227 5708 vsmraid - ok
19:14:35.0289 5708 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
19:14:35.0320 5708 VSS - ok
19:14:35.0351 5708 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
19:14:35.0367 5708 W32Time - ok
19:14:35.0383 5708 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:14:35.0383 5708 WacomPen - ok
19:14:35.0414 5708 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
19:14:35.0414 5708 Wanarp - ok
19:14:35.0414 5708 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:14:35.0429 5708 Wanarpv6 - ok
19:14:35.0476 5708 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:14:35.0492 5708 wcncsvc - ok
19:14:35.0523 5708 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:14:35.0523 5708 WcsPlugInService - ok
19:14:35.0570 5708 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
19:14:35.0570 5708 Wd - ok
19:14:35.0617 5708 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:14:35.0632 5708 Wdf01000 - ok
19:14:35.0648 5708 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:14:35.0663 5708 WdiServiceHost - ok
19:14:35.0679 5708 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:14:35.0695 5708 WdiSystemHost - ok
19:14:35.0726 5708 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
19:14:35.0741 5708 WebClient - ok
19:14:35.0788 5708 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:14:35.0788 5708 Wecsvc - ok
19:14:35.0835 5708 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:14:35.0835 5708 wercplsupport - ok
19:14:35.0882 5708 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
19:14:35.0882 5708 WerSvc - ok
19:14:35.0913 5708 [ BB9CBAF6AC20452B245C324F1F50EE81 ] winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys
19:14:35.0913 5708 winachsf - ok
19:14:36.0007 5708 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
19:14:36.0007 5708 WinDefend - ok
19:14:36.0022 5708 WinHttpAutoProxySvc - ok
19:14:36.0100 5708 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:14:36.0116 5708 Winmgmt - ok
19:14:36.0194 5708 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
19:14:36.0209 5708 WinRM - ok
19:14:36.0319 5708 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
19:14:36.0334 5708 Wlansvc - ok
19:14:36.0475 5708 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:14:36.0537 5708 wlidsvc - ok
19:14:36.0584 5708 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
19:14:36.0584 5708 WmiAcpi - ok
19:14:36.0646 5708 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:14:36.0662 5708 wmiApSrv - ok
19:14:36.0755 5708 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
19:14:36.0771 5708 WMPNetworkSvc - ok
19:14:36.0802 5708 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:14:36.0818 5708 WPCSvc - ok
19:14:36.0865 5708 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:14:36.0865 5708 WPDBusEnum - ok
19:14:36.0911 5708 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
19:14:36.0911 5708 WpdUsb - ok
19:14:37.0021 5708 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:14:37.0036 5708 WPFFontCache_v0400 - ok
19:14:37.0067 5708 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:14:37.0067 5708 ws2ifsl - ok
19:14:37.0114 5708 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
19:14:37.0130 5708 wscsvc - ok
19:14:37.0130 5708 WSearch - ok
19:14:37.0208 5708 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
19:14:37.0255 5708 wuauserv - ok
19:14:37.0286 5708 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:14:37.0301 5708 WUDFRd - ok
19:14:37.0333 5708 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:14:37.0348 5708 wudfsvc - ok
19:14:37.0348 5708 [ DAB33CFA9DD24251AAA389FF36B64D4B ] XAudio C:\Windows\system32\DRIVERS\xaudio.sys
19:14:37.0364 5708 XAudio - ok
19:14:37.0395 5708 [ CD5F291A1161F15896D1A4D63DAFF5DF ] XAudioService C:\Windows\system32\DRIVERS\xaudio.exe
19:14:37.0395 5708 XAudioService - ok
19:14:37.0473 5708 [ D51FEBB9F6869512EA2B636E2B30DF7B ] yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys
19:14:37.0473 5708 yukonwlh - ok
19:14:37.0504 5708 ================ Scan global ===============================
19:14:37.0551 5708 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
19:14:37.0598 5708 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
19:14:37.0613 5708 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
19:14:37.0660 5708 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
19:14:37.0660 5708 [Global] - ok
19:14:37.0660 5708 ================ Scan MBR ==================================
19:14:37.0691 5708 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
19:14:38.0113 5708 \Device\Harddisk0\DR0 - ok
19:14:38.0113 5708 ================ Scan VBR ==================================
19:14:38.0128 5708 [ 4B4A76B4B7A6FC393C75169C2C7078E6 ] \Device\Harddisk0\DR0\Partition1
19:14:38.0128 5708 \Device\Harddisk0\DR0\Partition1 - ok
19:14:38.0144 5708 [ BFE8E9B8C618104488C661795027DC29 ] \Device\Harddisk0\DR0\Partition2
19:14:38.0144 5708 \Device\Harddisk0\DR0\Partition2 - ok
19:14:38.0144 5708 ============================================================
19:14:38.0144 5708 Scan finished
19:14:38.0144 5708 ============================================================
19:14:38.0175 3280 Detected object count: 0
19:14:38.0175 3280 Actual detected object count: 0
 *freu*....scheint ja alles im System i.O. ,,,das werde ich anerkennen! Mit meinen allerbesten Grüßen Simplex
__________________ Das Grösste und Schönste, ist das Einfache! |
|
11.10.2012, 20:02
| #8 |
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, Schritt 1 Ich sehe, dass du sog. Registry Cleaner auf dem System hast. In deinem Fall TuneUp Utilities 2012, TuneUp Utilities Language Pack (de-DE) und CCleaner. Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
Zerstörst Du die Registry, zerstörst Du Windows. Ich empfehle dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten. Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Bitte poste mit deiner nächsten Antwort
|
|
11.10.2012, 22:26
| #9 |
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit --------------------------------------------------------------------------------------------------------------------------------- 11/10/2012 - 23:20 Uhr Hallo, Code:
ATTFilter # AdwCleaner v2.004 - Datei am 11/10/2012 um 23:05:43 erstellt
# Aktualisiert am 06/10/2012 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Manfred Thiel - MANFREDTHIEL-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Manfred Thiel\Downloads\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Software
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Mozilla Firefox v4.0 (de)
Profilname : default
Datei : C:\Users\Manfred Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\rhh8twnq.default\prefs.js
C:\Users\Manfred Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\rhh8twnq.default\user.js ... Gelöscht !
[OK] Die Datei ist sauber.
Profilname : SafeBrowser
Datei : C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1591530547-3273788228-829058510-1000\FireFox\prefs.js
C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1591530547-3273788228-829058510-1000\FireFox\user.js ... Gelöscht !
[OK] Die Datei ist sauber.
Profilname : Standard-Benutzer [Profil par défaut]
Datei : C:\Users\Manfred Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\prefs.js
C:\Users\Manfred Thiel\AppData\Roaming\Mozilla\Firefox\Profiles\tbct8rhz.Standard-Benutzer\user.js ... Gelöscht !
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [1542 octets] - [11/10/2012 23:05:43]
########## EOF - C:\AdwCleaner[S1].txt - [1602 octets] ##########
__________________ Das Grösste und Schönste, ist das Einfache! |
|
12.10.2012, 18:41
| #10 | |
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, Zitat:
Advanced System Care 5 Pro/ Version 5.4.0 CCleaner / Version 3.23.1823 TuneUp Utilities 2012 / Version 12.0.3600.73 und zwar gleich. TFC reicht vollkommen aus (empfehle ich auch immer zum Schluss). Also bisher sehe ich keine Malware auf deinem Rechner. Ein paar letzte Kontrollen... Schritt 1
Schritt 2 ESET Online Scanner
Schritt 3 Downloade Dir bitte SecurityCheck
Bitte poste mit deiner nächsten Antwort
|
|
12.10.2012, 19:35
| #11 | |||||
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Hey, danke für die Empfehlung, werde Advanced System Care 5, TuneUp 2012 und auch CCleaner entfernen. Also, bei mir ist Malwarebytes Anti-Malware / Version 1.65.0.1400 seit 2.Oktober 2012 installiert und auch genutzt. Siehe hier: Logdatei v. 02.10.2012 -16:51 Uhr von Malwarebytes 1.65.0.1400 Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.65.0.1400 www.malwarebytes.org Datenbank Version: v2012.10.02.05 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 ******* ***** :: ************-PC [Administrator] Schutz: Aktiviert 02.10.2012 16:51:45 mbam-log-2012-10-02 (16-51-45).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 192650 Laufzeit: 5 Minute(n), 18 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) CODE] Soll ich die Vollversion "PLUS" kaufen, oder die "FREE" Version installieren? Hat Malwarebytes überhaupt eine Hintergrund-Schutzprogramm? So und nun an die weiteren Schritte zur Systembereinigung. Gruß Simplex ----------------------------------------------------------------------------------------------------------------------------------------------- Anbei das Log von Malwarebytes (aktualisiert 12/10/2012 -20:41 Uhr) ....da war nichts als "zu entfernen" markiert und so folgerichtig auch war auch der Button "ENTFERNEN" nicht da! Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.65.0.1400 www.malwarebytes.org Datenbank Version: v2012.10.12.04 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Manfred Thiel :: MANFREDTHIEL-PC [Administrator] Schutz: Aktiviert 12.10.2012 20:46:27 mbam-log-2012-10-12 (20-46-27).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 193396 Laufzeit: 4 Minute(n), 50 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) ------------------------------------------------------------------------------------------------------------------------------------------------------------ 12/10/2012 - 22:30 Uhr Also, das wird heut nichts mehr mit der Logdatei von ESET! Der Scan läuft seit 1:00 Std. und hat 24% = rd. 64.000 Files erst gescannt - angeschlossen sind externe Speichermedien. Ich gehe schlafen, da mit über 4 Std. Durchlaufzeit zu rechnen ist. Schönes Nächtle Simplex --------------------------------------------------------------------------------------------------------------------------------------------------- 13/10/2012 - 14:45 Uhr Moin, moin, Der Schritt 2. hat nicht geklappt, auch nicht nach drei Versuchen. -> zweiter und dritter Versuch ohne externe Speichermedien! Ich konnte keine Logdatei von ESET Online Scanner erstellen, obwohl ich den Scan als Administrator ausführte! Nach Start erschien die Meldung: Zitat:
Zitat:
Zitat:
Zitat:
Zitat:
Auch das  und das  konnte ich nirgendwo entdecken!Kurz ich hatte keinerlei Möglichkeiten eine Logdatei zu erstellen. Schritt 3. Hier die Logdatei von SecurityCheck - ausgeführt als Administrator! Code:
ATTFilter Results of screen317's Security Check version 0.99.51 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky Internet Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.65.0.1400 TuneUp Utilities 2012 TuneUp Utilities Language Pack (de-DE) CCleaner Java 7 Update 7 Adobe Flash Player 11.2.202.235 Adobe Reader X (10.1.4) Mozilla Firefox 4.0 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSASCui.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Malwarebytes' Anti-Malware mbamscheduler.exe Windows Defender MSASCui.exe Kaspersky Lab Kaspersky Internet Security 2013 avp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log``````````````````````
__________________ Das Grösste und Schönste, ist das Einfache! Geändert von Simplex (12.10.2012 um 20:06 Uhr) |
|
13.10.2012, 19:48
| #12 | |
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit ------------------------------------------------------------------------------------------------------------------------------------------------------ 13/0/2012 - 20:34 Uhr Yiiip, es ging, das Log von ESET Scan, nach folgendem Hinweis, den ich hierzuforum gelesen habe!
__________________ Das Grösste und Schönste, ist das Einfache! |
|
13.10.2012, 20:08
| #13 |
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, ESET ist nicht mehr notwendig. Malwarebytes' Anti-Malware (Free Version) ist ausreichend. Du hast ja bereits Kaspersky. Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern. Schritt 1 Deine Version von Adobe Flash Player ist veraltet. Bitte folge diesen Schritte, um Adobe Flash zu aktualisieren:
Schritt 2
Prüfe bitte auch (regelmässig) ob folgende Links fehlende Updates bei deinen Plugins zeigen: Schritt 3 Starte DeFogger und klicke auf Re-enable. Gegebenenfalls muss dein Rechner neu gestartet werden. Schritt 4 Ich würde dir empfehlen, 1 mal pro Woche auch mit diesem Scanner dein System zu prüfen. Möchtest Du ESET denoch deinstallieren, Drücke bitte die  + R Taste und kopiere folgenden Text in das Ausführen Fenster.Code:
ATTFilter "%PROGRAMFILES%\Eset\Eset Online Scanner\OnlineScannerUninstaller.exe"
Schritt 5
Schritt 6 Starte bitte OTL und klicke auf Bereinigung. Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen. Schritt 7 Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich diesen Thread aus meinen Abos löschen kann. |
|
13.10.2012, 20:27
| #14 |
| | Analyse und Bereinigung Betriebssystem Windows Vista 32-BitHey, vielen Dank für die Rückantwort und die Info-Vorschläge!
__________________ Das Grösste und Schönste, ist das Einfache! |
|
13.10.2012, 20:31
| #15 |
| /// TB-Ausbilder | Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit Servus, du kannst die Logdatei von ESET gerne noch posten. Ich warte solange. |
|
| Themen zu Analyse und Bereinigung Betriebssystem Windows Vista 32-Bit |
| amd, betriebssystem, center, cpu, hochfahren, home, konfigurieren, langsam, laptop, m-k-d-b, neu, nicht mehr, plötzlich, router, sehr langsam, service, service pack 2, software, system, telekom, toshiba, version, vista, vista home premium, windows, windows vista, wlan |
Textbox.
Linear-Darstellung
