| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Seiten werden umgeleitet..googleWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
17.12.2012, 17:44
| #1 |
| |  Seiten werden umgeleitet..google Hallo allerseits. Ich habe folgendes Problem: wenn ich mit google nach z.B. kinox.to google und danach auf den Link klicke klicke werde ich umgeleitet auf Firstload. Wenn ich das gleiche mit nem Browsergame mache, werde ich weitergeleitet auf bigpoint und bei diversen anderen Seiten leitet er mich auch wo anderst hin. Das ist aber nicht bei allem so wenn ich mit google suche. Allerdings wenn ich direkt auf z.B. kinox gehe, ohne google, werde ich auch wieder auf Firstload umgeleitet. Also zuerst auf kinox und dann sofort auf Firstload. Oben in der Leiste sehe ich dann immer kurz ad-googlelinks.com erscheinen und dann bin ich auf Firstload, bigpoint oder was auch immer. Tut mir leid wenn ich es ein bisschen umständlich geschrieben habe  achja ich kenn mich da jetzt nicht so großartig aus mit den computer Sachen. Danke schonmal für die Hilfe! |
|
17.12.2012, 17:50
| #2 |
| /// Malware-holic   | Seiten werden umgeleitet..google Hi
__________________finger weg von solch illegalen Angeboten wie kinox.to 1. Verteilen die jede Menge Malware. 2. wie gesagt, illegal, und solche Angebote können dann mal sehr teuer werden, sollte man die Nutzer abmanen. So, schaun wir mal: Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
__________________ |
|
17.12.2012, 18:19
| #3 |
| | Seiten werden umgeleitet..google Also ich weiß auch nicht, aber irgendwie scheint des viel mehr zu sein, als da bei den custom scan Ding eingegeben wurde..naja hier die 2 Logs:
__________________ |
|
17.12.2012, 18:30
| #4 |
| /// Malware-holic | Seiten werden umgeleitet..google Hi erst mal bitte Spybot deinstalieren, ist nicht sonderlich nützlich. 2. download tdss killer: http://www.trojaner-board.de/82358-t...entfernen.html Klicke auf Change parameters • Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system • Klick auf OK und anschließend auf Start scan - bei funden erst mal immer skip wählen, log posten
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
17.12.2012, 18:38
| #5 |
| | Seiten werden umgeleitet..google 18:32:42.0917 3524 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35 18:32:43.0035 3524 ============================================================ 18:32:43.0035 3524 Current date / time: 2012/12/17 18:32:43.0035 18:32:43.0035 3524 SystemInfo: 18:32:43.0035 3524 18:32:43.0035 3524 OS Version: 6.0.6002 ServicePack: 2.0 18:32:43.0035 3524 Product type: Workstation 18:32:43.0035 3524 ComputerName: WOLF-PC 18:32:43.0035 3524 UserName: Wolf 18:32:43.0035 3524 Windows directory: C:\Windows 18:32:43.0035 3524 System windows directory: C:\Windows 18:32:43.0035 3524 Running under WOW64 18:32:43.0035 3524 Processor architecture: Intel x64 18:32:43.0035 3524 Number of processors: 2 18:32:43.0035 3524 Page size: 0x1000 18:32:43.0035 3524 Boot type: Normal boot 18:32:43.0035 3524 ============================================================ 18:32:43.0948 3524 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 18:32:43.0951 3524 ============================================================ 18:32:43.0951 3524 \Device\Harddisk0\DR0: 18:32:43.0951 3524 MBR partitions: 18:32:43.0951 3524 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xC7FF7F8 18:32:43.0951 3524 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC800800, BlocksNum 0x2DB84FF0 18:32:43.0951 3524 ============================================================ 18:32:43.0974 3524 C: <-> \Device\Harddisk0\DR0\Partition1 18:32:44.0032 3524 D: <-> \Device\Harddisk0\DR0\Partition2 18:32:44.0032 3524 ============================================================ 18:32:44.0032 3524 Initialize success 18:32:44.0032 3524 ============================================================ 18:33:47.0448 4656 ============================================================ 18:33:47.0448 4656 Scan started 18:33:47.0448 4656 Mode: Manual; SigCheck; TDLFS; 18:33:47.0448 4656 ============================================================ 18:33:49.0267 4656 ================ Scan system memory ======================== 18:33:49.0267 4656 System memory - ok 18:33:49.0267 4656 ================ Scan services ============================= 18:33:49.0451 4656 [ A3769020F7E8A70FD3E824C050F33306 ] acedrv11 C:\Windows\system32\drivers\acedrv11.sys 18:33:49.0529 4656 acedrv11 - ok 18:33:49.0554 4656 [ 1965AAFFAB07E3FB03C77F81BEBA3547 ] ACPI C:\Windows\system32\drivers\acpi.sys 18:33:49.0570 4656 ACPI - ok 18:33:49.0608 4656 [ 4A30FA79F8253134D398251DB614E3C9 ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys 18:33:49.0665 4656 ADIHdAudAddService - ok 18:33:49.0865 4656 [ 047BD1EB681453A7FE492A71802AC9F3 ] AdobeActiveFileMonitor10.0 D:\Program Files (x86)\Elements 10 Organizer\PhotoshopElementsFileAgent.exe 18:33:49.0875 4656 AdobeActiveFileMonitor10.0 - ok 18:33:49.0963 4656 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 18:33:49.0972 4656 AdobeARMservice - ok 18:33:50.0015 4656 [ F14215E37CF124104575073F782111D2 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 18:33:50.0039 4656 adp94xx - ok 18:33:50.0052 4656 [ 7D05A75E3066861A6610F7EE04FF085C ] adpahci C:\Windows\system32\drivers\adpahci.sys 18:33:50.0073 4656 adpahci - ok 18:33:50.0095 4656 [ 820A201FE08A0C345B3BEDBC30E1A77C ] adpu160m C:\Windows\system32\drivers\adpu160m.sys 18:33:50.0107 4656 adpu160m - ok 18:33:50.0121 4656 [ 9B4AB6854559DC168FBB4C24FC52E794 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 18:33:50.0133 4656 adpu320 - ok 18:33:50.0153 4656 [ 28C0B0A6CB61BDD1FEF877D4D0F69FBF ] AEADIFilters C:\Windows\system32\AEADISRV.EXE 18:33:50.0169 4656 AEADIFilters - ok 18:33:50.0193 4656 [ 0F421175574BFE0BF2F4D8E910A253BB ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 18:33:50.0245 4656 AeLookupSvc - ok 18:33:50.0272 4656 [ C4F6CE6087760AD70960C9EB130E7943 ] AFD C:\Windows\system32\drivers\afd.sys 18:33:50.0321 4656 AFD - ok 18:33:50.0337 4656 [ F6F6793B7F17B550ECFDBD3B229173F7 ] agp440 C:\Windows\system32\drivers\agp440.sys 18:33:50.0347 4656 agp440 - ok 18:33:50.0371 4656 [ 222CB641B4B8A1D1126F8033F9FD6A00 ] aic78xx C:\Windows\system32\drivers\djsvs.sys 18:33:50.0382 4656 aic78xx - ok 18:33:50.0406 4656 [ 5922F4F59B7868F3D74BBBBEB7B825A3 ] ALG C:\Windows\System32\alg.exe 18:33:50.0517 4656 ALG - ok 18:33:50.0534 4656 [ 157D0898D4B73F075CE9FA26B482DF98 ] aliide C:\Windows\system32\drivers\aliide.sys 18:33:50.0543 4656 aliide - ok 18:33:50.0577 4656 [ B5E2434FC851698C1F119CF1C3935A50 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 18:33:50.0628 4656 AMD External Events Utility - ok 18:33:50.0653 4656 [ 970FA5059E61E30D25307B99903E991E ] amdide C:\Windows\system32\drivers\amdide.sys 18:33:50.0662 4656 amdide - ok 18:33:50.0686 4656 [ CDC3632A3A5EA4DBB83E46076A3165A1 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 18:33:50.0736 4656 AmdK8 - ok 18:33:52.0061 4656 [ 9E3B4946F7E1BCA0B763E19D81EDBF2C ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 18:33:52.0391 4656 amdkmdag - ok 18:33:52.0420 4656 [ B9E1C7B7F1865F99B16FF2E1BB94EDB6 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 18:33:52.0444 4656 amdkmdap - ok 18:33:52.0522 4656 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 18:33:52.0550 4656 AntiVirSchedulerService - ok 18:33:52.0582 4656 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 18:33:52.0592 4656 AntiVirService - ok 18:33:52.0619 4656 [ 9C37B3FD5615477CB9A0CD116CF43F5C ] Appinfo C:\Windows\System32\appinfo.dll 18:33:52.0638 4656 Appinfo - ok 18:33:52.0659 4656 [ BA8417D4765F3988FF921F30F630E303 ] arc C:\Windows\system32\drivers\arc.sys 18:33:52.0670 4656 arc - ok 18:33:52.0683 4656 [ 9D41C435619733B34CC16A511E644B11 ] arcsas C:\Windows\system32\drivers\arcsas.sys 18:33:52.0694 4656 arcsas - ok 18:33:52.0754 4656 aspnet_state - ok 18:33:52.0783 4656 [ 22D13FF3DAFEC2A80634752B1EAA2DE6 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 18:33:52.0820 4656 AsyncMac - ok 18:33:52.0846 4656 [ E68D9B3A3905619732F7FE039466A623 ] atapi C:\Windows\system32\drivers\atapi.sys 18:33:52.0856 4656 atapi - ok 18:33:52.0879 4656 [ A9FA2A0FBA4295FB5A70FDF15F83339C ] ati2mpad C:\Windows\system32\DRIVERS\ati2mpad.sys 18:33:52.0999 4656 ati2mpad - ok 18:33:53.0036 4656 [ 1A872AB76D00F52643BB0F81792BBF3B ] AtiHDAudioService C:\Windows\system32\drivers\AtihdLH6.sys 18:33:53.0045 4656 AtiHDAudioService - ok 18:33:53.0538 4656 [ 9E3B4946F7E1BCA0B763E19D81EDBF2C ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys 18:33:53.0738 4656 atikmdag - ok 18:33:53.0778 4656 [ FC0E8778C000291CAF60EB88C011E931 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys 18:33:53.0791 4656 atksgt - ok 18:33:53.0831 4656 [ 79318C744693EC983D20E9337A2F8196 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 18:33:53.0895 4656 AudioEndpointBuilder - ok 18:33:53.0901 4656 [ 79318C744693EC983D20E9337A2F8196 ] AudioSrv C:\Windows\System32\Audiosrv.dll 18:33:53.0930 4656 AudioSrv - ok 18:33:53.0966 4656 [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 18:33:53.0976 4656 avgntflt - ok 18:33:53.0998 4656 [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 18:33:54.0009 4656 avipbb - ok 18:33:54.0033 4656 [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 18:33:54.0041 4656 avkmgr - ok 18:33:54.0134 4656 [ F48FEB7DA35821DA15E0B006DCB9A169 ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe 18:33:54.0147 4656 BBSvc - ok 18:33:54.0261 4656 [ 8E16F7A85441986FD2B9CE6C879524E4 ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe 18:33:54.0301 4656 BBUpdate - ok 18:33:54.0468 4656 [ FFB96C2589FFA60473EAD78B39FBDE29 ] BFE C:\Windows\System32\bfe.dll 18:33:54.0522 4656 BFE - ok 18:33:54.0554 4656 [ 6D316F4859634071CC25C4FD4589AD2C ] BITS C:\Windows\System32\qmgr.dll 18:33:54.0620 4656 BITS - ok 18:33:54.0638 4656 [ 79FEEB40056683F8F61398D81DDA65D2 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 18:33:54.0672 4656 blbdrive - ok 18:33:54.0706 4656 [ 51C2B15119FF0F15C00B5AE7EC9B08EA ] Boonty Games C:\Program Files (x86)\Common Files\BOONTY Shared\Service\Boonty.exe 18:33:54.0719 4656 Boonty Games ( UnsignedFile.Multi.Generic ) - warning 18:33:54.0719 4656 Boonty Games - detected UnsignedFile.Multi.Generic (1) 18:33:54.0750 4656 [ 2348447A80920B2493A9B582A23E81E1 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 18:33:54.0777 4656 bowser - ok 18:33:54.0797 4656 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys 18:33:54.0828 4656 BrFiltLo - ok 18:33:54.0844 4656 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys 18:33:54.0876 4656 BrFiltUp - ok 18:33:54.0892 4656 [ A1B39DE453433B115B4EA69EE0343816 ] Browser C:\Windows\System32\browser.dll 18:33:54.0927 4656 Browser - ok 18:33:54.0944 4656 [ F0F0BA4D815BE446AA6A4583CA3BCA9B ] Brserid C:\Windows\system32\drivers\brserid.sys 18:33:54.0980 4656 Brserid - ok 18:33:54.0989 4656 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys 18:33:55.0043 4656 BrSerWdm - ok 18:33:55.0059 4656 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys 18:33:55.0107 4656 BrUsbMdm - ok 18:33:55.0127 4656 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys 18:33:55.0188 4656 BrUsbSer - ok 18:33:55.0205 4656 [ E0777B34E05F8A82A21856EFC900C29F ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 18:33:55.0255 4656 BTHMODEM - ok 18:33:55.0260 4656 [ B4D787DB8D30793A4D4DF9FEED18F136 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 18:33:55.0295 4656 cdfs - ok 18:33:55.0317 4656 [ C025AA69BE3D0D25C7A2E746EF6F94FC ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 18:33:55.0337 4656 cdrom - ok 18:33:55.0367 4656 [ 5A268127633C7EE2A7FB87F39D748D56 ] CertPropSvc C:\Windows\System32\certprop.dll 18:33:55.0386 4656 CertPropSvc - ok 18:33:55.0410 4656 [ 02EA568D498BBDD4BA55BF3FCE34D456 ] circlass C:\Windows\system32\drivers\circlass.sys 18:33:55.0436 4656 circlass - ok 18:33:55.0466 4656 [ 3DCA9A18B204939CFB24BEA53E31EB48 ] CLFS C:\Windows\system32\CLFS.sys 18:33:55.0489 4656 CLFS - ok 18:33:55.0519 4656 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 18:33:55.0528 4656 clr_optimization_v2.0.50727_32 - ok 18:33:55.0575 4656 [ CE07A466201096F021CD09D631B21540 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 18:33:55.0584 4656 clr_optimization_v2.0.50727_64 - ok 18:33:55.0662 4656 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 18:33:55.0673 4656 clr_optimization_v4.0.30319_32 - ok 18:33:55.0720 4656 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 18:33:55.0731 4656 clr_optimization_v4.0.30319_64 - ok 18:33:55.0755 4656 [ E5D5499A1C50A54B5161296B6AFE6192 ] cmdide C:\Windows\system32\drivers\cmdide.sys 18:33:55.0764 4656 cmdide - ok 18:33:55.0782 4656 [ 7FB8AD01DB0EABE60C8A861531A8F431 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 18:33:55.0791 4656 Compbatt - ok 18:33:55.0794 4656 COMSysApp - ok 18:33:55.0808 4656 [ A8585B6412253803CE8EFCBD6D6DC15C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 18:33:55.0818 4656 crcdisk - ok 18:33:55.0857 4656 [ CA78B312C44E4D52E842C2C8BD48E452 ] CryptSvc C:\Windows\system32\cryptsvc.dll 18:33:55.0882 4656 CryptSvc - ok 18:33:55.0916 4656 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] DcomLaunch C:\Windows\system32\rpcss.dll 18:33:55.0971 4656 DcomLaunch - ok 18:33:55.0997 4656 [ 8B722BA35205C71E7951CDC4CDBADE19 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 18:33:56.0028 4656 DfsC - ok 18:33:56.0091 4656 [ C647F468F7DE343DF8C143655C5557D4 ] DFSR C:\Windows\system32\DFSR.exe 18:33:56.0184 4656 DFSR - ok 18:33:56.0214 4656 [ 3ED0321127CE70ACDAABBF77E157C2A7 ] Dhcp C:\Windows\System32\dhcpcsvc.dll 18:33:56.0244 4656 Dhcp - ok 18:33:56.0260 4656 [ B0107E40ECDB5FA692EBF832F295D905 ] disk C:\Windows\system32\drivers\disk.sys 18:33:56.0271 4656 disk - ok 18:33:56.0295 4656 [ 06230F1B721494A6DF8D47FD395BB1B0 ] Dnscache C:\Windows\System32\dnsrslvr.dll 18:33:56.0319 4656 Dnscache - ok 18:33:56.0345 4656 [ 1A7156DD1E850E9914E5E991E3225B94 ] dot3svc C:\Windows\System32\dot3svc.dll 18:33:56.0373 4656 dot3svc - ok 18:33:56.0390 4656 [ 1583B39790DB3EAEC7EDB0CB0140C708 ] DPS C:\Windows\system32\dps.dll 18:33:56.0429 4656 DPS - ok 18:33:56.0460 4656 [ F1A78A98CFC2EE02144C6BEC945447E6 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 18:33:56.0486 4656 drmkaud - ok 18:33:56.0519 4656 [ B8E554E502D5123BC111F99D6A2181B4 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 18:33:56.0571 4656 DXGKrnl - ok 18:33:56.0603 4656 [ 264CEE7B031A9D6C827F3D0CB031F2FE ] E1G60 C:\Windows\system32\DRIVERS\E1G6032E.sys 18:33:56.0630 4656 E1G60 - ok 18:33:56.0643 4656 EagleX64 - ok 18:33:56.0666 4656 [ C2303883FD9BE49DC36A6400643002EA ] EapHost C:\Windows\System32\eapsvc.dll 18:33:56.0698 4656 EapHost - ok 18:33:56.0722 4656 [ 5F94962BE5A62DB6E447FF6470C4F48A ] Ecache C:\Windows\system32\drivers\ecache.sys 18:33:56.0735 4656 Ecache - ok 18:33:56.0778 4656 [ 14CE384D2E27B64C256BDA4DC39C312D ] ehRecvr C:\Windows\ehome\ehRecvr.exe 18:33:56.0807 4656 ehRecvr - ok 18:33:56.0821 4656 [ B93159C1313D66FDFBBE876F5189CD52 ] ehSched C:\Windows\ehome\ehsched.exe 18:33:56.0831 4656 ehSched - ok 18:33:56.0855 4656 [ F5EE2527D74449868E3C3227A59BCD28 ] ehstart C:\Windows\ehome\ehstart.dll 18:33:56.0872 4656 ehstart - ok 18:33:56.0901 4656 [ C4636D6E10469404AB5308D9FD45ED07 ] elxstor C:\Windows\system32\drivers\elxstor.sys 18:33:56.0926 4656 elxstor - ok 18:33:56.0941 4656 [ A9B18B63A4FD6BAAB83326706D857FAB ] EMDMgmt C:\Windows\system32\emdmgmt.dll 18:33:56.0990 4656 EMDMgmt - ok 18:33:57.0024 4656 [ BC3A58E938BB277E46BF4B3003B01ABD ] ErrDev C:\Windows\system32\drivers\errdev.sys 18:33:57.0057 4656 ErrDev - ok 18:33:57.0089 4656 [ E12F22B73F153DECE721CD45EC05B4AF ] EventSystem C:\Windows\system32\es.dll 18:33:57.0145 4656 EventSystem - ok 18:33:57.0171 4656 [ 486844F47B6636044A42454614ED4523 ] exfat C:\Windows\system32\drivers\exfat.sys 18:33:57.0218 4656 exfat - ok 18:33:57.0242 4656 [ 1A4BEE34277784619DDAF0422C0C6E23 ] fastfat C:\Windows\system32\drivers\fastfat.sys 18:33:57.0273 4656 fastfat - ok 18:33:57.0283 4656 [ 81B79B6DF71FA1D2C6D688D830616E39 ] fdc C:\Windows\system32\DRIVERS\fdc.sys 18:33:57.0309 4656 fdc - ok 18:33:57.0328 4656 [ BB9267ACACD8B7533DD936C34A0CBA5E ] fdPHost C:\Windows\system32\fdPHost.dll 18:33:57.0364 4656 fdPHost - ok 18:33:57.0371 4656 [ 300C80931EABBE1DB7591C516EFE8D0F ] FDResPub C:\Windows\system32\fdrespub.dll 18:33:57.0417 4656 FDResPub - ok 18:33:57.0425 4656 [ 457B7D1D533E4BD62A99AED9C7BB4C59 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 18:33:57.0436 4656 FileInfo - ok 18:33:57.0448 4656 [ D421327FD6EFCCAF884A54C58E1B0D7F ] Filetrace C:\Windows\system32\drivers\filetrace.sys 18:33:57.0475 4656 Filetrace - ok 18:33:57.0516 4656 [ 1A18EBD87AA9FBF6EFE8CFADA08D0275 ] FirebirdGuardianDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe 18:33:57.0545 4656 FirebirdGuardianDefaultInstance ( UnsignedFile.Multi.Generic ) - warning 18:33:57.0545 4656 FirebirdGuardianDefaultInstance - detected UnsignedFile.Multi.Generic (1) 18:33:57.0610 4656 [ 53C740150C082AAF3C7D21C1D6A9FF98 ] FirebirdServerDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe 18:33:57.0709 4656 FirebirdServerDefaultInstance ( UnsignedFile.Multi.Generic ) - warning 18:33:57.0709 4656 FirebirdServerDefaultInstance - detected UnsignedFile.Multi.Generic (1) 18:33:57.0728 4656 [ 230923EA2B80F79B0F88D90F87B87EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 18:33:57.0754 4656 flpydisk - ok 18:33:57.0777 4656 [ E3041BC26D6930D61F42AEDB79C91720 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 18:33:57.0791 4656 FltMgr - ok 18:33:57.0838 4656 [ BE1C5BD1CA7ED015BC6FA1AE67E592C8 ] FontCache C:\Windows\system32\FntCache.dll 18:33:57.0916 4656 FontCache - ok 18:33:57.0967 4656 [ BC5B0BE5AF3510B0FD8C140EE42C6D3E ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 18:33:57.0976 4656 FontCache3.0.0.0 - ok 18:33:58.0010 4656 [ 5779B86CD8B32519FBECB136394D946A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 18:33:58.0043 4656 Fs_Rec - ok 18:33:58.0059 4656 [ C8E416668D3DC2BE3D4FE4C79224997F ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 18:33:58.0069 4656 gagp30kx - ok 18:33:58.0119 4656 [ A0E1B575BA8F504968CD40C0FAEB2384 ] gpsvc C:\Windows\System32\gpsvc.dll 18:33:58.0159 4656 gpsvc - ok 18:33:58.0221 4656 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:33:58.0230 4656 gupdate - ok 18:33:58.0237 4656 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:33:58.0245 4656 gupdatem - ok 18:33:58.0273 4656 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 18:33:58.0283 4656 gusvc - ok 18:33:58.0312 4656 [ 68E732382B32417FF61FD663259B4B09 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 18:33:58.0326 4656 HdAudAddService - ok 18:33:58.0360 4656 [ F942C5820205F2FB453243EDFEC82A3D ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 18:33:58.0412 4656 HDAudBus - ok 18:33:58.0435 4656 [ B4881C84A180E75B8C25DC1D726C375F ] HidBth C:\Windows\system32\drivers\hidbth.sys 18:33:58.0497 4656 HidBth - ok 18:33:58.0513 4656 [ 4E77A77E2C986E8F88F996BB3E1AD829 ] HidIr C:\Windows\system32\drivers\hidir.sys 18:33:58.0564 4656 HidIr - ok 18:33:58.0582 4656 [ 59361D38A297755D46A540E450202B2A ] hidserv C:\Windows\system32\hidserv.dll 18:33:58.0614 4656 hidserv - ok 18:33:58.0632 4656 [ 443BDD2D30BB4F00795C797E2CF99EDF ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 18:33:58.0658 4656 HidUsb - ok 18:33:58.0678 4656 [ B12F367EA39C0795FD57E31242CE1A5A ] hkmsvc C:\Windows\system32\kmsvc.dll 18:33:58.0710 4656 hkmsvc - ok 18:33:58.0733 4656 [ D7109A1E6BD2DFDBCBA72A6BC626A13B ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys 18:33:58.0743 4656 HpCISSs - ok 18:33:58.0796 4656 [ 098F1E4E5C9CB5B0063A959063631610 ] HTTP C:\Windows\system32\drivers\HTTP.sys 18:33:58.0837 4656 HTTP - ok 18:33:58.0861 4656 [ DA94C854CEA5FAC549D4E1F6E88349E8 ] i2omp C:\Windows\system32\drivers\i2omp.sys 18:33:58.0886 4656 i2omp - ok 18:33:58.0912 4656 [ CBB597659A2713CE0C9CC20C88C7591F ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 18:33:58.0939 4656 i8042prt - ok 18:33:58.0978 4656 [ 3E3BF3627D886736D0B4E90054F929F6 ] iaStorV C:\Windows\system32\drivers\iastorv.sys 18:33:58.0997 4656 iaStorV - ok 18:33:59.0044 4656 [ 7A95A3AD931B97FEC5067E40636CE37F ] ICQ Service C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe 18:33:59.0053 4656 ICQ Service - ok 18:33:59.0101 4656 [ 749F5F8CEDCA70F2A512945325FC489D ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 18:33:59.0132 4656 idsvc - ok 18:33:59.0144 4656 [ 8C3951AD2FE886EF76C7B5027C3125D3 ] iirsp C:\Windows\system32\drivers\iirsp.sys 18:33:59.0153 4656 iirsp - ok 18:33:59.0183 4656 [ 0C9EA6E654E7B0471741E343A6C671AF ] IKEEXT C:\Windows\System32\ikeext.dll 18:33:59.0232 4656 IKEEXT - ok 18:33:59.0246 4656 [ DF797A12176F11B2D301C5B234BB200E ] intelide C:\Windows\system32\drivers\intelide.sys 18:33:59.0256 4656 intelide - ok 18:33:59.0278 4656 [ BFD84AF32FA1BAD6231C4585CB469630 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 18:33:59.0313 4656 intelppm - ok 18:33:59.0331 4656 [ 5624BC1BC5EEB49C0AB76A8114F05EA3 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 18:33:59.0357 4656 IPBusEnum - ok 18:33:59.0382 4656 [ D8AABC341311E4780D6FCE8C73C0AD81 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 18:33:59.0426 4656 IpFilterDriver - ok 18:33:59.0469 4656 [ BF0DBFA9792C5C14FA00F61C75116C1B ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 18:33:59.0496 4656 iphlpsvc - ok 18:33:59.0500 4656 IpInIp - ok 18:33:59.0531 4656 [ 9C2EE2E6E5A7203BFAE15C299475EC67 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys 18:33:59.0557 4656 IPMIDRV - ok 18:33:59.0573 4656 [ B7E6212F581EA5F6AB0C3A6CEEEB89BE ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys 18:33:59.0600 4656 IPNAT - ok 18:33:59.0621 4656 [ 8C42CA155343A2F11D29FECA67FAA88D ] IRENUM C:\Windows\system32\drivers\irenum.sys 18:33:59.0673 4656 IRENUM - ok 18:33:59.0693 4656 [ 0672BFCEDC6FC468A2B0500D81437F4F ] isapnp C:\Windows\system32\drivers\isapnp.sys 18:33:59.0703 4656 isapnp - ok 18:33:59.0730 4656 [ E4FDF99599F27EC25D2CF6D754243520 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys 18:33:59.0744 4656 iScsiPrt - ok 18:33:59.0753 4656 [ 63C766CDC609FF8206CB447A65ABBA4A ] iteatapi C:\Windows\system32\drivers\iteatapi.sys 18:33:59.0762 4656 iteatapi - ok 18:33:59.0775 4656 [ 1281FE73B17664631D12F643CBEA3F59 ] iteraid C:\Windows\system32\drivers\iteraid.sys 18:33:59.0785 4656 iteraid - ok 18:33:59.0796 4656 [ 423696F3BA6472DD17699209B933BC26 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 18:33:59.0807 4656 kbdclass - ok 18:33:59.0821 4656 [ DBDF75D51464FBC47D0104EC3D572C05 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 18:33:59.0852 4656 kbdhid - ok 18:33:59.0876 4656 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] KeyIso C:\Windows\system32\lsass.exe 18:33:59.0913 4656 KeyIso - ok 18:33:59.0941 4656 [ 88956AD9FA510848AD176777A6C6C1F5 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 18:33:59.0976 4656 KSecDD - ok 18:33:59.0979 4656 [ 1D419CF43DB29396ECD7113D129D94EB ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 18:34:00.0017 4656 ksthunk - ok 18:34:00.0041 4656 [ 1FAF6926F3416D3DA05C5B265491BDAE ] KtmRm C:\Windows\system32\msdtckrm.dll 18:34:00.0092 4656 KtmRm - ok 18:34:00.0114 4656 [ 50C7A3CB427E9BB5ED0708A669956AB5 ] LanmanServer C:\Windows\system32\srvsvc.dll 18:34:00.0140 4656 LanmanServer - ok 18:34:00.0180 4656 [ CAF86FC1388BE1E470F1A7B43E348ADB ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 18:34:00.0204 4656 LanmanWorkstation - ok 18:34:00.0230 4656 [ 156AB2E56DC3CA0B582E3362E07CDED7 ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys 18:34:00.0238 4656 lirsgt - ok 18:34:00.0248 4656 [ 96ECE2659B6654C10A0C310AE3A6D02C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 18:34:00.0281 4656 lltdio - ok 18:34:00.0296 4656 [ 961CCBD0B1CCB5675D64976FAE37D092 ] lltdsvc C:\Windows\System32\lltdsvc.dll 18:34:00.0335 4656 lltdsvc - ok 18:34:00.0349 4656 [ A47F8080CACC23C91FE823AD19AA5612 ] lmhosts C:\Windows\System32\lmhsvc.dll 18:34:00.0380 4656 lmhosts - ok 18:34:00.0392 4656 [ ACBE1AF32D3123E330A07BFBC5EC4A9B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 18:34:00.0402 4656 LSI_FC - ok 18:34:00.0427 4656 [ 799FFB2FC4729FA46D2157C0065B3525 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 18:34:00.0437 4656 LSI_SAS - ok 18:34:00.0457 4656 [ F445FF1DAAD8A226366BFAF42551226B ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 18:34:00.0467 4656 LSI_SCSI - ok 18:34:00.0478 4656 [ 52F87B9CC8932C2A7375C3B2A9BE5E3E ] luafv C:\Windows\system32\drivers\luafv.sys 18:34:00.0502 4656 luafv - ok 18:34:00.0537 4656 [ 7AEAC0B5B185CB5601673A0462C7EC36 ] massfilter C:\Windows\system32\DRIVERS\massfilter.sys 18:34:00.0546 4656 massfilter - ok 18:34:00.0575 4656 [ 76A58DF02BD4EA29F189B82D0BEF17F8 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 18:34:00.0585 4656 Mcx2Svc - ok 18:34:00.0603 4656 [ 5C5CD6AACED32FB26C3FB34B3DCF972F ] megasas C:\Windows\system32\drivers\megasas.sys 18:34:00.0613 4656 megasas - ok 18:34:00.0630 4656 [ 859BC2436B076C77C159ED694ACFE8F8 ] MegaSR C:\Windows\system32\drivers\megasr.sys 18:34:00.0653 4656 MegaSR - ok 18:34:00.0664 4656 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] MMCSS C:\Windows\system32\mmcss.dll 18:34:00.0697 4656 MMCSS - ok 18:34:00.0712 4656 [ 59848D5CC74606F0EE7557983BB73C2E ] Modem C:\Windows\system32\drivers\modem.sys 18:34:00.0738 4656 Modem - ok 18:34:00.0751 4656 [ C247CC2A57E0A0C8C6DCCF7807B3E9E5 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 18:34:00.0777 4656 monitor - ok 18:34:00.0787 4656 [ 9367304E5E412B120CF5F4EA14E4E4F1 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 18:34:00.0809 4656 mouclass - ok 18:34:00.0832 4656 [ C2C2BD5C5CE5AAF786DDD74B75D2AC69 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 18:34:00.0858 4656 mouhid - ok 18:34:00.0861 4656 [ 11BC9B1E8801B01F7F6ADB9EAD30019B ] MountMgr C:\Windows\system32\drivers\mountmgr.sys 18:34:00.0872 4656 MountMgr - ok 18:34:00.0888 4656 [ F8276EB8698142884498A528DFEA8478 ] mpio C:\Windows\system32\drivers\mpio.sys 18:34:00.0900 4656 mpio - ok 18:34:00.0923 4656 [ C92B9ABDB65A5991E00C28F13491DBA2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 18:34:00.0951 4656 mpsdrv - ok 18:34:00.0980 4656 [ 897E3BAF68BA406A61682AE39C83900C ] MpsSvc C:\Windows\system32\mpssvc.dll 18:34:01.0027 4656 MpsSvc - ok 18:34:01.0040 4656 [ 3C200630A89EF2C0864D515B7A75802E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys 18:34:01.0049 4656 Mraid35x - ok 18:34:01.0059 4656 [ 7C1DE4AA96DC0C071611F9E7DE02A68D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 18:34:01.0085 4656 MRxDAV - ok 18:34:01.0105 4656 [ 1485811B320FF8C7EDAD1CAEBB1C6C2B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 18:34:01.0134 4656 mrxsmb - ok 18:34:01.0170 4656 [ 3B929A60C833FC615FD97FBA82BC7632 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 18:34:01.0197 4656 mrxsmb10 - ok 18:34:01.0200 4656 [ C64AB3E1F53B4F5B5BB6D796B2D7BEC3 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 18:34:01.0214 4656 mrxsmb20 - ok 18:34:01.0223 4656 [ 1AC860612B85D8E85EE257D372E39F4D ] msahci C:\Windows\system32\drivers\msahci.sys 18:34:01.0233 4656 msahci - ok 18:34:01.0249 4656 [ 264BBB4AAF312A485F0E44B65A6B7202 ] msdsm C:\Windows\system32\drivers\msdsm.sys 18:34:01.0260 4656 msdsm - ok 18:34:01.0290 4656 [ 7EC02CE772F068ED0BEAFA3DA341A9BC ] MSDTC C:\Windows\System32\msdtc.exe 18:34:01.0340 4656 MSDTC - ok 18:34:01.0362 4656 [ 704F59BFC4512D2BB0146AEC31B10A7C ] Msfs C:\Windows\system32\drivers\Msfs.sys 18:34:01.0399 4656 Msfs - ok 18:34:01.0415 4656 [ 00EBC952961664780D43DCA157E79B27 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 18:34:01.0425 4656 msisadrv - ok 18:34:01.0448 4656 [ 366B0C1F4478B519C181E37D43DCDA32 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 18:34:01.0480 4656 MSiSCSI - ok 18:34:01.0482 4656 msiserver - ok 18:34:01.0504 4656 [ 0EA73E498F53B96D83DBFCA074AD4CF8 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 18:34:01.0540 4656 MSKSSRV - ok 18:34:01.0557 4656 [ 52E59B7E992A58E740AA63F57EDBAE8B ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 18:34:01.0582 4656 MSPCLOCK - ok 18:34:01.0588 4656 [ 49084A75BAE043AE02D5B44D02991BB2 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 18:34:01.0627 4656 MSPQM - ok 18:34:01.0653 4656 [ DC6CCF440CDEDE4293DB41C37A5060A5 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 18:34:01.0668 4656 MsRPC - ok 18:34:01.0673 4656 [ 855796E59DF77EA93AF46F20155BF55B ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 18:34:01.0683 4656 mssmbios - ok 18:34:01.0704 4656 [ 86D632D75D05D5B7C7C043FA3564AE86 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 18:34:01.0737 4656 MSTEE - ok 18:34:01.0758 4656 [ 6936198F2CC25B39CF5262436C80DF46 ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys 18:34:01.0766 4656 MTsensor - ok 18:34:01.0775 4656 [ 0CC49F78D8ACA0877D885F149084E543 ] Mup C:\Windows\system32\Drivers\mup.sys 18:34:01.0786 4656 Mup - ok 18:34:01.0817 4656 [ 792CA0761A6FF267FB271FA4DBE8CD84 ] mv61xx C:\Windows\system32\DRIVERS\mv61xx.sys 18:34:01.0827 4656 mv61xx - ok 18:34:01.0839 4656 [ A5B10C845E7538C60C0F5D87A57CB3F5 ] napagent C:\Windows\system32\qagentRT.dll 18:34:01.0865 4656 napagent - ok 18:34:01.0881 4656 [ 2007B826C4ACD94AE32232B41F0842B9 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 18:34:01.0902 4656 NativeWifiP - ok 18:34:01.0932 4656 [ 65950E07329FCEE8E6516B17C8D0ABB6 ] NDIS C:\Windows\system32\drivers\ndis.sys 18:34:01.0965 4656 NDIS - ok 18:34:01.0968 4656 [ 64DF698A425478E321981431AC171334 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 18:34:01.0997 4656 NdisTapi - ok 18:34:02.0014 4656 [ 8BAA43196D7B5BB972C9A6B2BBF61A19 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 18:34:02.0063 4656 Ndisuio - ok 18:34:02.0099 4656 [ F8158771905260982CE724076419EF19 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 18:34:02.0134 4656 NdisWan - ok 18:34:02.0157 4656 [ 9CB77ED7CB72850253E973A2D6AFDF49 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 18:34:02.0188 4656 NDProxy - ok 18:34:02.0191 4656 [ A499294F5029A7862ADC115BDA7371CE ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 18:34:02.0217 4656 NetBIOS - ok 18:34:02.0235 4656 [ FC2C792EBDDC8E28DF939D6A92C83D61 ] netbt C:\Windows\system32\DRIVERS\netbt.sys 18:34:02.0269 4656 netbt - ok 18:34:02.0281 4656 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] Netlogon C:\Windows\system32\lsass.exe 18:34:02.0291 4656 Netlogon - ok 18:34:02.0321 4656 [ 9B63B29DEFC0F3115A559D2597BF5D75 ] Netman C:\Windows\System32\netman.dll 18:34:02.0363 4656 Netman - ok 18:34:02.0398 4656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:34:02.0423 4656 NetMsmqActivator - ok 18:34:02.0426 4656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:34:02.0435 4656 NetPipeActivator - ok 18:34:02.0454 4656 [ 7846D0136CC2B264926A73047BA7688A ] netprofm C:\Windows\System32\netprofm.dll 18:34:02.0484 4656 netprofm - ok 18:34:02.0487 4656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:34:02.0497 4656 NetTcpActivator - ok 18:34:02.0500 4656 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:34:02.0510 4656 NetTcpPortSharing - ok 18:34:02.0532 4656 [ 4AC08BD6AF2DF42E0C3196D826C8AEA7 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 18:34:02.0541 4656 nfrd960 - ok 18:34:02.0556 4656 [ F145BF4C4668E7E312069F81EF847CFC ] NlaSvc C:\Windows\System32\nlasvc.dll 18:34:02.0598 4656 NlaSvc - ok 18:34:02.0609 4656 [ B298874F8E0EA93F06EC40AA8D146478 ] Npfs C:\Windows\system32\drivers\Npfs.sys 18:34:02.0628 4656 Npfs - ok 18:34:02.0649 4656 [ ACB62BAA1C319B17752553DF3026EEEB ] nsi C:\Windows\system32\nsisvc.dll 18:34:02.0688 4656 nsi - ok 18:34:02.0704 4656 [ 1523AF19EE8B030BA682F7A53537EAEB ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 18:34:02.0737 4656 nsiproxy - ok 18:34:02.0768 4656 [ BAC869DFB98E499BA4D9BB1FB43270E1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 18:34:02.0837 4656 Ntfs - ok 18:34:02.0840 4656 [ DD5D684975352B85B52E3FD5347C20CB ] Null C:\Windows\system32\drivers\Null.sys 18:34:02.0878 4656 Null - ok 18:34:02.0890 4656 [ 2C040B7ADA5B06F6FACADAC8514AA034 ] nvraid C:\Windows\system32\drivers\nvraid.sys 18:34:02.0902 4656 nvraid - ok 18:34:02.0919 4656 [ F7EA0FE82842D05EDA3EFDD376DBFDBA ] nvstor C:\Windows\system32\drivers\nvstor.sys 18:34:02.0929 4656 nvstor - ok 18:34:02.0947 4656 [ 19067CA93075EF4823E3938A686F532F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 18:34:02.0958 4656 nv_agp - ok 18:34:02.0960 4656 NwlnkFlt - ok 18:34:02.0964 4656 NwlnkFwd - ok 18:34:02.0993 4656 [ B5B1CE65AC15BBD11C0619E3EF7CFC28 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys 18:34:03.0012 4656 ohci1394 - ok 18:34:03.0050 4656 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2pimsvc C:\Windows\system32\p2psvc.dll 18:34:03.0103 4656 p2pimsvc - ok 18:34:03.0112 4656 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] p2psvc C:\Windows\system32\p2psvc.dll 18:34:03.0136 4656 p2psvc - ok 18:34:03.0161 4656 [ AECD57F94C887F58919F307C35498EA0 ] Parport C:\Windows\system32\drivers\parport.sys 18:34:03.0230 4656 Parport - ok 18:34:03.0253 4656 [ B43751085E2ABE389DA466BC62A4B987 ] partmgr C:\Windows\system32\drivers\partmgr.sys 18:34:03.0265 4656 partmgr - ok 18:34:03.0286 4656 [ 9AB157B374192FF276C1628FBDBA2B0E ] PcaSvc C:\Windows\System32\pcasvc.dll 18:34:03.0298 4656 PcaSvc - ok 18:34:03.0319 4656 [ 47AB1E0FC9D0E12BB53BA246E3A0906D ] pci C:\Windows\system32\drivers\pci.sys 18:34:03.0332 4656 pci - ok 18:34:03.0343 4656 [ 2657F6C0B78C36D95034BE109336E382 ] pciide C:\Windows\system32\drivers\pciide.sys 18:34:03.0353 4656 pciide - ok 18:34:03.0367 4656 [ 037661F3D7C507C9993B7010CEEE6288 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 18:34:03.0380 4656 pcmcia - ok 18:34:03.0399 4656 [ 58865916F53592A61549B04941BFD80D ] PEAUTH C:\Windows\system32\drivers\peauth.sys 18:34:03.0474 4656 PEAUTH - ok 18:34:03.0538 4656 [ 0ED8727EA0172860F47258456C06CAEA ] PerfHost C:\Windows\SysWow64\perfhost.exe 18:34:03.0584 4656 PerfHost - ok 18:34:03.0634 4656 [ E9E68C1A0F25CF4A7AC966EEA74EE89E ] pla C:\Windows\system32\pla.dll 18:34:03.0695 4656 pla - ok 18:34:03.0718 4656 [ FE6B0F59215C9FD9F9D26539C58C8B82 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 18:34:03.0740 4656 PlugPlay - ok 18:34:03.0743 4656 PnkBstrA - ok 18:34:03.0829 4656 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPAutoReg C:\Windows\system32\p2psvc.dll 18:34:03.0860 4656 PNRPAutoReg - ok 18:34:03.0876 4656 [ 9AE31D2E1D15C10D91318E0EC149CEAC ] PNRPsvc C:\Windows\system32\p2psvc.dll 18:34:03.0899 4656 PNRPsvc - ok 18:34:03.0923 4656 [ 89A5560671C2D8B4A4B51F3E1AA069D8 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 18:34:03.0960 4656 PolicyAgent - ok 18:34:03.0997 4656 [ 23386E9952025F5F21C368971E2E7301 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 18:34:04.0029 4656 PptpMiniport - ok 18:34:04.0049 4656 [ 5080E59ECEE0BC923F14018803AA7A01 ] Processor C:\Windows\system32\drivers\processr.sys 18:34:04.0075 4656 Processor - ok 18:34:04.0088 4656 [ E058CE4FC2449D8BFA14739C83B7FF2A ] ProfSvc C:\Windows\system32\profsvc.dll 18:34:04.0125 4656 ProfSvc - ok 18:34:04.0138 4656 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] ProtectedStorage C:\Windows\system32\lsass.exe 18:34:04.0149 4656 ProtectedStorage - ok 18:34:04.0160 4656 [ C5AB7F0809392D0DA027F4A2A81BFA31 ] PSched C:\Windows\system32\DRIVERS\pacer.sys 18:34:04.0180 4656 PSched - ok 18:34:04.0222 4656 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys 18:34:04.0231 4656 PxHlpa64 - ok 18:34:04.0259 4656 [ 0B83F4E681062F3839BE2EC1D98FD94A ] ql2300 C:\Windows\system32\drivers\ql2300.sys 18:34:04.0309 4656 ql2300 - ok 18:34:04.0323 4656 [ E1C80F8D4D1E39EF9595809C1369BF2A ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 18:34:04.0334 4656 ql40xx - ok 18:34:04.0412 4656 [ 90574842C3DA781E279061A3EFF91F07 ] QWAVE C:\Windows\system32\qwave.dll 18:34:04.0438 4656 QWAVE - ok 18:34:04.0455 4656 [ E8D76EDAB77EC9C634C27B8EAC33ADC5 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 18:34:04.0467 4656 QWAVEdrv - ok 18:34:04.0469 4656 [ 1013B3B663A56D3DDD784F581C1BD005 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 18:34:04.0506 4656 RasAcd - ok 18:34:04.0547 4656 [ B2AE18F847D07F0044404DDF7CB04497 ] RasAuto C:\Windows\System32\rasauto.dll 18:34:04.0574 4656 RasAuto - ok 18:34:04.0600 4656 [ AC7BC4D42A7E558718DFDEC599BBFC2C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 18:34:04.0659 4656 Rasl2tp - ok 18:34:04.0733 4656 [ 3AD83E4046C43BE510DE681588ACB8AF ] RasMan C:\Windows\System32\rasmans.dll 18:34:04.0765 4656 RasMan - ok 18:34:04.0777 4656 [ 4517FBF8B42524AFE4EDE1DE102AAE3E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 18:34:04.0799 4656 RasPppoe - ok 18:34:04.0811 4656 [ C6A593B51F34C33E5474539544072527 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 18:34:04.0822 4656 RasSstp - ok 18:34:04.0836 4656 [ 322DB5C6B55E8D8EE8D6F358B2AAABB1 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 18:34:04.0859 4656 rdbss - ok 18:34:04.0865 4656 [ 603900CC05F6BE65CCBF373800AF3716 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 18:34:04.0890 4656 RDPCDD - ok 18:34:04.0920 4656 [ C045D1FB111C28DF0D1BE8D4BDA22C06 ] rdpdr C:\Windows\system32\drivers\rdpdr.sys 18:34:04.0963 4656 rdpdr - ok 18:34:04.0975 4656 [ CAB9421DAF3D97B33D0D055858E2C3AB ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 18:34:05.0001 4656 RDPENCDD - ok 18:34:05.0041 4656 [ AE4BD9E1C33D351D8E607FC81F15160C ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 18:34:05.0059 4656 RDPWD - ok 18:34:05.0077 4656 [ C612B9557DA73F70D41F8A6FBC8E5344 ] RemoteAccess C:\Windows\System32\mprdim.dll 18:34:05.0112 4656 RemoteAccess - ok 18:34:05.0131 4656 [ 44B9D8EC2F3EF3A0EFB00857AF70D861 ] RemoteRegistry C:\Windows\system32\regsvc.dll 18:34:05.0165 4656 RemoteRegistry - ok 18:34:05.0180 4656 [ F46C457840D4B7A4DAAFEE739CE04102 ] RpcLocator C:\Windows\system32\locator.exe 18:34:05.0190 4656 RpcLocator - ok 18:34:05.0213 4656 [ CF8B9A3A5E7DC57724A89D0C3E8CF9EF ] RpcSs C:\Windows\system32\rpcss.dll 18:34:05.0249 4656 RpcSs - ok 18:34:05.0269 4656 [ 22A9CB08B1A6707C1550C6BF099AAE73 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 18:34:05.0296 4656 rspndr - ok 18:34:05.0307 4656 [ 260BF9C43EE12C6898A9F5AAB0FB0E5D ] SamSs C:\Windows\system32\lsass.exe 18:34:05.0318 4656 SamSs - ok 18:34:05.0352 4656 [ CD9C693589C60AD59BBBCFB0E524E01B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 18:34:05.0376 4656 sbp2port - ok 18:34:05.0399 4656 [ FD1CDCF108D5EF3366F00D18B70FB89B ] SCardSvr C:\Windows\System32\SCardSvr.dll 18:34:05.0439 4656 SCardSvr - ok 18:34:05.0467 4656 [ 0F838C811AD295D2A4489B9993096C63 ] Schedule C:\Windows\system32\schedsvc.dll 18:34:05.0527 4656 Schedule - ok 18:34:05.0542 4656 [ 5A268127633C7EE2A7FB87F39D748D56 ] SCPolicySvc C:\Windows\System32\certprop.dll 18:34:05.0561 4656 SCPolicySvc - ok 18:34:05.0585 4656 [ 4FF71B076A7760FE75EA5AE2D0EE0018 ] SDRSVC C:\Windows\System32\SDRSVC.dll 18:34:05.0605 4656 SDRSVC - ok 18:34:05.0621 4656 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 18:34:05.0669 4656 secdrv - ok 18:34:05.0683 4656 [ 5ACDCBC67FCF894A1815B9F96D704490 ] seclogon C:\Windows\system32\seclogon.dll 18:34:05.0723 4656 seclogon - ok 18:34:05.0738 4656 [ 90973A64B96CD647FF81C79443618EED ] SENS C:\Windows\System32\sens.dll 18:34:05.0775 4656 SENS - ok 18:34:05.0797 4656 [ 2449316316411D65BD2C761A6FFB2CE2 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 18:34:05.0829 4656 Serenum - ok 18:34:05.0842 4656 [ 4B438170BE2FC8E0BD35EE87A960F84F ] Serial C:\Windows\system32\DRIVERS\serial.sys 18:34:05.0875 4656 Serial - ok 18:34:05.0890 4656 [ A842F04833684BCEEA7336211BE478DF ] sermouse C:\Windows\system32\drivers\sermouse.sys 18:34:05.0925 4656 sermouse - ok 18:34:05.0939 4656 [ A8E4A4407A09F35DCCC3771AF590B0C4 ] SessionEnv C:\Windows\system32\sessenv.dll 18:34:05.0966 4656 SessionEnv - ok 18:34:05.0983 4656 [ 14D4B4465193A87C127933978E8C4106 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 18:34:06.0032 4656 sffdisk - ok 18:34:06.0043 4656 [ 7073AEE3F82F3D598E3825962AA98AB2 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 18:34:06.0069 4656 sffp_mmc - ok 18:34:06.0080 4656 [ 35E59EBE4A01A0532ED67975161C7B82 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 18:34:06.0106 4656 sffp_sd - ok 18:34:06.0113 4656 [ 6B7838C94135768BD455CBDC23E39E5F ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 18:34:06.0157 4656 sfloppy - ok 18:34:06.0233 4656 [ 4C5AEE179DA7E1EE9A9CCB9DA289AF34 ] SharedAccess C:\Windows\System32\ipnathlp.dll 18:34:06.0284 4656 SharedAccess - ok 18:34:06.0322 4656 [ 56793271ECDEDD350C5ADD305603E963 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 18:34:06.0344 4656 ShellHWDetection - ok 18:34:06.0359 4656 [ 7A5DE502AEB719D4594C6471060A78B3 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys 18:34:06.0369 4656 SiSRaid2 - ok 18:34:06.0382 4656 [ 3A2F769FAB9582BC720E11EA1DFB184D ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 18:34:06.0393 4656 SiSRaid4 - ok 18:34:06.0441 4656 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 18:34:06.0450 4656 SkypeUpdate - ok 18:34:06.0500 4656 [ A9A27A8E257B45A604FDAD4F26FE7241 ] slsvc C:\Windows\system32\SLsvc.exe 18:34:06.0589 4656 slsvc - ok 18:34:06.0605 4656 [ FD74B4B7C2088E390A30C85A896FC3AF ] SLUINotify C:\Windows\system32\SLUINotify.dll 18:34:06.0633 4656 SLUINotify - ok 18:34:06.0651 4656 [ 290B6F6A0EC4FCDFC90F5CB6D7020473 ] Smb C:\Windows\system32\DRIVERS\smb.sys 18:34:06.0681 4656 Smb - ok 18:34:06.0716 4656 [ F8F47F38909823B1AF28D60B96340CFF ] SNMPTRAP C:\Windows\System32\snmptrap.exe 18:34:06.0745 4656 SNMPTRAP - ok 18:34:06.0768 4656 [ 386C3C63F00A7040C7EC5E384217E89D ] spldr C:\Windows\system32\drivers\spldr.sys 18:34:06.0778 4656 spldr - ok 18:34:06.0821 4656 [ F66FF751E7EFC816D266977939EF5DC3 ] Spooler C:\Windows\System32\spoolsv.exe 18:34:06.0846 4656 Spooler - ok 18:34:06.0879 4656 [ 880A57FCCB571EBD063D4DD50E93E46D ] srv C:\Windows\system32\DRIVERS\srv.sys 18:34:06.0944 4656 srv - ok 18:34:06.0977 4656 [ A1AD14A6D7A37891FFFECA35EBBB0730 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 18:34:06.0998 4656 srv2 - ok 18:34:07.0014 4656 [ 4BED62F4FA4D8300973F1151F4C4D8A7 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 18:34:07.0034 4656 srvnet - ok 18:34:07.0051 4656 [ 192C74646EC5725AEF3F80D19FF75F6A ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 18:34:07.0093 4656 SSDPSRV - ok 18:34:07.0120 4656 [ 2EE3FA0308E6185BA64A9A7F2E74332B ] SstpSvc C:\Windows\system32\sstpsvc.dll 18:34:07.0145 4656 SstpSvc - ok 18:34:07.0183 4656 Steam Client Service - ok 18:34:07.0221 4656 [ 15825C1FBFB8779992CB65087F316AF5 ] stisvc C:\Windows\System32\wiaservc.dll 18:34:07.0269 4656 stisvc - ok 18:34:07.0297 4656 [ 8A851CA908B8B974F89C50D2E18D4F0C ] swenum C:\Windows\system32\DRIVERS\swenum.sys 18:34:07.0306 4656 swenum - ok 18:34:07.0335 4656 [ 6DE37F4DE19D4EFD9C48C43ADDBC949A ] swprv C:\Windows\System32\swprv.dll 18:34:07.0375 4656 swprv - ok 18:34:07.0393 4656 [ 2F26A2C6FC96B29BEFF5D8ED74E6625B ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys 18:34:07.0402 4656 Symc8xx - ok 18:34:07.0419 4656 [ A909667976D3BCCD1DF813FED517D837 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys 18:34:07.0429 4656 Sym_hi - ok 18:34:07.0448 4656 [ 36887B56EC2D98B9C362F6AE4DE5B7B0 ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys 18:34:07.0458 4656 Sym_u3 - ok 18:34:07.0487 4656 [ 92D7A8B0F87B036F17D25885937897A6 ] SysMain C:\Windows\system32\sysmain.dll 18:34:07.0523 4656 SysMain - ok 18:34:07.0543 4656 [ 005CE42567F9113A3BCCB3B20073B029 ] TabletInputService C:\Windows\System32\TabSvc.dll 18:34:07.0566 4656 TabletInputService - ok 18:34:07.0595 4656 [ B08740047145B9BCE15BF75CA0F9718A ] tap0901t C:\Windows\system32\DRIVERS\tap0901t.sys 18:34:07.0624 4656 tap0901t - ok 18:34:07.0641 4656 [ CC2562B4D55E0B6A4758C65407F63B79 ] TapiSrv C:\Windows\System32\tapisrv.dll 18:34:07.0676 4656 TapiSrv - ok 18:34:07.0689 4656 [ CDBE8D7C1E201B911CDC346D06617FB5 ] TBS C:\Windows\System32\tbssvc.dll 18:34:07.0717 4656 TBS - ok 18:34:07.0892 4656 [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip C:\Windows\system32\drivers\tcpip.sys 18:34:07.0955 4656 Tcpip - ok 18:34:07.0970 4656 [ 46D448E9117464E4D3BBF36D7E3FA48E ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys 18:34:08.0026 4656 Tcpip6 - ok 18:34:08.0047 4656 [ C7E72A4071EE0200E3C075DACFB2B334 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 18:34:08.0067 4656 tcpipreg - ok 18:34:08.0086 4656 [ 1D8BF4AAA5FB7A2761475781DC1195BC ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 18:34:08.0112 4656 TDPIPE - ok 18:34:08.0115 4656 [ 7F7E00CDF609DF657F4CDA02DD1C9BB1 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 18:34:08.0153 4656 TDTCP - ok 18:34:08.0168 4656 [ 458919C8C42E398DC4802178D5FFEE27 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 18:34:08.0202 4656 tdx - ok 18:34:08.0275 4656 [ 8A9828975A857E477EFEF5A61BA45AC0 ] TeamViewer6 C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe 18:34:08.0355 4656 TeamViewer6 - ok 18:34:08.0522 4656 [ A4D2CE94B028EF1E437CF4AC3D8FF26C ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe 18:34:08.0625 4656 TeamViewer7 - ok 18:34:08.0660 4656 [ 8C19678D22649EC002EF2282EAE92F98 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 18:34:08.0679 4656 TermDD - ok 18:34:08.0709 4656 [ 5CDD30BC217082DAC71A9878D9BFD566 ] TermService C:\Windows\System32\termsrv.dll 18:34:08.0757 4656 TermService - ok 18:34:08.0776 4656 [ 56793271ECDEDD350C5ADD305603E963 ] Themes C:\Windows\system32\shsvcs.dll 18:34:08.0789 4656 Themes - ok 18:34:08.0799 4656 [ 3CBE4995E80E13CCFBC42E5DCF3AC81A ] THREADORDER C:\Windows\system32\mmcss.dll 18:34:08.0826 4656 THREADORDER - ok 18:34:08.0862 4656 [ F4689F05AF472A651A7B1B7B02D200E7 ] TrkWks C:\Windows\System32\trkwks.dll 18:34:08.0900 4656 TrkWks - ok 18:34:08.0957 4656 [ 66328B08EF5A9305D8EDE36B93930369 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 18:34:08.0988 4656 TrustedInstaller - ok 18:34:09.0010 4656 [ 9E5409CD17C8BEF193AAD498F3BC2CB8 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 18:34:09.0046 4656 tssecsrv - ok 18:34:09.0060 4656 [ 89EC74A9E602D16A75A4170511029B3C ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys 18:34:09.0085 4656 tunmp - ok 18:34:09.0116 4656 [ 30A9B3F45AD081BFFC3BCAA9C812B609 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 18:34:09.0141 4656 tunnel - ok 18:34:09.0228 4656 [ 2FD0FE0A0C721C8E47C5A3AE16E519B1 ] TunngleService D:\Program Files (x86)\Tunngle\TnglCtrl.exe 18:34:09.0253 4656 TunngleService - ok 18:34:09.0263 4656 [ FEC266EF401966311744BD0F359F7F56 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 18:34:09.0274 4656 uagp35 - ok 18:34:09.0292 4656 [ FAF2640A2A76ED03D449E443194C4C34 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 18:34:09.0323 4656 udfs - ok 18:34:09.0350 4656 [ 060507C4113391394478F6953A79EEDC ] UI0Detect C:\Windows\system32\UI0Detect.exe 18:34:09.0390 4656 UI0Detect - ok 18:34:09.0404 4656 [ 4EC9447AC3AB462647F60E547208CA00 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 18:34:09.0415 4656 uliagpkx - ok 18:34:09.0435 4656 [ 697F0446134CDC8F99E69306184FBBB4 ] uliahci C:\Windows\system32\drivers\uliahci.sys 18:34:09.0461 4656 uliahci - ok 18:34:09.0478 4656 [ 31707F09846056651EA2C37858F5DDB0 ] UlSata C:\Windows\system32\drivers\ulsata.sys 18:34:09.0489 4656 UlSata - ok 18:34:09.0499 4656 [ 85E5E43ED5B48C8376281BAB519271B7 ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys 18:34:09.0512 4656 ulsata2 - ok 18:34:09.0524 4656 [ 46E9A994C4FED537DD951F60B86AD3F4 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 18:34:09.0551 4656 umbus - ok 18:34:09.0571 4656 [ 7093799FF80E9DECA0680D2E3535BE60 ] upnphost C:\Windows\System32\upnphost.dll 18:34:09.0610 4656 upnphost - ok 18:34:09.0636 4656 [ C6BA890DE6E41857FBE84175519CAE7D ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 18:34:09.0666 4656 usbaudio - ok 18:34:09.0699 4656 [ 07E3498FC60834219D2356293DA0FECC ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 18:34:09.0729 4656 usbccgp - ok 18:34:09.0753 4656 [ 9247F7E0B65852C1F6631480984D6ED2 ] usbcir C:\Windows\system32\drivers\usbcir.sys 18:34:09.0807 4656 usbcir - ok 18:34:09.0818 4656 [ 827E44DE934A736EA31E91D353EB126F ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 18:34:09.0848 4656 usbehci - ok 18:34:09.0906 4656 [ BB35CD80A2ECECFADC73569B3D70C7D1 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 18:34:09.0938 4656 usbhub - ok 18:34:09.0948 4656 [ EBA14EF0C07CEC233F1529C698D0D154 ] usbohci C:\Windows\system32\drivers\usbohci.sys 18:34:09.0998 4656 usbohci - ok 18:34:10.0042 4656 [ 28B693B6D31E7B9332C1BDCEFEF228C1 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 18:34:10.0068 4656 usbprint - ok 18:34:10.0088 4656 [ EA0BF666868964FBE8CB10E50C97B9F1 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 18:34:10.0120 4656 usbscan - ok 18:34:10.0160 4656 [ B854C1558FCA0C269A38663E8B59B581 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 18:34:10.0192 4656 USBSTOR - ok 18:34:10.0205 4656 [ B2872CBF9F47316ABD0E0C74A1ABA507 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 18:34:10.0233 4656 usbuhci - ok 18:34:10.0255 4656 [ D76E231E4850BB3F88A3D9A78DF191E3 ] UxSms C:\Windows\System32\uxsms.dll 18:34:10.0275 4656 UxSms - ok 18:34:10.0299 4656 [ 294945381DFA7CE58CECF0A9896AF327 ] vds C:\Windows\System32\vds.exe 18:34:10.0325 4656 vds - ok 18:34:10.0340 4656 [ 916B94BCF1E09873FFF2D5FB11767BBC ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 18:34:10.0390 4656 vga - ok 18:34:10.0401 4656 [ B83AB16B51FEDA65DD81B8C59D114D63 ] VgaSave C:\Windows\System32\drivers\vga.sys 18:34:10.0436 4656 VgaSave - ok 18:34:10.0464 4656 [ 8294B6C3FDB6C33F24E150DE647ECDAA ] viaide C:\Windows\system32\drivers\viaide.sys 18:34:10.0473 4656 viaide - ok 18:34:10.0487 4656 [ 2B7E885ED951519A12C450D24535DFCA ] volmgr C:\Windows\system32\drivers\volmgr.sys 18:34:10.0499 4656 volmgr - ok 18:34:10.0530 4656 [ CEC5AC15277D75D9E5DEC2E1C6EAF877 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 18:34:10.0563 4656 volmgrx - ok 18:34:10.0607 4656 [ 582F710097B46140F5A89A19A6573D4B ] volsnap C:\Windows\system32\drivers\volsnap.sys 18:34:10.0623 4656 volsnap - ok 18:34:10.0640 4656 [ A68F455ED2673835209318DD61BFBB0E ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 18:34:10.0652 4656 vsmraid - ok 18:34:10.0697 4656 [ B75232DAD33BFD95BF6F0A3E6BFF51E1 ] VSS C:\Windows\system32\vssvc.exe 18:34:10.0761 4656 VSS - ok 18:34:10.0779 4656 [ F14A7DE2EA41883E250892E1E5230A9A ] W32Time C:\Windows\system32\w32time.dll 18:34:10.0833 4656 W32Time - ok 18:34:10.0842 4656 [ FEF8FE5923FEAD2CEE4DFABFCE3393A7 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 18:34:10.0893 4656 WacomPen - ok 18:34:10.0920 4656 [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys 18:34:10.0948 4656 Wanarp - ok 18:34:10.0951 4656 [ B8E7049622300D20BA6D8BE0C47C0CFD ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 18:34:10.0971 4656 Wanarpv6 - ok 18:34:11.0122 4656 [ B4E4C37D0AA6100090A53213EE2BF1C1 ] wcncsvc C:\Windows\System32\wcncsvc.dll 18:34:11.0159 4656 wcncsvc - ok 18:34:11.0189 4656 [ EA4B369560E986F19D93F45A881484AC ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 18:34:11.0222 4656 WcsPlugInService - ok 18:34:11.0244 4656 [ 0C17A0816F65B89E362E682AD5E7266E ] Wd C:\Windows\system32\drivers\wd.sys 18:34:11.0254 4656 Wd - ok 18:34:11.0280 4656 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 18:34:11.0309 4656 Wdf01000 - ok 18:34:11.0326 4656 [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiServiceHost C:\Windows\system32\wdi.dll 18:34:11.0362 4656 WdiServiceHost - ok 18:34:11.0365 4656 [ C5EFDA73EBFCA8B02A094898DE0A9276 ] WdiSystemHost C:\Windows\system32\wdi.dll 18:34:11.0392 4656 WdiSystemHost - ok 18:34:11.0407 4656 [ 3E6D05381CF35F75EBB055544A8ED9AC ] WebClient C:\Windows\System32\webclnt.dll 18:34:11.0421 4656 WebClient - ok 18:34:11.0446 4656 [ 8D40BC587993F876658BF9FB0F7D3462 ] Wecsvc C:\Windows\system32\wecsvc.dll 18:34:11.0465 4656 Wecsvc - ok 18:34:11.0475 4656 [ 9C980351D7E96288EA0C23AE232BD065 ] wercplsupport C:\Windows\System32\wercplsupport.dll 18:34:11.0496 4656 wercplsupport - ok 18:34:11.0510 4656 [ 66B9ECEBC46683F47EDC06333C075FEF ] WerSvc C:\Windows\System32\WerSvc.dll 18:34:11.0531 4656 WerSvc - ok 18:34:11.0544 4656 WinDefend - ok 18:34:11.0548 4656 WinHttpAutoProxySvc - ok 18:34:11.0697 4656 [ D2E7296ED1BD26D8DB2799770C077A02 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 18:34:11.0735 4656 Winmgmt - ok 18:34:12.0114 4656 [ 6CBB0C68F13B9C2EC1B16F5FA5E7C869 ] WinRM C:\Windows\system32\WsmSvc.dll 18:34:12.0222 4656 WinRM - ok 18:34:12.0329 4656 [ EC339C8115E91BAED835957E9A677F16 ] Wlansvc C:\Windows\System32\wlansvc.dll 18:34:12.0385 4656 Wlansvc - ok 18:34:12.0478 4656 [ 98F138897EF4246381D197CB81846D62 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 18:34:12.0565 4656 wlidsvc - ok 18:34:12.0604 4656 [ E18AEBAAA5A773FE11AA2C70F65320F5 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 18:34:12.0651 4656 WmiAcpi - ok 18:34:12.0721 4656 [ 21FA389E65A852698B6A1341F36EE02D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 18:34:12.0763 4656 wmiApSrv - ok 18:34:12.0784 4656 WMPNetworkSvc - ok 18:34:12.0863 4656 [ CBC156C913F099E6680D1DF9307DB7A8 ] WPCSvc C:\Windows\System32\wpcsvc.dll 18:34:12.0906 4656 WPCSvc - ok 18:34:12.0937 4656 [ 490A18B4E4D53DC10879DEAA8E8B70D9 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 18:34:12.0987 4656 WPDBusEnum - ok 18:34:13.0023 4656 [ 5E2401B3FC1089C90E081291357371A9 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys 18:34:13.0043 4656 WpdUsb - ok 18:34:13.0213 4656 [ 991E2C2CF3BC204C2BB2EE1476149E4E ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe 18:34:13.0255 4656 WPFFontCache_v0400 - ok 18:34:13.0277 4656 [ 8A900348370E359B6BFF6A550E4649E1 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 18:34:13.0315 4656 ws2ifsl - ok 18:34:13.0331 4656 [ 9EA3E6D0EF7A5C2B9181961052A4B01A ] wscsvc C:\Windows\System32\wscsvc.dll 18:34:13.0343 4656 wscsvc - ok 18:34:13.0347 4656 WSearch - ok 18:34:13.0641 4656 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 18:34:13.0748 4656 wuauserv - ok 18:34:13.0785 4656 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 18:34:13.0805 4656 WudfPf - ok 18:34:13.0844 4656 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 18:34:13.0867 4656 WUDFRd - ok 18:34:13.0879 4656 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 18:34:13.0891 4656 wudfsvc - ok 18:34:14.0957 4656 X6va005 - ok 18:34:15.0033 4656 [ DD0042F0C3B606A6A8B92D49AFB18AD6 ] YahooAUService C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe 18:34:15.0053 4656 YahooAUService - ok 18:34:15.0088 4656 [ 2AE06B41B36549FABF0886B2AF89A599 ] yukonx64 C:\Windows\system32\DRIVERS\yk60x64.sys 18:34:15.0145 4656 yukonx64 - ok 18:34:15.0192 4656 [ BCD008C9FC4B57C107CBCFC3E77B58BA ] ZTEusbmdm6k C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys 18:34:15.0211 4656 ZTEusbmdm6k - ok 18:34:15.0225 4656 [ 9E74E0D096F8023A68A262A012153182 ] ZTEusbnet C:\Windows\system32\DRIVERS\ZTEusbnet.sys 18:34:15.0246 4656 ZTEusbnet - ok 18:34:15.0283 4656 [ BCD008C9FC4B57C107CBCFC3E77B58BA ] ZTEusbnmea C:\Windows\system32\DRIVERS\ZTEusbnmea.sys 18:34:15.0292 4656 ZTEusbnmea - ok 18:34:15.0330 4656 [ BCD008C9FC4B57C107CBCFC3E77B58BA ] ZTEusbser6k C:\Windows\system32\DRIVERS\ZTEusbser6k.sys 18:34:15.0340 4656 ZTEusbser6k - ok 18:34:15.0378 4656 [ BCD008C9FC4B57C107CBCFC3E77B58BA ] ZTEusbvoice C:\Windows\system32\DRIVERS\ZTEusbvoice.sys 18:34:15.0388 4656 ZTEusbvoice - ok 18:34:15.0409 4656 ================ Scan global =============================== 18:34:15.0431 4656 [ 060DC3A7A9A2626031EB23D90151428D ] C:\Windows\system32\basesrv.dll 18:34:15.0532 4656 [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll 18:34:15.0553 4656 [ AA137104CDFC81818A309CDE32ABB74A ] C:\Windows\system32\winsrv.dll 18:34:15.0575 4656 [ 934E0B7D77FF78C18D9F8891221B6DE3 ] C:\Windows\system32\services.exe 18:34:15.0579 4656 [Global] - ok 18:34:15.0579 4656 ================ Scan MBR ================================== 18:34:15.0585 4656 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0 18:34:19.0622 4656 \Device\Harddisk0\DR0 - ok 18:34:19.0622 4656 ================ Scan VBR ================================== 18:34:19.0647 4656 [ D8DB7F804D9DA0AE2EBBB6450D5C91DE ] \Device\Harddisk0\DR0\Partition1 18:34:19.0661 4656 \Device\Harddisk0\DR0\Partition1 - ok 18:34:19.0675 4656 [ F5D4A6253F845DA9C1EE309F2F8642A7 ] \Device\Harddisk0\DR0\Partition2 18:34:19.0676 4656 \Device\Harddisk0\DR0\Partition2 - ok 18:34:19.0676 4656 ============================================================ 18:34:19.0676 4656 Scan finished 18:34:19.0676 4656 ============================================================ 18:34:19.0682 5876 Detected object count: 3 18:34:19.0682 5876 Actual detected object count: 3 18:34:30.0316 5876 Boonty Games ( UnsignedFile.Multi.Generic ) - skipped by user 18:34:30.0316 5876 Boonty Games ( UnsignedFile.Multi.Generic ) - User select action: Skip 18:34:30.0317 5876 FirebirdGuardianDefaultInstance ( UnsignedFile.Multi.Generic ) - skipped by user 18:34:30.0317 5876 FirebirdGuardianDefaultInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip 18:34:30.0317 5876 FirebirdServerDefaultInstance ( UnsignedFile.Multi.Generic ) - skipped by user 18:34:30.0318 5876 FirebirdServerDefaultInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip |
|
17.12.2012, 18:43
| #6 | |
| /// Malware-holic | Seiten werden umgeleitet..google Hi, combofix: Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!Downloade dir bitte Combofix von einem dieser Downloadspiegel Link 1 Link 2 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ --> Seiten werden umgeleitet..google |
|
17.12.2012, 19:02
| #7 |
| | Seiten werden umgeleitet..google Combofix Logfile: Code:
ATTFilter ComboFix 12-12-17.02 - Wolf 17.12.2012 18:47:58.1.2 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.43.1031.18.4094.2272 [GMT 1:00]
ausgeführt von:: c:\users\Wolf\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Wolf\AppData\Local\assembly\tmp
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
c:\windows\wininit.ini
D:\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Boonty Games
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-11-17 bis 2012-12-17 ))))))))))))))))))))))))))))))
.
.
2012-12-17 17:53 . 2012-12-17 17:56 -------- d-----w- c:\users\Wolf\AppData\Local\temp
2012-12-17 16:06 . 2012-12-17 16:27 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-12-17 16:06 . 2012-12-17 17:55 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
2012-12-14 14:15 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0D62CF1A-0AEC-4723-BE20-2C68A5094DA3}\mpengine.dll
2012-12-13 02:00 . 2012-11-14 06:32 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-12-12 19:57 . 2012-12-12 19:57 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
2012-12-04 14:21 . 2012-12-04 14:21 -------- d-----w- c:\users\Wolf\AppData\Local\Vivox
2012-11-28 21:08 . 2012-11-28 21:08 -------- d-----w- C:\Crash
2012-11-28 21:08 . 2012-11-28 21:08 -------- d-----w- c:\users\Wolf\AppData\Local\Sony Online Entertainment
2012-11-27 01:11 . 2003-09-03 01:26 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2012-11-27 01:11 . 2003-09-03 01:26 192512 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2012-11-27 01:11 . 2012-11-27 01:11 311428 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
2012-11-27 01:11 . 2012-11-27 01:11 184452 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2012-11-27 01:11 . 2003-09-03 01:28 724992 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2012-11-27 01:11 . 2003-09-03 01:27 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2012-11-27 01:11 . 2003-09-03 01:25 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2012-11-26 23:51 . 2012-12-07 00:04 -------- d-----w- c:\users\Wolf\AppData\Roaming\Tunngle
2012-11-26 23:51 . 2012-12-06 23:24 -------- d-----w- c:\programdata\Tunngle
2012-11-26 23:51 . 2009-09-16 06:02 31232 ----a-w- c:\windows\system32\drivers\tap0901t.sys
2012-11-26 23:29 . 2012-11-26 23:29 -------- d--h--w- c:\programdata\Common Files
2012-11-26 23:25 . 2012-11-26 23:25 -------- d-----w- c:\programdata\Tarma Installer
2012-11-26 23:25 . 2012-11-27 13:07 -------- d-----w- c:\program files (x86)\TornTV.com
2012-11-26 23:09 . 2012-11-26 23:10 -------- d-----w- c:\users\Wolf\AppData\Local\DownTango
2012-11-26 23:09 . 2012-11-26 23:09 -------- d-----w- c:\program files (x86)\Red Sky
2012-11-23 17:25 . 2012-11-23 17:25 -------- d-----w- c:\users\Public\Sony Online Entertainment
2012-11-22 12:45 . 2012-11-22 12:45 -------- d-----w- c:\program files (x86)\Common Files\Skype
2012-11-22 00:18 . 2012-11-22 00:18 -------- d-----w- c:\users\Wolf\AppData\Local\Daedalic Entertainment
2012-11-21 23:39 . 2012-11-21 23:39 -------- d-----w- c:\program files (x86)\ProtectDisc Driver Installer
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-13 02:02 . 2006-11-02 12:35 67413224 ----a-w- c:\windows\system32\mrt.exe
2012-11-30 00:02 . 2012-04-02 11:38 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-11-30 00:02 . 2011-05-15 10:14 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-27 17:48 . 2012-10-27 17:48 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-10-27 17:48 . 2012-10-27 17:48 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-10-27 17:48 . 2012-10-27 17:48 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-10-27 17:48 . 2012-10-27 17:48 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-10-27 17:48 . 2012-10-27 17:48 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-10-27 17:47 . 2012-10-27 17:47 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-10-27 17:47 . 2012-10-27 17:47 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-10-27 17:47 . 2012-10-27 17:47 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-10-27 17:47 . 2012-10-27 17:47 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-10-27 17:47 . 2012-10-27 17:47 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-10-27 17:47 . 2012-10-27 17:47 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-10-27 17:47 . 2012-10-27 17:47 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-10-27 17:47 . 2012-10-27 17:47 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-10-27 17:47 . 2012-10-27 17:47 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-10-27 17:47 . 2012-10-27 17:47 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-10-27 17:47 . 2012-10-27 17:47 222208 ----a-w- c:\windows\system32\msls31.dll
2012-10-27 17:47 . 2012-10-27 17:47 197120 ----a-w- c:\windows\system32\msrating.dll
2012-10-27 17:47 . 2012-10-27 17:47 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-27 17:47 . 2012-10-27 17:47 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-27 17:47 . 2012-10-27 17:47 82432 ----a-w- c:\windows\system32\icardie.dll
2012-10-27 17:47 . 2012-10-27 17:47 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-10-27 17:47 . 2012-10-27 17:47 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2012-10-27 17:47 . 2012-10-27 17:47 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2012-10-27 17:47 . 2012-10-27 17:47 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-10-27 17:47 . 2012-10-27 17:47 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-27 17:47 . 2012-10-27 17:47 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2012-10-27 17:47 . 2012-10-27 17:47 448512 ----a-w- c:\windows\system32\html.iec
2012-10-27 17:47 . 2012-10-27 17:47 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2012-10-27 17:47 . 2012-10-27 17:47 282112 ----a-w- c:\windows\system32\dxtrans.dll
2012-10-27 17:47 . 2012-10-27 17:47 267776 ----a-w- c:\windows\system32\ieaksie.dll
2012-10-27 17:47 . 2012-10-27 17:47 163840 ----a-w- c:\windows\system32\ieakui.dll
2012-10-27 17:47 . 2012-10-27 17:47 160256 ----a-w- c:\windows\system32\ieakeng.dll
2012-10-27 17:47 . 2012-10-27 17:47 145920 ----a-w- c:\windows\system32\iepeers.dll
2012-10-27 17:47 . 2012-10-27 17:47 136192 ----a-w- c:\windows\system32\advpack.dll
2012-10-27 17:47 . 2012-10-27 17:47 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-27 17:47 . 2012-10-27 17:47 12288 ----a-w- c:\windows\system32\mshta.exe
2012-10-27 17:47 . 2012-10-27 17:47 114176 ----a-w- c:\windows\system32\admparse.dll
2012-10-27 17:47 . 2012-10-27 17:47 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-27 17:47 . 2012-10-27 17:47 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2012-10-27 17:47 . 2012-10-27 17:47 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2012-10-27 17:47 . 2012-10-27 17:47 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-10-27 17:47 . 2012-10-27 17:47 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2012-10-27 17:47 . 2012-10-27 17:47 39936 ----a-w- c:\windows\system32\iernonce.dll
2012-10-27 17:47 . 2012-10-27 17:47 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-27 17:47 . 2012-10-27 17:47 249344 ----a-w- c:\windows\system32\webcheck.dll
2012-10-27 17:47 . 2012-10-27 17:47 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-10-27 17:47 . 2012-10-27 17:47 160256 ----a-w- c:\windows\system32\wextract.exe
2012-10-27 17:47 . 2012-10-27 17:47 103936 ----a-w- c:\windows\system32\inseng.dll
2012-10-27 17:47 . 2012-10-27 17:47 65024 ----a-w- c:\windows\system32\pngfilt.dll
2012-10-27 17:47 . 2012-10-27 17:47 149504 ----a-w- c:\windows\system32\occache.dll
2012-09-25 16:31 . 2012-11-16 01:06 91648 ----a-w- c:\windows\system32\synceng.dll
2012-09-25 16:19 . 2012-11-16 01:06 75776 ----a-w- c:\windows\SysWow64\synceng.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2012-06-06 19:33 1519304 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-06-06 1519304]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="d:\program files (x86)\Steam\steam.exe" [2012-12-03 1354736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SoundTray"="c:\program files (x86)\Analog Devices\SoundMAX\SoundTray.exe" [2008-03-26 143360]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2008-03-16 1302528]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-06-06 1564872]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-21 348664]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-09 49208]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\Wolf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Impulse Now.lnk - d:\program files (x86)\Stardock\Impulse\Now\ImpulseNow.exe [N/A]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2010-02-24 191616]
S2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;d:\program files (x86)\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Themes
.
Inhalt des "geplante Tasks" Ordners
.
2012-12-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-22 16:26]
.
2012-12-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-22 16:26]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdateUSB"="c:\windows\inf\UpdateUSB.exe" [2006-06-23 30720]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.skrapid.at/
mStart Page = hxxp://home.sweetim.com/?crg=3.1010000.10011&barid={9D5DA870-3820-11E2-B1D0-00221553B708}
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Free YouTube to MP3 Converter - c:\users\Wolf\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - d:\program files (x86)\ICQ7.5\ICQ.exe
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
TCP: Interfaces\{66540E90-AAFE-4BDE-A36F-AA1CD4A47511}: NameServer = 192.168.178.70,192.168.178.1
FF - ProfilePath - c:\users\Wolf\AppData\Roaming\Mozilla\Firefox\Profiles\9po0u4hw.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.skrapid.at/
FF - ExtSQL: 2012-11-09 19:18; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; d:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-ICQ - ~d:\program files (x86)\ICQ7.4\ICQ.exe
Wow6432Node-HKCU-Run-PlayNC Launcher - (no file)
Wow6432Node-HKCU-Run-Messenger (Yahoo!) - ~c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe
Wow6432Node-HKCU-Run-ares - d:\program files (x86)\Ares\Ares.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-Sweetpacks Communicator - c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
Wow6432Node-HKLM-Run-ROC_roc_ssl_v12 - c:\program files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-1ClickDownload - c:\program files (x86)\TornTV.com\uninst.exe
AddRemove-BootSkin Vista (Free) - d:\program files (x86)\Stardock\Object Desktop\BootSkin\UninstHelper.exe
AddRemove-LogonStudio - c:\progra~2\Stardock\OBJECT~1\LOGONS~1\UNWISE.EXE
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
AddRemove-WinGimp-2.0_is1 - c:\program files (x86)\GIMP-2.0\setup\unins000.exe
AddRemove-{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4} - d:\program files (x86)\uninstaller.exe
AddRemove-NCsoft-AionEU - c:\program files (x86)\NCSoft\Launcher\NCLauncher.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\X6va005]
"ImagePath"="\??\c:\users\Wolf\AppData\Local\Temp\005A0E1.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3270509555-3106665489-914869450-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{526501EB-1278-F378-3395-C07523C246AF}*]
"hamldkpglmbdglbg"=hex:6a,61,6e,69,63,6d,66,65,6a,64,6a,63,64,6a,6f,67,66,6f,
6a,63,00,00
"iakknfibhopjinddlh"=hex:63,61,62,6a,70,6a,00,7e
"iaolnholhcmoljfnnk"=hex:6a,61,6e,69,63,6d,66,65,6a,64,6a,63,64,6a,6f,67,66,6f,
6a,63,00,00
"dbkldpaifccplfodcgdbfinkkokmnhecdiggnenh"=hex:6a,62,6e,6c,61,6f,62,6f,65,67,
6e,6e,6e,68,63,6c,70,6b,69,64,6e,6c,6e,62,6d,67,62,6c,66,6f,67,6f,6d,6d,6a,\
"jbkldpaifccplfodcgdbmknokhhpmdnpaalddeljoafjndkndmgh"=hex:6f,61,6b,6b,6e,65,
61,6e,68,62,6c,69,6d,6f,67,68,70,70,67,6c,67,6b,6a,6c,67,70,6f,6e,6a,70,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\sched.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe
c:\program files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
c:\program files (x86)\Common Files\Steam\SteamService.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-12-17 19:00:58 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2012-12-17 18:00
.
Vor Suchlauf: 9 Verzeichnis(se), 32.951.795.712 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 40.726.749.184 Bytes frei
.
- - End Of File - - F6BFEF505FADE630A91699546FB70F7C
|
|
18.12.2012, 16:01
| #8 |
| /// Malware-holic | Seiten werden umgeleitet..google Hi, malwarebytes: Downloade Dir bitte Malwarebytes
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
18.12.2012, 23:08
| #9 |
| | Seiten werden umgeleitet..google Ich muss noch dazu sagen, dass mein Internet Explorer scheinbar irgend nen Schaden hat jetzt nachdem ich das alles gemacht habe. Jedesmall wenn ich nen Tab zugemacht habe, kam dass der IE nen Problem hat und beendet wird. Der IE is aber nicht beendet worden. Naja, danach hab ich den so gut es geht runtergehaut und benutz jetzt Opera. Mit Opera habe ich das Problem des weiterleitens übrigens nicht. Code:
ATTFilter Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Datenbank Version: v2012.12.18.07 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 7.0.6002.18005 Wolf :: WOLF-PC [Administrator] 18.12.2012 21:19:43 mbam-log-2012-12-18 (21-19-43).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 525220 Laufzeit: 1 Stunde(n), 45 Minute(n), 43 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Geändert von Korelius (18.12.2012 um 23:18 Uhr) |
|
19.12.2012, 14:25
| #10 |
| /// Malware-holic | Seiten werden umgeleitet..google Hi, Den ie nicht deinstalieren, der ist Systembestandteil. das nächste mal, vllt einfach mal kurz ne Rückmeldung geben, damit kann ich dann wenigstens vernünftig arbeiten und du machst nicht irgendwelche unsinnigen Aktionen :-) Internet Explorer*9 herunterladen - Microsoft Windows instaliere mal den ie9 und teste ihn.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
| Themen zu Seiten werden umgeleitet..google |
| andere, anderen, browsergame, compu, computer, direkt, diverse, erscheine, erscheinen, folge, folgendes, google, hilfe!, klicke, leiste, link, problem, sache, schonmal, seite, seiten, sofort, umgeleitet, weitergeleitet |
Linear-Darstellung
