| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötigWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.12.2012, 12:31
| #16 |
 |  Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig in den letzten 30 Minuten wurde kein Captcha abgefragt. Andere Netzwerkgeräte wären der PC meines Freundes... |
|
13.12.2012, 12:36
| #17 |
| /// TB-Ausbilder  | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Dann sollte man mal den PC deines Freundes checken
__________________
__________________ |
|
13.12.2012, 12:37
| #18 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig okay...werd ich weitergeben...
__________________ sollte er dann ein neues Thema eröffnen? |
|
13.12.2012, 12:38
| #19 |
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig entweder DAS oder du machst das für ihn und dann geht es hier weiter
__________________  Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
13.12.2012, 12:42
| #20 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig okay, dann werde ich mich auf seinem PC einloggen und würden hier weitermachen... |
|
13.12.2012, 12:44
| #21 | |
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Dann legen wir nochmal los  Ich werde dir bei deinem Problem helfen. Eine Bereinigung ist mitunter mit viel Arbeit für Dich (und mich) verbunden. Bevor es los geht, habe ich etwas Lesestoff für dich. Gelesen und verstanden? Schritt 1: Laufwerksemulationen abschalten mit Defogger Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop und starte es:Schritt 2: Scan mit aswMBR Schritt 3: Scan mit dem TDSS-Killer Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen. Schritt 4: Scan mit DDS (+ attach) Downloade dir bitte DDS (von sUBs) von einem der folgenden Downloadspiegel und speichere die Datei auf deinem Desktop.
__________________ --> Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig |
|
13.12.2012, 13:34
| #22 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Vorab herzlichen Dank für deine Zeit und Mühe. Schritt 1 defogger_disable by jpshortstuff (23.02.10.1) Log created at 13:13 on 13/12/2012 (Doppelleben) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Schritt 2 Beim ersten Durchlauf brach der Scan ab und das Programm ist abgestürzt, die Ergebnisse des 2. Scans mit der Einstellung "AV scan: (none)" ergab folgendes Ergebnis: aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software Run date: 2012-12-13 13:20:00 ----------------------------- 13:20:00.643 OS Version: Windows x64 6.1.7601 Service Pack 1 13:20:00.643 Number of processors: 8 586 0x1A04 13:20:00.643 ComputerName: DOPPELLEBEN-PC UserName: Doppelleben 13:20:01.049 Initialize success 13:20:06.984 AVAST engine defs: 12121300 13:20:13.442 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 13:20:13.444 Disk 0 Vendor: WDC_WD1500HLFS-01G6U0 04.04V01 Size: 143089MB BusType: 3 13:20:13.445 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T1L0-5 13:20:13.447 Disk 1 Vendor: WDC_WD2500AAKS-00L6A0 01.03E01 Size: 238475MB BusType: 3 13:20:13.449 Disk 2 \Device\Harddisk2\DR2 -> \Device\Ide\IdeDeviceP3T0L0-3 13:20:13.451 Disk 2 Vendor: WDC_WD740ADFD-00NLR5 21.07QR5 Size: 70911MB BusType: 3 13:20:13.453 Disk 3 \Device\Harddisk3\DR3 -> \Device\Ide\IdeDeviceP3T1L0-7 13:20:13.455 Disk 3 Vendor: WDC_WD2500AAKS-00L6A0 01.03E01 Size: 238475MB BusType: 3 13:20:13.461 Disk 4 \Device\Harddisk4\DR4 -> \Device\Scsi\mv91xx1Port6Path0Target0Lun0 13:20:13.463 Disk 4 Vendor: WDC_WD15 51.0 Size: 1430799MB BusType: 11 13:20:13.472 Disk 5 \Device\Harddisk5\DR5 -> \Device\Scsi\mv91xx1Port6Path0Target1Lun0 13:20:13.475 Disk 5 Vendor: WDC_WD64 07.0 Size: 610480MB BusType: 11 13:20:13.487 Disk 0 MBR read successfully 13:20:13.495 Disk 0 MBR scan 13:20:13.508 Disk 0 Windows 7 default MBR code 13:20:13.519 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 143087 MB offset 2048 13:20:13.534 Disk 0 scanning C:\Windows\system32\drivers 13:20:21.614 Service scanning 13:20:40.817 Modules scanning 13:20:40.821 Disk 0 trace - called modules: 13:20:40.836 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys 13:20:40.840 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800ae46790] 13:20:40.843 3 CLASSPNP.SYS[fffff88001bc243f] -> nt!IofCallDriver -> [0xfffffa800abc29b0] 13:20:40.852 5 ACPI.sys[fffff88000f907a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-2[0xfffffa800abe8680] 13:20:40.858 Scan finished successfully 13:22:31.648 Disk 0 MBR has been saved successfully to "C:\Users\Doppelleben\Desktop\MBR.dat" 13:22:31.652 The log file has been saved successfully to "C:\Users\Doppelleben\Desktop\aswMBR.txt" Schritt 3 Code:
ATTFilter 13:23:56.0377 2024 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
13:23:56.0456 2024 ============================================================
13:23:56.0456 2024 Current date / time: 2012/12/13 13:23:56.0456
13:23:56.0456 2024 SystemInfo:
13:23:56.0456 2024
13:23:56.0456 2024 OS Version: 6.1.7601 ServicePack: 1.0
13:23:56.0456 2024 Product type: Workstation
13:23:56.0456 2024 ComputerName: DOPPELLEBEN-PC
13:23:56.0456 2024 UserName: Doppelleben
13:23:56.0456 2024 Windows directory: C:\Windows
13:23:56.0456 2024 System windows directory: C:\Windows
13:23:56.0456 2024 Running under WOW64
13:23:56.0456 2024 Processor architecture: Intel x64
13:23:56.0457 2024 Number of processors: 8
13:23:56.0457 2024 Page size: 0x1000
13:23:56.0457 2024 Boot type: Normal boot
13:23:56.0457 2024 ============================================================
13:23:57.0374 2024 Drive \Device\Harddisk4\DR4 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048
13:23:57.0388 2024 Drive \Device\Harddisk5\DR5 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048
13:23:57.0393 2024 Drive \Device\Harddisk0\DR0 - Size: 0x22EF13E000 (139.74 Gb), SectorSize: 0x200, Cylinders: 0x4741, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:57.0414 2024 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:57.0420 2024 Drive \Device\Harddisk2\DR2 - Size: 0x114FF30000 (69.25 Gb), SectorSize: 0x200, Cylinders: 0x234F, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:57.0439 2024 Drive \Device\Harddisk3\DR3 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:23:57.0448 2024 ============================================================
13:23:57.0448 2024 \Device\Harddisk4\DR4:
13:23:57.0448 2024 MBR partitions:
13:23:57.0448 2024 \Device\Harddisk4\DR4\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x57543000
13:23:57.0448 2024 \Device\Harddisk4\DR4\Partition2: MBR, Type 0x7, StartLBA 0x57543800, BlocksNum 0x57543000
13:23:57.0448 2024 \Device\Harddisk5\DR5:
13:23:57.0448 2024 MBR partitions:
13:23:57.0448 2024 \Device\Harddisk5\DR5\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x2402C000
13:23:57.0448 2024 \Device\Harddisk5\DR5\Partition2: MBR, Type 0x7, StartLBA 0x2402C800, BlocksNum 0x2402C000
13:23:57.0448 2024 \Device\Harddisk5\DR5\Partition3: MBR, Type 0x7, StartLBA 0x48058800, BlocksNum 0x27FE800
13:23:57.0448 2024 \Device\Harddisk0\DR0:
13:23:57.0448 2024 MBR partitions:
13:23:57.0448 2024 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x11777800
13:23:57.0448 2024 \Device\Harddisk1\DR1:
13:23:57.0448 2024 MBR partitions:
13:23:57.0448 2024 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
13:23:57.0448 2024 \Device\Harddisk2\DR2:
13:23:57.0448 2024 MBR partitions:
13:23:57.0448 2024 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x8A7E800
13:23:57.0448 2024 \Device\Harddisk3\DR3:
13:23:57.0449 2024 MBR partitions:
13:23:57.0449 2024 \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800
13:23:57.0449 2024 ============================================================
13:23:57.0468 2024 C: <-> \Device\Harddisk0\DR0\Partition1
13:23:57.0485 2024 D: <-> \Device\Harddisk1\DR1\Partition1
13:23:57.0506 2024 E: <-> \Device\Harddisk2\DR2\Partition1
13:23:57.0526 2024 F: <-> \Device\Harddisk3\DR3\Partition1
13:23:57.0540 2024 I: <-> \Device\Harddisk5\DR5\Partition1
13:23:57.0566 2024 K: <-> \Device\Harddisk5\DR5\Partition2
13:23:57.0604 2024 L: <-> \Device\Harddisk5\DR5\Partition3
13:23:57.0613 2024 G: <-> \Device\Harddisk4\DR4\Partition1
13:23:57.0638 2024 H: <-> \Device\Harddisk4\DR4\Partition2
13:23:57.0638 2024 ============================================================
13:23:57.0638 2024 Initialize success
13:23:57.0638 2024 ============================================================
13:24:17.0084 3052 ============================================================
13:24:17.0084 3052 Scan started
13:24:17.0084 3052 Mode: Manual; TDLFS;
13:24:17.0084 3052 ============================================================
13:24:17.0393 3052 ================ Scan system memory ========================
13:24:17.0393 3052 System memory - ok
13:24:17.0393 3052 ================ Scan services =============================
13:24:17.0480 3052 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
13:24:17.0482 3052 1394ohci - ok
13:24:17.0508 3052 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
13:24:17.0511 3052 ACPI - ok
13:24:17.0525 3052 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
13:24:17.0526 3052 AcpiPmi - ok
13:24:17.0583 3052 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
13:24:17.0584 3052 AdobeARMservice - ok
13:24:17.0640 3052 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
13:24:17.0642 3052 AdobeFlashPlayerUpdateSvc - ok
13:24:17.0667 3052 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
13:24:17.0671 3052 adp94xx - ok
13:24:17.0695 3052 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
13:24:17.0698 3052 adpahci - ok
13:24:17.0716 3052 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
13:24:17.0717 3052 adpu320 - ok
13:24:17.0732 3052 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
13:24:17.0733 3052 AeLookupSvc - ok
13:24:17.0763 3052 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
13:24:17.0766 3052 AFD - ok
13:24:17.0787 3052 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
13:24:17.0788 3052 agp440 - ok
13:24:17.0798 3052 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
13:24:17.0798 3052 ALG - ok
13:24:17.0808 3052 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
13:24:17.0809 3052 aliide - ok
13:24:17.0816 3052 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
13:24:17.0816 3052 amdide - ok
13:24:17.0829 3052 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
13:24:17.0830 3052 AmdK8 - ok
13:24:17.0832 3052 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
13:24:17.0833 3052 AmdPPM - ok
13:24:17.0855 3052 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
13:24:17.0855 3052 amdsata - ok
13:24:17.0871 3052 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
13:24:17.0872 3052 amdsbs - ok
13:24:17.0883 3052 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
13:24:17.0883 3052 amdxata - ok
13:24:17.0906 3052 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
13:24:17.0906 3052 AppID - ok
13:24:17.0917 3052 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
13:24:17.0917 3052 AppIDSvc - ok
13:24:17.0934 3052 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
13:24:17.0934 3052 Appinfo - ok
13:24:17.0964 3052 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
13:24:17.0965 3052 Apple Mobile Device - ok
13:24:17.0992 3052 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
13:24:17.0994 3052 AppMgmt - ok
13:24:18.0009 3052 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
13:24:18.0010 3052 arc - ok
13:24:18.0019 3052 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
13:24:18.0020 3052 arcsas - ok
13:24:18.0039 3052 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
13:24:18.0040 3052 AsyncMac - ok
13:24:18.0045 3052 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
13:24:18.0045 3052 atapi - ok
13:24:18.0077 3052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
13:24:18.0082 3052 AudioEndpointBuilder - ok
13:24:18.0089 3052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
13:24:18.0092 3052 AudioSrv - ok
13:24:18.0112 3052 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
13:24:18.0113 3052 AxInstSV - ok
13:24:18.0127 3052 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
13:24:18.0131 3052 b06bdrv - ok
13:24:18.0154 3052 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
13:24:18.0156 3052 b57nd60a - ok
13:24:18.0189 3052 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
13:24:18.0190 3052 BDESVC - ok
13:24:18.0192 3052 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
13:24:18.0192 3052 Beep - ok
13:24:18.0227 3052 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
13:24:18.0233 3052 BFE - ok
13:24:18.0253 3052 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
13:24:18.0271 3052 BITS - ok
13:24:18.0276 3052 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
13:24:18.0277 3052 blbdrive - ok
13:24:18.0313 3052 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
13:24:18.0317 3052 Bonjour Service - ok
13:24:18.0340 3052 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
13:24:18.0340 3052 bowser - ok
13:24:18.0349 3052 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
13:24:18.0349 3052 BrFiltLo - ok
13:24:18.0368 3052 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
13:24:18.0368 3052 BrFiltUp - ok
13:24:18.0385 3052 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
13:24:18.0385 3052 Browser - ok
13:24:18.0399 3052 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
13:24:18.0401 3052 Brserid - ok
13:24:18.0411 3052 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
13:24:18.0412 3052 BrSerWdm - ok
13:24:18.0414 3052 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
13:24:18.0414 3052 BrUsbMdm - ok
13:24:18.0423 3052 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
13:24:18.0424 3052 BrUsbSer - ok
13:24:18.0430 3052 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
13:24:18.0431 3052 BTHMODEM - ok
13:24:18.0442 3052 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
13:24:18.0442 3052 bthserv - ok
13:24:18.0452 3052 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
13:24:18.0453 3052 cdfs - ok
13:24:18.0476 3052 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
13:24:18.0477 3052 cdrom - ok
13:24:18.0494 3052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
13:24:18.0495 3052 CertPropSvc - ok
13:24:18.0508 3052 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
13:24:18.0509 3052 circlass - ok
13:24:18.0532 3052 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
13:24:18.0536 3052 CLFS - ok
13:24:18.0580 3052 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:24:18.0581 3052 clr_optimization_v2.0.50727_32 - ok
13:24:18.0615 3052 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
13:24:18.0616 3052 clr_optimization_v2.0.50727_64 - ok
13:24:18.0653 3052 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:24:18.0655 3052 clr_optimization_v4.0.30319_32 - ok
13:24:18.0671 3052 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
13:24:18.0673 3052 clr_optimization_v4.0.30319_64 - ok
13:24:18.0686 3052 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
13:24:18.0687 3052 CmBatt - ok
13:24:18.0700 3052 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
13:24:18.0700 3052 cmdide - ok
13:24:18.0717 3052 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
13:24:18.0720 3052 CNG - ok
13:24:18.0734 3052 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
13:24:18.0735 3052 Compbatt - ok
13:24:18.0758 3052 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
13:24:18.0758 3052 CompositeBus - ok
13:24:18.0766 3052 COMSysApp - ok
13:24:18.0774 3052 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
13:24:18.0774 3052 crcdisk - ok
13:24:18.0793 3052 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
13:24:18.0795 3052 CryptSvc - ok
13:24:18.0816 3052 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
13:24:18.0819 3052 CSC - ok
13:24:18.0837 3052 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
13:24:18.0842 3052 CscService - ok
13:24:18.0866 3052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
13:24:18.0872 3052 DcomLaunch - ok
13:24:18.0900 3052 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
13:24:18.0902 3052 defragsvc - ok
13:24:18.0919 3052 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
13:24:18.0920 3052 DfsC - ok
13:24:18.0941 3052 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
13:24:18.0944 3052 Dhcp - ok
13:24:18.0952 3052 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
13:24:18.0952 3052 discache - ok
13:24:18.0963 3052 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
13:24:18.0963 3052 Disk - ok
13:24:18.0974 3052 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
13:24:18.0976 3052 Dnscache - ok
13:24:18.0997 3052 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
13:24:19.0000 3052 dot3svc - ok
13:24:19.0016 3052 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
13:24:19.0017 3052 DPS - ok
13:24:19.0039 3052 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
13:24:19.0040 3052 drmkaud - ok
13:24:19.0057 3052 [ 3EEF0B3489EDBF725564E17C77CABAFD ] dsNcAdpt C:\Windows\system32\DRIVERS\dsNcAdpt.sys
13:24:19.0057 3052 dsNcAdpt - ok
13:24:19.0099 3052 [ DBB553EFC611BFC7FC2E658FFDD3AF33 ] dsNcService C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
13:24:19.0105 3052 dsNcService - ok
13:24:19.0129 3052 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
13:24:19.0153 3052 DXGKrnl - ok
13:24:19.0169 3052 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
13:24:19.0170 3052 EapHost - ok
13:24:19.0224 3052 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
13:24:19.0267 3052 ebdrv - ok
13:24:19.0282 3052 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
13:24:19.0283 3052 EFS - ok
13:24:19.0312 3052 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
13:24:19.0318 3052 ehRecvr - ok
13:24:19.0339 3052 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
13:24:19.0341 3052 ehSched - ok
13:24:19.0366 3052 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
13:24:19.0370 3052 elxstor - ok
13:24:19.0385 3052 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
13:24:19.0385 3052 ErrDev - ok
13:24:19.0405 3052 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
13:24:19.0409 3052 EventSystem - ok
13:24:19.0421 3052 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
13:24:19.0423 3052 exfat - ok
13:24:19.0433 3052 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
13:24:19.0435 3052 fastfat - ok
13:24:19.0464 3052 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
13:24:19.0470 3052 Fax - ok
13:24:19.0472 3052 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
13:24:19.0473 3052 fdc - ok
13:24:19.0481 3052 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
13:24:19.0482 3052 fdPHost - ok
13:24:19.0488 3052 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
13:24:19.0488 3052 FDResPub - ok
13:24:19.0496 3052 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
13:24:19.0497 3052 FileInfo - ok
13:24:19.0502 3052 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
13:24:19.0502 3052 Filetrace - ok
13:24:19.0504 3052 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
13:24:19.0504 3052 flpydisk - ok
13:24:19.0522 3052 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
13:24:19.0524 3052 FltMgr - ok
13:24:19.0557 3052 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
13:24:19.0582 3052 FontCache - ok
13:24:19.0616 3052 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:24:19.0616 3052 FontCache3.0.0.0 - ok
13:24:19.0634 3052 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
13:24:19.0634 3052 FsDepends - ok
13:24:19.0648 3052 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
13:24:19.0648 3052 Fs_Rec - ok
13:24:19.0662 3052 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
13:24:19.0664 3052 fvevol - ok
13:24:19.0669 3052 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
13:24:19.0670 3052 gagp30kx - ok
13:24:19.0686 3052 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
13:24:19.0686 3052 GEARAspiWDM - ok
13:24:19.0705 3052 [ 16C2A6BCDDA8952C2035DEC861492A19 ] ggflt C:\Windows\system32\DRIVERS\ggflt.sys
13:24:19.0705 3052 ggflt - ok
13:24:19.0719 3052 [ 6B503DF845EABF3457E49FBBDA26C10E ] ggsemc C:\Windows\system32\DRIVERS\ggsemc.sys
13:24:19.0719 3052 ggsemc - ok
13:24:19.0747 3052 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
13:24:19.0766 3052 gpsvc - ok
13:24:19.0799 3052 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:24:19.0801 3052 gupdate - ok
13:24:19.0811 3052 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:24:19.0811 3052 gupdatem - ok
13:24:19.0821 3052 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
13:24:19.0821 3052 hcw85cir - ok
13:24:19.0839 3052 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
13:24:19.0842 3052 HdAudAddService - ok
13:24:19.0854 3052 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
13:24:19.0855 3052 HDAudBus - ok
13:24:19.0866 3052 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
13:24:19.0867 3052 HidBatt - ok
13:24:19.0877 3052 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
13:24:19.0878 3052 HidBth - ok
13:24:19.0885 3052 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
13:24:19.0885 3052 HidIr - ok
13:24:19.0904 3052 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
13:24:19.0904 3052 hidserv - ok
13:24:19.0924 3052 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
13:24:19.0924 3052 HidUsb - ok
13:24:19.0939 3052 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
13:24:19.0940 3052 hkmsvc - ok
13:24:19.0956 3052 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:24:19.0958 3052 HomeGroupListener - ok
13:24:19.0974 3052 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:24:19.0976 3052 HomeGroupProvider - ok
13:24:19.0995 3052 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
13:24:19.0996 3052 HpSAMD - ok
13:24:20.0033 3052 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
13:24:20.0039 3052 HTTP - ok
13:24:20.0058 3052 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
13:24:20.0058 3052 hwpolicy - ok
13:24:20.0082 3052 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
13:24:20.0083 3052 i8042prt - ok
13:24:20.0109 3052 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
13:24:20.0112 3052 iaStorV - ok
13:24:20.0134 3052 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
13:24:20.0151 3052 idsvc - ok
13:24:20.0163 3052 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
13:24:20.0164 3052 iirsp - ok
13:24:20.0187 3052 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
13:24:20.0204 3052 IKEEXT - ok
13:24:20.0214 3052 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
13:24:20.0214 3052 intelide - ok
13:24:20.0229 3052 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
13:24:20.0230 3052 intelppm - ok
13:24:20.0245 3052 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
13:24:20.0246 3052 IPBusEnum - ok
13:24:20.0262 3052 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:24:20.0263 3052 IpFilterDriver - ok
13:24:20.0286 3052 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
13:24:20.0290 3052 iphlpsvc - ok
13:24:20.0295 3052 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
13:24:20.0296 3052 IPMIDRV - ok
13:24:20.0306 3052 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
13:24:20.0307 3052 IPNAT - ok
13:24:20.0349 3052 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
13:24:20.0373 3052 iPod Service - ok
13:24:20.0385 3052 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
13:24:20.0386 3052 IRENUM - ok
13:24:20.0391 3052 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
13:24:20.0392 3052 isapnp - ok
13:24:20.0411 3052 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
13:24:20.0413 3052 iScsiPrt - ok
13:24:20.0431 3052 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
13:24:20.0431 3052 kbdclass - ok
13:24:20.0451 3052 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
13:24:20.0451 3052 kbdhid - ok
13:24:20.0453 3052 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
13:24:20.0454 3052 KeyIso - ok
13:24:20.0471 3052 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
13:24:20.0471 3052 KSecDD - ok
13:24:20.0490 3052 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
13:24:20.0491 3052 KSecPkg - ok
13:24:20.0506 3052 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
13:24:20.0507 3052 ksthunk - ok
13:24:20.0529 3052 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
13:24:20.0533 3052 KtmRm - ok
13:24:20.0555 3052 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
13:24:20.0557 3052 LanmanServer - ok
13:24:20.0575 3052 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:24:20.0577 3052 LanmanWorkstation - ok
13:24:20.0590 3052 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
13:24:20.0591 3052 lltdio - ok
13:24:20.0609 3052 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
13:24:20.0612 3052 lltdsvc - ok
13:24:20.0620 3052 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
13:24:20.0621 3052 lmhosts - ok
13:24:20.0634 3052 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
13:24:20.0634 3052 LSI_FC - ok
13:24:20.0645 3052 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
13:24:20.0645 3052 LSI_SAS - ok
13:24:20.0655 3052 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
13:24:20.0656 3052 LSI_SAS2 - ok
13:24:20.0664 3052 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
13:24:20.0665 3052 LSI_SCSI - ok
13:24:20.0686 3052 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
13:24:20.0686 3052 luafv - ok
13:24:20.0701 3052 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
13:24:20.0702 3052 Mcx2Svc - ok
13:24:20.0708 3052 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
13:24:20.0708 3052 megasas - ok
13:24:20.0714 3052 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
13:24:20.0716 3052 MegaSR - ok
13:24:20.0740 3052 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
13:24:20.0741 3052 MMCSS - ok
13:24:20.0743 3052 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
13:24:20.0743 3052 Modem - ok
13:24:20.0749 3052 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
13:24:20.0749 3052 monitor - ok
13:24:20.0762 3052 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
13:24:20.0763 3052 mouclass - ok
13:24:20.0775 3052 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
13:24:20.0776 3052 mouhid - ok
13:24:20.0788 3052 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
13:24:20.0788 3052 mountmgr - ok
13:24:20.0823 3052 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
13:24:20.0824 3052 MpFilter - ok
13:24:20.0837 3052 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
13:24:20.0838 3052 mpio - ok
13:24:20.0854 3052 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
13:24:20.0854 3052 mpsdrv - ok
13:24:20.0882 3052 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
13:24:20.0900 3052 MpsSvc - ok
13:24:20.0920 3052 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
13:24:20.0921 3052 MRxDAV - ok
13:24:20.0938 3052 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
13:24:20.0939 3052 mrxsmb - ok
13:24:20.0947 3052 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:24:20.0950 3052 mrxsmb10 - ok
13:24:20.0966 3052 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:24:20.0966 3052 mrxsmb20 - ok
13:24:20.0972 3052 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
13:24:20.0972 3052 msahci - ok
13:24:20.0993 3052 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
13:24:20.0995 3052 msdsm - ok
13:24:21.0005 3052 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
13:24:21.0007 3052 MSDTC - ok
13:24:21.0011 3052 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
13:24:21.0011 3052 Msfs - ok
13:24:21.0019 3052 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
13:24:21.0020 3052 mshidkmdf - ok
13:24:21.0036 3052 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
13:24:21.0037 3052 msisadrv - ok
13:24:21.0060 3052 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
13:24:21.0061 3052 MSiSCSI - ok
13:24:21.0063 3052 msiserver - ok
13:24:21.0081 3052 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
13:24:21.0081 3052 MSKSSRV - ok
13:24:21.0119 3052 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
13:24:21.0119 3052 MsMpSvc - ok
13:24:21.0131 3052 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
13:24:21.0132 3052 MSPCLOCK - ok
13:24:21.0140 3052 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
13:24:21.0140 3052 MSPQM - ok
13:24:21.0164 3052 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
13:24:21.0167 3052 MsRPC - ok
13:24:21.0175 3052 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
13:24:21.0175 3052 mssmbios - ok
13:24:21.0177 3052 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
13:24:21.0178 3052 MSTEE - ok
13:24:21.0185 3052 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
13:24:21.0186 3052 MTConfig - ok
13:24:21.0206 3052 [ 2219A3D695405E7BA2186BA6B9EDE14A ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
13:24:21.0207 3052 MTsensor - ok
13:24:21.0227 3052 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
13:24:21.0228 3052 Mup - ok
13:24:21.0247 3052 [ 19CBAAB0B1F214AF834EDD9256F55977 ] mv91xx C:\Windows\system32\DRIVERS\mv91xx.sys
13:24:21.0248 3052 mv91xx - ok
13:24:21.0272 3052 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
13:24:21.0276 3052 napagent - ok
13:24:21.0294 3052 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
13:24:21.0296 3052 NativeWifiP - ok
13:24:21.0331 3052 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
13:24:21.0356 3052 NDIS - ok
13:24:21.0365 3052 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
13:24:21.0366 3052 NdisCap - ok
13:24:21.0374 3052 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
13:24:21.0375 3052 NdisTapi - ok
13:24:21.0391 3052 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
13:24:21.0391 3052 Ndisuio - ok
13:24:21.0407 3052 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
13:24:21.0408 3052 NdisWan - ok
13:24:21.0421 3052 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
13:24:21.0422 3052 NDProxy - ok
13:24:21.0432 3052 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
13:24:21.0432 3052 NetBIOS - ok
13:24:21.0451 3052 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
13:24:21.0453 3052 NetBT - ok
13:24:21.0455 3052 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
13:24:21.0456 3052 Netlogon - ok
13:24:21.0485 3052 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
13:24:21.0488 3052 Netman - ok
13:24:21.0500 3052 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
13:24:21.0504 3052 netprofm - ok
13:24:21.0530 3052 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:24:21.0531 3052 NetTcpPortSharing - ok
13:24:21.0539 3052 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
13:24:21.0539 3052 nfrd960 - ok
13:24:21.0570 3052 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
13:24:21.0571 3052 NisDrv - ok
13:24:21.0591 3052 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
13:24:21.0595 3052 NisSrv - ok
13:24:21.0613 3052 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
13:24:21.0616 3052 NlaSvc - ok
13:24:21.0628 3052 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
13:24:21.0629 3052 Npfs - ok
13:24:21.0640 3052 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
13:24:21.0641 3052 nsi - ok
13:24:21.0647 3052 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
13:24:21.0647 3052 nsiproxy - ok
13:24:21.0683 3052 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
13:24:21.0714 3052 Ntfs - ok
13:24:21.0722 3052 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
13:24:21.0722 3052 Null - ok
13:24:21.0737 3052 [ 8EBCB9165EE7F1571842F4D9D624A74C ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys
13:24:21.0738 3052 nusb3hub - ok
13:24:21.0764 3052 [ 5D54DBB12BBFE07CC283FD39F2CD6D63 ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys
13:24:21.0766 3052 nusb3xhc - ok
13:24:21.0788 3052 [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
13:24:21.0789 3052 NVHDA - ok
13:24:21.0985 3052 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
13:24:22.0163 3052 nvlddmkm - ok
13:24:22.0191 3052 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
13:24:22.0193 3052 nvraid - ok
13:24:22.0209 3052 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
13:24:22.0210 3052 nvstor - ok
13:24:22.0245 3052 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc C:\Windows\system32\nvvsvc.exe
13:24:22.0263 3052 nvsvc - ok
13:24:22.0313 3052 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
13:24:22.0337 3052 nvUpdatusService - ok
13:24:22.0344 3052 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
13:24:22.0345 3052 nv_agp - ok
13:24:22.0355 3052 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
13:24:22.0356 3052 ohci1394 - ok
13:24:22.0374 3052 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:24:22.0376 3052 ose - ok
13:24:22.0452 3052 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
13:24:22.0519 3052 osppsvc - ok
13:24:22.0542 3052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
13:24:22.0546 3052 p2pimsvc - ok
13:24:22.0568 3052 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
13:24:22.0572 3052 p2psvc - ok
13:24:22.0589 3052 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
13:24:22.0590 3052 Parport - ok
13:24:22.0600 3052 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
13:24:22.0600 3052 partmgr - ok
13:24:22.0610 3052 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
13:24:22.0612 3052 PcaSvc - ok
13:24:22.0632 3052 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
13:24:22.0633 3052 pci - ok
13:24:22.0641 3052 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
13:24:22.0642 3052 pciide - ok
13:24:22.0652 3052 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
13:24:22.0653 3052 pcmcia - ok
13:24:22.0659 3052 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
13:24:22.0660 3052 pcw - ok
13:24:22.0676 3052 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
13:24:22.0681 3052 PEAUTH - ok
13:24:22.0714 3052 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
13:24:22.0738 3052 PeerDistSvc - ok
13:24:22.0777 3052 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
13:24:22.0778 3052 PerfHost - ok
13:24:22.0809 3052 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
13:24:22.0834 3052 pla - ok
13:24:22.0858 3052 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
13:24:22.0862 3052 PlugPlay - ok
13:24:22.0873 3052 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
13:24:22.0874 3052 PNRPAutoReg - ok
13:24:22.0884 3052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
13:24:22.0886 3052 PNRPsvc - ok
13:24:22.0911 3052 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
13:24:22.0915 3052 PolicyAgent - ok
13:24:22.0936 3052 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
13:24:22.0938 3052 Power - ok
13:24:22.0962 3052 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
13:24:22.0962 3052 PptpMiniport - ok
13:24:22.0971 3052 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
13:24:22.0971 3052 Processor - ok
13:24:22.0997 3052 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
13:24:23.0000 3052 ProfSvc - ok
13:24:23.0008 3052 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
13:24:23.0009 3052 ProtectedStorage - ok
13:24:23.0032 3052 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
13:24:23.0033 3052 Psched - ok
13:24:23.0067 3052 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
13:24:23.0097 3052 ql2300 - ok
13:24:23.0114 3052 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
13:24:23.0115 3052 ql40xx - ok
13:24:23.0136 3052 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
13:24:23.0139 3052 QWAVE - ok
13:24:23.0147 3052 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
13:24:23.0148 3052 QWAVEdrv - ok
13:24:23.0157 3052 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
13:24:23.0158 3052 RasAcd - ok
13:24:23.0172 3052 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
13:24:23.0173 3052 RasAgileVpn - ok
13:24:23.0181 3052 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
13:24:23.0183 3052 RasAuto - ok
13:24:23.0196 3052 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
13:24:23.0196 3052 Rasl2tp - ok
13:24:23.0213 3052 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
13:24:23.0216 3052 RasMan - ok
13:24:23.0224 3052 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
13:24:23.0225 3052 RasPppoe - ok
13:24:23.0228 3052 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
13:24:23.0228 3052 RasSstp - ok
13:24:23.0239 3052 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
13:24:23.0242 3052 rdbss - ok
13:24:23.0250 3052 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
13:24:23.0250 3052 rdpbus - ok
13:24:23.0261 3052 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
13:24:23.0261 3052 RDPCDD - ok
13:24:23.0274 3052 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
13:24:23.0275 3052 RDPDR - ok
13:24:23.0292 3052 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
13:24:23.0292 3052 RDPENCDD - ok
13:24:23.0298 3052 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
13:24:23.0298 3052 RDPREFMP - ok
13:24:23.0314 3052 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
13:24:23.0314 3052 RdpVideoMiniport - ok
13:24:23.0326 3052 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
13:24:23.0329 3052 RDPWD - ok
13:24:23.0351 3052 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
13:24:23.0353 3052 rdyboost - ok
13:24:23.0369 3052 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
13:24:23.0370 3052 RemoteAccess - ok
13:24:23.0381 3052 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
13:24:23.0383 3052 RemoteRegistry - ok
13:24:23.0405 3052 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
13:24:23.0406 3052 RpcEptMapper - ok
13:24:23.0422 3052 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
13:24:23.0423 3052 RpcLocator - ok
13:24:23.0444 3052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
13:24:23.0447 3052 RpcSs - ok
13:24:23.0477 3052 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
13:24:23.0477 3052 rspndr - ok
13:24:23.0500 3052 [ ABCB5A38A0D85BDF69B7877E1AD1EED5 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
13:24:23.0501 3052 RTL8167 - ok
13:24:23.0518 3052 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
13:24:23.0518 3052 s3cap - ok
13:24:23.0524 3052 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
13:24:23.0525 3052 SamSs - ok
13:24:23.0539 3052 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
13:24:23.0539 3052 sbp2port - ok
13:24:23.0549 3052 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
13:24:23.0551 3052 SCardSvr - ok
13:24:23.0568 3052 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
13:24:23.0569 3052 scfilter - ok
13:24:23.0596 3052 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
13:24:23.0621 3052 Schedule - ok
13:24:23.0636 3052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
13:24:23.0637 3052 SCPolicySvc - ok
13:24:23.0653 3052 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
13:24:23.0655 3052 SDRSVC - ok
13:24:23.0668 3052 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
13:24:23.0668 3052 secdrv - ok
13:24:23.0687 3052 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
13:24:23.0688 3052 seclogon - ok
13:24:23.0707 3052 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
13:24:23.0709 3052 SENS - ok
13:24:23.0717 3052 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
13:24:23.0718 3052 SensrSvc - ok
13:24:23.0729 3052 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
13:24:23.0729 3052 Serenum - ok
13:24:23.0746 3052 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
13:24:23.0747 3052 Serial - ok
13:24:23.0754 3052 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
13:24:23.0755 3052 sermouse - ok
13:24:23.0777 3052 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
13:24:23.0778 3052 SessionEnv - ok
13:24:23.0789 3052 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
13:24:23.0789 3052 sffdisk - ok
13:24:23.0795 3052 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
13:24:23.0795 3052 sffp_mmc - ok
13:24:23.0803 3052 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
13:24:23.0803 3052 sffp_sd - ok
13:24:23.0809 3052 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
13:24:23.0809 3052 sfloppy - ok
13:24:23.0832 3052 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
13:24:23.0835 3052 SharedAccess - ok
13:24:23.0858 3052 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:24:23.0862 3052 ShellHWDetection - ok
13:24:23.0871 3052 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
13:24:23.0872 3052 SiSRaid2 - ok
13:24:23.0881 3052 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
13:24:23.0882 3052 SiSRaid4 - ok
13:24:23.0912 3052 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
13:24:23.0914 3052 SkypeUpdate - ok
13:24:23.0930 3052 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
13:24:23.0932 3052 Smb - ok
13:24:23.0957 3052 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
13:24:23.0958 3052 SNMPTRAP - ok
13:24:23.0999 3052 [ 5177D14A78E60FD61DCFC6B388E7E971 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
13:24:24.0001 3052 Sony PC Companion - ok
13:24:24.0017 3052 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
13:24:24.0017 3052 spldr - ok
13:24:24.0040 3052 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
13:24:24.0045 3052 Spooler - ok
13:24:24.0103 3052 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
13:24:24.0159 3052 sppsvc - ok
13:24:24.0164 3052 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
13:24:24.0166 3052 sppuinotify - ok
13:24:24.0176 3052 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
13:24:24.0180 3052 srv - ok
13:24:24.0196 3052 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
13:24:24.0200 3052 srv2 - ok
13:24:24.0222 3052 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
13:24:24.0223 3052 srvnet - ok
13:24:24.0249 3052 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
13:24:24.0251 3052 SSDPSRV - ok
13:24:24.0256 3052 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
13:24:24.0258 3052 SstpSvc - ok
13:24:24.0287 3052 [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
13:24:24.0290 3052 Stereo Service - ok
13:24:24.0310 3052 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
13:24:24.0310 3052 stexstor - ok
13:24:24.0325 3052 [ DECACB6921DED1A38642642685D77DAC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
13:24:24.0326 3052 StillCam - ok
13:24:24.0351 3052 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
13:24:24.0357 3052 stisvc - ok
13:24:24.0371 3052 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
13:24:24.0371 3052 storflt - ok
13:24:24.0380 3052 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
13:24:24.0381 3052 storvsc - ok
13:24:24.0397 3052 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
13:24:24.0397 3052 swenum - ok
13:24:24.0413 3052 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
13:24:24.0417 3052 swprv - ok
13:24:24.0419 3052 Synth3dVsc - ok
13:24:24.0458 3052 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
13:24:24.0488 3052 SysMain - ok
13:24:24.0501 3052 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
13:24:24.0503 3052 TabletInputService - ok
13:24:24.0520 3052 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
13:24:24.0523 3052 TapiSrv - ok
13:24:24.0549 3052 [ 4430E9B4C60AAB672D16E801BAD0555E ] tbhsd C:\Windows\system32\drivers\tbhsd.sys
13:24:24.0550 3052 tbhsd - ok
13:24:24.0568 3052 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
13:24:24.0569 3052 TBS - ok
13:24:24.0612 3052 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
13:24:24.0643 3052 Tcpip - ok
13:24:24.0672 3052 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
13:24:24.0679 3052 TCPIP6 - ok
13:24:24.0698 3052 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
13:24:24.0698 3052 tcpipreg - ok
13:24:24.0719 3052 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
13:24:24.0719 3052 TDPIPE - ok
13:24:24.0734 3052 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
13:24:24.0734 3052 TDTCP - ok
13:24:24.0757 3052 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
13:24:24.0758 3052 tdx - ok
13:24:24.0768 3052 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
13:24:24.0769 3052 TermDD - ok
13:24:24.0792 3052 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
13:24:24.0798 3052 TermService - ok
13:24:24.0819 3052 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
13:24:24.0820 3052 Themes - ok
13:24:24.0827 3052 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
13:24:24.0828 3052 THREADORDER - ok
13:24:24.0834 3052 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
13:24:24.0836 3052 TrkWks - ok
13:24:24.0866 3052 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:24:24.0868 3052 TrustedInstaller - ok
13:24:24.0888 3052 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
13:24:24.0888 3052 tssecsrv - ok
13:24:24.0900 3052 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
13:24:24.0901 3052 TsUsbFlt - ok
13:24:24.0903 3052 tsusbhub - ok
13:24:24.0930 3052 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
13:24:24.0930 3052 tunnel - ok
13:24:24.0941 3052 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
13:24:24.0941 3052 uagp35 - ok
13:24:24.0963 3052 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
13:24:24.0966 3052 udfs - ok
13:24:24.0974 3052 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
13:24:24.0975 3052 UI0Detect - ok
13:24:24.0980 3052 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
13:24:24.0981 3052 uliagpkx - ok
13:24:24.0999 3052 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
13:24:25.0000 3052 umbus - ok
13:24:25.0008 3052 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
13:24:25.0008 3052 UmPass - ok
13:24:25.0021 3052 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
13:24:25.0024 3052 UmRdpService - ok
13:24:25.0046 3052 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
13:24:25.0050 3052 upnphost - ok
13:24:25.0065 3052 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
13:24:25.0066 3052 USBAAPL64 - ok
13:24:25.0086 3052 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
13:24:25.0087 3052 usbaudio - ok
13:24:25.0105 3052 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
13:24:25.0105 3052 usbccgp - ok
13:24:25.0127 3052 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
13:24:25.0127 3052 usbcir - ok
13:24:25.0141 3052 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
13:24:25.0142 3052 usbehci - ok
13:24:25.0154 3052 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
13:24:25.0157 3052 usbhub - ok
13:24:25.0164 3052 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
13:24:25.0165 3052 usbohci - ok
13:24:25.0180 3052 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
13:24:25.0180 3052 usbprint - ok
13:24:25.0189 3052 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
13:24:25.0190 3052 USBSTOR - ok
13:24:25.0199 3052 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
13:24:25.0200 3052 usbuhci - ok
13:24:25.0211 3052 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
13:24:25.0212 3052 UxSms - ok
13:24:25.0217 3052 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
13:24:25.0218 3052 VaultSvc - ok
13:24:25.0227 3052 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
13:24:25.0227 3052 vdrvroot - ok
13:24:25.0256 3052 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
13:24:25.0260 3052 vds - ok
13:24:25.0283 3052 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
13:24:25.0283 3052 vga - ok
13:24:25.0290 3052 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
13:24:25.0290 3052 VgaSave - ok
13:24:25.0292 3052 VGPU - ok
13:24:25.0302 3052 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
13:24:25.0303 3052 vhdmp - ok
13:24:25.0320 3052 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
13:24:25.0321 3052 viaide - ok
13:24:25.0340 3052 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
13:24:25.0341 3052 vmbus - ok
13:24:25.0358 3052 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
13:24:25.0358 3052 VMBusHID - ok
13:24:25.0367 3052 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
13:24:25.0368 3052 volmgr - ok
13:24:25.0384 3052 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
13:24:25.0387 3052 volmgrx - ok
13:24:25.0397 3052 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
13:24:25.0400 3052 volsnap - ok
13:24:25.0412 3052 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
13:24:25.0413 3052 vsmraid - ok
13:24:25.0450 3052 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
13:24:25.0475 3052 VSS - ok
13:24:25.0483 3052 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
13:24:25.0483 3052 vwifibus - ok
13:24:25.0503 3052 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
13:24:25.0507 3052 W32Time - ok
13:24:25.0524 3052 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
13:24:25.0525 3052 WacomPen - ok
13:24:25.0539 3052 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
13:24:25.0540 3052 WANARP - ok
13:24:25.0546 3052 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
13:24:25.0546 3052 Wanarpv6 - ok
13:24:25.0576 3052 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
13:24:25.0607 3052 wbengine - ok
13:24:25.0618 3052 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
13:24:25.0620 3052 WbioSrvc - ok
13:24:25.0636 3052 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
13:24:25.0640 3052 wcncsvc - ok
13:24:25.0646 3052 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
13:24:25.0647 3052 WcsPlugInService - ok
13:24:25.0657 3052 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
13:24:25.0657 3052 Wd - ok
13:24:25.0679 3052 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
13:24:25.0697 3052 Wdf01000 - ok
13:24:25.0707 3052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
13:24:25.0708 3052 WdiServiceHost - ok
13:24:25.0711 3052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
13:24:25.0712 3052 WdiSystemHost - ok
13:24:25.0728 3052 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
13:24:25.0731 3052 WebClient - ok
13:24:25.0744 3052 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
13:24:25.0747 3052 Wecsvc - ok
13:24:25.0754 3052 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
13:24:25.0756 3052 wercplsupport - ok
13:24:25.0766 3052 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
13:24:25.0767 3052 WerSvc - ok
13:24:25.0777 3052 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
13:24:25.0778 3052 WfpLwf - ok
13:24:25.0787 3052 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
13:24:25.0788 3052 WIMMount - ok
13:24:25.0802 3052 WinDefend - ok
13:24:25.0805 3052 WinHttpAutoProxySvc - ok
13:24:25.0843 3052 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
13:24:25.0846 3052 Winmgmt - ok
13:24:25.0886 3052 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
13:24:25.0923 3052 WinRM - ok
13:24:25.0943 3052 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
13:24:25.0944 3052 WinUsb - ok
13:24:25.0969 3052 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
13:24:25.0987 3052 Wlansvc - ok
13:24:26.0006 3052 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
13:24:26.0006 3052 WmiAcpi - ok
13:24:26.0027 3052 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
13:24:26.0029 3052 wmiApSrv - ok
13:24:26.0041 3052 WMPNetworkSvc - ok
13:24:26.0048 3052 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
13:24:26.0049 3052 WPCSvc - ok
13:24:26.0068 3052 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
13:24:26.0069 3052 WPDBusEnum - ok
13:24:26.0087 3052 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
13:24:26.0088 3052 ws2ifsl - ok
13:24:26.0099 3052 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
13:24:26.0101 3052 wscsvc - ok
13:24:26.0103 3052 WSearch - ok
13:24:26.0149 3052 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
13:24:26.0186 3052 wuauserv - ok
13:24:26.0202 3052 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
13:24:26.0203 3052 WudfPf - ok
13:24:26.0221 3052 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
13:24:26.0222 3052 WUDFRd - ok
13:24:26.0242 3052 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
13:24:26.0243 3052 wudfsvc - ok
13:24:26.0264 3052 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
13:24:26.0267 3052 WwanSvc - ok
13:24:26.0282 3052 ================ Scan global ===============================
13:24:26.0295 3052 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
13:24:26.0312 3052 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
13:24:26.0318 3052 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll
13:24:26.0334 3052 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
13:24:26.0354 3052 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
13:24:26.0358 3052 [Global] - ok
13:24:26.0358 3052 ================ Scan MBR ==================================
13:24:26.0798 3052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk4\DR4
13:24:26.0884 3052 \Device\Harddisk4\DR4 - ok
13:24:26.0897 3052 [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk5\DR5
13:24:26.0959 3052 \Device\Harddisk5\DR5 - ok
13:24:26.0963 3052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:24:27.0111 3052 \Device\Harddisk0\DR0 - ok
13:24:27.0131 3052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
13:24:27.0408 3052 \Device\Harddisk1\DR1 - ok
13:24:27.0410 3052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk2\DR2
13:24:27.0450 3052 \Device\Harddisk2\DR2 - ok
13:24:27.0472 3052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk3\DR3
13:24:27.0716 3052 \Device\Harddisk3\DR3 - ok
13:24:27.0717 3052 ================ Scan VBR ==================================
13:24:27.0718 3052 [ 48274A6223D31E5B368A126A1E977972 ] \Device\Harddisk4\DR4\Partition1
13:24:27.0719 3052 \Device\Harddisk4\DR4\Partition1 - ok
13:24:27.0721 3052 [ C7D9167BCF6B73DB9EA36E7C06F650CB ] \Device\Harddisk4\DR4\Partition2
13:24:27.0721 3052 \Device\Harddisk4\DR4\Partition2 - ok
13:24:27.0746 3052 [ 2B1AE4F9F44C6806ADB13522D4065C80 ] \Device\Harddisk5\DR5\Partition1
13:24:27.0748 3052 \Device\Harddisk5\DR5\Partition1 - ok
13:24:27.0764 3052 [ 13545DC8DA4E58FB4B37A8AC4F81EBFA ] \Device\Harddisk5\DR5\Partition2
13:24:27.0765 3052 \Device\Harddisk5\DR5\Partition2 - ok
13:24:27.0784 3052 [ E13B19ED4E2ECEC82A86B08C1B085C31 ] \Device\Harddisk5\DR5\Partition3
13:24:27.0785 3052 \Device\Harddisk5\DR5\Partition3 - ok
13:24:27.0787 3052 [ 4BA15CA737C489548B9EB5DFEF0220BA ] \Device\Harddisk0\DR0\Partition1
13:24:27.0788 3052 \Device\Harddisk0\DR0\Partition1 - ok
13:24:27.0789 3052 [ E6FCE009D32510408DF6F61174F70479 ] \Device\Harddisk1\DR1\Partition1
13:24:27.0790 3052 \Device\Harddisk1\DR1\Partition1 - ok
13:24:27.0792 3052 [ E20311296A2577AF09D3A29633C316D0 ] \Device\Harddisk2\DR2\Partition1
13:24:27.0793 3052 \Device\Harddisk2\DR2\Partition1 - ok
13:24:27.0795 3052 [ FB29AD7C239CA5DB2A2285D4053AC8E1 ] \Device\Harddisk3\DR3\Partition1
13:24:27.0795 3052 \Device\Harddisk3\DR3\Partition1 - ok
13:24:27.0796 3052 ============================================================
13:24:27.0796 3052 Scan finished
13:24:27.0796 3052 ============================================================
13:24:27.0801 3004 Detected object count: 0
13:24:27.0801 3004 Actual detected object count: 0
DDS.txt DDS Logfile: DDS Logfile: Code:
ATTFilter DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.9.2
Run by Doppelleben at 13:28:13 on 2012-12-13
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.12279.10452 [GMT 1:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k NetworkService
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Users\Doppelleben\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Windows\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [Google Update] "C:\Users\Doppelleben\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
mRun: [NUSB3MON] "C:\Windows\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: An OneNote s&enden - C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{9D2E205E-45E4-49FC-85A3-9A34A09DED36} : DHCPNameServer = 192.168.2.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]
R0 mv91xx;mv91xx;C:\Windows\System32\drivers\mv91xx.sys [2010-8-6 293416]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2011-4-27 128456]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-2 382824]
R3 NisSrv;Microsoft-Netzwerkinspektion;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-9-12 368896]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2010-1-22 77824]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2010-1-22 180224]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-3-1 187392]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944]
S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2012-8-11 14448]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-11 19456]
S3 Sony PC Companion;Sony PC Companion;C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-4-28 155320]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-11 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
.
=============== Created Last 30 ================
.
2012-12-13 08:48:07 9125352 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E4C15B63-7892-4270-8B87-DEA953489615}\mpengine.dll
2012-12-12 15:08:31 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-12-11 21:44:29 9125352 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-11-29 10:12:14 972264 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{92625C7E-7213-469A-B062-36443C11F22B}\gapaengine.dll
2012-11-15 13:02:16 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys
2012-11-15 13:02:16 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
2012-11-15 13:02:16 2560 ----a-w- C:\Windows\System32\drivers\de-DE\wdf01000.sys.mui
2012-11-15 13:02:15 9728 ----a-w- C:\Windows\System32\Wdfres.dll
2012-11-15 13:02:15 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys
2012-11-15 12:57:11 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys
2012-11-15 12:57:11 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll
2012-11-15 12:57:11 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys
2012-11-15 12:57:11 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll
2012-11-15 12:57:10 744448 ----a-w- C:\Windows\System32\WUDFx.dll
2012-11-15 12:57:10 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll
2012-11-15 12:57:10 229888 ----a-w- C:\Windows\System32\WUDFHost.exe
2012-11-15 12:55:42 95744 ----a-w- C:\Windows\System32\synceng.dll
2012-11-15 12:55:42 78336 ----a-w- C:\Windows\SysWow64\synceng.dll
2012-11-14 17:43:52 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2012-11-14 17:43:52 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy
.
==================== Find3M ====================
.
2012-12-11 23:14:16 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-11 23:14:16 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-11-22 03:26:40 3149824 ----a-w- C:\Windows\System32\win32k.sys
2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-11-09 05:45:09 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-11-05 21:35:16 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-11-05 20:41:32 367616 ----a-w- C:\Windows\System32\atmfd.dll
2012-11-05 20:32:16 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-11-05 20:32:09 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-11-02 05:59:11 478208 ----a-w- C:\Windows\System32\dpnet.dll
2012-11-02 05:11:31 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll
2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll
2012-10-10 20:22:54 2428776 ----a-w- C:\Windows\SysWow64\nvapi.dll
2012-10-10 20:22:52 26331496 ----a-w- C:\Windows\System32\nvoglv64.dll
2012-10-10 20:22:52 1760104 ----a-w- C:\Windows\System32\nvdispco64.dll
2012-10-10 20:22:32 15309160 ----a-w- C:\Windows\SysWow64\nvd3dum.dll
2012-10-10 20:22:26 2747240 ----a-w- C:\Windows\System32\nvcuvid.dll
2012-10-10 20:22:24 19906920 ----a-w- C:\Windows\SysWow64\nvoglv32.dll
2012-10-10 20:22:18 13443944 ----a-w- C:\Windows\System32\drivers\nvlddmkm.sys
2012-10-10 20:22:14 17559912 ----a-w- C:\Windows\SysWow64\nvcompiler.dll
2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll
2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll
2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll
2012-10-04 17:46:16 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-10-04 17:46:15 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-10-04 17:46:15 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-10-04 17:45:55 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-10-04 17:43:28 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-10-04 17:41:16 424960 ----a-w- C:\Windows\System32\KernelBase.dll
2012-10-04 16:47:41 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-10-04 16:47:41 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-10-04 15:21:55 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-10-04 14:46:46 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-10-04 14:46:46 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-10-04 14:46:44 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-10-04 14:46:43 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-10-04 14:41:50 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll
2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll
2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll
2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll
2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll
2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll
2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll
2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll
2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll
2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys
2012-10-02 19:51:15 3536817 ----a-w- C:\Windows\System32\nvcoproc.bin
2012-10-02 19:51:11 3293544 ----a-w- C:\Windows\System32\nvsvc64.dll
2012-10-02 19:51:04 6200680 ----a-w- C:\Windows\System32\nvcpl.dll
2012-10-02 19:50:57 891240 ----a-w- C:\Windows\System32\nvvsvc.exe
2012-10-02 19:50:57 63336 ----a-w- C:\Windows\System32\nvshext.dll
2012-10-02 19:50:57 2557800 ----a-w- C:\Windows\System32\nvsvcr.dll
2012-10-02 19:50:57 118120 ----a-w- C:\Windows\System32\nvmctray.dll
2012-10-02 12:15:52 430952 ----a-w- C:\Windows\SysWow64\nvStreaming.exe
2012-09-24 21:16:33 95208 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
.
============= FINISH: 13:28:28,53 ===============
--- --- --- Attach.txt Code:
ATTFilter .
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Ultimate
Boot Device: \Device\HarddiskVolume6
Install Date: 29.02.2012 16:48:10
System Uptime: 13.12.2012 09:36:12 (4 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | P6T WS PRO
Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz | LGA1366 | 2668/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 140 GiB total, 67,406 GiB free.
D: is FIXED (NTFS) - 233 GiB total, 187,258 GiB free.
E: is FIXED (NTFS) - 69 GiB total, 61,19 GiB free.
F: is FIXED (NTFS) - 233 GiB total, 204,273 GiB free.
G: is FIXED (NTFS) - 699 GiB total, 24,246 GiB free.
H: is FIXED (NTFS) - 699 GiB total, 481,251 GiB free.
I: is FIXED (NTFS) - 288 GiB total, 133,488 GiB free.
K: is FIXED (NTFS) - 288 GiB total, 111,046 GiB free.
L: is FIXED (NTFS) - 20 GiB total, 5,266 GiB free.
O: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP136: 30.11.2012 12:04:16 - Sony PC Companion
RP137: 01.12.2012 00:38:52 - Uninstalled Sony Ericsson Drivers
RP138: 01.12.2012 00:39:06 - Installed Sony Ericsson Drivers
RP139: 01.12.2012 00:44:39 - Windows Update
RP140: 04.12.2012 08:20:18 - Windows Update
RP141: 07.12.2012 11:36:48 - Windows Update
RP142: 11.12.2012 22:44:08 - Windows Update
RP143: 12.12.2012 16:08:53 - Windows Update
.
==== Installed Programs ======================
.
7-Zip 9.20 (x64 edition)
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4) - Deutsch
Adobe Shockwave Player 11.6
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Avery Wizard 4.0
Bonjour
Citavi
Curse Client
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Free Video to MP3 Converter version 5.0.17.903
Google Chrome
Google Drive
Google Update Helper
HP Officejet Pro 8500 A910 - Grundlegende Software für das Gerät
HP Officejet Pro 8500 A910 Hilfe
HP Update
iTunes
Java 7 Update 9
Java Auto Updater
Java(TM) 6 Update 31
JavaFX 2.1.1
Juniper Networks Network Connect 7.1.0
Juniper Networks, Inc. Setup Client
Juniper Networks, Inc. Setup Client Activex Control
marvell 91xx driver
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft Antimalware Service DE-DE Language Pack
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010
Microsoft Office Excel MUI (German) 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (German) 2010
Microsoft Office Outlook MUI (German) 2010
Microsoft Office PowerPoint MUI (German) 2010
Microsoft Office Professional 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (German) 2010
Microsoft Office Proof (Italian) 2010
Microsoft Office Proofing (German) 2010
Microsoft Office Publisher MUI (German) 2010
Microsoft Office Shared 64-bit MUI (German) 2010
Microsoft Office Shared MUI (German) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (German) 2010
Microsoft Security Client
Microsoft Security Client DE-DE Language Pack
Microsoft Security Essentials
Microsoft Silverlight
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
NEC Electronics USB 3.0 Host Controller Driver
NVIDIA 3D Vision Controller-Treiber 301.42
NVIDIA 3D Vision Treiber 306.97
NVIDIA Grafiktreiber 306.97
NVIDIA HD-Audiotreiber 1.3.16.0
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX-Systemsoftware 9.12.0213
NVIDIA Stereoscopic 3D Driver
NVIDIA Systemsteuerung 306.97
NVIDIA Update 1.10.8
NVIDIA Update Components
Recuva
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
Skype Click to Call
Skype™ 6.0
Sony Ericsson Update Engine
Sony PC Companion 2.10.108
Spybot - Search & Destroy
swMSM
TeamSpeak 3 Client
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2010 (KB2494150)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
Windows Media Player Firefox Plugin
World of Warcraft
.
==== End Of File ===========================
|
|
13.12.2012, 14:09
| #23 | ||
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Okay dann geht es hier auch weiter: Schritt 1: Deinstalliere Spybot und JAva 6 U 31 Schritt 2: Temporäre Dateien löschen mit TFC
Schritt 3: Scan mit Combofix
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
13.12.2012, 15:20
| #24 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Vielen Dank noch einmal, ich habe die Schritte durchgeführt. Anbei das Ergebnis des Combofix-Durchlaufs: Code:
ATTFilter ComboFix 12-12-12.01 - Doppelleben 13.12.2012 15:01:08.1.8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.12279.10518 [GMT 1:00]
ausgeführt von:: c:\users\Doppelleben\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\_ctypes.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\_elementtree.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\_hashlib.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\_socket.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\_ssl.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\pyexpat.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\pysqlite2._sqlite.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\python26.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\pythoncom26.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\PyWinTypes26.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\select.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\unicodedata.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32api.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32com.shell.shell.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32crypt.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32event.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32file.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32inet.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32pdh.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32process.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32profile.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32security.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\win32ts.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\windows._cacheinvalidation.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._controls_.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._core_.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._gdi_.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._html2.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._misc_.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._windows_.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wx._wizard.pyd
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxbase293u_net_vc.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxbase293u_vc.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxmsw293u_adv_vc.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxmsw293u_core_vc.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxmsw293u_html_vc.dll
c:\users\DOPPEL~1\AppData\Local\Temp\_MEI24762\wxmsw293u_webview_vc.dll
c:\users\Doppelleben\AppData\Local\assembly\tmp
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\_ctypes.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\_elementtree.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\_hashlib.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\_socket.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\_ssl.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\pyexpat.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\pysqlite2._sqlite.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\python26.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\pythoncom26.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\PyWinTypes26.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\select.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\unicodedata.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32api.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32com.shell.shell.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32crypt.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32event.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32file.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32inet.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32pdh.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32process.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32profile.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32security.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\win32ts.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\windows._cacheinvalidation.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._controls_.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._core_.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._gdi_.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._html2.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._misc_.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._windows_.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wx._wizard.pyd
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxbase293u_net_vc.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxbase293u_vc.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxmsw293u_adv_vc.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxmsw293u_core_vc.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxmsw293u_html_vc.dll
c:\users\Doppelleben\AppData\Local\Temp\_MEI24762\wxmsw293u_webview_vc.dll
c:\users\Doppelleben\Documents\~WRL0005.tmp
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-11-13 bis 2012-12-13 ))))))))))))))))))))))))))))))
.
.
2012-12-13 13:48 . 2012-12-13 13:48 -------- d-----w- c:\windows\system32\appmgmt
2012-12-13 08:48 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E4C15B63-7892-4270-8B87-DEA953489615}\mpengine.dll
2012-12-12 15:08 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-11 21:44 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-11-29 10:12 . 2012-11-29 10:04 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{92625C7E-7213-469A-B062-36443C11F22B}\gapaengine.dll
2012-11-21 21:48 . 2012-11-21 21:48 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-15 13:02 . 2012-07-26 07:46 2560 ----a-w- c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2012-11-15 13:02 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-15 13:02 . 2012-07-26 04:47 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui
2012-11-15 13:02 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-15 13:02 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-15 12:57 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-15 12:57 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-15 12:57 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-15 12:57 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-15 12:57 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-15 12:57 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-15 12:57 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-15 12:55 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-11-15 12:55 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll
2012-11-14 17:43 . 2012-12-13 13:47 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2012-11-14 17:43 . 2012-12-13 13:47 -------- d-----w- c:\programdata\Spybot - Search & Destroy
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-12 15:13 . 2012-02-29 16:21 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-11 23:14 . 2012-04-26 05:03 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-11 23:14 . 2012-02-29 15:55 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-22 11:23 . 2012-10-22 11:23 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin
2012-10-16 08:38 . 2012-11-27 22:03 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-27 22:03 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-27 22:03 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-10 20:23 . 2012-10-10 20:23 247144 ----a-w- c:\windows\system32\nvinitx.dll
2012-10-10 20:23 . 2012-10-10 20:23 1867112 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2012-10-10 20:23 . 2012-10-10 20:23 18252136 ----a-w- c:\windows\system32\nvd3dumx.dll
2012-10-10 20:23 . 2012-10-10 20:23 1482600 ----a-w- c:\windows\system32\nvdispgenco64.dll
2012-10-10 20:23 . 2012-10-10 20:23 6127464 ----a-w- c:\windows\SysWow64\nvopencl.dll
2012-10-10 20:23 . 2012-10-10 20:23 2574696 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2012-10-10 20:23 . 2012-10-10 20:23 25256296 ----a-w- c:\windows\system32\nvcompiler.dll
2012-10-10 20:23 . 2012-10-10 20:23 831848 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2012-10-10 20:23 . 2012-10-10 20:23 202600 ----a-w- c:\windows\SysWow64\nvinit.dll
2012-10-10 20:23 . 2012-10-10 20:23 7414632 ----a-w- c:\windows\system32\nvopencl.dll
2012-10-10 20:23 . 2012-02-29 16:29 2731880 ----a-w- c:\windows\system32\nvapi64.dll
2012-10-10 20:23 . 2012-02-29 16:29 973672 ----a-w- c:\windows\system32\nvumdshimx.dll
2012-10-10 20:23 . 2012-02-29 16:29 14922600 ----a-w- c:\windows\system32\nvwgf2umx.dll
2012-10-10 20:23 . 2012-10-10 20:23 9146728 ----a-w- c:\windows\system32\nvcuda.dll
2012-10-10 20:23 . 2012-10-10 20:23 7697768 ----a-w- c:\windows\SysWow64\nvcuda.dll
2012-10-10 20:23 . 2012-10-10 20:23 2218344 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-10-10 20:23 . 2012-10-10 20:23 12501352 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2012-10-10 20:22 . 2012-10-10 20:22 2428776 ----a-w- c:\windows\SysWow64\nvapi.dll
2012-10-10 20:22 . 2012-10-10 20:22 26331496 ----a-w- c:\windows\system32\nvoglv64.dll
2012-10-10 20:22 . 2012-02-29 16:29 1760104 ----a-w- c:\windows\system32\nvdispco64.dll
2012-10-10 20:22 . 2012-02-29 16:29 15309160 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2012-10-10 20:22 . 2012-10-10 20:22 2747240 ----a-w- c:\windows\system32\nvcuvid.dll
2012-10-10 20:22 . 2012-10-10 20:22 19906920 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2012-10-10 20:22 . 2012-10-10 20:22 13443944 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-10-10 20:22 . 2012-10-10 20:22 17559912 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2012-10-04 16:40 . 2012-12-12 15:08 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-04 04:25 . 2012-06-13 05:17 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-10-02 19:51 . 2012-02-29 16:30 3536817 ----a-w- c:\windows\system32\nvcoproc.bin
2012-10-02 19:51 . 2012-02-29 16:30 3293544 ----a-w- c:\windows\system32\nvsvc64.dll
2012-10-02 19:51 . 2012-02-29 16:30 6200680 ----a-w- c:\windows\system32\nvcpl.dll
2012-10-02 19:50 . 2012-02-29 16:30 891240 ----a-w- c:\windows\system32\nvvsvc.exe
2012-10-02 19:50 . 2012-02-29 16:30 63336 ----a-w- c:\windows\system32\nvshext.dll
2012-10-02 19:50 . 2012-02-29 16:30 2557800 ----a-w- c:\windows\system32\nvsvcr.dll
2012-10-02 19:50 . 2012-02-29 16:30 118120 ----a-w- c:\windows\system32\nvmctray.dll
2012-10-02 12:15 . 2012-10-02 12:15 430952 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2012-09-24 21:16 . 2012-10-21 07:08 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2012-11-08 16070136]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\windows\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-01-22 106496]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-08-11 14448]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys [2010-08-06 293416]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-12-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-26 23:14]
.
2012-12-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-26 09:47]
.
2012-12-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-26 09:47]
.
2012-12-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4197785108-4072705134-1598201038-1001Core.job
- c:\users\Doppelleben\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-29 06:15]
.
2012-12-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4197785108-4072705134-1598201038-1001UA.job
- c:\users\Doppelleben\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-29 06:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-11-08 15:58 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-11-08 15:58 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-11-08 15:58 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-11-08 15:58 755224 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 1289704]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: An OneNote s&enden - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Juniper Networks\Common Files\dsNcService.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-12-13 15:09:59 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-12-13 14:09
.
Vor Suchlauf: 7 Verzeichnis(se), 79.397.568.512 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 79.008.350.208 Bytes frei
.
- - End Of File - - 7335F109B8FFAC085CFA5E1FA6D8933F
|
|
13.12.2012, 15:27
| #25 |
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Okay da scheinen wir den Bösewicht erwischt zu haben. Zur Sicherheit: Scan mit MBAR Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
13.12.2012, 15:40
| #26 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Anbei das Ergebnis des Scans mit Malwarebytes Anti-Rootkit: Malwarebytes Anti-Rootkit 1.01.0.1011 www.malwarebytes.org Database version: v2012.12.13.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Doppelleben :: DOPPELLEBEN-PC [administrator] 13.12.2012 15:35:51 mbar-log-2012-12-13 (15-35-51).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 30056 Time elapsed: 4 minute(s), 41 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) |
|
13.12.2012, 15:50
| #27 | |
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Gut!  Soweit ich das sehe haben wir damit alles Schädliche entfernt. Um sicher sein zu können müssen jetzt noch ein paar Kontrollen machen. Da diese sehr lange dauern können bitte ich dich mir erst wieder zu schreiben, wenn du auch wirklich alles erledigt hast oder Probleme auftreten sollten. Schritt 1: Quick-Scan mit Malwarebytes Schritt 2: ESET Online Scanner Zitat:
Schritt 3: Scan mit SecurityCheck Downloade Dir bitte SecurityCheck: LINK1 LINK2
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
15.12.2012, 16:15
| #28 |
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
15.12.2012, 18:41
| #29 |
| | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Entschuldige, das lange ausbleiben einer Antwort. Die Symptome sind in der Tat noch nicht weg. Ab und an verlangt Google noch immer die Captcha-Eingabe. Schritt 1 Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Datenbank Version: v2012.12.14.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Doppelleben :: DOPPELLEBEN-PC [Administrator] 14.12.2012 10:02:57 mbam-log-2012-12-14 (10-02-57).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|L:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 437269 Laufzeit: 39 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Schritt 2 ESET-Online hat nichts gefunden. Schritt 3 Und der Durchlauf von Security Checkup ergab Folgendes: 11 Results of screen317's Security Check version 0.99.56 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 9 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.65.1.1000 JavaFX 2.1.1 Java 7 Update 9 Adobe Flash Player 11.5.502.135 Adobe Reader 10.1.4 Adobe Reader out of Date! ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbam.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Vielen Dank weiterhin für deine Mühen! |
|
15.12.2012, 18:53
| #30 | ||||
| /// TB-Ausbilder | Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig Prima! Damit wären wir fertig. Wir räumen jetzt noch ein wenig auf und dann habe ich am Ende etwas Lesestoff für dich. Schritt 1: Tools deinstallieren
Schritt 2: ESET deinstallieren (Optional)
Schritt 3: Update: Adobe Reader
Probiere einen alternativen Viewer für pdf-Dokumente aus. Diese sind meist schlanker, schneller und schleusen sehr viel seltener Schädlinge ein. Mein Vorschlag:
Abschließend noch Tipps zu folgenden Themen:
Damit wünsche ich dir noch viel Spaß beim Surfen im Internet ... und vielleicht möchtest du ja das Trojaner-Board unterstützen? Eine Bitte: Gib mir eine kurze Rückmeldung, wenn alles erledigt ist und keine Fragen mehr vorhanden sind, damit ich diesen Thread aus meinen Abos löschen kann.
__________________ Digitale Freibeuter gegen Malware! Keine Hilfe per PM! |
|
| Themen zu Google-Meldung Datenverkehr, zum fortfahren Captcha-Eingabe nötig |
| antivir, aufforderung, captcha, compu, computer, computernetzwerk, datenverkehr, einzugeben, erkannt, fahren, malware, nutze, nötig, systeme, ungewöhnlichen datenverkehr, verkehr |
Button.
und dann 
+ R Taste und kopiere folgenden Text in das Ausführen-Fenster und klicke OK.
Linear-Darstellung
