So sorry, dass das so lange gedauert hat.

Das GMER funktioniert tatsächlich nicht. Habe jetzt den anderen Scan gemacht:

aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-12-02 12:56:41
-----------------------------
12:56:41.723 OS Version: Windows 6.0.6002 Service Pack 2
12:56:41.723 Number of processors: 1 586 0x170A
12:56:41.723 ComputerName: NILS-PC UserName: Nils
12:56:43.611 Initialize success
12:58:09.029 AVAST engine defs: 12120100
12:59:08.655 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
12:59:08.655 Disk 0 Vendor: SAMSUNG_HM321HI 2AJ10001 Size: 305245MB BusType: 3
12:59:08.717 Disk 0 MBR read successfully
12:59:08.717 Disk 0 MBR scan
12:59:08.811 Disk 0 Windows VISTA default MBR code
12:59:08.842 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 305243 MB offset 2048
12:59:08.873 Disk 0 scanning sectors +625139712
12:59:09.107 Disk 0 scanning C:\Windows\system32\drivers
12:59:42.561 Service scanning
13:00:58.316 Modules scanning
13:01:09.923 Disk 0 trace - called modules:
13:01:09.954 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys dxgkrnl.sys igdkmd32.sys
13:01:09.954 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x854da798]
13:01:10.484 3 CLASSPNP.SYS[8839f8b3] -> nt!IofCallDriver -> [0x84dd4958]
13:01:10.484 5 acpi.sys[8068c6bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x844168a0]
13:01:11.873 AVAST engine scan C:\Windows
13:01:15.055 AVAST engine scan C:\Windows\system32
13:07:00.185 AVAST engine scan C:\Windows\system32\drivers
13:07:19.374 AVAST engine scan C:\Users\Nils
13:22:40.914 AVAST engine scan C:\ProgramData
13:24:24.521 Scan finished successfully
13:26:24.730 Disk 0 MBR has been saved successfully to "C:\Users\Nils\Desktop\MBR.dat"
13:26:24.840 The log file has been saved successfully to "C:\Users\Nils\Desktop\aswMBR.txt"

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehlalarm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

18:53:31.0787 3344 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:53:33.0799 3344 ============================================================
18:53:33.0799 3344 Current date / time: 2012/12/03 18:53:33.0799
18:53:33.0799 3344 SystemInfo:
18:53:33.0799 3344
18:53:33.0799 3344 OS Version: 6.0.6002 ServicePack: 2.0
18:53:33.0799 3344 Product type: Workstation
18:53:33.0799 3344 ComputerName: NILS-PC
18:53:33.0799 3344 UserName: Nils
18:53:33.0799 3344 Windows directory: C:\Windows
18:53:33.0799 3344 System windows directory: C:\Windows
18:53:33.0799 3344 Processor architecture: Intel x86
18:53:33.0799 3344 Number of processors: 1
18:53:33.0799 3344 Page size: 0x1000
18:53:33.0799 3344 Boot type: Normal boot
18:53:33.0799 3344 ============================================================
18:53:36.0841 3344 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:53:36.0841 3344 ============================================================
18:53:36.0841 3344 \Device\Harddisk0\DR0:
18:53:36.0841 3344 MBR partitions:
18:53:36.0841 3344 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2542D800
18:53:36.0841 3344 ============================================================
18:53:36.0935 3344 C: <-> \Device\Harddisk0\DR0\Partition1
18:53:36.0966 3344 ============================================================
18:53:36.0966 3344 Initialize success
18:53:36.0966 3344 ============================================================
18:56:53.0671 2896 ============================================================
18:56:53.0671 2896 Scan started
18:56:53.0671 2896 Mode: Manual; SigCheck; TDLFS;
18:56:53.0671 2896 ============================================================
18:56:54.0171 2896 ================ Scan system memory ========================
18:56:54.0171 2896 System memory - ok
18:56:54.0171 2896 ================ Scan services =============================
18:56:54.0373 2896 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
18:56:54.0592 2896 ACPI - ok
18:56:54.0717 2896 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:56:54.0732 2896 AdobeARMservice - ok
18:56:54.0873 2896 [ 300B79DECEEF4F385523765ACC4F351A ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:56:54.0904 2896 AdobeFlashPlayerUpdateSvc - ok
18:56:54.0966 2896 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
18:56:55.0013 2896 adp94xx - ok
18:56:55.0075 2896 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
18:56:55.0107 2896 adpahci - ok
18:56:55.0122 2896 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
18:56:55.0153 2896 adpu160m - ok
18:56:55.0216 2896 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
18:56:55.0231 2896 adpu320 - ok
18:56:55.0309 2896 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:56:55.0450 2896 AeLookupSvc - ok
18:56:55.0528 2896 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
18:56:55.0621 2896 AFD - ok
18:56:55.0684 2896 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:56:55.0715 2896 agp440 - ok
18:56:55.0762 2896 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
18:56:55.0793 2896 aic78xx - ok
18:56:55.0855 2896 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
18:56:56.0011 2896 ALG - ok
18:56:56.0058 2896 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
18:56:56.0089 2896 aliide - ok
18:56:56.0121 2896 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
18:56:56.0152 2896 amdagp - ok
18:56:56.0199 2896 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
18:56:56.0230 2896 amdide - ok
18:56:56.0245 2896 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
18:56:56.0323 2896 AmdK7 - ok
18:56:56.0355 2896 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
18:56:56.0448 2896 AmdK8 - ok
18:56:56.0526 2896 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
18:56:56.0604 2896 Appinfo - ok
18:56:56.0745 2896 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:56:56.0760 2896 Apple Mobile Device - ok
18:56:56.0838 2896 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
18:56:56.0869 2896 arc - ok
18:56:56.0901 2896 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
18:56:56.0932 2896 arcsas - ok
18:56:56.0994 2896 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:56:57.0072 2896 AsyncMac - ok
18:56:57.0119 2896 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
18:56:57.0150 2896 atapi - ok
18:56:57.0213 2896 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:56:57.0259 2896 AudioEndpointBuilder - ok
18:56:57.0275 2896 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
18:56:57.0322 2896 Audiosrv - ok
18:56:57.0415 2896 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
18:56:57.0493 2896 Beep - ok
18:56:57.0571 2896 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
18:56:57.0649 2896 BFE - ok
18:56:57.0899 2896 [ 9DFFCB249663AA3C2ECB67202280054E ] BHDrvx86 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20121130.005\BHDrvx86.sys
18:56:57.0977 2896 BHDrvx86 - ok
18:56:58.0071 2896 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
18:56:58.0180 2896 BITS - ok
18:56:58.0242 2896 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
18:56:58.0320 2896 blbdrive - ok
18:56:58.0445 2896 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
18:56:58.0476 2896 Bonjour Service - ok
18:56:58.0539 2896 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:56:58.0617 2896 bowser - ok
18:56:58.0648 2896 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
18:56:58.0695 2896 BrFiltLo - ok
18:56:58.0741 2896 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
18:56:58.0835 2896 BrFiltUp - ok
18:56:58.0882 2896 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
18:56:58.0960 2896 Browser - ok
18:56:58.0991 2896 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
18:56:59.0194 2896 Brserid - ok
18:56:59.0241 2896 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
18:56:59.0350 2896 BrSerWdm - ok
18:56:59.0381 2896 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
18:56:59.0475 2896 BrUsbMdm - ok
18:56:59.0490 2896 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
18:56:59.0599 2896 BrUsbSer - ok
18:56:59.0646 2896 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
18:56:59.0740 2896 BTHMODEM - ok
18:56:59.0787 2896 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:56:59.0849 2896 cdfs - ok
18:56:59.0927 2896 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:56:59.0974 2896 cdrom - ok
18:57:00.0052 2896 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
18:57:00.0130 2896 CertPropSvc - ok
18:57:00.0208 2896 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
18:57:00.0270 2896 circlass - ok
18:57:00.0317 2896 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
18:57:00.0364 2896 CLFS - ok
18:57:00.0489 2896 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:57:00.0520 2896 clr_optimization_v2.0.50727_32 - ok
18:57:00.0707 2896 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:57:00.0738 2896 clr_optimization_v4.0.30319_32 - ok
18:57:00.0785 2896 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:57:00.0832 2896 CmBatt - ok
18:57:00.0863 2896 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:57:00.0894 2896 cmdide - ok
18:57:00.0925 2896 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:57:00.0941 2896 Compbatt - ok
18:57:00.0972 2896 COMSysApp - ok
18:57:00.0988 2896 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
18:57:01.0019 2896 crcdisk - ok
18:57:01.0050 2896 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
18:57:01.0113 2896 Crusoe - ok
18:57:01.0206 2896 [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:57:01.0300 2896 CryptSvc - ok
18:57:01.0362 2896 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:57:01.0471 2896 DcomLaunch - ok
18:57:01.0518 2896 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:57:01.0565 2896 DfsC - ok
18:57:01.0690 2896 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
18:57:01.0877 2896 DFSR - ok
18:57:02.0002 2896 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
18:57:02.0064 2896 Dhcp - ok
18:57:02.0127 2896 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
18:57:02.0158 2896 disk - ok
18:57:02.0236 2896 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:57:02.0298 2896 Dnscache - ok
18:57:02.0345 2896 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:57:02.0407 2896 dot3svc - ok
18:57:02.0470 2896 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
18:57:02.0563 2896 DPS - ok
18:57:02.0610 2896 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:57:02.0673 2896 drmkaud - ok
18:57:02.0735 2896 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:57:02.0782 2896 DXGKrnl - ok
18:57:02.0860 2896 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
18:57:02.0922 2896 E1G60 - ok
18:57:03.0016 2896 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
18:57:03.0094 2896 EapHost - ok
18:57:03.0156 2896 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
18:57:03.0187 2896 Ecache - ok
18:57:03.0265 2896 [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
18:57:03.0297 2896 eeCtrl - ok
18:57:03.0390 2896 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:57:03.0468 2896 ehRecvr - ok
18:57:03.0499 2896 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
18:57:03.0546 2896 ehSched - ok
18:57:03.0577 2896 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
18:57:03.0624 2896 ehstart - ok
18:57:03.0702 2896 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
18:57:03.0765 2896 elxstor - ok
18:57:03.0827 2896 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
18:57:03.0983 2896 EMDMgmt - ok
18:57:04.0030 2896 [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
18:57:04.0061 2896 EraserUtilRebootDrv - ok
18:57:04.0139 2896 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:57:04.0186 2896 ErrDev - ok
18:57:04.0264 2896 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
18:57:04.0342 2896 EventSystem - ok
18:57:04.0482 2896 [ 53CCA6B4DF0977074E85C9A18F42B5CC ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
18:57:04.0545 2896 EvtEng - ok
18:57:04.0591 2896 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
18:57:04.0654 2896 exfat - ok
18:57:04.0716 2896 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:57:04.0779 2896 fastfat - ok
18:57:04.0841 2896 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:57:04.0888 2896 fdc - ok
18:57:04.0919 2896 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
18:57:04.0966 2896 fdPHost - ok
18:57:04.0981 2896 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
18:57:05.0075 2896 FDResPub - ok
18:57:05.0122 2896 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:57:05.0153 2896 FileInfo - ok
18:57:05.0169 2896 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:57:05.0215 2896 Filetrace - ok
18:57:05.0231 2896 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:57:05.0293 2896 flpydisk - ok
18:57:05.0356 2896 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:57:05.0387 2896 FltMgr - ok
18:57:05.0481 2896 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
18:57:05.0590 2896 FontCache - ok
18:57:05.0683 2896 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:57:05.0699 2896 FontCache3.0.0.0 - ok
18:57:05.0777 2896 [ 618E0829A2A0500781DA9E78CF67C54B ] fspad_win732 C:\Windows\system32\DRIVERS\fspad_win732.sys
18:57:05.0824 2896 fspad_win732 ( UnsignedFile.Multi.Generic ) - warning
18:57:05.0824 2896 fspad_win732 - detected UnsignedFile.Multi.Generic (1)
18:57:05.0902 2896 [ B0082808A6856A252F7CDD939892CE50 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
18:57:05.0933 2896 fssfltr - ok
18:57:06.0120 2896 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
18:57:06.0245 2896 fsssvc - ok
18:57:06.0292 2896 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:57:06.0370 2896 Fs_Rec - ok
18:57:06.0432 2896 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
18:57:06.0463 2896 gagp30kx - ok
18:57:06.0541 2896 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:57:06.0557 2896 GEARAspiWDM - ok
18:57:06.0619 2896 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
18:57:06.0713 2896 gpsvc - ok
18:57:06.0791 2896 [ 3F90E001369A07243763BD5A523D8722 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:57:06.0869 2896 HdAudAddService - ok
18:57:06.0931 2896 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:57:07.0025 2896 HDAudBus - ok
18:57:07.0087 2896 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
18:57:07.0212 2896 HidBth - ok
18:57:07.0228 2896 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
18:57:07.0337 2896 HidIr - ok
18:57:07.0368 2896 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
18:57:07.0446 2896 hidserv - ok
18:57:07.0493 2896 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:57:07.0540 2896 HidUsb - ok
18:57:07.0587 2896 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:57:07.0633 2896 hkmsvc - ok
18:57:07.0665 2896 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
18:57:07.0696 2896 HpCISSs - ok
18:57:07.0758 2896 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:57:07.0867 2896 HTTP - ok
18:57:07.0914 2896 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
18:57:07.0930 2896 i2omp - ok
18:57:08.0008 2896 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:57:08.0055 2896 i8042prt - ok
18:57:08.0101 2896 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
18:57:08.0133 2896 iaStorV - ok
18:57:08.0242 2896 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:57:08.0304 2896 idsvc - ok
18:57:08.0476 2896 [ 404FB2AAF532BC7BBACC8880BE401C74 ] IDSVix86 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20121130.001\IDSvix86.sys
18:57:08.0507 2896 IDSVix86 - ok
18:57:08.0788 2896 [ 37F7E45253000AC41A1F520A62D4EBE2 ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
18:57:09.0240 2896 igfx - ok
18:57:09.0271 2896 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
18:57:09.0303 2896 iirsp - ok
18:57:09.0349 2896 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
18:57:09.0427 2896 IKEEXT - ok
18:57:09.0568 2896 [ 1B11D1BB63195EC5472E686ECAFDAD36 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
18:57:09.0739 2896 IntcAzAudAddService - ok
18:57:09.0880 2896 [ 81486F0EB4238B65C317F97DE246C4AC ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys
18:57:09.0958 2896 IntcHdmiAddService - ok
18:57:10.0005 2896 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
18:57:10.0036 2896 intelide - ok
18:57:10.0083 2896 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:57:10.0129 2896 intelppm - ok
18:57:10.0192 2896 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:57:10.0285 2896 IPBusEnum - ok
18:57:10.0317 2896 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:57:10.0395 2896 IpFilterDriver - ok
18:57:10.0457 2896 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:57:10.0535 2896 iphlpsvc - ok
18:57:10.0551 2896 IpInIp - ok
18:57:10.0597 2896 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
18:57:10.0675 2896 IPMIDRV - ok
18:57:10.0691 2896 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
18:57:10.0738 2896 IPNAT - ok
18:57:10.0878 2896 [ BC0EA61246F8D940FBC5F652D337D6BD ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
18:57:10.0925 2896 iPod Service - ok
18:57:10.0956 2896 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:57:11.0003 2896 IRENUM - ok
18:57:11.0050 2896 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:57:11.0081 2896 isapnp - ok
18:57:11.0159 2896 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
18:57:11.0190 2896 iScsiPrt - ok
18:57:11.0206 2896 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
18:57:11.0237 2896 iteatapi - ok
18:57:11.0253 2896 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
18:57:11.0284 2896 iteraid - ok
18:57:11.0315 2896 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:57:11.0346 2896 kbdclass - ok
18:57:11.0393 2896 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:57:11.0455 2896 kbdhid - ok
18:57:11.0502 2896 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
18:57:11.0580 2896 KeyIso - ok
18:57:11.0643 2896 [ 566C5FD480FDBCE3BA5CF9FBCFFAEA9A ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys
18:57:11.0736 2896 KMWDFILTER - ok
18:57:11.0783 2896 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:57:11.0830 2896 KSecDD - ok
18:57:11.0939 2896 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
18:57:12.0033 2896 KtmRm - ok
18:57:12.0095 2896 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
18:57:12.0189 2896 LanmanServer - ok
18:57:12.0251 2896 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:57:12.0313 2896 LanmanWorkstation - ok
18:57:12.0345 2896 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:57:12.0407 2896 lltdio - ok
18:57:12.0469 2896 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:57:12.0547 2896 lltdsvc - ok
18:57:12.0579 2896 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:57:12.0657 2896 lmhosts - ok
18:57:12.0703 2896 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
18:57:12.0735 2896 LSI_FC - ok
18:57:12.0750 2896 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
18:57:12.0781 2896 LSI_SAS - ok
18:57:12.0844 2896 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
18:57:12.0875 2896 LSI_SCSI - ok
18:57:12.0937 2896 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
18:57:13.0031 2896 luafv - ok
18:57:13.0062 2896 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:57:13.0125 2896 Mcx2Svc - ok
18:57:13.0140 2896 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
18:57:13.0171 2896 megasas - ok
18:57:13.0218 2896 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
18:57:13.0265 2896 MegaSR - ok
18:57:13.0296 2896 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
18:57:13.0343 2896 MMCSS - ok
18:57:13.0374 2896 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
18:57:13.0452 2896 Modem - ok
18:57:13.0483 2896 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:57:13.0577 2896 monitor - ok
18:57:13.0608 2896 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:57:13.0639 2896 mouclass - ok
18:57:13.0655 2896 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:57:13.0717 2896 mouhid - ok
18:57:13.0764 2896 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
18:57:13.0795 2896 MountMgr - ok
18:57:13.0858 2896 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
18:57:13.0889 2896 mpio - ok
18:57:13.0905 2896 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:57:13.0983 2896 mpsdrv - ok
18:57:14.0029 2896 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
18:57:14.0139 2896 MpsSvc - ok
18:57:14.0154 2896 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
18:57:14.0185 2896 Mraid35x - ok
18:57:14.0232 2896 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:57:14.0295 2896 MRxDAV - ok
18:57:14.0341 2896 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:57:14.0419 2896 mrxsmb - ok
18:57:14.0482 2896 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:57:14.0529 2896 mrxsmb10 - ok
18:57:14.0544 2896 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:57:14.0591 2896 mrxsmb20 - ok
18:57:14.0653 2896 [ 5457DCFA7C0DA43522F4D9D4049C1472 ] msahci C:\Windows\system32\drivers\msahci.sys
18:57:14.0669 2896 msahci - ok
18:57:14.0716 2896 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:57:14.0747 2896 msdsm - ok
18:57:14.0778 2896 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
18:57:14.0872 2896 MSDTC - ok
18:57:14.0919 2896 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:57:14.0997 2896 Msfs - ok
18:57:15.0043 2896 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:57:15.0059 2896 msisadrv - ok
18:57:15.0106 2896 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:57:15.0153 2896 MSiSCSI - ok
18:57:15.0168 2896 msiserver - ok
18:57:15.0262 2896 [ 3846C05A66A3F5CD1D33E1A323C1762C ] MSI_MSIBIOS_010507 C:\Program Files\MSI\Live Update 5\msibios32_100507.sys
18:57:15.0293 2896 MSI_MSIBIOS_010507 - ok
18:57:15.0324 2896 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:57:15.0402 2896 MSKSSRV - ok
18:57:15.0465 2896 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:57:15.0511 2896 MSPCLOCK - ok
18:57:15.0527 2896 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:57:15.0589 2896 MSPQM - ok
18:57:15.0652 2896 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:57:15.0683 2896 MsRPC - ok
18:57:15.0745 2896 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:57:15.0777 2896 mssmbios - ok
18:57:15.0808 2896 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:57:15.0855 2896 MSTEE - ok
18:57:15.0886 2896 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
18:57:15.0917 2896 Mup - ok
18:57:16.0011 2896 [ E78A365CC3E0FBFC018A33DCE01909F8 ] N360 C:\Program Files\Norton 360\Engine\5.2.2.3\ccSvcHst.exe
18:57:16.0042 2896 N360 - ok
18:57:16.0089 2896 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
18:57:16.0151 2896 napagent - ok
18:57:16.0245 2896 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:57:16.0291 2896 NativeWifiP - ok
18:57:16.0432 2896 [ 8E4C77AD9BB279900C00F870CC0C674B ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20121203.002\NAVENG.SYS
18:57:16.0463 2896 NAVENG - ok
18:57:16.0557 2896 [ 826F699B69E88A3920C70F344DD42D88 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20121203.002\NAVEX15.SYS
18:57:16.0635 2896 NAVEX15 - ok
18:57:16.0728 2896 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:57:16.0775 2896 NDIS - ok
18:57:16.0837 2896 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:57:16.0900 2896 NdisTapi - ok
18:57:16.0931 2896 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:57:16.0978 2896 Ndisuio - ok
18:57:17.0025 2896 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:57:17.0071 2896 NdisWan - ok
18:57:17.0118 2896 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:57:17.0165 2896 NDProxy - ok
18:57:17.0196 2896 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:57:17.0243 2896 NetBIOS - ok
18:57:17.0321 2896 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
18:57:17.0383 2896 netbt - ok
18:57:17.0430 2896 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
18:57:17.0446 2896 Netlogon - ok
18:57:17.0508 2896 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
18:57:17.0571 2896 Netman - ok
18:57:17.0602 2896 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
18:57:17.0680 2896 netprofm - ok
18:57:17.0742 2896 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:57:17.0758 2896 NetTcpPortSharing - ok
18:57:17.0929 2896 [ 83F310BF50985F2A52121F2614787C38 ] NETw5v32 C:\Windows\system32\DRIVERS\NETw5v32.sys
18:57:18.0397 2896 NETw5v32 - ok
18:57:18.0460 2896 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
18:57:18.0475 2896 nfrd960 - ok
18:57:18.0553 2896 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:57:18.0600 2896 NlaSvc - ok
18:57:18.0631 2896 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:57:18.0694 2896 Npfs - ok
18:57:18.0756 2896 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
18:57:18.0803 2896 nsi - ok
18:57:18.0850 2896 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:57:18.0928 2896 nsiproxy - ok
18:57:19.0021 2896 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:57:19.0099 2896 Ntfs - ok
18:57:19.0131 2896 [ CD2166C9511D336A058CDE91778AAA69 ] NTIOLib_1_0_4 C:\Program Files\MSI\Live Update 5\NTIOLib.sys
18:57:19.0240 2896 NTIOLib_1_0_4 ( UnsignedFile.Multi.Generic ) - warning
18:57:19.0240 2896 NTIOLib_1_0_4 - detected UnsignedFile.Multi.Generic (1)
18:57:19.0271 2896 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
18:57:19.0349 2896 ntrigdigi - ok
18:57:19.0411 2896 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
18:57:19.0458 2896 Null - ok
18:57:19.0489 2896 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:57:19.0521 2896 nvraid - ok
18:57:19.0567 2896 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:57:19.0599 2896 nvstor - ok
18:57:19.0614 2896 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:57:19.0661 2896 nv_agp - ok
18:57:19.0677 2896 NwlnkFlt - ok
18:57:19.0692 2896 NwlnkFwd - ok
18:57:19.0739 2896 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:57:19.0817 2896 ohci1394 - ok
18:57:19.0864 2896 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
18:57:19.0973 2896 p2pimsvc - ok
18:57:20.0004 2896 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
18:57:20.0051 2896 p2psvc - ok
18:57:20.0067 2896 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
18:57:20.0145 2896 Parport - ok
18:57:20.0191 2896 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:57:20.0223 2896 partmgr - ok
18:57:20.0254 2896 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
18:57:20.0379 2896 Parvdm - ok
18:57:20.0425 2896 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
18:57:20.0628 2896 PcaSvc - ok
18:57:20.0675 2896 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
18:57:20.0706 2896 pci - ok
18:57:20.0753 2896 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
18:57:20.0769 2896 pciide - ok
18:57:20.0800 2896 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
18:57:20.0831 2896 pcmcia - ok
18:57:20.0893 2896 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:57:21.0003 2896 PEAUTH - ok
18:57:21.0127 2896 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
18:57:21.0268 2896 pla - ok
18:57:21.0315 2896 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:57:21.0361 2896 PlugPlay - ok
18:57:21.0424 2896 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
18:57:21.0455 2896 PNRPAutoReg - ok
18:57:21.0486 2896 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
18:57:21.0533 2896 PNRPsvc - ok
18:57:21.0595 2896 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:57:21.0658 2896 PolicyAgent - ok
18:57:21.0736 2896 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:57:21.0829 2896 PptpMiniport - ok
18:57:21.0861 2896 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
18:57:21.0923 2896 Processor - ok
18:57:21.0985 2896 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
18:57:22.0017 2896 ProfSvc - ok
18:57:22.0048 2896 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
18:57:22.0079 2896 ProtectedStorage - ok
18:57:22.0141 2896 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
18:57:22.0204 2896 PSched - ok
18:57:22.0282 2896 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
18:57:22.0344 2896 ql2300 - ok
18:57:22.0375 2896 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
18:57:22.0407 2896 ql40xx - ok
18:57:22.0469 2896 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
18:57:22.0500 2896 QWAVE - ok
18:57:22.0531 2896 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:57:22.0547 2896 QWAVEdrv - ok
18:57:22.0578 2896 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:57:22.0641 2896 RasAcd - ok
18:57:22.0687 2896 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
18:57:22.0781 2896 RasAuto - ok
18:57:22.0828 2896 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:57:22.0890 2896 Rasl2tp - ok
18:57:22.0968 2896 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
18:57:23.0015 2896 RasMan - ok
18:57:23.0046 2896 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:57:23.0124 2896 RasPppoe - ok
18:57:23.0155 2896 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:57:23.0202 2896 RasSstp - ok
18:57:23.0233 2896 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:57:23.0311 2896 rdbss - ok
18:57:23.0343 2896 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:57:23.0421 2896 RDPCDD - ok
18:57:23.0467 2896 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
18:57:23.0530 2896 rdpdr - ok
18:57:23.0545 2896 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:57:23.0592 2896 RDPENCDD - ok
18:57:23.0670 2896 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:57:23.0717 2896 RDPWD - ok
18:57:23.0826 2896 [ 7C4391419852DFC331F6AF620C33AF3C ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
18:57:23.0857 2896 RegSrvc - ok
18:57:23.0951 2896 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:57:23.0998 2896 RemoteAccess - ok
18:57:24.0060 2896 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:57:24.0107 2896 RemoteRegistry - ok
18:57:24.0138 2896 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
18:57:24.0201 2896 RpcLocator - ok
18:57:24.0247 2896 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
18:57:24.0294 2896 RpcSs - ok
18:57:24.0341 2896 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:57:24.0419 2896 rspndr - ok
18:57:24.0497 2896 [ B87F999E05DD9C0312C83A8752E8E66B ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
18:57:24.0528 2896 RSUSBSTOR - ok
18:57:24.0591 2896 [ F9575B977A13965BBE0181A6604F4F04 ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys
18:57:24.0622 2896 RTL8169 - ok
18:57:24.0669 2896 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
18:57:24.0700 2896 SamSs - ok
18:57:24.0747 2896 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:57:24.0778 2896 sbp2port - ok
18:57:24.0825 2896 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:57:24.0871 2896 SCardSvr - ok
18:57:24.0934 2896 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
18:57:25.0043 2896 Schedule - ok
18:57:25.0074 2896 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
18:57:25.0121 2896 SCPolicySvc - ok
18:57:25.0168 2896 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:57:25.0230 2896 SDRSVC - ok
18:57:25.0277 2896 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:57:25.0371 2896 secdrv - ok
18:57:25.0417 2896 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
18:57:25.0480 2896 seclogon - ok
18:57:25.0511 2896 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
18:57:25.0573 2896 SENS - ok
18:57:25.0636 2896 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
18:57:25.0714 2896 Serenum - ok
18:57:25.0745 2896 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
18:57:25.0823 2896 Serial - ok
18:57:25.0839 2896 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
18:57:25.0885 2896 sermouse - ok
18:57:25.0963 2896 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
18:57:26.0010 2896 SessionEnv - ok
18:57:26.0026 2896 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:57:26.0073 2896 sffdisk - ok
18:57:26.0088 2896 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:57:26.0151 2896 sffp_mmc - ok
18:57:26.0197 2896 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:57:26.0260 2896 sffp_sd - ok
18:57:26.0275 2896 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
18:57:26.0385 2896 sfloppy - ok
18:57:26.0447 2896 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:57:26.0619 2896 SharedAccess - ok
18:57:26.0650 2896 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:57:26.0728 2896 ShellHWDetection - ok
18:57:26.0743 2896 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
18:57:26.0775 2896 sisagp - ok
18:57:26.0806 2896 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
18:57:26.0837 2896 SiSRaid2 - ok
18:57:26.0899 2896 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
18:57:26.0915 2896 SiSRaid4 - ok
18:57:27.0118 2896 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
18:57:27.0305 2896 slsvc - ok
18:57:27.0367 2896 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
18:57:27.0430 2896 SLUINotify - ok
18:57:27.0477 2896 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:57:27.0508 2896 Smb - ok
18:57:27.0586 2896 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:57:27.0617 2896 SNMPTRAP - ok
18:57:27.0679 2896 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
18:57:27.0695 2896 spldr - ok
18:57:27.0773 2896 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
18:57:27.0851 2896 Spooler - ok
18:57:27.0960 2896 [ 83726CF02ECED69138948083E06B6EAC ] SRTSP C:\Windows\System32\Drivers\N360\0502020.003\SRTSP.SYS
18:57:28.0007 2896 SRTSP - ok
18:57:28.0038 2896 [ 4E7EAB2E5615D39CF1F1DF9C71E5E225 ] SRTSPX C:\Windows\system32\drivers\N360\0502020.003\SRTSPX.SYS
18:57:28.0069 2896 SRTSPX - ok
18:57:28.0101 2896 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
18:57:28.0179 2896 srv - ok
18:57:28.0241 2896 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:57:28.0288 2896 srv2 - ok
18:57:28.0319 2896 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:57:28.0350 2896 srvnet - ok
18:57:28.0397 2896 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:57:28.0444 2896 SSDPSRV - ok
18:57:28.0569 2896 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:57:28.0600 2896 SstpSvc - ok
18:57:28.0771 2896 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
18:57:28.0849 2896 stisvc - ok
18:57:28.0881 2896 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:57:28.0912 2896 swenum - ok
18:57:28.0959 2896 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
18:57:29.0037 2896 swprv - ok
18:57:29.0083 2896 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
18:57:29.0115 2896 Symc8xx - ok
18:57:29.0161 2896 [ 9BBEB8C6258E72D62E7560E6667AAD39 ] SymDS C:\Windows\system32\drivers\N360\0502020.003\SYMDS.SYS
18:57:29.0208 2896 SymDS - ok
18:57:29.0551 2896 [ D5C02629C02A820A7E71BCA3D44294A3 ] SymEFA C:\Windows\system32\drivers\N360\0502020.003\SYMEFA.SYS
18:57:29.0692 2896 SymEFA - ok
18:57:29.0770 2896 [ AB33C3B196197CA467CBDDA717860DBA ] SymEvent C:\Windows\system32\Drivers\SYMEVENT.SYS
18:57:29.0801 2896 SymEvent - ok
18:57:29.0910 2896 [ A73399804D5D4A8B20BA60FCF70C9F1F ] SymIRON C:\Windows\system32\drivers\N360\0502020.003\Ironx86.SYS
18:57:29.0973 2896 SymIRON - ok
18:57:30.0113 2896 [ D42A7229E333AF725F1445F785E4658D ] SYMTDIv C:\Windows\System32\Drivers\N360\0502020.003\SYMTDIV.SYS
18:57:30.0175 2896 SYMTDIv - ok
18:57:30.0222 2896 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
18:57:30.0253 2896 Sym_hi - ok
18:57:30.0331 2896 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
18:57:30.0363 2896 Sym_u3 - ok
18:57:30.0425 2896 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
18:57:30.0519 2896 SysMain - ok
18:57:30.0721 2896 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:57:30.0753 2896 TabletInputService - ok
18:57:30.0846 2896 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:57:30.0924 2896 TapiSrv - ok
18:57:30.0971 2896 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
18:57:31.0033 2896 TBS - ok
18:57:31.0111 2896 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:57:31.0189 2896 Tcpip - ok
18:57:31.0221 2896 [ 27D470DABC77BC60D0A3B0E4DEB6CB91 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
18:57:31.0267 2896 Tcpip6 - ok
18:57:31.0314 2896 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:57:31.0377 2896 tcpipreg - ok
18:57:31.0439 2896 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:57:31.0501 2896 TDPIPE - ok
18:57:31.0517 2896 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:57:31.0579 2896 TDTCP - ok
18:57:31.0611 2896 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:57:31.0689 2896 tdx - ok
18:57:31.0751 2896 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
18:57:31.0767 2896 TermDD - ok
18:57:31.0845 2896 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
18:57:31.0907 2896 TermService - ok
18:57:31.0969 2896 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
18:57:32.0001 2896 Themes - ok
18:57:32.0032 2896 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
18:57:32.0079 2896 THREADORDER - ok
18:57:32.0110 2896 tosporte - ok
18:57:32.0125 2896 tosrfbd - ok
18:57:32.0157 2896 tosrfbnp - ok
18:57:32.0172 2896 Tosrfcom - ok
18:57:32.0188 2896 Tosrfhid - ok
18:57:32.0203 2896 tosrfnds - ok
18:57:32.0235 2896 TosRfSnd - ok
18:57:32.0250 2896 Tosrfusb - ok
18:57:32.0281 2896 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
18:57:32.0359 2896 TrkWks - ok
18:57:32.0437 2896 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:57:32.0500 2896 TrustedInstaller - ok
18:57:32.0562 2896 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:57:32.0640 2896 tssecsrv - ok
18:57:32.0687 2896 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
18:57:32.0749 2896 tunmp - ok
18:57:32.0812 2896 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:57:32.0859 2896 tunnel - ok
18:57:32.0890 2896 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
18:57:32.0921 2896 uagp35 - ok
18:57:32.0968 2896 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:57:33.0015 2896 udfs - ok
18:57:33.0093 2896 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:57:33.0155 2896 UI0Detect - ok
18:57:33.0186 2896 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:57:33.0202 2896 uliagpkx - ok
18:57:33.0264 2896 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
18:57:33.0295 2896 uliahci - ok
18:57:33.0311 2896 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
18:57:33.0358 2896 UlSata - ok
18:57:33.0389 2896 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
18:57:33.0420 2896 ulsata2 - ok
18:57:33.0467 2896 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:57:33.0529 2896 umbus - ok
18:57:33.0576 2896 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
18:57:33.0654 2896 upnphost - ok
18:57:33.0701 2896 [ 73B41F4EAD65F355962168D766AF0F2E ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
18:57:33.0795 2896 USBAAPL - ok
18:57:33.0873 2896 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:57:33.0904 2896 usbccgp - ok
18:57:33.0966 2896 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:57:34.0044 2896 usbcir - ok
18:57:34.0107 2896 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:57:34.0169 2896 usbehci - ok
18:57:34.0231 2896 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:57:34.0309 2896 usbhub - ok
18:57:34.0356 2896 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:57:34.0434 2896 usbohci - ok
18:57:34.0497 2896 [ B51E52ACF758BE00EF3A58EA452FE360 ] usbprint C:\Windows\system32\drivers\usbprint.sys
18:57:34.0559 2896 usbprint - ok
18:57:34.0621 2896 [ D575246188F63DE0ACCF6EAC5FB59E6A ] usbser C:\Windows\system32\drivers\usbser.sys
18:57:34.0668 2896 usbser - ok
18:57:34.0699 2896 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:57:34.0746 2896 USBSTOR - ok
18:57:34.0777 2896 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
18:57:34.0824 2896 usbuhci - ok
18:57:34.0855 2896 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
18:57:34.0933 2896 usbvideo - ok
18:57:34.0996 2896 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
18:57:35.0058 2896 UxSms - ok
18:57:35.0105 2896 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
18:57:35.0199 2896 vds - ok
18:57:35.0261 2896 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:57:35.0308 2896 vga - ok
18:57:35.0355 2896 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
18:57:35.0433 2896 VgaSave - ok
18:57:35.0448 2896 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
18:57:35.0479 2896 viaagp - ok
18:57:35.0495 2896 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
18:57:35.0557 2896 ViaC7 - ok
18:57:35.0573 2896 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
18:57:35.0604 2896 viaide - ok
18:57:35.0651 2896 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:57:35.0682 2896 volmgr - ok
18:57:35.0713 2896 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:57:35.0760 2896 volmgrx - ok
18:57:35.0823 2896 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:57:35.0854 2896 volsnap - ok
18:57:35.0901 2896 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
18:57:35.0932 2896 vsmraid - ok
18:57:35.0979 2896 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
18:57:36.0103 2896 VSS - ok
18:57:36.0119 2896 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
18:57:36.0181 2896 W32Time - ok
18:57:36.0228 2896 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
18:57:36.0322 2896 WacomPen - ok
18:57:36.0353 2896 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
18:57:36.0431 2896 Wanarp - ok
18:57:36.0462 2896 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:57:36.0493 2896 Wanarpv6 - ok
18:57:36.0556 2896 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:57:36.0587 2896 wcncsvc - ok
18:57:36.0634 2896 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:57:36.0681 2896 WcsPlugInService - ok
18:57:36.0712 2896 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
18:57:36.0727 2896 Wd - ok
18:57:36.0790 2896 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:57:36.0821 2896 Wdf01000 - ok
18:57:36.0852 2896 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:57:36.0915 2896 WdiServiceHost - ok
18:57:36.0930 2896 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:57:36.0993 2896 WdiSystemHost - ok
18:57:37.0039 2896 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
18:57:37.0086 2896 WebClient - ok
18:57:37.0164 2896 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:57:37.0242 2896 Wecsvc - ok
18:57:37.0289 2896 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:57:37.0351 2896 wercplsupport - ok
18:57:37.0414 2896 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
18:57:37.0445 2896 WerSvc - ok
18:57:37.0507 2896 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
18:57:37.0539 2896 WinDefend - ok
18:57:37.0570 2896 WinHttpAutoProxySvc - ok
18:57:37.0648 2896 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:57:37.0695 2896 Winmgmt - ok
18:57:37.0819 2896 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
18:57:37.0897 2896 WinRM - ok
18:57:37.0975 2896 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
18:57:38.0053 2896 Wlansvc - ok
18:57:38.0116 2896 [ 6067ACEF367E79914AF628FA1E9B5330 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
18:57:38.0147 2896 wlcrasvc - ok
18:57:38.0287 2896 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:57:38.0381 2896 wlidsvc - ok
18:57:38.0443 2896 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
18:57:38.0521 2896 WmiAcpi - ok
18:57:38.0568 2896 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:57:38.0615 2896 wmiApSrv - ok
18:57:38.0709 2896 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
18:57:38.0787 2896 WMPNetworkSvc - ok
18:57:38.0833 2896 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:57:38.0896 2896 WPCSvc - ok
18:57:38.0958 2896 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:57:39.0052 2896 WPDBusEnum - ok
18:57:39.0114 2896 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
18:57:39.0145 2896 WpdUsb - ok
18:57:39.0255 2896 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
18:57:39.0301 2896 WPFFontCache_v0400 - ok
18:57:39.0348 2896 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:57:39.0426 2896 ws2ifsl - ok
18:57:39.0504 2896 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
18:57:39.0567 2896 wscsvc - ok
18:57:39.0582 2896 WSearch - ok
18:57:39.0691 2896 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
18:57:39.0801 2896 wuauserv - ok
18:57:39.0847 2896 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:57:39.0910 2896 WUDFRd - ok
18:57:39.0957 2896 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:57:40.0035 2896 wudfsvc - ok
18:57:40.0097 2896 ================ Scan global ===============================
18:57:40.0128 2896 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
18:57:40.0222 2896 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
18:57:40.0237 2896 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
18:57:40.0300 2896 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
18:57:40.0300 2896 [Global] - ok
18:57:40.0300 2896 ================ Scan MBR ==================================
18:57:40.0347 2896 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
18:57:41.0064 2896 \Device\Harddisk0\DR0 - ok
18:57:41.0064 2896 ================ Scan VBR ==================================
18:57:41.0111 2896 [ 35668CBFDC2DEF24AFA692E301E22C9F ] \Device\Harddisk0\DR0\Partition1
18:57:41.0111 2896 \Device\Harddisk0\DR0\Partition1 - ok
18:57:41.0127 2896 ============================================================
18:57:41.0127 2896 Scan finished
18:57:41.0127 2896 ============================================================
18:57:41.0158 3844 Detected object count: 2
18:57:41.0158 3844 Actual detected object count: 2
18:57:48.0942 3844 fspad_win732 ( UnsignedFile.Multi.Generic ) - skipped by user
18:57:48.0942 3844 fspad_win732 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:57:48.0942 3844 NTIOLib_1_0_4 ( UnsignedFile.Multi.Generic ) - skipped by user
18:57:48.0942 3844 NTIOLib_1_0_4 ( UnsignedFile.Multi.Generic ) - User select action: Skip

Die Logs sind in CODE-Tags zu posten!

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Hi,

Ich habe den Scan durchgeführt und jetzt komm ich nicht mehr ins Internet. Das ist der Grund warum ich jetzt erst schreiben kann hatte nichts anderes zur Verfügung.

Kann deshalb den Scan auch nicht Posten was muss ich jetzt machen ? Wenn ich auf Internet Explorer klicke kommt da: c:Programm Files interne Explorer iexplorer exe
Es wurde versucht, einen registrierungsschlüssel einem unzulässigen Vorgang zu unterziehen, der zum löschen markiert wurde.

Kannst du mir da weiterhelfen ?

Vielen dank schonmal und wünsche schonmal besinnliche Feiertage

Das betrifft auch alle andere Dateien auf meinem Rechner ich kann nichts mehr öffnen

Es wurde versucht, einen registrierungsschlüssel einem unzulässigen Vorgang zu unterziehen, der zum löschen markiert wurde.

Anleitungen solltest du auch mal komplett lesen!

Guten morgen,

ich hab das 2 mal gelesen und gerade auch noch mal leider versteh ich nicht was ich falsch gemacht habe wie komm ich denn an meine ganzen Daten ? Muss ich das Programm deinstallieren ?

ich hab das 2 mal gelesen

Dann hast du es zwei mal nicht komplett gelesen
Lies dir mal den letzten Teil der Anleitung von Combofix durch

Ok das mit der Internetwiederherstellung hab ich verstanden aber wie funktioniert es denn, dass ich meine Dokumente wieder öffnen kann?

Sorry wegen meiner lange Leitung

OK habs, ich verliere mal kein Wort mehr darüber
Combofix Logfile:

ComboFix 12-12-17.02 - Nils 18.12.2012  17:46:51.1.1 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.2010.954 [GMT 1:00]
ausgeführt von:: c:\users\Nils\Desktop\ComboFix.exe
AV: Norton 360 Online *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton 360 Online *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton 360 Online *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-11-18 bis 2012-12-18  ))))))))))))))))))))))))))))))
.
.
2012-12-18 16:56 . 2012-12-18 16:56	--------	d-----w-	c:\users\Nils\AppData\Local\temp
2012-12-18 16:56 . 2012-12-18 16:56	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-12-17 13:41 . 2012-12-17 13:41	--------	d-----w-	c:\users\Nils\AppData\Roaming\UDC Profiles
2012-12-17 13:40 . 2012-11-06 18:35	26088	----a-w-	c:\windows\system32\udcpm.dll
2012-12-17 13:40 . 2012-12-17 13:40	--------	d-----w-	c:\program files\Universal Document Converter
2012-12-14 07:04 . 2012-07-26 02:46	9728	----a-w-	c:\windows\system32\Wdfres.dll
2012-12-14 07:04 . 2012-07-26 02:33	66560	----a-w-	c:\windows\system32\drivers\WUDFPf.sys
2012-12-14 07:04 . 2012-07-26 02:32	155136	----a-w-	c:\windows\system32\drivers\WUDFRd.sys
2012-12-14 07:04 . 2012-07-26 03:20	73216	----a-w-	c:\windows\system32\WUDFSvc.dll
2012-12-14 07:04 . 2009-07-14 12:12	16896	----a-w-	c:\windows\system32\winusb.dll
2012-12-14 07:04 . 2012-07-26 03:20	172032	----a-w-	c:\windows\system32\WUDFPlatform.dll
2012-12-14 07:04 . 2012-07-26 03:39	526952	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2012-12-14 07:04 . 2012-07-26 03:39	47720	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2012-12-14 07:04 . 2012-07-26 03:21	196608	----a-w-	c:\windows\system32\WUDFHost.exe
2012-12-14 07:04 . 2012-07-26 03:20	613888	----a-w-	c:\windows\system32\WUDFx.dll
2012-12-14 07:04 . 2012-07-26 03:20	38912	----a-w-	c:\windows\system32\WUDFCoinstaller.dll
2012-12-13 09:10 . 2012-11-13 01:36	2048000	----a-w-	c:\windows\system32\win32k.sys
2012-12-13 09:10 . 2012-11-02 10:18	376320	----a-w-	c:\windows\system32\dpnet.dll
2012-12-13 09:10 . 2012-11-02 08:26	23040	----a-w-	c:\windows\system32\dpnsvr.exe
2012-12-13 09:10 . 2012-08-21 11:47	224640	----a-w-	c:\windows\system32\drivers\volsnap.sys
2012-12-13 09:10 . 2012-11-08 03:46	34304	----a-w-	c:\windows\system32\atmlib.dll
2012-12-13 09:10 . 2012-11-08 01:36	293376	----a-w-	c:\windows\system32\atmfd.dll
2012-12-13 09:09 . 2012-11-13 01:29	2048	----a-w-	c:\windows\system32\tzres.dll
2012-12-04 13:23 . 2012-12-04 13:23	--------	d-----w-	c:\users\Nils\OpenOffice.org 3.4.1 (de) Installation Files
2012-11-27 22:34 . 2012-11-27 22:34	--------	d-----w-	C:\_OTL
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-25 16:19 . 2012-11-15 16:08	75776	----a-w-	c:\windows\system32\synceng.dll
2012-01-04 20:12 . 2012-01-04 20:12	909600	----a-w-	c:\program files\JavaSetup6u30.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-10 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-08-29 59280]
"ApplePhotoStreams"="c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2012-09-10 59280]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-06-03 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-06-03 171288]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-06-03 172824]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2011-09-12 7227936]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
c:\users\Nils\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK32.EXE [2012-11-12 685496]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Inhalt des "geplante Tasks" Ordners
.
2012-12-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-01-12 16:26]
.
2012-09-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1164149480-2802420226-170597727-1000Core.job
- c:\users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-11 21:14]
.
2012-12-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1164149480-2802420226-170597727-1000UA.job
- c:\users\Nils\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-11 21:14]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2012-12-18 17:56
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\5.2.2.3\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\5.2.2.3\diMaster.dll\" /prefetch:1"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(3508)
c:\windows\system32\authui.dll
c:\windows\system32\msi.dll
.
Zeit der Fertigstellung: 2012-12-18  18:00:57
ComboFix-quarantined-files.txt  2012-12-18 17:00
.
Vor Suchlauf: 10 Verzeichnis(se), 221.697.507.328 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 221.971.521.536 Bytes frei
.
- - End Of File - - 9D3669414B68EE436CBE75F6AB7CF8AB
         

--- --- ---

adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Falls der adwCleaner schon mal in der runtergeladen wurde, bitte die alte adwcleaner.exe löschen und neu runterladen!!

• Starte die adwcleaner.exe mit einem Doppelklick.
• Klicke auf Suche.
• Nach Ende des Suchlaufs öffnet sich eine Textdatei.
• Poste mir den Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner[Rx].txt. (x=fortlaufende Nummer)