Exploit.Drop-UR.2 endgültig löschen

TomCatBerlin · 19.10.2012, 15:03

Hallo und sorry,
finde einfach keine Antworten im Netz:

Habe definitif den Exploit.Drop.UR.2 auf meinem Rechner und bekomme ihn nicht los.

Malwarebyte hats gesäubert, aber beim Neustart immer dasselbe:
Weißer Bildschirm
"Das Programm kann die Website nicht öffnen"

Habe dann wie Thema "Hartnäckig das Zeug" alles gemacht und hier das Ergebnis....
Wäre sehr dankbar für eine Antwort!
TC

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=1138789f58dc4d4fb5bf5a4e07895277
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-10-19 11:15:53
# local_time=2012-10-19 01:15:53 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1792 16777215 100 0 29438388 29438388 0 0
# compatibility_mode=5121 16777214 100 75 4158069 4922224 0 0
# compatibility_mode=5892 16776574 100 100 4239002 188169802 0 0
# compatibility_mode=8192 67108863 100 0 282 282 0 0
# scanned=249033
# found=5
# cleaned=0
# scan_time=8278
C:\ProgramData\hybmpfnk.exe    Win32/Extats.N trojan (unable to clean)    00000000000000000000000000000000    I
C:\Users\All Users\hybmpfnk.exe    Win32/Extats.N trojan (unable to clean)    00000000000000000000000000000000    I
C:\Users\der.knopf\AppData\Roaming\Mozilla\Firefox\Profiles\4ss6xdix.default\user.js    JS/SecurityDisabler.A.Gen application (unable to clean)    00000000000000000000000000000000    I
C:\Users\der.knopf\Downloads\Wichtiges\PDFCreator-1_2_3_setup.exe    Win32/Toolbar.Widgi application (unable to clean)    00000000000000000000000000000000    I
C:\Windows\hybmpfnk.exe    Win32/Extats.N trojan (unable to clean)    00000000000000000000000000000000    I

M-K-D-B · 19.10.2012, 17:23

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Eine Bereinigung ist mitunter mit viel Arbeit für dich verbunden. Es können mehrere Analyse- und Bereinigungsschritte erforderlich sein.
Abschließend entfernen wir wieder alle verwendeten Programme und ich gebe dir ein paar Tipps für die Zukunft mit auf den Weg.
Bei Anzeichen von illegaler Software wird der Support ohne Diskussion eingestellt.
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Führe nur Scans durch, zu denen du von mir oder einem anderen Helfer aufgefordert wirst.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software außer du wirst dazu aufgefordert.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Zitat:

Zitat von TomCatBerlin

Habe definitif den Exploit.Drop.UR.2 auf meinem Rechner und bekomme ihn nicht los.

Malwarebyte hats gesäubert, aber beim Neustart immer dasselbe:
Weißer Bildschirm
"Das Programm kann die Website nicht öffnen"

Bitte die Logdatei von MBAM posten:

Öffne Malwarebytes' Anti-Malware.
Klicke auf den Tab Logdateien.
Wähle die entsprechende Textdatei aus und Klicke auf Öffnen.
Poste mir den Inhalt hier mit deiner nächsten Antwort.

Ich nehme an, dass du MBAM im abgesicherten Modus ausgeführt hast.
Bevor wir die Bereinigung starten, brauche ich mehr Informationen.

Starte deinen Rechner nach dieser Anleitung im abgesicherten Modus mit Netzwerktreibern und führe dort die folgenden Schritte aus.

Schritt 1
Downloade dir bitte DDS ( von sUBs ) von einem der folgenden Downloadspiegel und speichere die Datei auf deinem Desktop.

dds.com
dds.exe

Starte bitte dds mit einem Doppelklick.
Der Desktop wird verschwinden, das ist normal.
Setze bitte einen Haken bei
- dds.txt ( Sollte angehakt sein )
- attach.txt
Ändere keine Einstellungen ohne Anweisung
Wenn der Scan beendet ist, wird DDS 2 Logfiles auf deinem Desktop erstellen:
- dds.txt
- attach.txt

Bitte poste beide Logfiles in deiner nächsten Antwort.

Schritt 2
Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop.

Starte das Tool mit Doppelklick.
Vista und Win7 User mit Rechtsklick "als Administrator starten".
Klicke nun auf den Disable Button, um die Treiber gewisser Emulatoren zu deaktivieren.
Wenn der Scan beendet wurde ( Finished ), klicke auf OK.
Defogger fordert gegebenfalls zum Neustart auf. Bestätige dies mit OK.

Sollte Defogger eine Fehlermeldung ausgeben, poste bitte die defogger_disable Log von deinem Desktop.
Klicke den Re-enable Button nicht ohne Anweisung.

Schritt 3
Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen.

Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und speichere das Logfile.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern ( Meistens C:\ )
Als Beispiel: C:\TDSSKiller.<version_date_time>log.txt

Poste den Inhalt bitte hier in deinen Thread.

Bitte poste mit deiner nächsten Antwort

die Logdatei von MBAM,
die beiden Logdateien von DSS (DDS.txt und Attach.txt),
die Logdatei von TDSSKiller.

TomCatBerlin · 19.10.2012, 22:35

[Attach]
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.DDS Logfile:

Code:

ATTFilter

DDS (Ver_2012-10-19.01)
.
Microsoft® Windows Vista™ Home Premium 
Boot Device: \Device\HarddiskVolume2
Install Date: 14.10.2006 00:57:14
System Uptime: 19.10.2012 10:11:09 (13 hours ago)
.
Motherboard: Acer |  | WMCP78M
Processor: Athlon(tm) Dual Core Processor 4450e | Socket AM2  | 2300/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 143 GiB total, 70,87 GiB free.
D: is FIXED (NTFS) - 145 GiB total, 18,51 GiB free.
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Microsoft-ISATAP-Adapter
Device ID: ROOT\*ISATAP\0001
Manufacturer: Microsoft
Name: Microsoft-ISATAP-Adapter #2
PNP Device ID: ROOT\*ISATAP\0001
Service: tunnel
.
Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}
Description: Officejet 6500 E709a
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Officejet 6500 E709a
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service: 
.
==== System Restore Points ===================
.
RP690: 27.09.2012 10:33:26 - Windows Update
RP691: 27.09.2012 11:20:01 - Windows Update
RP692: 14.10.2012 13:13:42 - Removed Captcha Brotherhood
RP693: 14.10.2012 13:14:34 - Removed Captcha Brotherhood
RP694: 14.10.2012 13:15:10 - Installed Captcha Brotherhood
RP695: 14.10.2012 22:20:21 - Windows Update
.
==== Installed Programs ======================
.
32 Bit HP CIO Components Installer
6500_E709_eDocs
6500_E709_Help
6500_E709a
7-Zip 9.22beta
Acer Arcade Live Main Page
Acer DV Magician
Acer DVDivine
Acer eDataSecurity Management
Acer Empowering Technology
Acer HomeMedia
Acer HomeMedia Connect
Acer HomeMedia Trial Creator
Acer ScreenSaver
Acer VideoMagician
Activation Assistant for the 2007 Microsoft Office suites
Ad-Aware
Adobe Flash Player 11 Plugin
Adobe Flash Player 9 ActiveX
Adobe Flash Player ActiveX
Adobe Reader 9.5.2 - Deutsch
AFPL Ghostscript 8.54
AFPL Ghostscript Fonts
ALLNET Backup Utility
Ashampoo WinOptimizer 6.60
Auslogics BoostSpeed
Auslogics Disk Defrag
AV Input Selection
Avira Free Antivirus
AviSynth 2.5
AVS Update Manager 1.0
Bluesoleil2.6.0.1 Release 070402
BOINC
bpd_scan
BPDSoftware
BPDSoftware_Ini
BufferChm
Captcha Brotherhood
CasinoClub
CCleaner
CDBurnerXP
Chinese Simplified Fonts Support For Adobe Reader 9
ConvertHelper 2.2
CorelDRAW Essentials 4
CorelDRAW Essentials 4 - Content
CorelDRAW Essentials 4 - Draw
CorelDRAW Essentials 4 - Extra Content
CorelDRAW Essentials 4 - Filters
CorelDRAW Essentials 4 - ICA
CorelDRAW Essentials 4 - IPM - No VBA
CorelDRAW Essentials 4 - Lang BR
CorelDRAW Essentials 4 - Lang DE
CorelDRAW Essentials 4 - Lang EN
CorelDRAW Essentials 4 - Lang ES
CorelDRAW Essentials 4 - Lang FR
CorelDRAW Essentials 4 - Lang IT
CorelDRAW Essentials 4 - Lang NL
CorelDRAW Essentials 4 - PHOTO-PAINT
CorelDRAW Essentials 4 - Windows Shell Extension
DesignPro Business Cards SE
Destinations
DeviceDiscovery
DocMgr
DocProc
DSL-Manager
ESET Online Scanner v3
eXPert PDF 6
Fax
Free FLV Converter V 6.95.0
Free YouTube to MP3 Converter version 3.9.35.324
FreePDF (Remove only)
GIMP 2.6.6
Google Update Helper
GPBaseService2
GPL Ghostscript Fonts
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Customer Participation Program 14.0
HP Document Manager 2.0
HP Imaging Device Functions 14.0
HP Officejet 6500 E709 Series
HP Smart Web Printing 4.60
HP Solution Center 14.0
HP Update
HPDiagnosticAlert
hppQFolderCM1312
HPProductAssistant
HPSSupply
HS Foto-Aufmaß
Java Auto Updater
Java(TM) 6 Update 26
JDownloader
LightScribe  1.4.142.1
Malwarebytes Anti-Malware Version 1.65.0.1400
MarketResearch
McAfee Internet Security Suite
MessageViewer Pro 3.1.5
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft Office Excel MUI (German) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (German) 2007
Microsoft Office PowerPoint MUI (German) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Italian) 2007
Microsoft Office Proofing (German) 2007
Microsoft Office Shared MUI (German) 2007
Microsoft Office Word MUI (German) 2007
Microsoft Silverlight
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft Works
Mobile Partner
Mozilla Firefox 9.0.1 (x86 de)
Mp3tag v2.43
MSVCSetup
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Network
NTI Backup Now 5
NTI Backup Now Standard
NTI Media Maker 8
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager
NVIDIA Grafiktreiber 275.33
NVIDIA Install Application
NVIDIA Systemsteuerung 275.33
NVIDIA Update 1.3.5
NVIDIA Update Components
Nvu 1.0
OCR Software by I.R.I.S. 14.0
PC Inspector File Recovery
PDF24 Creator 3.3.0
PDFCreator
ProductContext
PSP Video 9 6
PVSonyDll
Realtek High Definition Audio Driver
Scan
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Shop for HP Supplies
SmartWebPrinting
SolutionCenter
Spybot - Search & Destroy
StarCraft II
Status
TeamViewer 7
ToDo Manager 1.15.1 
TomTom HOME 2.8.2.2264
TomTom HOME Visual Studio Merge Modules
Toolbox
TrayApp
Trojan Remover 6.8.5
Tunatic
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update Manager
Virtual Earth 3D (Betaversion)
Vista Codec Package
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 2.0.2
WebReg
Windows Live ID Sign-in Assistant
Windows Media Player Firefox Plugin
WinRAR
.
==== End Of File ===========================
[DDS]
DDS (Ver_2012-10-19.01) - NTFS_x86 NETWORK
Internet Explorer: 7.0.6002.18005  BrowserJavaVersion: 1.6.0_26
Run by der.knopf at 23:26:26 on 2012-10-19
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.2814.1706 [GMT 2:00]
.
AV: Lavasoft Ad-Watch Live! Virenschutz *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
AV: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
FW: McAfee  Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\system32\mfevtps.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AWSC.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Windows Mail\WinMail.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.orbitdownloader.com
uSearch Page = hxxp://search.live.com
mStart Page = hxxp://de.intl.acer.yahoo.com
mDefault_Page_URL = hxxp://de.intl.acer.yahoo.com
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\program files\mcafee\siteadvisor\McIEPlg.dll
BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {27B4851A-3207-45A2-B947-BE8AFE6163AB} - <orphaned>
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20120831135753.dll
BHO: ShowBarObj Class: {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - c:\program files\acer\empowering technology\edatasecurity\x86\ActiveToolBand.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\program files\mcafee\siteadvisor\McIEPlg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Acer eDataSecurity Management: {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - c:\program files\acer\empowering technology\edatasecurity\x86\eDStoolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\program files\mcafee\siteadvisor\McIEPlg.dll
EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup
uRun: [hybmpfnkfghttfo] c:\windows\hybmpfnk.exe
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [boincmgr] "d:\program files\boinc\boincmgr.exe" /a /s
mRun: [boinctray] "d:\program files\boinc\boinctray.exe"
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [TrojanScanner] c:\program files\trojan remover\Trjscan.exe /boot
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoResolveTrack = dword:1
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: &Download by Orbit - <no file>
IE: &Grab video by Orbit - <no file>
IE: Do&wnload selected by Orbit - <no file>
IE: Down&load all by Orbit - <no file>
IE: Nach Microsoft &Excel exportieren - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
.
INFO: HKLM has more than 50 listed domains.
   If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: NameServer = 192.168.178.1
TCP: Interfaces\{614B11A2-217E-46BB-B10A-5C1A14120FC8} : DHCPNameServer = 192.168.178.1
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\program files\mcafee\msc\McSnIePl.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files\mcafee\siteadvisor\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files\mcafee\siteadvisor\McIEPlg.dll
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
Hosts: 192.168.2.103 NPI8201C8
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\der.knopf\appdata\roaming\mozilla\firefox\profiles\4ss6xdix.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
FF - plugin: c:\progra~1\mcafee\msc\npMcSnFFPl.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mcafee\siteadvisor\NPMcFFPlg32.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\virtual earth 3d\npVE3D.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
FF - ExtSQL: 2012-08-31 14:03; {D19CA586-DD6C-4a0a-96F8-14644F340D60}; c:\program files\common files\mcafee\SystemCore
FF - ExtSQL: !HIDDEN! 2009-09-02 07:19; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - ExtSQL: !HIDDEN! 2012-02-16 09:54; smartwebprinting@hp.com; c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
.
---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
.
============= SERVICES / DRIVERS ===============
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-9-8 64512]
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2008-5-9 464304]
R1 DslMNLwf;DSL-Manager NDIS LightWeight Filter;c:\windows\system32\drivers\dslmnlwf.sys [2012-7-20 16448]
R1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\drivers\mfenlfk.sys [2012-8-31 64912]
R1 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-8-31 169608]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2011-8-18 2152152]
R2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2012-8-31 214904]
R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2012-8-31 161664]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-8-31 151912]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-8-31 340920]
S1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2011-11-13 36000]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\acer arcade live\acer homemedia connect\kernel\dms\CLMSServer.exe [2008-5-9 269448]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\avira\antivir desktop\sched.exe [2011-11-13 86224]
S2 AntiVirService;Avira Echtzeit Scanner;c:\program files\avira\antivir desktop\avguard.exe [2011-11-13 110032]
S2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-6-9 83392]
S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\newtech infosystems\nti backup now 5\client\Agentsvc.exe [2008-3-3 16384]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 ETService;Empowering Technology Service;c:\program files\acer\empowering technology\service\ETService.exe [2008-5-9 24576]
S2 FontCache;Windows-Dienst für Schriftartencache;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-3-18 136176]
S2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-18 399432]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-3-7 676936]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-11-20 95232]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2012-8-31 214904]
S2 McProxy;McAfee Proxy Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2012-8-31 214904]
S2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2012-8-31 166320]
S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\newtech infosystems\nti backup now 5\BackupSvc.exe [2008-4-25 45056]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\newtech infosystems\nti backup now 5\SchedulerSvc.exe [2008-4-25 131072]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-8-1 2214504]
S2 TeamViewer7;TeamViewer 7;c:\program files\teamviewer\version7\TeamViewer_Service.exe [2012-8-24 2735528]
S2 TomTomHOMEService;TomTomHOMEService;d:\program files\tomtom home 2\TomTomHOMEService.exe [2011-4-22 92592]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-3-30 250808]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-8-31 57600]
S3 DfSdkS;Defragmentation-Service;c:\program files\ashampoo\ashampoo winoptimizer 6\DfSdkS.exe [2012-9-26 406016]
S3 dsltestSp5;dsltestSp5 NDIS Protocol Driver;c:\windows\system32\drivers\DslTestSp5.sys [2012-7-20 26816]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-3-18 136176]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-3-7 22856]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2008-5-9 180848]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2008-5-9 59456]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-8-31 87656]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2008-5-9 34248]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2008-5-9 40552]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2009-6-26 66080]
S3 TDslMgrService;DSL-Manager;c:\program files\dsl-manager\DslMgrSvc.exe [2012-7-20 307200]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 WSDPrintDevice;WSD-Druckunterstützung durch UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-1-21 16896]
.
=============== Created Last 30 ================
.
2012-11-20 13:51:27	--------	d-----w-	c:\programdata\HSETU
2012-11-20 13:50:31	--------	d-----w-	c:\program files\HSETU
2012-11-20 13:46:52	18904	----a-w-	c:\windows\system32\StructuredQuerySchemaTrivial.bin
2012-10-19 08:53:12	--------	d-----w-	c:\program files\ESET
2012-10-18 09:52:48	10240	----a-w-	c:\windows\npwmsdrm.dll
2012-10-18 09:49:14	--------	d-----w-	c:\programdata\clhgbavkfbyagdn
2012-10-18 09:49:12	303648	----a-w-	c:\windows\hybmpfnk.exe
2012-10-18 09:49:11	303648	----a-w-	c:\programdata\hybmpfnk.exe
2012-10-18 09:48:50	10240	----a-w-	c:\users\der.knopf\npwmsdrm.dll
2012-10-14 12:06:22	--------	d-----w-	c:\users\der.knopf\appdata\local\Brotherhood_Software
2012-10-14 11:10:27	985088	----a-w-	c:\windows\system32\crypt32.dll
2012-10-14 11:10:27	133120	----a-w-	c:\windows\system32\cryptsvc.dll
2012-10-14 11:10:26	98304	----a-w-	c:\windows\system32\cryptnet.dll
2012-10-14 11:10:03	172544	----a-w-	c:\windows\system32\wintrust.dll
2012-10-14 11:09:56	2048	----a-w-	c:\windows\system32\tzres.dll
2012-10-14 11:09:35	3602816	----a-w-	c:\windows\system32\ntkrnlpa.exe
2012-10-14 11:09:35	3550080	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-09-26 20:39:57	28160	----a-w-	c:\windows\system32\DfSdkBt.exe
2012-09-26 20:39:46	--------	d-----w-	c:\program files\Ashampoo
2012-09-25 18:26:20	--------	d-----w-	c:\users\der.knopf\appdata\roaming\Simply Super Software
2012-09-25 18:26:05	77312	----a-w-	c:\windows\system32\ztvunace26.dll
2012-09-25 18:26:05	605968	----a-w-	c:\windows\system32\ztv7z.dll
2012-09-25 18:26:05	185616	----a-w-	c:\windows\system32\ztvunrar39.dll
2012-09-25 18:26:05	169744	----a-w-	c:\windows\system32\ztvunrar36.dll
2012-09-25 18:26:04	77072	----a-w-	c:\windows\system32\ztvcabinet.dll
2012-09-25 18:26:04	75264	----a-w-	c:\windows\system32\unacev2.dll
2012-09-25 18:26:04	153088	----a-w-	c:\windows\system32\UNRAR3.dll
2012-09-25 18:25:59	--------	d-----w-	c:\programdata\Simply Super Software
2012-09-25 18:25:59	--------	d-----w-	c:\program files\Trojan Remover
.
==================== Find3M  ====================
.
2012-10-14 11:22:22	73656	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-14 11:22:22	696760	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-09-07 15:04:46	22856	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-08-24 15:53:28	834048	----a-w-	c:\windows\system32\wininet.dll
2012-08-24 14:07:05	389632	----a-w-	c:\windows\system32\html.iec
2012-08-24 13:41:58	1383424	----a-w-	c:\windows\system32\mshtml.tlb
2012-08-18 06:05:07	3350	--sha-w-	c:\programdata\KGyGaAvL.sys
.
============= FINISH: 23:27:28,91 ===============

--- --- ---
23:33:45.0033 5608 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
23:33:46.0889 5608 ============================================================
23:33:46.0889 5608 Current date / time: 2012/10/19 23:33:46.0889
23:33:46.0889 5608 SystemInfo:
23:33:46.0889 5608
23:33:46.0889 5608 OS Version: 6.0.6002 ServicePack: 2.0
23:33:46.0889 5608 Product type: Workstation
23:33:46.0889 5608 ComputerName: KNOPFARBEITPC
23:33:46.0889 5608 UserName: der.knopf
23:33:46.0889 5608 Windows directory: C:\Windows
23:33:46.0889 5608 System windows directory: C:\Windows
23:33:46.0889 5608 Processor architecture: Intel x86
23:33:46.0889 5608 Number of processors: 2
23:33:46.0889 5608 Page size: 0x1000
23:33:46.0889 5608 Boot type: Safe boot with network
23:33:46.0889 5608 ============================================================
23:33:47.0248 5608 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:33:47.0263 5608 ============================================================
23:33:47.0263 5608 \Device\Harddisk0\DR0:
23:33:47.0263 5608 MBR partitions:
23:33:47.0263 5608 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x11E65000
23:33:47.0263 5608 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13265800, BlocksNum 0x121C8800
23:33:47.0263 5608 ============================================================
23:33:47.0295 5608 C: <-> \Device\Harddisk0\DR0\Partition1
23:33:47.0310 5608 D: <-> \Device\Harddisk0\DR0\Partition2
23:33:47.0326 5608 ============================================================
23:33:47.0326 5608 Initialize success
23:33:47.0326 5608 ============================================================
23:33:51.0226 7304 ============================================================
23:33:51.0226 7304 Scan started
23:33:51.0226 7304 Mode: Manual;
23:33:51.0226 7304 ============================================================
23:33:52.0037 7304 ================ Scan system memory ========================
23:33:52.0037 7304 System memory - ok
23:33:52.0037 7304 ================ Scan services =============================
23:33:52.0115 7304 [ 517D30057C726C797764BFD70A55D82A ] Acer HomeMedia Connect Service C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
23:33:52.0131 7304 Acer HomeMedia Connect Service - ok
23:33:52.0255 7304 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
23:33:52.0271 7304 ACPI - ok
23:33:52.0349 7304 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
23:33:52.0349 7304 AdobeFlashPlayerUpdateSvc - ok
23:33:52.0380 7304 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
23:33:52.0380 7304 adp94xx - ok
23:33:52.0411 7304 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
23:33:52.0411 7304 adpahci - ok
23:33:52.0427 7304 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
23:33:52.0427 7304 adpu160m - ok
23:33:52.0443 7304 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
23:33:52.0443 7304 adpu320 - ok
23:33:52.0474 7304 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:33:52.0474 7304 AeLookupSvc - ok
23:33:52.0505 7304 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
23:33:52.0521 7304 AFD - ok
23:33:52.0552 7304 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
23:33:52.0552 7304 agp440 - ok
23:33:52.0567 7304 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
23:33:52.0567 7304 aic78xx - ok
23:33:52.0583 7304 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
23:33:52.0583 7304 ALG - ok
23:33:52.0599 7304 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
23:33:52.0599 7304 aliide - ok
23:33:52.0614 7304 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
23:33:52.0614 7304 amdagp - ok
23:33:52.0630 7304 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
23:33:52.0630 7304 amdide - ok
23:33:52.0645 7304 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
23:33:52.0645 7304 AmdK7 - ok
23:33:52.0677 7304 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
23:33:52.0677 7304 AmdK8 - ok
23:33:52.0723 7304 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
23:33:52.0739 7304 AntiVirSchedulerService - ok
23:33:52.0770 7304 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
23:33:52.0770 7304 AntiVirService - ok
23:33:52.0786 7304 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
23:33:52.0801 7304 Appinfo - ok
23:33:52.0801 7304 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
23:33:52.0817 7304 arc - ok
23:33:52.0833 7304 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
23:33:52.0833 7304 arcsas - ok
23:33:52.0911 7304 [ 40C145F12FF461A0220303BDA134F598 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:33:52.0911 7304 aspnet_state - ok
23:33:52.0926 7304 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:33:52.0926 7304 AsyncMac - ok
23:33:52.0957 7304 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
23:33:52.0957 7304 atapi - ok
23:33:52.0973 7304 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:33:52.0989 7304 AudioEndpointBuilder - ok
23:33:52.0989 7304 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
23:33:53.0004 7304 Audiosrv - ok
23:33:53.0051 7304 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
23:33:53.0051 7304 avgntflt - ok
23:33:53.0082 7304 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
23:33:53.0082 7304 avipbb - ok
23:33:53.0113 7304 [ 271CFD1A989209B1964E24D969552BF7 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
23:33:53.0113 7304 avkmgr - ok
23:33:53.0145 7304 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
23:33:53.0145 7304 Beep - ok
23:33:53.0176 7304 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
23:33:53.0191 7304 BFE - ok
23:33:53.0238 7304 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
23:33:53.0269 7304 BITS - ok
23:33:53.0285 7304 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
23:33:53.0285 7304 blbdrive - ok
23:33:53.0332 7304 [ 1D866FAF96D7369A1817AB208C04CF55 ] BlueletAudio C:\Windows\system32\DRIVERS\blueletaudio.sys
23:33:53.0332 7304 BlueletAudio - ok
23:33:53.0363 7304 [ 8FC27B12A02B43947787F0EF1885DF9B ] BlueletSCOAudio C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys
23:33:53.0363 7304 BlueletSCOAudio - ok
23:33:53.0379 7304 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:33:53.0394 7304 bowser - ok
23:33:53.0410 7304 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
23:33:53.0410 7304 BrFiltLo - ok
23:33:53.0425 7304 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
23:33:53.0425 7304 BrFiltUp - ok
23:33:53.0457 7304 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
23:33:53.0457 7304 Browser - ok
23:33:53.0472 7304 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
23:33:53.0472 7304 Brserid - ok
23:33:53.0488 7304 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
23:33:53.0488 7304 BrSerWdm - ok
23:33:53.0503 7304 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
23:33:53.0503 7304 BrUsbMdm - ok
23:33:53.0519 7304 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
23:33:53.0519 7304 BrUsbSer - ok
23:33:53.0550 7304 [ C5CCE2B26F73F8CF7F3C82159E79AA08 ] BT C:\Windows\system32\DRIVERS\btnetdrv.sys
23:33:53.0550 7304 BT - ok
23:33:53.0581 7304 [ D5D025B5F704817B42D13A3E443F7893 ] Btcsrusb C:\Windows\system32\Drivers\btcusb.sys
23:33:53.0581 7304 Btcsrusb - ok
23:33:53.0628 7304 [ 6D39C954799B63BA866910234CF7D726 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
23:33:53.0644 7304 BthEnum - ok
23:33:53.0644 7304 [ CE643D0918123D76A5CAAB008FCA9663 ] BTHidEnum C:\Windows\system32\Drivers\vbtenum.sys
23:33:53.0644 7304 BTHidEnum - ok
23:33:53.0659 7304 [ DFCA4FE4C8AEC786B4D0F432EB730F48 ] BTHidMgr C:\Windows\system32\Drivers\BTHidMgr.sys
23:33:53.0659 7304 BTHidMgr - ok
23:33:53.0675 7304 [ 9A966A8E86D1771911AE34A20D11BFF3 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
23:33:53.0691 7304 BTHMODEM - ok
23:33:53.0706 7304 [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
23:33:53.0706 7304 BthPan - ok
23:33:53.0753 7304 [ 5A3ABAA2F8EECE7AEFB942773766E3DB ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
23:33:53.0753 7304 BTHPORT - ok
23:33:53.0815 7304 [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ C:\Windows\System32\bthserv.dll
23:33:53.0815 7304 BthServ - ok
23:33:53.0831 7304 [ 94E2941280E3756A5E0BCB467865C43A ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
23:33:53.0831 7304 BTHUSB - ok
23:33:53.0878 7304 [ 09E6AFFAE6C0E9158BF05C7D08D0107A ] BUNAgentSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
23:33:53.0878 7304 BUNAgentSvc - ok
23:33:53.0893 7304 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:33:53.0893 7304 cdfs - ok
23:33:53.0940 7304 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:33:53.0940 7304 cdrom - ok
23:33:53.0971 7304 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
23:33:53.0971 7304 CertPropSvc - ok
23:33:54.0018 7304 [ 1C7B1E36F3CED9E4B0B13385E627FE8B ] cfwids C:\Windows\system32\drivers\cfwids.sys
23:33:54.0018 7304 cfwids - ok
23:33:54.0049 7304 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
23:33:54.0049 7304 circlass - ok
23:33:54.0081 7304 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
23:33:54.0081 7304 CLFS - ok
23:33:54.0096 7304 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:33:54.0096 7304 clr_optimization_v2.0.50727_32 - ok
23:33:54.0159 7304 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:33:54.0174 7304 clr_optimization_v4.0.30319_32 - ok
23:33:54.0190 7304 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:33:54.0190 7304 cmdide - ok
23:33:54.0205 7304 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\drivers\compbatt.sys
23:33:54.0205 7304 Compbatt - ok
23:33:54.0205 7304 COMSysApp - ok
23:33:54.0221 7304 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
23:33:54.0221 7304 crcdisk - ok
23:33:54.0252 7304 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
23:33:54.0252 7304 Crusoe - ok
23:33:54.0283 7304 [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:33:54.0283 7304 CryptSvc - ok
23:33:54.0315 7304 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
23:33:54.0330 7304 DcomLaunch - ok
23:33:54.0377 7304 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:33:54.0377 7304 DfsC - ok
23:33:54.0455 7304 [ 92AE26F2CAF4A67E24A0BA6DDF32CC3C ] DfSdkS C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
23:33:54.0455 7304 DfSdkS - ok
23:33:54.0517 7304 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
23:33:54.0549 7304 DFSR - ok
23:33:54.0580 7304 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
23:33:54.0580 7304 Dhcp - ok
23:33:54.0595 7304 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
23:33:54.0595 7304 disk - ok
23:33:54.0642 7304 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:33:54.0642 7304 Dnscache - ok
23:33:54.0658 7304 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
23:33:54.0673 7304 dot3svc - ok
23:33:54.0720 7304 [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
23:33:54.0720 7304 Dot4 - ok
23:33:54.0751 7304 [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
23:33:54.0751 7304 Dot4Print - ok
23:33:54.0767 7304 [ C55004CA6B419B6695970DFE849B122F ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
23:33:54.0767 7304 dot4usb - ok
23:33:54.0814 7304 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
23:33:54.0814 7304 DPS - ok
23:33:54.0829 7304 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:33:54.0829 7304 drmkaud - ok
23:33:54.0876 7304 [ E577B5C4A6BE078E5445CDCFB65BE7AB ] DslMNLwf C:\Windows\system32\DRIVERS\dslmnlwf.sys
23:33:54.0876 7304 DslMNLwf - ok
23:33:54.0907 7304 [ C6B2E10CFE79169C72F0269087B9A603 ] dsltestSp5 C:\Windows\system32\Drivers\dsltestSp5.sys
23:33:54.0907 7304 dsltestSp5 - ok
23:33:54.0939 7304 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:33:54.0954 7304 DXGKrnl - ok
23:33:54.0970 7304 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
23:33:54.0970 7304 E1G60 - ok
23:33:55.0001 7304 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
23:33:55.0001 7304 EapHost - ok
23:33:55.0032 7304 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
23:33:55.0032 7304 Ecache - ok
23:33:55.0126 7304 [ B7DC2580425225C320CEDA78DE55A3D0 ] eDataSecurity Service C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
23:33:55.0141 7304 eDataSecurity Service - ok
23:33:55.0173 7304 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:33:55.0173 7304 ehRecvr - ok
23:33:55.0204 7304 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
23:33:55.0204 7304 ehSched - ok
23:33:55.0235 7304 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
23:33:55.0235 7304 ehstart - ok
23:33:55.0266 7304 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
23:33:55.0266 7304 elxstor - ok
23:33:55.0297 7304 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
23:33:55.0313 7304 EMDMgmt - ok
23:33:55.0344 7304 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:33:55.0344 7304 ErrDev - ok
23:33:55.0375 7304 [ 20D3741680AB88269BADCDB161B36705 ] ETService C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
23:33:55.0375 7304 ETService - ok
23:33:55.0391 7304 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
23:33:55.0391 7304 EventSystem - ok
23:33:55.0407 7304 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
23:33:55.0407 7304 exfat - ok
23:33:55.0453 7304 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:33:55.0453 7304 fastfat - ok
23:33:55.0485 7304 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
23:33:55.0485 7304 fdc - ok
23:33:55.0500 7304 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
23:33:55.0500 7304 fdPHost - ok
23:33:55.0516 7304 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
23:33:55.0516 7304 FDResPub - ok
23:33:55.0516 7304 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:33:55.0516 7304 FileInfo - ok
23:33:55.0531 7304 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:33:55.0531 7304 Filetrace - ok
23:33:55.0547 7304 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
23:33:55.0547 7304 flpydisk - ok
23:33:55.0578 7304 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:33:55.0578 7304 FltMgr - ok
23:33:55.0641 7304 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
23:33:55.0672 7304 FontCache - ok
23:33:55.0703 7304 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
23:33:55.0703 7304 FontCache3.0.0.0 - ok
23:33:55.0750 7304 [ 283195C5301EADBCF56DEE637573ED12 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\bin32\nSvcAppFlt.exe
23:33:55.0765 7304 ForceWare Intelligent Application Manager (IAM) - ok
23:33:55.0781 7304 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:33:55.0781 7304 Fs_Rec - ok
23:33:55.0812 7304 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
23:33:55.0812 7304 gagp30kx - ok
23:33:55.0843 7304 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
23:33:55.0859 7304 gpsvc - ok
23:33:55.0921 7304 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
23:33:55.0921 7304 gupdate - ok
23:33:55.0953 7304 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
23:33:55.0953 7304 gupdatem - ok
23:33:55.0968 7304 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:33:55.0968 7304 HdAudAddService - ok
23:33:55.0999 7304 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
23:33:55.0999 7304 HDAudBus - ok
23:33:56.0015 7304 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
23:33:56.0015 7304 HidBth - ok
23:33:56.0031 7304 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
23:33:56.0031 7304 HidIr - ok
23:33:56.0062 7304 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
23:33:56.0062 7304 hidserv - ok
23:33:56.0077 7304 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
23:33:56.0077 7304 HidUsb - ok
23:33:56.0109 7304 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:33:56.0109 7304 hkmsvc - ok
23:33:56.0124 7304 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
23:33:56.0124 7304 HpCISSs - ok
23:33:56.0218 7304 [ 97AAC45A375168C6A2297BEEB9692E31 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
23:33:56.0233 7304 hpqcxs08 - ok
23:33:56.0265 7304 [ 19A4FB67B1C97EA18EDFF44340973CD9 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
23:33:56.0265 7304 hpqddsvc - ok
23:33:56.0296 7304 [ 56FC98F1014EA8DC51B92839C32759EC ] HPSLPSVC C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL
23:33:56.0311 7304 HPSLPSVC - ok
23:33:56.0358 7304 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:33:56.0358 7304 HTTP - ok
23:33:56.0421 7304 [ 1720966D9C7EA5E2D78B6DB92D2F9171 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
23:33:56.0421 7304 hwdatacard - ok
23:33:56.0483 7304 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
23:33:56.0483 7304 i2omp - ok
23:33:56.0499 7304 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
23:33:56.0499 7304 i8042prt - ok
23:33:56.0530 7304 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
23:33:56.0530 7304 iaStorV - ok
23:33:56.0670 7304 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:33:56.0686 7304 idsvc - ok
23:33:56.0701 7304 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
23:33:56.0701 7304 iirsp - ok
23:33:56.0733 7304 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
23:33:56.0748 7304 IKEEXT - ok
23:33:56.0764 7304 [ C6E5276C00EBDEB096BB5EF4B797D1B6 ] int15 C:\Windows\system32\drivers\int15.sys
23:33:56.0764 7304 int15 - ok
23:33:56.0811 7304 [ 4C01298060CF930D26A75A86B874B6AE ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
23:33:56.0826 7304 IntcAzAudAddService - ok
23:33:56.0842 7304 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
23:33:56.0842 7304 intelide - ok
23:33:56.0857 7304 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:33:56.0857 7304 intelppm - ok
23:33:56.0904 7304 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:33:56.0904 7304 IPBusEnum - ok
23:33:56.0920 7304 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:33:56.0920 7304 IpFilterDriver - ok
23:33:56.0951 7304 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:33:56.0951 7304 iphlpsvc - ok
23:33:56.0951 7304 IpInIp - ok
23:33:56.0982 7304 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
23:33:56.0982 7304 IPMIDRV - ok
23:33:56.0982 7304 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
23:33:56.0998 7304 IPNAT - ok
23:33:56.0998 7304 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:33:57.0013 7304 IRENUM - ok
23:33:57.0013 7304 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:33:57.0013 7304 isapnp - ok
23:33:57.0060 7304 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
23:33:57.0060 7304 iScsiPrt - ok
23:33:57.0076 7304 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
23:33:57.0076 7304 iteatapi - ok
23:33:57.0091 7304 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
23:33:57.0091 7304 iteraid - ok
23:33:57.0107 7304 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
23:33:57.0107 7304 kbdclass - ok
23:33:57.0123 7304 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
23:33:57.0123 7304 kbdhid - ok
23:33:57.0138 7304 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
23:33:57.0138 7304 KeyIso - ok
23:33:57.0169 7304 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:33:57.0169 7304 KSecDD - ok
23:33:57.0201 7304 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
23:33:57.0216 7304 KtmRm - ok
23:33:57.0263 7304 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
23:33:57.0263 7304 LanmanServer - ok
23:33:57.0294 7304 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:33:57.0310 7304 LanmanWorkstation - ok
23:33:57.0388 7304 [ 4D99FCA201B72E0F2CA996E357BAA170 ] Lavasoft Ad-Aware Service C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
23:33:57.0403 7304 Lavasoft Ad-Aware Service - ok
23:33:57.0419 7304 [ 336ABE8721CBC3110F1C6426DA633417 ] Lbd C:\Windows\system32\DRIVERS\Lbd.sys
23:33:57.0419 7304 Lbd - ok
23:33:57.0466 7304 [ 793FF718477345CD5D232C50BED1E452 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
23:33:57.0481 7304 LightScribeService - ok
23:33:57.0497 7304 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
23:33:57.0497 7304 lltdio - ok
23:33:57.0528 7304 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:33:57.0528 7304 lltdsvc - ok
23:33:57.0544 7304 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
23:33:57.0544 7304 lmhosts - ok
23:33:57.0575 7304 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
23:33:57.0575 7304 LSI_FC - ok
23:33:57.0591 7304 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
23:33:57.0591 7304 LSI_SAS - ok
23:33:57.0606 7304 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
23:33:57.0606 7304 LSI_SCSI - ok
23:33:57.0622 7304 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
23:33:57.0622 7304 luafv - ok
23:33:57.0669 7304 [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
23:33:57.0669 7304 MBAMProtector - ok
23:33:57.0731 7304 [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
23:33:57.0747 7304 MBAMScheduler - ok
23:33:57.0778 7304 [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
23:33:57.0793 7304 MBAMService - ok
23:33:57.0871 7304 [ C226CE46CD17FCE6261A9DE406F01C8B ] McAfee SiteAdvisor Service C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
23:33:57.0871 7304 McAfee SiteAdvisor Service - ok
23:33:57.0949 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] McMPFSvc C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
23:33:57.0965 7304 McMPFSvc - ok
23:33:57.0965 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] mcmscsvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:33:57.0981 7304 mcmscsvc - ok
23:33:57.0981 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] McNaiAnn C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:33:57.0981 7304 McNaiAnn - ok
23:33:57.0996 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] McNASvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:33:57.0996 7304 McNASvc - ok
23:33:58.0059 7304 [ B3CD9ADE1C2665124CA34125B331B0B4 ] McODS C:\Program Files\McAfee\VirusScan\mcods.exe
23:33:58.0059 7304 McODS - ok
23:33:58.0074 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] McProxy C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:33:58.0074 7304 McProxy - ok
23:33:58.0121 7304 [ 85DB8DDD2D664716BB5B2D3405F9EF92 ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
23:33:58.0121 7304 McShield - ok
23:33:58.0152 7304 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:33:58.0152 7304 Mcx2Svc - ok
23:33:58.0183 7304 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
23:33:58.0183 7304 megasas - ok
23:33:58.0199 7304 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
23:33:58.0199 7304 MegaSR - ok
23:33:58.0246 7304 [ 43C31BDF404A6D7A7AC1BFD5EAD2A566 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
23:33:58.0246 7304 mfeapfk - ok
23:33:58.0293 7304 [ C1DC5F42D3367F33B6451BE78B38BD46 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
23:33:58.0293 7304 mfeavfk - ok
23:33:58.0308 7304 [ 0435C43F4C2BE01B84868AD2A906397B ] mfebopk C:\Windows\system32\drivers\mfebopk.sys
23:33:58.0308 7304 mfebopk - ok
23:33:58.0339 7304 [ 183AB9DCE971E029C50223765671839C ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
23:33:58.0339 7304 mfefire - ok
23:33:58.0386 7304 [ 4EA6FF90015424517843E931448E00F1 ] mfefirek C:\Windows\system32\drivers\mfefirek.sys
23:33:58.0386 7304 mfefirek - ok
23:33:58.0402 7304 [ D1E998748BA24A731106611D535C6BBF ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
23:33:58.0402 7304 mfehidk - ok
23:33:58.0417 7304 [ AC04A618AEF3DE0FCE91C766F9E069DA ] mfenlfk C:\Windows\system32\DRIVERS\mfenlfk.sys
23:33:58.0417 7304 mfenlfk - ok
23:33:58.0449 7304 [ F454A13377F0A006D20A8C14A753C432 ] mferkdet C:\Windows\system32\drivers\mferkdet.sys
23:33:58.0449 7304 mferkdet - ok
23:33:58.0464 7304 [ 41FE2F288E05A6C8AB85DD56770FFBAD ] mferkdk C:\Windows\system32\drivers\mferkdk.sys
23:33:58.0464 7304 mferkdk - ok
23:33:58.0480 7304 [ 096B52EA918AA909BA5903D79E129005 ] mfesmfk C:\Windows\system32\drivers\mfesmfk.sys
23:33:58.0480 7304 mfesmfk - ok
23:33:58.0495 7304 [ 2B8DFC60EDDDAA33EB5E9F7C91B48ACD ] mfevtp C:\Windows\system32\mfevtps.exe
23:33:58.0495 7304 mfevtp - ok
23:33:58.0527 7304 [ F284337AEDB7483DF8A5FA840647E2B0 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
23:33:58.0527 7304 mfewfpk - ok
23:33:58.0542 7304 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
23:33:58.0542 7304 MMCSS - ok
23:33:58.0573 7304 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
23:33:58.0573 7304 Modem - ok
23:33:58.0589 7304 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:33:58.0589 7304 monitor - ok
23:33:58.0605 7304 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:33:58.0605 7304 mouclass - ok
23:33:58.0620 7304 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:33:58.0620 7304 mouhid - ok
23:33:58.0636 7304 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
23:33:58.0636 7304 MountMgr - ok
23:33:58.0651 7304 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
23:33:58.0651 7304 mpio - ok
23:33:58.0667 7304 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:33:58.0667 7304 mpsdrv - ok
23:33:58.0698 7304 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
23:33:58.0714 7304 MpsSvc - ok
23:33:58.0729 7304 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
23:33:58.0729 7304 Mraid35x - ok
23:33:58.0761 7304 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:33:58.0761 7304 MRxDAV - ok
23:33:58.0761 7304 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:33:58.0761 7304 mrxsmb - ok
23:33:58.0792 7304 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:33:58.0792 7304 mrxsmb10 - ok
23:33:58.0823 7304 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:33:58.0823 7304 mrxsmb20 - ok
23:33:58.0839 7304 [ 28023E86F17001F7CD9B15A5BC9AE07D ] msahci C:\Windows\system32\drivers\msahci.sys
23:33:58.0839 7304 msahci - ok
23:33:58.0854 7304 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:33:58.0854 7304 msdsm - ok
23:33:58.0870 7304 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
23:33:58.0870 7304 MSDTC - ok
23:33:58.0901 7304 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:33:58.0901 7304 Msfs - ok
23:33:58.0917 7304 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:33:58.0917 7304 msisadrv - ok
23:33:58.0948 7304 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:33:58.0948 7304 MSiSCSI - ok
23:33:58.0963 7304 msiserver - ok
23:33:58.0979 7304 [ 7E6932EEDA54C8EAF7DC6C2225261B85 ] MSK80Service C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
23:33:58.0979 7304 MSK80Service - ok
23:33:59.0010 7304 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:33:59.0010 7304 MSKSSRV - ok
23:33:59.0026 7304 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:33:59.0026 7304 MSPCLOCK - ok
23:33:59.0041 7304 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:33:59.0041 7304 MSPQM - ok
23:33:59.0057 7304 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:33:59.0057 7304 MsRPC - ok
23:33:59.0073 7304 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
23:33:59.0073 7304 mssmbios - ok
23:33:59.0088 7304 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:33:59.0088 7304 MSTEE - ok
23:33:59.0119 7304 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
23:33:59.0119 7304 Mup - ok
23:33:59.0151 7304 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
23:33:59.0151 7304 napagent - ok
23:33:59.0182 7304 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:33:59.0182 7304 NativeWifiP - ok
23:33:59.0197 7304 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
23:33:59.0213 7304 NDIS - ok
23:33:59.0213 7304 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:33:59.0213 7304 NdisTapi - ok
23:33:59.0229 7304 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:33:59.0229 7304 Ndisuio - ok
23:33:59.0260 7304 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:33:59.0260 7304 NdisWan - ok
23:33:59.0275 7304 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:33:59.0275 7304 NDProxy - ok
23:33:59.0307 7304 [ A081CB6FB9A12668F233EB5414BE3A0E ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
23:33:59.0307 7304 Net Driver HPZ12 - ok
23:33:59.0322 7304 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:33:59.0322 7304 NetBIOS - ok
23:33:59.0338 7304 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
23:33:59.0338 7304 netbt - ok
23:33:59.0353 7304 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
23:33:59.0353 7304 Netlogon - ok
23:33:59.0416 7304 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
23:33:59.0416 7304 Netman - ok
23:33:59.0431 7304 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
23:33:59.0431 7304 netprofm - ok
23:33:59.0463 7304 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:33:59.0463 7304 NetTcpPortSharing - ok
23:33:59.0478 7304 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
23:33:59.0478 7304 nfrd960 - ok
23:33:59.0509 7304 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
23:33:59.0509 7304 NlaSvc - ok
23:33:59.0525 7304 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:33:59.0525 7304 Npfs - ok
23:33:59.0541 7304 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
23:33:59.0541 7304 nsi - ok
23:33:59.0572 7304 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:33:59.0572 7304 nsiproxy - ok
23:33:59.0587 7304 [ 3C7BD1EC817D300A8826D49C406D5894 ] nSvcIp C:\Program Files\bin32\nSvcIp.exe
23:33:59.0587 7304 nSvcIp - ok
23:33:59.0634 7304 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:33:59.0634 7304 Ntfs - ok
23:33:59.0650 7304 [ A2B6583A5652A385DFF5E4F49AD48761 ] NTIBackupSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
23:33:59.0665 7304 NTIBackupSvc - ok
23:33:59.0665 7304 [ 2757D2BA59AEE155209E24942AB127C9 ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
23:33:59.0665 7304 NTIDrvr - ok
23:33:59.0697 7304 [ 40B87FE8A1A9A5AC9E5A91D96F212BCD ] NTISchedulerSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
23:33:59.0697 7304 NTISchedulerSvc - ok
23:33:59.0712 7304 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
23:33:59.0712 7304 ntrigdigi - ok
23:33:59.0728 7304 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
23:33:59.0728 7304 Null - ok
23:33:59.0759 7304 [ 1EFEC38A852AB35883BFFF3427B92B3F ] NVENETFD C:\Windows\system32\DRIVERS\nvmfdx32.sys
23:33:59.0759 7304 NVENETFD - ok
23:33:59.0775 7304 [ D2F4C4B22969236382CA853B8DAA2D4E ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
23:33:59.0775 7304 NVHDA - ok
23:33:59.0977 7304 [ F452E6AD3EDA2852F44BE492E283C40F ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
23:34:00.0055 7304 nvlddmkm - ok
23:34:00.0087 7304 [ 1EFEC38A852AB35883BFFF3427B92B3F ] NVNET C:\Windows\system32\DRIVERS\nvmfdx32.sys
23:34:00.0087 7304 NVNET - ok
23:34:00.0133 7304 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:34:00.0133 7304 nvraid - ok
23:34:00.0149 7304 [ C44EE36DD84FA95EB81D79C374756003 ] nvsmu C:\Windows\system32\DRIVERS\nvsmu.sys
23:34:00.0149 7304 nvsmu - ok
23:34:00.0165 7304 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:34:00.0165 7304 nvstor - ok
23:34:00.0180 7304 [ FA7B8ECA6E845B244B7E30A9DCD82C6C ] nvstor32 C:\Windows\system32\DRIVERS\nvstor32.sys
23:34:00.0180 7304 nvstor32 - ok
23:34:00.0211 7304 [ 7C732AFF202DCD06C3D262966D71604C ] nvsvc C:\Windows\system32\nvvsvc.exe
23:34:00.0227 7304 nvsvc - ok
23:34:00.0336 7304 [ 262D2FBF211A88DCB84249DF0F6EF6E7 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
23:34:00.0367 7304 nvUpdatusService - ok
23:34:00.0383 7304 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:34:00.0383 7304 nv_agp - ok
23:34:00.0399 7304 NwlnkFlt - ok
23:34:00.0399 7304 NwlnkFwd - ok
23:34:00.0477 7304 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
23:34:00.0492 7304 odserv - ok
23:34:00.0539 7304 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
23:34:00.0539 7304 ohci1394 - ok
23:34:00.0555 7304 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:34:00.0555 7304 ose - ok
23:34:00.0586 7304 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
23:34:00.0601 7304 p2pimsvc - ok
23:34:00.0617 7304 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
23:34:00.0617 7304 p2psvc - ok
23:34:00.0664 7304 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
23:34:00.0664 7304 Parport - ok
23:34:00.0679 7304 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:34:00.0679 7304 partmgr - ok
23:34:00.0695 7304 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
23:34:00.0695 7304 Parvdm - ok
23:34:00.0726 7304 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
23:34:00.0726 7304 PcaSvc - ok
23:34:00.0757 7304 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
23:34:00.0757 7304 pci - ok
23:34:00.0773 7304 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
23:34:00.0773 7304 pciide - ok
23:34:00.0789 7304 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
23:34:00.0789 7304 pcmcia - ok
23:34:00.0820 7304 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:34:00.0835 7304 PEAUTH - ok
23:34:00.0898 7304 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
23:34:00.0945 7304 pla - ok
23:34:00.0960 7304 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:34:00.0960 7304 PlugPlay - ok
23:34:00.0991 7304 [ 65BC271F337637731D3C71455AE1F476 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
23:34:00.0991 7304 Pml Driver HPZ12 - ok
23:34:01.0007 7304 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
23:34:01.0023 7304 PNRPAutoReg - ok
23:34:01.0038 7304 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
23:34:01.0038 7304 PNRPsvc - ok
23:34:01.0085 7304 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:34:01.0101 7304 PolicyAgent - ok
23:34:01.0132 7304 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
23:34:01.0132 7304 PptpMiniport - ok
23:34:01.0147 7304 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\DRIVERS\processr.sys
23:34:01.0147 7304 Processor - ok
23:34:01.0163 7304 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
23:34:01.0179 7304 ProfSvc - ok
23:34:01.0179 7304 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
23:34:01.0179 7304 ProtectedStorage - ok
23:34:01.0225 7304 [ 64E413BA0C529AA40C3924BBCC4153DB ] ProtexisLicensing C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
23:34:01.0225 7304 ProtexisLicensing - ok
23:34:01.0241 7304 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
23:34:01.0241 7304 PSched - ok
23:34:01.0257 7304 [ AB94285FF6C6BC5433407D8D182A4BB4 ] PSDFilter C:\Windows\system32\DRIVERS\psdfilter.sys
23:34:01.0257 7304 PSDFilter - ok
23:34:01.0257 7304 [ 2AAF9A5D7A63D26BFAEA853C5F2292BC ] PSDNServ C:\Windows\system32\DRIVERS\PSDNServ.sys
23:34:01.0257 7304 PSDNServ - ok
23:34:01.0288 7304 [ 0EB8CEC99855BEAE5B0D02C2302619EF ] psdvdisk C:\Windows\system32\DRIVERS\PSDVdisk.sys
23:34:01.0288 7304 psdvdisk - ok
23:34:01.0335 7304 [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2 c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
23:34:01.0350 7304 PSI_SVC_2 - ok
23:34:01.0381 7304 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
23:34:01.0397 7304 ql2300 - ok
23:34:01.0413 7304 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
23:34:01.0413 7304 ql40xx - ok
23:34:01.0444 7304 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
23:34:01.0444 7304 QWAVE - ok
23:34:01.0459 7304 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:34:01.0459 7304 QWAVEdrv - ok
23:34:01.0459 7304 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:34:01.0459 7304 RasAcd - ok
23:34:01.0475 7304 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
23:34:01.0491 7304 RasAuto - ok
23:34:01.0491 7304 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:34:01.0491 7304 Rasl2tp - ok
23:34:01.0537 7304 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
23:34:01.0537 7304 RasMan - ok
23:34:01.0553 7304 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:34:01.0553 7304 RasPppoe - ok
23:34:01.0584 7304 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:34:01.0584 7304 RasSstp - ok
23:34:01.0600 7304 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:34:01.0600 7304 rdbss - ok
23:34:01.0631 7304 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:34:01.0631 7304 RDPCDD - ok
23:34:01.0662 7304 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
23:34:01.0662 7304 rdpdr - ok
23:34:01.0678 7304 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:34:01.0678 7304 RDPENCDD - ok
23:34:01.0725 7304 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:34:01.0725 7304 RDPWD - ok
23:34:01.0740 7304 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
23:34:01.0740 7304 RemoteAccess - ok
23:34:01.0771 7304 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:34:01.0771 7304 RemoteRegistry - ok
23:34:01.0803 7304 [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
23:34:01.0803 7304 RFCOMM - ok
23:34:01.0849 7304 [ 18B5B644BD83C4F0DF886664AACB241C ] RichVideo C:\Program Files\CyberLink\Shared Files\RichVideo.exe
23:34:01.0849 7304 RichVideo - ok
23:34:01.0896 7304 [ 75E8A6BFA7374ABA833AE92BF41AE4E6 ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys
23:34:01.0896 7304 ROOTMODEM - ok
23:34:01.0912 7304 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
23:34:01.0912 7304 RpcLocator - ok
23:34:01.0943 7304 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
23:34:01.0943 7304 RpcSs - ok
23:34:01.0974 7304 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
23:34:01.0974 7304 rspndr - ok
23:34:02.0021 7304 [ D1FB9A678BD6C2B1129FCB09D5FEB6DD ] RTSTOR C:\Windows\system32\drivers\RTSTOR.SYS
23:34:02.0021 7304 RTSTOR - ok
23:34:02.0021 7304 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
23:34:02.0021 7304 SamSs - ok
23:34:02.0052 7304 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:34:02.0052 7304 sbp2port - ok
23:34:02.0083 7304 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:34:02.0083 7304 SCardSvr - ok
23:34:02.0115 7304 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
23:34:02.0130 7304 Schedule - ok
23:34:02.0161 7304 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
23:34:02.0161 7304 SCPolicySvc - ok
23:34:02.0193 7304 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:34:02.0193 7304 SDRSVC - ok
23:34:02.0224 7304 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:34:02.0224 7304 secdrv - ok
23:34:02.0224 7304 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
23:34:02.0239 7304 seclogon - ok
23:34:02.0239 7304 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
23:34:02.0239 7304 SENS - ok
23:34:02.0255 7304 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
23:34:02.0255 7304 Serenum - ok
23:34:02.0271 7304 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
23:34:02.0271 7304 Serial - ok
23:34:02.0286 7304 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
23:34:02.0286 7304 sermouse - ok
23:34:02.0317 7304 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
23:34:02.0317 7304 SessionEnv - ok
23:34:02.0333 7304 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
23:34:02.0333 7304 sffdisk - ok
23:34:02.0349 7304 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:34:02.0349 7304 sffp_mmc - ok
23:34:02.0349 7304 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
23:34:02.0349 7304 sffp_sd - ok
23:34:02.0364 7304 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
23:34:02.0364 7304 sfloppy - ok
23:34:02.0427 7304 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:34:02.0427 7304 SharedAccess - ok
23:34:02.0458 7304 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:34:02.0458 7304 ShellHWDetection - ok
23:34:02.0473 7304 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
23:34:02.0473 7304 sisagp - ok
23:34:02.0489 7304 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
23:34:02.0489 7304 SiSRaid2 - ok
23:34:02.0505 7304 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
23:34:02.0505 7304 SiSRaid4 - ok
23:34:02.0583 7304 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
23:34:02.0645 7304 slsvc - ok
23:34:02.0692 7304 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
23:34:02.0692 7304 SLUINotify - ok
23:34:02.0707 7304 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:34:02.0723 7304 Smb - ok
23:34:02.0754 7304 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:34:02.0754 7304 SNMPTRAP - ok
23:34:02.0770 7304 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
23:34:02.0770 7304 spldr - ok
23:34:02.0801 7304 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
23:34:02.0801 7304 Spooler - ok
23:34:02.0832 7304 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
23:34:02.0832 7304 srv - ok
23:34:02.0848 7304 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:34:02.0848 7304 srv2 - ok
23:34:02.0863 7304 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:34:02.0863 7304 srvnet - ok
23:34:02.0895 7304 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:34:02.0910 7304 SSDPSRV - ok
23:34:02.0926 7304 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
23:34:02.0926 7304 ssmdrv - ok
23:34:02.0941 7304 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:34:02.0941 7304 SstpSvc - ok
23:34:02.0973 7304 [ F92254B0BCFCD10CAAC7BCCC7CB7F467 ] StarOpen C:\Windows\system32\drivers\StarOpen.sys
23:34:02.0973 7304 StarOpen - ok
23:34:03.0004 7304 [ EF70B3D22B4BFFDA6EA851ECB063EFAA ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
23:34:03.0004 7304 StillCam - ok
23:34:03.0035 7304 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
23:34:03.0051 7304 stisvc - ok
23:34:03.0066 7304 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
23:34:03.0066 7304 swenum - ok
23:34:03.0097 7304 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
23:34:03.0097 7304 swprv - ok
23:34:03.0129 7304 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
23:34:03.0129 7304 Symc8xx - ok
23:34:03.0144 7304 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
23:34:03.0144 7304 Sym_hi - ok
23:34:03.0160 7304 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
23:34:03.0175 7304 Sym_u3 - ok
23:34:03.0207 7304 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
23:34:03.0222 7304 SysMain - ok
23:34:03.0253 7304 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:34:03.0253 7304 TabletInputService - ok
23:34:03.0285 7304 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
23:34:03.0285 7304 TapiSrv - ok
23:34:03.0300 7304 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
23:34:03.0300 7304 TBS - ok
23:34:03.0331 7304 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:34:03.0347 7304 Tcpip - ok
23:34:03.0378 7304 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
23:34:03.0378 7304 Tcpip6 - ok
23:34:03.0409 7304 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:34:03.0409 7304 tcpipreg - ok
23:34:03.0425 7304 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:34:03.0425 7304 TDPIPE - ok
23:34:03.0487 7304 [ 1226A953D4FDBDFD570DA5CEE66EAA55 ] TDslMgrService C:\Program Files\DSL-Manager\DslMgrSvc.exe
23:34:03.0487 7304 TDslMgrService - ok
23:34:03.0519 7304 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:34:03.0519 7304 TDTCP - ok
23:34:03.0550 7304 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:34:03.0550 7304 tdx - ok
23:34:03.0643 7304 [ 9C1F776825207C203CB44CA3C63B5A6E ] TeamViewer7 C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
23:34:03.0690 7304 TeamViewer7 - ok
23:34:03.0721 7304 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
23:34:03.0721 7304 TermDD - ok
23:34:03.0737 7304 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
23:34:03.0753 7304 TermService - ok
23:34:03.0768 7304 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
23:34:03.0768 7304 Themes - ok
23:34:03.0784 7304 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
23:34:03.0799 7304 THREADORDER - ok
23:34:03.0862 7304 [ EFEF22B9577E5051057FDE1AE381B50C ] TomTomHOMEService D:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
23:34:03.0862 7304 TomTomHOMEService - ok
23:34:03.0909 7304 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
23:34:03.0909 7304 TrkWks - ok
23:34:03.0955 7304 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:34:03.0955 7304 TrustedInstaller - ok
23:34:04.0002 7304 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:34:04.0002 7304 tssecsrv - ok
23:34:04.0002 7304 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
23:34:04.0002 7304 tunmp - ok
23:34:04.0033 7304 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:34:04.0033 7304 tunnel - ok
23:34:04.0049 7304 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
23:34:04.0049 7304 uagp35 - ok
23:34:04.0065 7304 [ F763E070843EE2803DE1395002B42938 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
23:34:04.0080 7304 UBHelper - ok
23:34:04.0096 7304 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:34:04.0096 7304 udfs - ok
23:34:04.0127 7304 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:34:04.0143 7304 UI0Detect - ok
23:34:04.0158 7304 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:34:04.0158 7304 uliagpkx - ok
23:34:04.0189 7304 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
23:34:04.0189 7304 uliahci - ok
23:34:04.0205 7304 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
23:34:04.0205 7304 UlSata - ok
23:34:04.0221 7304 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
23:34:04.0221 7304 ulsata2 - ok
23:34:04.0236 7304 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
23:34:04.0236 7304 umbus - ok
23:34:04.0267 7304 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
23:34:04.0283 7304 upnphost - ok
23:34:04.0314 7304 USBAAPL - ok
23:34:04.0345 7304 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
23:34:04.0345 7304 usbaudio - ok
23:34:04.0361 7304 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
23:34:04.0361 7304 usbccgp - ok
23:34:04.0392 7304 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:34:04.0392 7304 usbcir - ok
23:34:04.0408 7304 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
23:34:04.0408 7304 usbehci - ok
23:34:04.0439 7304 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:34:04.0439 7304 usbhub - ok
23:34:04.0455 7304 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
23:34:04.0455 7304 usbohci - ok
23:34:04.0486 7304 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:34:04.0486 7304 usbprint - ok
23:34:04.0517 7304 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
23:34:04.0517 7304 usbscan - ok
23:34:04.0533 7304 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:34:04.0533 7304 USBSTOR - ok
23:34:04.0548 7304 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
23:34:04.0548 7304 usbuhci - ok
23:34:04.0579 7304 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
23:34:04.0579 7304 UxSms - ok
23:34:04.0611 7304 [ 51750B0539986186C6931FC40D171521 ] VComm C:\Windows\system32\DRIVERS\VComm.sys
23:34:04.0611 7304 VComm - ok
23:34:04.0626 7304 [ 6D9C891C0A761AFED1F3609C2E56F2B9 ] VcommMgr C:\Windows\system32\Drivers\VcommMgr.sys
23:34:04.0626 7304 VcommMgr - ok
23:34:04.0642 7304 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
23:34:04.0657 7304 vds - ok
23:34:04.0673 7304 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:34:04.0673 7304 vga - ok
23:34:04.0689 7304 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
23:34:04.0689 7304 VgaSave - ok
23:34:04.0735 7304 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
23:34:04.0735 7304 viaagp - ok
23:34:04.0751 7304 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
23:34:04.0751 7304 ViaC7 - ok
23:34:04.0767 7304 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
23:34:04.0767 7304 viaide - ok
23:34:04.0782 7304 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:34:04.0782 7304 volmgr - ok
23:34:04.0798 7304 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:34:04.0798 7304 volmgrx - ok
23:34:04.0829 7304 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:34:04.0829 7304 volsnap - ok
23:34:04.0845 7304 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
23:34:04.0845 7304 vsmraid - ok
23:34:04.0876 7304 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
23:34:04.0907 7304 VSS - ok
23:34:04.0923 7304 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
23:34:04.0938 7304 W32Time - ok
23:34:04.0954 7304 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
23:34:04.0954 7304 WacomPen - ok
23:34:04.0969 7304 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
23:34:04.0969 7304 Wanarp - ok
23:34:04.0969 7304 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:34:04.0969 7304 Wanarpv6 - ok
23:34:05.0016 7304 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:34:05.0032 7304 wcncsvc - ok
23:34:05.0047 7304 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:34:05.0063 7304 WcsPlugInService - ok
23:34:05.0079 7304 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
23:34:05.0079 7304 Wd - ok
23:34:05.0110 7304 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:34:05.0110 7304 Wdf01000 - ok
23:34:05.0110 7304 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:34:05.0125 7304 WdiServiceHost - ok
23:34:05.0125 7304 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:34:05.0125 7304 WdiSystemHost - ok
23:34:05.0141 7304 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
23:34:05.0157 7304 WebClient - ok
23:34:05.0172 7304 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:34:05.0188 7304 Wecsvc - ok
23:34:05.0203 7304 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:34:05.0203 7304 wercplsupport - ok
23:34:05.0235 7304 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
23:34:05.0235 7304 WerSvc - ok
23:34:05.0266 7304 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
23:34:05.0281 7304 WinDefend - ok
23:34:05.0297 7304 WinHttpAutoProxySvc - ok
23:34:05.0328 7304 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:34:05.0328 7304 Winmgmt - ok
23:34:05.0375 7304 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
23:34:05.0406 7304 WinRM - ok
23:34:05.0437 7304 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
23:34:05.0453 7304 Wlansvc - ok
23:34:05.0515 7304 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:34:05.0547 7304 wlidsvc - ok
23:34:05.0562 7304 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
23:34:05.0562 7304 WmiAcpi - ok
23:34:05.0609 7304 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:34:05.0609 7304 wmiApSrv - ok
23:34:05.0656 7304 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
23:34:05.0671 7304 WMPNetworkSvc - ok
23:34:05.0687 7304 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:34:05.0687 7304 WPCSvc - ok
23:34:05.0718 7304 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:34:05.0718 7304 WPDBusEnum - ok
23:34:05.0749 7304 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
23:34:05.0749 7304 WpdUsb - ok
23:34:05.0812 7304 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
23:34:05.0827 7304 WPFFontCache_v0400 - ok
23:34:05.0843 7304 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:34:05.0843 7304 ws2ifsl - ok
23:34:05.0874 7304 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
23:34:05.0890 7304 wscsvc - ok
23:34:05.0937 7304 [ 4422AC5ED8D4C2F0DB63E71D4C069DD7 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
23:34:05.0937 7304 WSDPrintDevice - ok
23:34:05.0937 7304 WSearch - ok
23:34:06.0015 7304 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
23:34:06.0061 7304 wuauserv - ok
23:34:06.0077 7304 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:34:06.0077 7304 WUDFRd - ok
23:34:06.0108 7304 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:34:06.0108 7304 wudfsvc - ok
23:34:06.0124 7304 ================ Scan global ===============================
23:34:06.0186 7304 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
23:34:06.0217 7304 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
23:34:06.0249 7304 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
23:34:06.0280 7304 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
23:34:06.0280 7304 [Global] - ok
23:34:06.0280 7304 ================ Scan MBR ==================================
23:34:06.0295 7304 [ EF932EAA6EF4C94E66A7F6CEEC7EB422 ] \Device\Harddisk0\DR0
23:34:09.0259 7304 \Device\Harddisk0\DR0 - ok
23:34:09.0259 7304 ================ Scan VBR ==================================
23:34:09.0275 7304 [ 36244577A8104AE8955B410093836CCB ] \Device\Harddisk0\DR0\Partition1
23:34:09.0275 7304 \Device\Harddisk0\DR0\Partition1 - ok
23:34:09.0291 7304 [ 99D90F7848DF8F8FB48CECB148F4C147 ] \Device\Harddisk0\DR0\Partition2
23:34:09.0291 7304 \Device\Harddisk0\DR0\Partition2 - ok
23:34:09.0291 7304 ============================================================
23:34:09.0291 7304 Scan finished
23:34:09.0291 7304 ============================================================
23:34:09.0306 1176 Detected object count: 0
23:34:09.0306 1176 Actual detected object count: 0

so.. das war alles..
Hoffe alles richtig gemacht

M-K-D-B · 20.10.2012, 10:14

Servus,

die folgenden Schritte bitte wieder im abgesicherten Modus mit Netzwerkunterstützung durchführen.

Schritt 1
Mir ist aufgefallen, dass Du mehr als ein Anti-Virus-Programm mit Hintergrundwächter laufen hast:

Code:

ATTFilter

McAfee Internet Security Suite
Avira Free Antivirus
Ad-Aware

Das ist gefährlich, da sich die Programme in die Quere kommen können und dadurch Viren erst recht auf dem Rechner landen können. Außerdem bremst es auch das System aus. Entscheide Dich für eine Variante und deinstalliere die anderen über Systemsteuerung => Programme deinstallieren / Software.
Berichte, für welches Anti-Virus-Programm Du Dich entschieden hast.

Zitat:

Speedy hat letztens eine einleuchtende Erklärung dazu geliefert: "Man stelle sich einen Torwart vor, der das Tor hüten soll (Anti-Virus-Programm), der Ball kommt angeflogen (Virus), der Torhüter konzentriert sich auf den Ball und fängt ihn. Jetzt stelle Dir zwei Torhüter im Tor vor ...., die knallen aneinander und der Ball kann ungehindert ins Tor wandern."

Schritt 2
Ich sehe, dass du sog. Registry Cleaner auf dem System hast.
In deinem Fall CCleaner.

Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner.

Der Grund ist ganz einfach:

Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.

Wie soll der Cleaner zu 100% wissen ob der Eintrag benötigt wird oder nicht ?
Es ist vollkommen egal ob ein paar verwaiste Registry Einträge am System sind oder nicht.
Auch die dauernd angepriesene Beschleunigung des Systems ist nur bedingt wahr. Du würdest es nicht merken.

Ein sogenanntes False Positive von einem Cleaner kann auch dein System unbootbar machen.
Zerstörst Du die Registry, zerstörst Du Windows.

Ich empfehle dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten.

Schritt 3

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Bitte poste mit deiner nächsten Antwort

eine Rückmeldung für welches AV Programm du dich entschieden hast,
die Logdatei von ComboFix.

M-K-D-B · 23.10.2012, 16:51

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

23.10.2012, 16:51	#5
M-K-D-B /// TB-Ausbilder	Exploit.Drop-UR.2 endgültig löschen Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

Exploit.Drop-UR.2 endgültig löschen

Log-Analyse und Auswertung: Exploit.Drop-UR.2 endgültig löschen