| |
| |||||||
Log-Analyse und Auswertung: GVU-Trojaner - vollständige BereinigungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
30.12.2012, 13:31
| #1 |
 |  GVU-Trojaner - vollständige Bereinigung Vor einigen Tagen hab ich mir den GVU-Trojaner eingefangen und konnte mit Hilfe von Malwarebytes Anti-Malware meinen Rechner zumindest erstmal wieder "bedienen". Das Programm hatte dabei folgende 5 "Schädlinge" gefunden: Exploit.Drop.GSA PUP.OfferBundler.ST PUP.OfferBundler.ST Trojan.FakeMS Trojan.Ransom.SUGen Diese befinden sich derzeit in Quaratäne bei Malewarebytes. Da ich gelesen habe, dass dadurch mein Rechner noch nicht sauber ist, würde ich mich freuen, wenn Ihr mir helfen könntet meinen PC wieder vollständig zu desinfizieren. Habe einen Tag später noch mal Malwarebytes Anti-Malware vollständig scannen lassen, da wurde nichts mehr gefunden. Avira hat allerdings noch folgenden Virus gefunden: JAVA/Jogek.QK Dieser ist nun bei Avira in Quarantäne. OTL.txt und EXTRAS.txt sind als ZIP im Anhang (PS: mit 7-ZIP ging es irgendwie nicht, konnte den Schritten mit den Lofiles nicht folgen.SORRY. Hoffe es geht auch so...???) Vielen Dank schon mal und einen guten Rutsch!  |
|
30.12.2012, 14:20
| #2 |
| /// Malware-holic   | GVU-Trojaner - vollständige Bereinigung Hi
__________________poste alle Malwarebytes und Avira fundmeldungen bzw logs. http://www.trojaner-board.de/125889-...en-posten.html
__________________ |
|
30.12.2012, 15:08
| #3 |
| | GVU-Trojaner - vollständige Bereinigung Hi,
__________________hier die Fundmeldungen: Malwarebytes Malwarebytes Anti-Malware 1.65.1.1000 Malwarebytes : Free Anti-Malware download Datenbank Version: v2012.12.27.09 Windows 7 x64 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 8.0.7600.16385 Michi :: MICHI-PC [Administrator] 27.12.2012 21:56:55 mbam-log-2012-12-27 (21-56-55).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 208181 Laufzeit: 4 Minute(n), 22 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 5 C:\Users\Michi\wgsdgsdgdsgsd.dll (Trojan.FakeMS) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Michi\Downloads\SoftonicDownloader_fuer_ikea-home-planer.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Michi\Downloads\SoftonicDownloader_fuer_videozilla.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\dsgsdgdsgdsgw.pad (Exploit.Drop.GSA) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Michi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\runctf.lnk (Trojan.Ransom.SUGen) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Avira Exportierte Ereignisse: 28.12.2012 21:43 [System Scanner] Malware gefunden Die Datei 'C:\Users\Michi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\3852a5b5-3e9f5 4e4' enthielt einen Virus oder unerwünschtes Programm 'JAVA/Jogek.QK' [virus]. Durchgeführte Aktion(en): Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5497a54c.qua' verschoben! 28.12.2012 19:03 [Echtzeit Scanner] Malware gefunden In der Datei 'C:\Users\Michi\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\1ede2ede-78bab 9a5' wurde ein Virus oder unerwünschtes Programm 'TR/Ransom.IF' [trojan] gefunden. Ausgeführte Aktion: Zugriff verweigern DANKE! |
|
03.01.2013, 16:41
| #4 |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung Hi bitte nutze kein Softonic mehr! download tdss killer: http://www.trojaner-board.de/82358-t...entfernen.html Klicke auf Change parameters • Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system • Klick auf OK und anschließend auf Start scan - bei funden erst mal immer skip wählen, log posten
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.01.2013, 18:46
| #5 |
| | GVU-Trojaner - vollständige Bereinigung Hi, FROHES NEUES JAHR  18:36:03.0170 1184 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35 18:36:03.0320 1184 ============================================================ 18:36:03.0320 1184 Current date / time: 2013/01/03 18:36:03.0320 18:36:03.0320 1184 SystemInfo: 18:36:03.0320 1184 18:36:03.0320 1184 OS Version: 6.1.7600 ServicePack: 0.0 18:36:03.0320 1184 Product type: Workstation 18:36:03.0320 1184 ComputerName: MICHI-PC 18:36:03.0320 1184 UserName: Michi 18:36:03.0320 1184 Windows directory: C:\Windows 18:36:03.0320 1184 System windows directory: C:\Windows 18:36:03.0320 1184 Running under WOW64 18:36:03.0320 1184 Processor architecture: Intel x64 18:36:03.0320 1184 Number of processors: 2 18:36:03.0320 1184 Page size: 0x1000 18:36:03.0320 1184 Boot type: Normal boot 18:36:03.0320 1184 ============================================================ 18:36:04.0060 1184 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 18:36:04.0070 1184 ============================================================ 18:36:04.0070 1184 \Device\Harddisk0\DR0: 18:36:04.0070 1184 MBR partitions: 18:36:04.0070 1184 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1800800, BlocksNum 0x32000 18:36:04.0070 1184 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1832800, BlocksNum 0x23BFBAB0 18:36:04.0070 1184 ============================================================ 18:36:04.0100 1184 C: <-> \Device\Harddisk0\DR0\Partition2 18:36:04.0100 1184 ============================================================ 18:36:04.0110 1184 Initialize success 18:36:04.0110 1184 ============================================================ 18:37:20.0371 3680 ============================================================ 18:37:20.0371 3680 Scan started 18:37:20.0371 3680 Mode: Manual; SigCheck; TDLFS; 18:37:20.0381 3680 ============================================================ 18:37:20.0731 3680 ================ Scan system memory ======================== 18:37:20.0731 3680 System memory - ok 18:37:20.0731 3680 ================ Scan services ============================= 18:37:20.0921 3680 [ 1B00662092F9F9568B995902F0CC40D5 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys 18:37:21.0081 3680 1394ohci - ok 18:37:21.0121 3680 [ 6F11E88748CDEFD2F76AA215F97DDFE5 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys 18:37:21.0151 3680 ACPI - ok 18:37:21.0171 3680 [ 63B05A0420CE4BF0E4AF6DCC7CADA254 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys 18:37:21.0271 3680 AcpiPmi - ok 18:37:21.0411 3680 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 18:37:21.0441 3680 AdobeFlashPlayerUpdateSvc - ok 18:37:21.0501 3680 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 18:37:21.0561 3680 adp94xx - ok 18:37:21.0591 3680 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 18:37:21.0651 3680 adpahci - ok 18:37:21.0671 3680 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 18:37:21.0711 3680 adpu320 - ok 18:37:21.0741 3680 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 18:37:21.0951 3680 AeLookupSvc - ok 18:37:22.0011 3680 [ DB9D6C6B2CD95A9CA414D045B627422E ] AFD C:\Windows\system32\drivers\afd.sys 18:37:22.0081 3680 AFD - ok 18:37:22.0131 3680 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\DRIVERS\agp440.sys 18:37:22.0171 3680 agp440 - ok 18:37:22.0191 3680 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 18:37:22.0271 3680 ALG - ok 18:37:22.0301 3680 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\DRIVERS\aliide.sys 18:37:22.0331 3680 aliide - ok 18:37:22.0351 3680 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\DRIVERS\amdide.sys 18:37:22.0381 3680 amdide - ok 18:37:22.0431 3680 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 18:37:22.0481 3680 AmdK8 - ok 18:37:22.0511 3680 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 18:37:22.0581 3680 AmdPPM - ok 18:37:22.0631 3680 [ EC7EBAB00A4D8448BAB68D1E49B4BEB9 ] amdsata C:\Windows\system32\drivers\amdsata.sys 18:37:22.0671 3680 amdsata - ok 18:37:22.0731 3680 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 18:37:22.0761 3680 amdsbs - ok 18:37:22.0791 3680 [ DB27766102C7BF7E95140A2AA81D042E ] amdxata C:\Windows\system32\drivers\amdxata.sys 18:37:22.0821 3680 amdxata - ok 18:37:22.0921 3680 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 18:37:22.0951 3680 AntiVirSchedulerService - ok 18:37:23.0011 3680 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 18:37:23.0031 3680 AntiVirService - ok 18:37:23.0061 3680 [ 42FD751B27FA0E9C69BB39F39E409594 ] AppID C:\Windows\system32\drivers\appid.sys 18:37:23.0191 3680 AppID - ok 18:37:23.0211 3680 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 18:37:23.0311 3680 AppIDSvc - ok 18:37:23.0381 3680 [ D065BE66822847B7F127D1F90158376E ] Appinfo C:\Windows\System32\appinfo.dll 18:37:23.0451 3680 Appinfo - ok 18:37:23.0491 3680 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 18:37:23.0531 3680 arc - ok 18:37:23.0541 3680 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 18:37:23.0571 3680 arcsas - ok 18:37:23.0621 3680 aspnet_state - ok 18:37:23.0641 3680 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 18:37:23.0751 3680 AsyncMac - ok 18:37:23.0791 3680 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\DRIVERS\atapi.sys 18:37:23.0821 3680 atapi - ok 18:37:23.0881 3680 [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 18:37:23.0981 3680 AudioEndpointBuilder - ok 18:37:23.0991 3680 [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioSrv C:\Windows\System32\Audiosrv.dll 18:37:24.0071 3680 AudioSrv - ok 18:37:24.0101 3680 [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 18:37:24.0141 3680 avgntflt - ok 18:37:24.0191 3680 [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 18:37:24.0221 3680 avipbb - ok 18:37:24.0261 3680 [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 18:37:24.0281 3680 avkmgr - ok 18:37:24.0341 3680 [ B20B5FA5CA050E9926E4D1DB81501B32 ] AxInstSV C:\Windows\System32\AxInstSV.dll 18:37:24.0411 3680 AxInstSV - ok 18:37:24.0481 3680 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 18:37:24.0571 3680 b06bdrv - ok 18:37:24.0611 3680 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 18:37:24.0661 3680 b57nd60a - ok 18:37:24.0691 3680 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 18:37:24.0771 3680 BDESVC - ok 18:37:24.0791 3680 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 18:37:24.0891 3680 Beep - ok 18:37:24.0971 3680 [ 4992C609A6315671463E30F6512BC022 ] BFE C:\Windows\System32\bfe.dll 18:37:25.0091 3680 BFE - ok 18:37:25.0151 3680 [ 7F0C323FE3DA28AA4AA1BDA3F575707F ] BITS C:\Windows\System32\qmgr.dll 18:37:25.0281 3680 BITS - ok 18:37:25.0311 3680 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 18:37:25.0361 3680 blbdrive - ok 18:37:25.0401 3680 [ 19D20159708E152267E53B66677A4995 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 18:37:25.0501 3680 bowser - ok 18:37:25.0541 3680 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 18:37:25.0611 3680 BrFiltLo - ok 18:37:25.0631 3680 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 18:37:25.0661 3680 BrFiltUp - ok 18:37:25.0711 3680 [ 6B054C67AAA87843504E8E3C09102009 ] Browser C:\Windows\System32\browser.dll 18:37:25.0781 3680 Browser - ok 18:37:25.0801 3680 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 18:37:25.0891 3680 Brserid - ok 18:37:25.0911 3680 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 18:37:25.0961 3680 BrSerWdm - ok 18:37:25.0991 3680 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 18:37:26.0081 3680 BrUsbMdm - ok 18:37:26.0111 3680 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 18:37:26.0161 3680 BrUsbSer - ok 18:37:26.0201 3680 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 18:37:26.0281 3680 BthEnum - ok 18:37:26.0311 3680 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 18:37:26.0371 3680 BTHMODEM - ok 18:37:26.0401 3680 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 18:37:26.0471 3680 BthPan - ok 18:37:26.0521 3680 [ D59773C7FDD3D795D6FE402EEEA8D71E ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 18:37:26.0601 3680 BTHPORT - ok 18:37:26.0651 3680 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 18:37:26.0741 3680 bthserv - ok 18:37:26.0781 3680 [ 8504842634DD144C075B6B0C982CCEC4 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 18:37:26.0811 3680 BTHUSB - ok 18:37:26.0861 3680 [ 6BCFDC2B5B7F66D484486D4BD4B39A6B ] btwaudio C:\Windows\system32\drivers\btwaudio.sys 18:37:26.0891 3680 btwaudio - ok 18:37:26.0931 3680 [ 82DC8B7C626E526681C1BEBED2BC3FF9 ] btwavdt C:\Windows\system32\DRIVERS\btwavdt.sys 18:37:26.0961 3680 btwavdt - ok 18:37:27.0051 3680 [ 9B3BD0ECD82CC08409C55A36D8F56B93 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 18:37:27.0091 3680 btwdins - ok 18:37:27.0121 3680 [ 6149301DC3F81D6F9667A3FBAC410975 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys 18:37:27.0141 3680 btwl2cap - ok 18:37:27.0181 3680 [ 28E105AD3B79F440BF94780F507BF66A ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys 18:37:27.0201 3680 btwrchid - ok 18:37:27.0241 3680 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 18:37:27.0341 3680 cdfs - ok 18:37:27.0401 3680 [ 83D2D75E1EFB81B3450C18131443F7DB ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 18:37:27.0461 3680 cdrom - ok 18:37:27.0531 3680 [ 312E2F82AF11E79906898AC3E3D58A1F ] CertPropSvc C:\Windows\System32\certprop.dll 18:37:27.0621 3680 CertPropSvc - ok 18:37:27.0641 3680 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 18:37:27.0711 3680 circlass - ok 18:37:27.0741 3680 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 18:37:27.0771 3680 CLFS - ok 18:37:27.0791 3680 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 18:37:27.0831 3680 clr_optimization_v2.0.50727_32 - ok 18:37:27.0871 3680 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 18:37:27.0901 3680 clr_optimization_v2.0.50727_64 - ok 18:37:28.0001 3680 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 18:37:28.0081 3680 clr_optimization_v4.0.30319_32 - ok 18:37:28.0121 3680 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 18:37:28.0151 3680 clr_optimization_v4.0.30319_64 - ok 18:37:28.0171 3680 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 18:37:28.0221 3680 CmBatt - ok 18:37:28.0261 3680 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys 18:37:28.0291 3680 cmdide - ok 18:37:28.0331 3680 [ CA7720B73446FDDEC5C69519C1174C98 ] CNG C:\Windows\system32\Drivers\cng.sys 18:37:28.0431 3680 CNG - ok 18:37:28.0461 3680 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 18:37:28.0501 3680 Compbatt - ok 18:37:28.0531 3680 [ F26B3A86F6FA87CA360B879581AB4123 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys 18:37:28.0581 3680 CompositeBus - ok 18:37:28.0611 3680 COMSysApp - ok 18:37:28.0771 3680 cpuz132 - ok 18:37:28.0791 3680 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 18:37:28.0821 3680 crcdisk - ok 18:37:28.0871 3680 [ BAF19B633933A9FB4883D27D66C39E9A ] CryptSvc C:\Windows\system32\cryptsvc.dll 18:37:28.0941 3680 CryptSvc - ok 18:37:28.0991 3680 [ 7266972E86890E2B30C0C322E906B027 ] DcomLaunch C:\Windows\system32\rpcss.dll 18:37:29.0111 3680 DcomLaunch - ok 18:37:29.0181 3680 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 18:37:29.0301 3680 defragsvc - ok 18:37:29.0341 3680 [ 9C253CE7311CA60FC11C774692A13208 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 18:37:29.0421 3680 DfsC - ok 18:37:29.0481 3680 [ CE3B9562D997F69B330D181A8875960F ] Dhcp C:\Windows\system32\dhcpcore.dll 18:37:29.0611 3680 Dhcp - ok 18:37:29.0641 3680 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 18:37:29.0731 3680 discache - ok 18:37:29.0791 3680 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 18:37:29.0821 3680 Disk - ok 18:37:29.0921 3680 [ D5BCB77BE83CF99F508943945D46343D ] DKbFltr C:\Windows\SysWOW64\Drivers\DKbFltr.sys 18:37:29.0941 3680 DKbFltr - ok 18:37:29.0981 3680 [ 85CF424C74A1D5EC33533E1DBFF9920A ] Dnscache C:\Windows\System32\dnsrslvr.dll 18:37:30.0051 3680 Dnscache - ok 18:37:30.0071 3680 [ 14452ACDB09B70964C8C21BF80A13ACB ] dot3svc C:\Windows\System32\dot3svc.dll 18:37:30.0181 3680 dot3svc - ok 18:37:30.0211 3680 [ 8C2BA6BEA949EE6E68385F5692BAFB94 ] DPS C:\Windows\system32\dps.dll 18:37:30.0301 3680 DPS - ok 18:37:30.0341 3680 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 18:37:30.0391 3680 drmkaud - ok 18:37:30.0501 3680 [ EDF7343ACAAB182C082F26EA97706E83 ] DsiWMIService C:\Program Files (x86)\Launch Manager\dsiwmis.exe 18:37:30.0511 3680 DsiWMIService - ok 18:37:30.0571 3680 [ 1633B9ABF52784A1331476397A48CBEF ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 18:37:30.0631 3680 DXGKrnl - ok 18:37:30.0661 3680 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 18:37:30.0741 3680 EapHost - ok 18:37:30.0851 3680 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 18:37:31.0041 3680 ebdrv - ok 18:37:31.0091 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] EFS C:\Windows\System32\lsass.exe 18:37:31.0151 3680 EFS - ok 18:37:31.0211 3680 [ 47C071994C3F649F23D9CD075AC9304A ] ehRecvr C:\Windows\ehome\ehRecvr.exe 18:37:31.0321 3680 ehRecvr - ok 18:37:31.0341 3680 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 18:37:31.0421 3680 ehSched - ok 18:37:31.0481 3680 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 18:37:31.0531 3680 elxstor - ok 18:37:31.0611 3680 [ 3C07BC9529507A6FF3C336B5DADCA2C6 ] ePowerSvc C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe 18:37:31.0651 3680 ePowerSvc ( UnsignedFile.Multi.Generic ) - warning 18:37:31.0651 3680 ePowerSvc - detected UnsignedFile.Multi.Generic (1) 18:37:31.0681 3680 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys 18:37:31.0741 3680 ErrDev - ok 18:37:31.0791 3680 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 18:37:31.0881 3680 EventSystem - ok 18:37:31.0911 3680 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 18:37:32.0011 3680 exfat - ok 18:37:32.0041 3680 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 18:37:32.0161 3680 fastfat - ok 18:37:32.0241 3680 [ D607B2F1BEE3992AA6C2C92C0A2F0855 ] Fax C:\Windows\system32\fxssvc.exe 18:37:32.0371 3680 Fax - ok 18:37:32.0401 3680 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 18:37:32.0431 3680 fdc - ok 18:37:32.0451 3680 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 18:37:32.0541 3680 fdPHost - ok 18:37:32.0561 3680 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 18:37:32.0641 3680 FDResPub - ok 18:37:32.0651 3680 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 18:37:32.0691 3680 FileInfo - ok 18:37:32.0711 3680 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 18:37:32.0781 3680 Filetrace - ok 18:37:32.0791 3680 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 18:37:32.0831 3680 flpydisk - ok 18:37:32.0861 3680 [ F7866AF72ABBAF84B1FA5AA195378C59 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 18:37:32.0911 3680 FltMgr - ok 18:37:32.0981 3680 [ CB5E4B9C319E3C6BB363EB7E58A4A051 ] FontCache C:\Windows\system32\FntCache.dll 18:37:33.0071 3680 FontCache - ok 18:37:33.0151 3680 [ 8D89E3131C27FDD6932189CB785E1B7A ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 18:37:33.0171 3680 FontCache3.0.0.0 - ok 18:37:33.0201 3680 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 18:37:33.0231 3680 FsDepends - ok 18:37:33.0271 3680 [ D3E3F93D67821A2DB2B3D9FAC2DC2064 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 18:37:33.0301 3680 Fs_Rec - ok 18:37:33.0351 3680 [ AE87BA80D0EC3B57126ED2CDC15B24ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 18:37:33.0391 3680 fvevol - ok 18:37:33.0411 3680 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 18:37:33.0441 3680 gagp30kx - ok 18:37:33.0491 3680 [ FE5AB4525BC2EC68B9119A6E5D40128B ] gpsvc C:\Windows\System32\gpsvc.dll 18:37:33.0571 3680 gpsvc - ok 18:37:33.0681 3680 [ 816FD5A6F3C2F3D600900096632FC60E ] Greg_Service C:\Program Files (x86)\Acer\Registration\GregHSRW.exe 18:37:33.0731 3680 Greg_Service - ok 18:37:33.0741 3680 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 18:37:33.0811 3680 hcw85cir - ok 18:37:33.0861 3680 [ 6410F6F415B2A5A9037224C41DA8BF12 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 18:37:33.0941 3680 HdAudAddService - ok 18:37:33.0971 3680 [ 0A49913402747A0B67DE940FB42CBDBB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 18:37:34.0021 3680 HDAudBus - ok 18:37:34.0051 3680 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 18:37:34.0101 3680 HidBatt - ok 18:37:34.0141 3680 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 18:37:34.0201 3680 HidBth - ok 18:37:34.0231 3680 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 18:37:34.0301 3680 HidIr - ok 18:37:34.0321 3680 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 18:37:34.0461 3680 hidserv - ok 18:37:34.0521 3680 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 18:37:34.0551 3680 HidUsb - ok 18:37:34.0581 3680 [ EFA58EDE58DD74388FFD04CB32681518 ] hkmsvc C:\Windows\system32\kmsvc.dll 18:37:34.0681 3680 hkmsvc - ok 18:37:34.0711 3680 [ 046B2673767CA626E2CFB7FDF735E9E8 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 18:37:34.0811 3680 HomeGroupListener - ok 18:37:34.0851 3680 [ 06A7422224D9865A5613710A089987DF ] HomeGroupProvider C:\Windows\system32\provsvc.dll 18:37:34.0921 3680 HomeGroupProvider - ok 18:37:34.0971 3680 [ 0886D440058F203EBA0E1825E4355914 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys 18:37:35.0011 3680 HpSAMD - ok 18:37:35.0041 3680 [ CEE049CAC4EFA7F4E1E4AD014414A5D4 ] HTTP C:\Windows\system32\drivers\HTTP.sys 18:37:35.0161 3680 HTTP - ok 18:37:35.0201 3680 [ F17766A19145F111856378DF337A5D79 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 18:37:35.0221 3680 hwpolicy - ok 18:37:35.0251 3680 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 18:37:35.0291 3680 i8042prt - ok 18:37:35.0331 3680 [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe 18:37:35.0361 3680 IAANTMON - ok 18:37:35.0391 3680 [ 1D004CB1DA6323B1F55CAEF7F94B61D9 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 18:37:35.0421 3680 iaStor - ok 18:37:35.0451 3680 [ B75E45C564E944A2657167D197AB29DA ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 18:37:35.0501 3680 iaStorV - ok 18:37:35.0561 3680 [ 2F2BE70D3E02B6FA877921AB9516D43C ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 18:37:35.0671 3680 idsvc - ok 18:37:35.0891 3680 [ DFEAF0A1D98D397035012C8E28D1520F ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 18:37:36.0291 3680 igfx - ok 18:37:36.0331 3680 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 18:37:36.0371 3680 iirsp - ok 18:37:36.0421 3680 [ C5B4683680DF085B57BC53E5EF34861F ] IKEEXT C:\Windows\System32\ikeext.dll 18:37:36.0561 3680 IKEEXT - ok 18:37:36.0661 3680 [ D8BCE8176CB1084C6F5830C019D47166 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 18:37:36.0741 3680 IntcAzAudAddService - ok 18:37:36.0791 3680 [ D485D3BD3E2179AA86853A182F70699F ] IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys 18:37:36.0851 3680 IntcHdmiAddService - ok 18:37:36.0871 3680 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\DRIVERS\intelide.sys 18:37:36.0891 3680 intelide - ok 18:37:36.0941 3680 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 18:37:36.0981 3680 intelppm - ok 18:37:37.0021 3680 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 18:37:37.0101 3680 IPBusEnum - ok 18:37:37.0141 3680 [ 722DD294DF62483CECAAE6E094B4D695 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 18:37:37.0211 3680 IpFilterDriver - ok 18:37:37.0261 3680 [ F8E058D17363EC580E4B7232778B6CB5 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 18:37:37.0371 3680 iphlpsvc - ok 18:37:37.0391 3680 [ E2B4A4494DB7CB9B89B55CA268C337C5 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys 18:37:37.0451 3680 IPMIDRV - ok 18:37:37.0471 3680 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 18:37:37.0561 3680 IPNAT - ok 18:37:37.0591 3680 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 18:37:37.0621 3680 IRENUM - ok 18:37:37.0631 3680 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys 18:37:37.0661 3680 isapnp - ok 18:37:37.0701 3680 [ FA4D2557DE56D45B0A346F93564BE6E1 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys 18:37:37.0741 3680 iScsiPrt - ok 18:37:37.0791 3680 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 18:37:37.0821 3680 kbdclass - ok 18:37:37.0851 3680 [ 6DEF98F8541E1B5DCEB2C822A11F7323 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 18:37:37.0911 3680 kbdhid - ok 18:37:37.0921 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] KeyIso C:\Windows\system32\lsass.exe 18:37:37.0951 3680 KeyIso - ok 18:37:37.0991 3680 [ 4F4B5FDE429416877DE7143044582EB5 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 18:37:38.0021 3680 KSecDD - ok 18:37:38.0031 3680 [ 6F40465A44ECDC1731BEFAFEC5BDD03C ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 18:37:38.0071 3680 KSecPkg - ok 18:37:38.0091 3680 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 18:37:38.0181 3680 ksthunk - ok 18:37:38.0211 3680 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 18:37:38.0331 3680 KtmRm - ok 18:37:38.0391 3680 [ 2377EC4CC3E356655B996F39B43486B6 ] L1C C:\Windows\system32\DRIVERS\L1C62x64.sys 18:37:38.0421 3680 L1C - ok 18:37:38.0451 3680 [ 81F1D04D4D0E433099365127375FD501 ] LanmanServer C:\Windows\system32\srvsvc.dll 18:37:38.0541 3680 LanmanServer - ok 18:37:38.0581 3680 [ 27026EAC8818E8A6C00A1CAD2F11D29A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 18:37:38.0671 3680 LanmanWorkstation - ok 18:37:38.0711 3680 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 18:37:38.0791 3680 lltdio - ok 18:37:38.0831 3680 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 18:37:38.0961 3680 lltdsvc - ok 18:37:38.0971 3680 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 18:37:39.0041 3680 lmhosts - ok 18:37:39.0081 3680 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 18:37:39.0121 3680 LSI_FC - ok 18:37:39.0151 3680 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 18:37:39.0191 3680 LSI_SAS - ok 18:37:39.0201 3680 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 18:37:39.0241 3680 LSI_SAS2 - ok 18:37:39.0261 3680 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 18:37:39.0301 3680 LSI_SCSI - ok 18:37:39.0321 3680 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 18:37:39.0421 3680 luafv - ok 18:37:39.0511 3680 [ B712940A0A11D8C70C36B06135EC3FFA ] lxddCATSCustConnectService C:\Windows\system32\spool\DRIVERS\x64\3\\lxddserv.exe 18:37:39.0541 3680 lxddCATSCustConnectService - ok 18:37:39.0571 3680 lxdd_device - ok 18:37:39.0601 3680 [ F84C8F1000BC11E3B7B23CBD3BAFF111 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 18:37:39.0651 3680 Mcx2Svc - ok 18:37:39.0681 3680 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 18:37:39.0711 3680 megasas - ok 18:37:39.0731 3680 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 18:37:39.0771 3680 MegaSR - ok 18:37:39.0801 3680 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 18:37:39.0891 3680 MMCSS - ok 18:37:39.0911 3680 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 18:37:39.0991 3680 Modem - ok 18:37:40.0031 3680 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 18:37:40.0081 3680 monitor - ok 18:37:40.0131 3680 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 18:37:40.0161 3680 mouclass - ok 18:37:40.0191 3680 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 18:37:40.0221 3680 mouhid - ok 18:37:40.0231 3680 [ 791AF66C4D0E7C90A3646066386FB571 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 18:37:40.0251 3680 mountmgr - ok 18:37:40.0351 3680 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 18:37:40.0391 3680 MozillaMaintenance - ok 18:37:40.0401 3680 [ 609D1D87649ECC19796F4D76D4C15CEA ] mpio C:\Windows\system32\DRIVERS\mpio.sys 18:37:40.0441 3680 mpio - ok 18:37:40.0461 3680 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 18:37:40.0531 3680 mpsdrv - ok 18:37:40.0581 3680 [ AECAB449567D1846DAD63ECE49E893E3 ] MpsSvc C:\Windows\system32\mpssvc.dll 18:37:40.0731 3680 MpsSvc - ok 18:37:40.0771 3680 [ 30524261BB51D96D6FCBAC20C810183C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 18:37:40.0831 3680 MRxDAV - ok 18:37:40.0861 3680 [ 040D62A9D8AD28922632137ACDD984F2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 18:37:40.0911 3680 mrxsmb - ok 18:37:40.0941 3680 [ F0067552F8F9B33D7C59403AB808A3CB ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 18:37:40.0991 3680 mrxsmb10 - ok 18:37:41.0001 3680 [ 3C142D31DE9F2F193218A53FE2632051 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 18:37:41.0061 3680 mrxsmb20 - ok 18:37:41.0091 3680 [ 5C37497276E3B3A5488B23A326A754B7 ] msahci C:\Windows\system32\DRIVERS\msahci.sys 18:37:41.0111 3680 msahci - ok 18:37:41.0131 3680 [ 8D27B597229AED79430FB9DB3BCBFBD0 ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys 18:37:41.0171 3680 msdsm - ok 18:37:41.0191 3680 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 18:37:41.0251 3680 MSDTC - ok 18:37:41.0291 3680 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 18:37:41.0351 3680 Msfs - ok 18:37:41.0371 3680 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 18:37:41.0461 3680 mshidkmdf - ok 18:37:41.0481 3680 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys 18:37:41.0511 3680 msisadrv - ok 18:37:41.0541 3680 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 18:37:41.0641 3680 MSiSCSI - ok 18:37:41.0651 3680 msiserver - ok 18:37:41.0691 3680 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 18:37:41.0771 3680 MSKSSRV - ok 18:37:41.0801 3680 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 18:37:41.0891 3680 MSPCLOCK - ok 18:37:41.0911 3680 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 18:37:42.0001 3680 MSPQM - ok 18:37:42.0041 3680 [ 89CB141AA8616D8C6A4610FA26C60964 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 18:37:42.0091 3680 MsRPC - ok 18:37:42.0111 3680 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 18:37:42.0131 3680 mssmbios - ok 18:37:42.0151 3680 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 18:37:42.0241 3680 MSTEE - ok 18:37:42.0261 3680 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 18:37:42.0311 3680 MTConfig - ok 18:37:42.0331 3680 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 18:37:42.0361 3680 Mup - ok 18:37:42.0391 3680 [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys 18:37:42.0411 3680 mwlPSDFilter - ok 18:37:42.0431 3680 [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys 18:37:42.0451 3680 mwlPSDNServ - ok 18:37:42.0471 3680 [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys 18:37:42.0491 3680 mwlPSDVDisk - ok 18:37:42.0551 3680 [ 0F5FAAC852DB4C340B7A2F187E3358B8 ] MWLService C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe 18:37:42.0571 3680 MWLService - ok 18:37:42.0631 3680 [ 4987E079A4530FA737A128BE54B63B12 ] napagent C:\Windows\system32\qagentRT.dll 18:37:42.0731 3680 napagent - ok 18:37:42.0771 3680 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 18:37:42.0831 3680 NativeWifiP - ok 18:37:42.0891 3680 [ CAD515DBD07D082BB317D9928CE8962C ] NDIS C:\Windows\system32\drivers\ndis.sys 18:37:42.0961 3680 NDIS - ok 18:37:42.0981 3680 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 18:37:43.0071 3680 NdisCap - ok 18:37:43.0101 3680 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 18:37:43.0191 3680 NdisTapi - ok 18:37:43.0231 3680 [ F105BA1E22BF1F2EE8F005D4305E4BEC ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 18:37:43.0321 3680 Ndisuio - ok 18:37:43.0351 3680 [ 557DFAB9CA1FCB036AC77564C010DAD3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 18:37:43.0421 3680 NdisWan - ok 18:37:43.0441 3680 [ 659B74FB74B86228D6338D643CD3E3CF ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 18:37:43.0521 3680 NDProxy - ok 18:37:43.0541 3680 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 18:37:43.0641 3680 NetBIOS - ok 18:37:43.0671 3680 [ 9162B273A44AB9DCE5B44362731D062A ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 18:37:43.0741 3680 NetBT - ok 18:37:43.0751 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] Netlogon C:\Windows\system32\lsass.exe 18:37:43.0771 3680 Netlogon - ok 18:37:43.0811 3680 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 18:37:43.0901 3680 Netman - ok 18:37:43.0931 3680 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 18:37:44.0091 3680 netprofm - ok 18:37:44.0141 3680 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 18:37:44.0181 3680 NetTcpPortSharing - ok 18:37:44.0391 3680 [ E72F4522801FFB8F0456924FB0017BFF ] NETw1v64 C:\Windows\system32\DRIVERS\NETw1v64.sys 18:37:44.0771 3680 NETw1v64 - ok 18:37:44.0981 3680 [ 4D85A450EDEF10C38882182753A49AAE ] NETw5s64 C:\Windows\system32\DRIVERS\NETw5s64.sys 18:37:45.0331 3680 NETw5s64 - ok 18:37:45.0501 3680 [ 705283C02177809CA9FA7CC58A4F1E77 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys 18:37:45.0801 3680 netw5v64 - ok 18:37:45.0831 3680 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 18:37:45.0861 3680 nfrd960 - ok 18:37:45.0901 3680 [ D9A0CE66046D6EFA0C61BAA885CBA0A8 ] NlaSvc C:\Windows\System32\nlasvc.dll 18:37:46.0001 3680 NlaSvc - ok 18:37:46.0021 3680 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 18:37:46.0121 3680 Npfs - ok 18:37:46.0151 3680 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 18:37:46.0241 3680 nsi - ok 18:37:46.0251 3680 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 18:37:46.0341 3680 nsiproxy - ok 18:37:46.0411 3680 [ 184C189D4FC416978550FC599BB4EDDA ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 18:37:46.0521 3680 Ntfs - ok 18:37:46.0571 3680 [ 70E3EB0CEF795D348F05E5A9B115F491 ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe 18:37:46.0591 3680 NTI IScheduleSvc - ok 18:37:46.0611 3680 [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys 18:37:46.0631 3680 NTIDrvr - ok 18:37:46.0651 3680 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 18:37:46.0721 3680 Null - ok 18:37:46.0761 3680 [ A4D9C9A608A97F59307C2F2600EDC6A4 ] nvraid C:\Windows\system32\drivers\nvraid.sys 18:37:46.0801 3680 nvraid - ok 18:37:46.0821 3680 [ 6C1D5F70E7A6A3FD1C90D840EDC048B9 ] nvstor C:\Windows\system32\drivers\nvstor.sys 18:37:46.0851 3680 nvstor - ok 18:37:46.0871 3680 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys 18:37:46.0901 3680 nv_agp - ok 18:37:46.0981 3680 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 18:37:47.0041 3680 odserv - ok 18:37:47.0061 3680 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys 18:37:47.0131 3680 ohci1394 - ok 18:37:47.0191 3680 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 18:37:47.0231 3680 ose - ok 18:37:47.0281 3680 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 18:37:47.0361 3680 p2pimsvc - ok 18:37:47.0391 3680 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 18:37:47.0421 3680 p2psvc - ok 18:37:47.0451 3680 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 18:37:47.0481 3680 Parport - ok 18:37:47.0521 3680 [ 90061B1ACFE8CCAA5345750FFE08D8B8 ] partmgr C:\Windows\system32\drivers\partmgr.sys 18:37:47.0551 3680 partmgr - ok 18:37:47.0571 3680 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 18:37:47.0661 3680 PcaSvc - ok 18:37:47.0701 3680 [ F36F6504009F2FB0DFD1B17A116AD74B ] pci C:\Windows\system32\DRIVERS\pci.sys 18:37:47.0761 3680 pci - ok 18:37:47.0771 3680 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\DRIVERS\pciide.sys 18:37:47.0801 3680 pciide - ok 18:37:47.0831 3680 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 18:37:47.0891 3680 pcmcia - ok 18:37:47.0911 3680 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 18:37:47.0951 3680 pcw - ok 18:37:47.0991 3680 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 18:37:48.0101 3680 PEAUTH - ok 18:37:48.0131 3680 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 18:37:48.0171 3680 PerfHost - ok 18:37:48.0241 3680 [ 557E9A86F65F0DE18C9B6751DFE9D3F1 ] pla C:\Windows\system32\pla.dll 18:37:48.0441 3680 pla - ok 18:37:48.0511 3680 [ 98B1721B8718164293B9701B98C52D77 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 18:37:48.0611 3680 PlugPlay - ok 18:37:48.0631 3680 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 18:37:48.0691 3680 PNRPAutoReg - ok 18:37:48.0731 3680 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 18:37:48.0761 3680 PNRPsvc - ok 18:37:48.0831 3680 [ 166EB40D1F5B47E615DE3D0FFFE5F243 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 18:37:48.0971 3680 PolicyAgent - ok 18:37:49.0001 3680 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 18:37:49.0081 3680 Power - ok 18:37:49.0141 3680 [ 27CC19E81BA5E3403C48302127BDA717 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 18:37:49.0211 3680 PptpMiniport - ok 18:37:49.0241 3680 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 18:37:49.0291 3680 Processor - ok 18:37:49.0331 3680 [ 97293447431311C06703368AD0F6C4BE ] ProfSvc C:\Windows\system32\profsvc.dll 18:37:49.0391 3680 ProfSvc - ok 18:37:49.0411 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] ProtectedStorage C:\Windows\system32\lsass.exe 18:37:49.0431 3680 ProtectedStorage - ok 18:37:49.0451 3680 [ EE992183BD8EAEFD9973F352E587A299 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 18:37:49.0511 3680 Psched - ok 18:37:49.0571 3680 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 18:37:49.0681 3680 ql2300 - ok 18:37:49.0701 3680 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 18:37:49.0731 3680 ql40xx - ok 18:37:49.0771 3680 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 18:37:49.0841 3680 QWAVE - ok 18:37:49.0861 3680 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 18:37:49.0891 3680 QWAVEdrv - ok 18:37:49.0911 3680 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 18:37:50.0001 3680 RasAcd - ok 18:37:50.0041 3680 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 18:37:50.0121 3680 RasAgileVpn - ok 18:37:50.0141 3680 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 18:37:50.0221 3680 RasAuto - ok 18:37:50.0261 3680 [ 87A6E852A22991580D6D39ADC4790463 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 18:37:50.0341 3680 Rasl2tp - ok 18:37:50.0381 3680 [ 47394ED3D16D053F5906EFE5AB51CC83 ] RasMan C:\Windows\System32\rasmans.dll 18:37:50.0491 3680 RasMan - ok 18:37:50.0511 3680 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 18:37:50.0601 3680 RasPppoe - ok 18:37:50.0631 3680 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 18:37:50.0711 3680 RasSstp - ok 18:37:50.0741 3680 [ 3BAC8142102C15D59A87757C1D41DCE5 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 18:37:50.0861 3680 rdbss - ok 18:37:50.0881 3680 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 18:37:50.0921 3680 rdpbus - ok 18:37:50.0931 3680 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 18:37:51.0001 3680 RDPCDD - ok 18:37:51.0021 3680 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 18:37:51.0101 3680 RDPENCDD - ok 18:37:51.0131 3680 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 18:37:51.0191 3680 RDPREFMP - ok 18:37:51.0231 3680 [ 447DE7E3DEA39D422C1504F245B668B1 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 18:37:51.0321 3680 RDPWD - ok 18:37:51.0361 3680 [ 634B9A2181D98F15941236886164EC8B ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 18:37:51.0411 3680 rdyboost - ok 18:37:51.0441 3680 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 18:37:51.0531 3680 RemoteAccess - ok 18:37:51.0571 3680 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 18:37:51.0671 3680 RemoteRegistry - ok 18:37:51.0711 3680 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 18:37:51.0771 3680 RFCOMM - ok 18:37:51.0801 3680 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 18:37:51.0871 3680 RpcEptMapper - ok 18:37:51.0891 3680 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 18:37:51.0931 3680 RpcLocator - ok 18:37:51.0981 3680 [ 7266972E86890E2B30C0C322E906B027 ] RpcSs C:\Windows\system32\rpcss.dll 18:37:52.0051 3680 RpcSs - ok 18:37:52.0101 3680 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 18:37:52.0171 3680 rspndr - ok 18:37:52.0221 3680 [ 4A25DC970C58104602ED274DACAFD784 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys 18:37:52.0281 3680 RSUSBSTOR - ok 18:37:52.0311 3680 [ B5A4B7D779CF4070DF408DE18BD33B02 ] RS_Service C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe 18:37:52.0341 3680 RS_Service ( UnsignedFile.Multi.Generic ) - warning 18:37:52.0341 3680 RS_Service - detected UnsignedFile.Multi.Generic (1) 18:37:52.0361 3680 RtsUIR - ok 18:37:52.0381 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] SamSs C:\Windows\system32\lsass.exe 18:37:52.0401 3680 SamSs - ok 18:37:52.0441 3680 [ E3BBB89983DAF5622C1D50CF49F28227 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys 18:37:52.0471 3680 sbp2port - ok 18:37:52.0491 3680 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 18:37:52.0571 3680 SCardSvr - ok 18:37:52.0591 3680 [ C94DA20C7E3BA1DCA269BC8460D98387 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 18:37:52.0681 3680 scfilter - ok 18:37:52.0731 3680 [ 624D0F5FF99428BB90A5B8A4123E918E ] Schedule C:\Windows\system32\schedsvc.dll 18:37:52.0861 3680 Schedule - ok 18:37:52.0901 3680 [ 312E2F82AF11E79906898AC3E3D58A1F ] SCPolicySvc C:\Windows\System32\certprop.dll 18:37:52.0971 3680 SCPolicySvc - ok 18:37:53.0001 3680 [ 765A27C3279CE11D14CB9E4F5869FCA5 ] SDRSVC C:\Windows\System32\SDRSVC.dll 18:37:53.0081 3680 SDRSVC - ok 18:37:53.0121 3680 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 18:37:53.0211 3680 secdrv - ok 18:37:53.0231 3680 [ 463B386EBC70F98DA5DFF85F7E654346 ] seclogon C:\Windows\system32\seclogon.dll 18:37:53.0331 3680 seclogon - ok 18:37:53.0361 3680 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 18:37:53.0441 3680 SENS - ok 18:37:53.0461 3680 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 18:37:53.0501 3680 SensrSvc - ok 18:37:53.0521 3680 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 18:37:53.0551 3680 Serenum - ok 18:37:53.0581 3680 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 18:37:53.0641 3680 Serial - ok 18:37:53.0661 3680 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 18:37:53.0701 3680 sermouse - ok 18:37:53.0751 3680 [ C3BC61CE47FF6F4E88AB8A3B429A36AF ] SessionEnv C:\Windows\system32\sessenv.dll 18:37:53.0851 3680 SessionEnv - ok 18:37:53.0891 3680 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 18:37:53.0961 3680 sffdisk - ok 18:37:53.0981 3680 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 18:37:54.0021 3680 sffp_mmc - ok 18:37:54.0051 3680 [ 178298F767FE638C9FEDCBDEF58BB5E4 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 18:37:54.0071 3680 sffp_sd - ok 18:37:54.0111 3680 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 18:37:54.0131 3680 sfloppy - ok 18:37:54.0181 3680 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 18:37:54.0281 3680 SharedAccess - ok 18:37:54.0321 3680 [ 0298AC45D0EFFFB2DB4BAA7DD186E7BF ] ShellHWDetection C:\Windows\System32\shsvcs.dll 18:37:54.0391 3680 ShellHWDetection - ok 18:37:54.0421 3680 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 18:37:54.0451 3680 SiSRaid2 - ok 18:37:54.0461 3680 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 18:37:54.0501 3680 SiSRaid4 - ok 18:37:54.0561 3680 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 18:37:54.0581 3680 SkypeUpdate - ok 18:37:54.0601 3680 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 18:37:54.0691 3680 Smb - ok 18:37:54.0751 3680 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 18:37:54.0811 3680 SNMPTRAP - ok 18:37:54.0851 3680 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 18:37:54.0881 3680 spldr - ok 18:37:54.0921 3680 [ 567977DC43CC13C4C35ED7084C0B84D5 ] Spooler C:\Windows\System32\spoolsv.exe 18:37:54.0971 3680 Spooler - ok 18:37:55.0091 3680 [ 913D843498553A1BC8F8DBAD6358E49F ] sppsvc C:\Windows\system32\sppsvc.exe 18:37:55.0251 3680 sppsvc - ok 18:37:55.0291 3680 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 18:37:55.0381 3680 sppuinotify - ok 18:37:55.0431 3680 [ 2408C0366D96BCDF63E8F1C78E4A29C5 ] srv C:\Windows\system32\DRIVERS\srv.sys 18:37:55.0531 3680 srv - ok 18:37:55.0561 3680 [ 76548F7B818881B47D8D1AE1BE9C11F8 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 18:37:55.0601 3680 srv2 - ok 18:37:55.0621 3680 [ 0AF6E19D39C70844C5CAA8FB0183C36E ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 18:37:55.0691 3680 srvnet - ok 18:37:55.0721 3680 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 18:37:55.0811 3680 SSDPSRV - ok 18:37:55.0831 3680 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 18:37:55.0921 3680 SstpSvc - ok 18:37:55.0971 3680 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 18:37:55.0991 3680 stexstor - ok 18:37:56.0051 3680 [ 52D0E33B681BD0F33FDC08812FEE4F7D ] stisvc C:\Windows\System32\wiaservc.dll 18:37:56.0101 3680 stisvc - ok 18:37:56.0141 3680 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys 18:37:56.0171 3680 swenum - ok 18:37:56.0181 3680 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 18:37:56.0291 3680 swprv - ok 18:37:56.0341 3680 [ BCF305959B53B200CEB2AD25AD22F8A7 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 18:37:56.0371 3680 SynTP - ok 18:37:56.0441 3680 [ 3C1284516A62078FB68F768DE4F1A7BE ] SysMain C:\Windows\system32\sysmain.dll 18:37:56.0561 3680 SysMain - ok 18:37:56.0591 3680 [ 238935C3CF2854886DC7CBB2A0E2CC66 ] TabletInputService C:\Windows\System32\TabSvc.dll 18:37:56.0651 3680 TabletInputService - ok 18:37:56.0681 3680 [ 884264AC597B690C5707C89723BB8E7B ] TapiSrv C:\Windows\System32\tapisrv.dll 18:37:56.0791 3680 TapiSrv - ok 18:37:56.0821 3680 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 18:37:56.0881 3680 TBS - ok 18:37:56.0961 3680 [ 624C5B3AA4C99B3184BB922D9ECE3FF0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 18:37:57.0051 3680 Tcpip - ok 18:37:57.0121 3680 [ 624C5B3AA4C99B3184BB922D9ECE3FF0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 18:37:57.0181 3680 TCPIP6 - ok 18:37:57.0211 3680 [ 76D078AF6F587B162D50210F761EB9ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 18:37:57.0271 3680 tcpipreg - ok 18:37:57.0311 3680 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 18:37:57.0341 3680 TDPIPE - ok 18:37:57.0381 3680 [ 7518F7BCFD4B308ABC9192BACAF6C970 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 18:37:57.0421 3680 TDTCP - ok 18:37:57.0441 3680 [ 079125C4B17B01FCAEEBCE0BCB290C0F ] tdx C:\Windows\system32\DRIVERS\tdx.sys 18:37:57.0531 3680 tdx - ok 18:37:57.0561 3680 [ C448651339196C0E869A355171875522 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 18:37:57.0591 3680 TermDD - ok 18:37:57.0641 3680 [ 0F05EC2887BFE197AD82A13287D2F404 ] TermService C:\Windows\System32\termsrv.dll 18:37:57.0781 3680 TermService - ok 18:37:57.0821 3680 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 18:37:57.0881 3680 Themes - ok 18:37:57.0911 3680 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 18:37:57.0971 3680 THREADORDER - ok 18:37:58.0061 3680 [ E319535A8124F25C1C9C5288CACF3101 ] TomTomHOMEService C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe 18:37:58.0081 3680 TomTomHOMEService - ok 18:37:58.0091 3680 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 18:37:58.0191 3680 TrkWks - ok 18:37:58.0271 3680 [ 840F7FB849F5887A49BA18C13B2DA920 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 18:37:58.0291 3680 TrustedInstaller - ok 18:37:58.0331 3680 [ 61B96C26131E37B24E93327A0BD1FB95 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 18:37:58.0421 3680 tssecsrv - ok 18:37:58.0461 3680 [ 3836171A2CDF3AF8EF10856DB9835A70 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 18:37:58.0551 3680 tunnel - ok 18:37:58.0581 3680 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 18:37:58.0611 3680 uagp35 - ok 18:37:58.0631 3680 [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys 18:37:58.0651 3680 UBHelper - ok 18:37:58.0671 3680 [ D47BAEAD86C65D4F4069D7CE0A4EDCEB ] udfs C:\Windows\system32\DRIVERS\udfs.sys 18:37:58.0781 3680 udfs - ok 18:37:58.0811 3680 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 18:37:58.0851 3680 UI0Detect - ok 18:37:58.0871 3680 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys 18:37:58.0901 3680 uliagpkx - ok 18:37:58.0931 3680 [ EAB6C35E62B1B0DB0D1B48B671D3A117 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 18:37:58.0981 3680 umbus - ok 18:37:59.0011 3680 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 18:37:59.0051 3680 UmPass - ok 18:37:59.0111 3680 [ 70DDE3A86DBEB1D6C3C30AD687B1877A ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe 18:37:59.0131 3680 Updater Service - ok 18:37:59.0161 3680 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 18:37:59.0261 3680 upnphost - ok 18:37:59.0291 3680 [ 7B6A127C93EE590E4D79A5F2A76FE46F ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 18:37:59.0351 3680 usbccgp - ok 18:37:59.0361 3680 USBCCID - ok 18:37:59.0411 3680 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys 18:37:59.0471 3680 usbcir - ok 18:37:59.0501 3680 [ 92969BA5AC44E229C55A332864F79677 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 18:37:59.0531 3680 usbehci - ok 18:37:59.0561 3680 [ E7DF1CFD28CA86B35EF5ADD0735CEEF3 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 18:37:59.0581 3680 usbhub - ok 18:37:59.0601 3680 [ F1BB1E55F1E7A65C5839CCC7B36D773E ] usbohci C:\Windows\system32\drivers\usbohci.sys 18:37:59.0651 3680 usbohci - ok 18:37:59.0671 3680 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 18:37:59.0711 3680 usbprint - ok 18:37:59.0741 3680 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 18:37:59.0781 3680 usbscan - ok 18:37:59.0791 3680 [ F39983647BC1F3E6100778DDFE9DCE29 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 18:37:59.0871 3680 USBSTOR - ok 18:37:59.0881 3680 [ BC3070350A491D84B518D7CCA9ABD36F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 18:37:59.0921 3680 usbuhci - ok 18:37:59.0961 3680 [ 7CB8C573C6E4A2714402CC0A36EAB4FE ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 18:38:00.0051 3680 usbvideo - ok 18:38:00.0081 3680 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 18:38:00.0171 3680 UxSms - ok 18:38:00.0181 3680 [ 156F6159457D0AA7E59B62681B56EB90 ] VaultSvc C:\Windows\system32\lsass.exe 18:38:00.0211 3680 VaultSvc - ok 18:38:00.0241 3680 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys 18:38:00.0271 3680 vdrvroot - ok 18:38:00.0311 3680 [ 44D73E0BBC1D3C8981304BA15135C2F2 ] vds C:\Windows\System32\vds.exe 18:38:00.0391 3680 vds - ok 18:38:00.0441 3680 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 18:38:00.0471 3680 vga - ok 18:38:00.0491 3680 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 18:38:00.0581 3680 VgaSave - ok 18:38:00.0621 3680 [ C82E748660F62A242B2DFAC1442F22A4 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys 18:38:00.0681 3680 vhdmp - ok 18:38:00.0691 3680 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\DRIVERS\viaide.sys 18:38:00.0721 3680 viaide - ok 18:38:00.0731 3680 [ 2B1A3DAE2B4E70DBBA822B7A03FBD4A3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys 18:38:00.0771 3680 volmgr - ok 18:38:00.0781 3680 [ 99B0CBB569CA79ACAED8C91461D765FB ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 18:38:00.0821 3680 volmgrx - ok 18:38:00.0861 3680 [ 9E425AC5C9A5A973273D169F43B4F5E1 ] volsnap C:\Windows\system32\drivers\volsnap.sys 18:38:00.0921 3680 volsnap - ok 18:38:00.0951 3680 [ ABD9B4A7E2D0AE51A3B8DF1AF3152D61 ] vpcbus C:\Windows\system32\DRIVERS\vpchbus.sys 18:38:01.0021 3680 vpcbus - ok 18:38:01.0051 3680 [ 8ACDA395841538CE9713A67FE8B2A3EB ] vpcnfltr C:\Windows\system32\DRIVERS\vpcnfltr.sys 18:38:01.0081 3680 vpcnfltr - ok 18:38:01.0101 3680 [ 31924E31BC315773E6D149B157DB46D5 ] vpcusb C:\Windows\system32\DRIVERS\vpcusb.sys 18:38:01.0131 3680 vpcusb - ok 18:38:01.0181 3680 [ C5B651E52540E6F46DA66574C74B4898 ] vpcvmm C:\Windows\system32\drivers\vpcvmm.sys 18:38:01.0211 3680 vpcvmm - ok 18:38:01.0251 3680 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 18:38:01.0291 3680 vsmraid - ok 18:38:01.0371 3680 [ 787898BF9FB6D7BD87A36E2D95C899BA ] VSS C:\Windows\system32\vssvc.exe 18:38:01.0491 3680 VSS - ok 18:38:01.0511 3680 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys 18:38:01.0551 3680 vwifibus - ok 18:38:01.0581 3680 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 18:38:01.0651 3680 vwififlt - ok 18:38:01.0701 3680 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 18:38:01.0731 3680 vwifimp - ok 18:38:01.0781 3680 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 18:38:01.0891 3680 W32Time - ok 18:38:01.0911 3680 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 18:38:01.0971 3680 WacomPen - ok 18:38:02.0001 3680 [ 47CA49400643EFFD3F1C9A27E1D69324 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 18:38:02.0101 3680 WANARP - ok 18:38:02.0121 3680 [ 47CA49400643EFFD3F1C9A27E1D69324 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 18:38:02.0191 3680 Wanarpv6 - ok 18:38:02.0271 3680 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 18:38:02.0401 3680 WatAdminSvc - ok 18:38:02.0461 3680 [ 5AB1BB85BD8B5089CC5D64200DEDAE68 ] wbengine C:\Windows\system32\wbengine.exe 18:38:02.0601 3680 wbengine - ok 18:38:02.0631 3680 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 18:38:02.0701 3680 WbioSrvc - ok 18:38:02.0741 3680 [ DD1BAE8EBFC653824D29CCF8C9054D68 ] wcncsvc C:\Windows\System32\wcncsvc.dll 18:38:02.0851 3680 wcncsvc - ok 18:38:02.0871 3680 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 18:38:02.0911 3680 WcsPlugInService - ok 18:38:02.0941 3680 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 18:38:02.0971 3680 Wd - ok 18:38:03.0031 3680 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 18:38:03.0121 3680 Wdf01000 - ok 18:38:03.0141 3680 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 18:38:03.0221 3680 WdiServiceHost - ok 18:38:03.0231 3680 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 18:38:03.0281 3680 WdiSystemHost - ok 18:38:03.0361 3680 [ 733006127F235BE7C35354EBEE7B9A7B ] WebClient C:\Windows\System32\webclnt.dll 18:38:03.0461 3680 WebClient - ok 18:38:03.0481 3680 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 18:38:03.0591 3680 Wecsvc - ok 18:38:03.0621 3680 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 18:38:03.0711 3680 wercplsupport - ok 18:38:03.0751 3680 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 18:38:03.0841 3680 WerSvc - ok 18:38:03.0881 3680 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 18:38:03.0951 3680 WfpLwf - ok 18:38:03.0991 3680 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 18:38:04.0021 3680 WIMMount - ok 18:38:04.0041 3680 WinDefend - ok 18:38:04.0051 3680 WinHttpAutoProxySvc - ok 18:38:04.0121 3680 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 18:38:04.0221 3680 Winmgmt - ok 18:38:04.0291 3680 [ 41FBB751936B387F9179E7F03A74FE29 ] WinRM C:\Windows\system32\WsmSvc.dll 18:38:04.0461 3680 WinRM - ok 18:38:04.0531 3680 [ 817EAFF5D38674EDD7713B9DFB8E9791 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 18:38:04.0581 3680 WinUsb - ok 18:38:04.0641 3680 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 18:38:04.0731 3680 Wlansvc - ok 18:38:04.0751 3680 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys 18:38:04.0801 3680 WmiAcpi - ok 18:38:04.0841 3680 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 18:38:04.0911 3680 wmiApSrv - ok 18:38:04.0951 3680 WMPNetworkSvc - ok 18:38:04.0961 3680 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 18:38:05.0001 3680 WPCSvc - ok 18:38:05.0041 3680 [ 2E57DDF2880A7E52E76F41C7E96D327B ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 18:38:05.0091 3680 WPDBusEnum - ok 18:38:05.0131 3680 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 18:38:05.0201 3680 ws2ifsl - ok 18:38:05.0221 3680 [ 8F9F3969933C02DA96EB0F84576DB43E ] wscsvc C:\Windows\System32\wscsvc.dll 18:38:05.0301 3680 wscsvc - ok 18:38:05.0301 3680 WSearch - ok 18:38:05.0391 3680 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 18:38:05.0521 3680 wuauserv - ok 18:38:05.0561 3680 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 18:38:05.0601 3680 WudfPf - ok 18:38:05.0641 3680 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 18:38:05.0701 3680 WUDFRd - ok 18:38:05.0741 3680 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 18:38:05.0791 3680 wudfsvc - ok 18:38:05.0821 3680 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 18:38:05.0901 3680 WwanSvc - ok 18:38:05.0931 3680 ================ Scan global =============================== 18:38:05.0961 3680 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 18:38:06.0001 3680 [ 4343295C52C8B1ADD906F1A37B940AA1 ] C:\Windows\system32\winsrv.dll 18:38:06.0031 3680 [ 4343295C52C8B1ADD906F1A37B940AA1 ] C:\Windows\system32\winsrv.dll 18:38:06.0071 3680 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 18:38:06.0111 3680 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 18:38:06.0131 3680 [Global] - ok 18:38:06.0131 3680 ================ Scan MBR ================================== 18:38:06.0141 3680 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 18:38:06.0551 3680 \Device\Harddisk0\DR0 - ok 18:38:06.0551 3680 ================ Scan VBR ================================== 18:38:06.0551 3680 [ 7AA6EE401060D947CFF3141BD539F5E5 ] \Device\Harddisk0\DR0\Partition1 18:38:06.0561 3680 \Device\Harddisk0\DR0\Partition1 - ok 18:38:06.0581 3680 [ E6FA9E737389AA83489D1A911BB5BFEA ] \Device\Harddisk0\DR0\Partition2 18:38:06.0581 3680 \Device\Harddisk0\DR0\Partition2 - ok 18:38:06.0581 3680 ============================================================ 18:38:06.0581 3680 Scan finished 18:38:06.0581 3680 ============================================================ 18:38:06.0591 2052 Detected object count: 2 18:38:06.0591 2052 Actual detected object count: 2 18:38:58.0121 2052 ePowerSvc ( UnsignedFile.Multi.Generic ) - skipped by user 18:38:58.0121 2052 ePowerSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 18:38:58.0121 2052 RS_Service ( UnsignedFile.Multi.Generic ) - skipped by user 18:38:58.0121 2052 RS_Service ( UnsignedFile.Multi.Generic ) - User select action: Skip Danke und VG |
|
03.01.2013, 19:25
| #6 | |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung Hi, combofix: Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!Downloade dir bitte Combofix von einem dieser Downloadspiegel Link 1 Link 2 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ --> GVU-Trojaner - vollständige Bereinigung |
|
03.01.2013, 21:01
| #7 |
| | GVU-Trojaner - vollständige Bereinigung Combofix Logfile: Code:
ATTFilter ComboFix 13-01-03.05 - Michi 03.01.2013 20:30:05.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3999.2652 [GMT 1:00]
ausgeführt von:: c:\users\Michi\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\programdata\Caelum
c:\programdata\Caelum\hs.cpf
c:\programdata\Caelum\save.cpf
c:\users\Michi\AppData\Local\.#
c:\users\Michi\AppData\Roaming\.#
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-12-03 bis 2013-01-03 ))))))))))))))))))))))))))))))
.
.
2013-01-01 13:17 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AA7E0A45-D19D-4220-A321-C06CBAA19FF5}\mpengine.dll
2012-12-27 20:56 . 2012-12-27 20:56 -------- d-----w- c:\users\Michi\AppData\Roaming\Malwarebytes
2012-12-27 20:55 . 2012-12-27 20:55 -------- d-----w- c:\programdata\Malwarebytes
2012-12-27 20:55 . 2012-12-27 20:55 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-27 20:55 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-27 19:32 . 2012-12-27 19:32 2889 ----a-w- c:\programdata\dsgsdgdsgdsgw.js
2012-12-26 20:49 . 2012-12-26 21:38 -------- d-----w- c:\users\Michi\AppData\Local\ChristmasPuzzle
2012-12-26 20:49 . 2012-12-26 20:49 -------- d-----w- c:\users\Michi\GNUstep
2012-12-26 19:42 . 2012-12-26 21:49 -------- d-----w- c:\program files (x86)\Christmas Puzzle
2012-12-26 19:40 . 2012-12-26 19:45 -------- d-----w- c:\program files (x86)\A Gnome's Home - Der Kristall des Lebens
2012-12-21 16:57 . 2012-12-21 18:00 -------- d-----w- c:\program files (x86)\Hero of the Kingdom
2012-12-21 15:40 . 2012-12-16 16:52 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-21 15:40 . 2012-12-16 14:40 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-21 15:40 . 2012-12-16 14:25 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-21 15:40 . 2012-12-16 14:25 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-20 21:24 . 2012-12-20 21:24 -------- d-----w- c:\users\Michi\AppData\Roaming\Desktop_Gaming
2012-12-19 20:01 . 2012-12-19 20:01 -------- d-----w- c:\users\Michi\AppData\Roaming\casualArts
2012-12-19 20:01 . 2012-12-19 20:01 -------- d-----w- c:\programdata\casualArts
2012-12-19 18:58 . 2012-12-19 18:58 -------- d-----w- c:\users\Michi\AppData\Roaming\rokapublish
2012-12-19 18:54 . 2012-12-19 21:02 -------- d-----w- c:\program files (x86)\Christmas Wonderland 3
2012-12-19 18:51 . 2012-12-20 22:25 -------- d-----w- c:\program files (x86)\Dr. Mal - Practice of Horror
2012-12-19 18:46 . 2012-12-19 19:59 -------- d-----w- c:\program files (x86)\Farm Quest
2012-12-17 18:50 . 2012-12-17 22:04 -------- d-----w- c:\program files (x86)\Pizza Chef 2
2012-12-15 15:14 . 2012-12-15 15:14 -------- d-----w- c:\users\Michi\AppData\Roaming\Jewels of the East India Company
2012-12-15 15:14 . 2012-12-15 15:14 -------- d-----w- c:\users\Michi\AppData\Roaming\WiiSports101in1
2012-12-15 15:12 . 2012-12-15 16:14 -------- d-----w- c:\program files (x86)\Die Schaetze der Ostindien-Kompanie
2012-12-12 18:19 . 2012-12-15 15:08 -------- d-----w- c:\program files (x86)\Oozi Earth Adventure
2012-12-11 20:05 . 2012-11-09 05:34 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-11 20:05 . 2012-11-09 04:49 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-12-11 20:05 . 2012-11-22 08:20 3147264 ----a-w- c:\windows\system32\win32k.sys
2012-12-11 20:03 . 2012-11-02 05:27 478208 ----a-w- c:\windows\system32\dpnet.dll
2012-12-11 20:03 . 2012-11-02 04:48 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
2012-12-11 20:03 . 2012-09-06 17:38 295792 ----a-w- c:\windows\system32\drivers\volsnap.sys
2012-12-08 12:18 . 2012-12-08 12:18 -------- d-----w- c:\programdata\10tons
2012-12-08 12:02 . 2012-12-08 13:19 -------- d-----w- c:\program files (x86)\Azkend 2 - The World Beneath
2012-12-08 11:52 . 2012-12-08 11:52 -------- d-----w- c:\users\Michi\AppData\Roaming\Meum-Trail
2012-12-07 22:40 . 2012-12-07 22:40 -------- d-----w- c:\users\Michi\AppData\Roaming\NGSLtd
2012-12-05 21:40 . 2012-12-05 21:40 -------- d--h--w- c:\windows\msdownld.tmp
2012-12-05 21:39 . 2012-12-05 22:42 -------- d-----w- c:\program files (x86)\Battleship
2012-12-04 21:19 . 2012-12-04 21:20 -------- d-----w- c:\users\Michi\AppData\Roaming\island_tribe_4_realore_bfg_en
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-11 21:50 . 2010-04-16 08:47 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-12-11 20:30 . 2012-08-22 19:23 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-12-11 20:30 . 2011-05-16 19:10 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-11-05 18:17 . 2012-11-05 18:17 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-11-05 18:17 . 2012-11-05 18:17 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2012-11-05 18:17 . 2012-11-05 18:17 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-10-16 21:20 . 2012-11-28 17:28 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 21:20 . 2012-11-28 17:28 347648 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 20:34 . 2012-11-28 17:28 559104 ----a-w- c:\windows\apppatch\AcLayers.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:18 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TomTomHOME.exe"="c:\program files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" [2012-07-26 247768]
"Spotify Web Helper"="c:\users\Michi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-11-05 1199576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-27 1191432]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-21 261888]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-24 588648]
"RemoteControl8"="c:\program files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe" [2009-04-15 91432]
"PDVD8LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD8\Language\Language.exe" [2009-04-15 50472]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
"lxddmon.exe"="c:\program files (x86) (x86)\Lexmark 2500 Series\lxddmon.exe" [2009-04-27 291496]
"lxddamon"="c:\program files (x86) (x86)\Lexmark 2500 Series\lxddamon.exe" [2009-04-27 25256]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2011-06-27 220552]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-08-12 348664]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2009-9-4 708608]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-17 1079584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 lxddCATSCustConnectService;lxddCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxddserv.exe [2007-05-25 34224]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw1v64.sys [2009-07-20 7058432]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-05-14 5435904]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-05-08 215552]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-13 1255736]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-10-11 27760]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60464]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-09 86224]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2009-08-24 107016]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [2009-08-19 787968]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
S2 lxdd_device;lxdd_device;c:\windows\SysWOW64\lxddcoms.exe [2007-05-25 567216]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-06 311592]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-21 62720]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-07-26 92632]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-05-25 138752]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys [2009-07-27 58880]
S3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-01-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-22 20:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\Michi\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-06 17:19 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-06 7940128]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-06 1833504]
"mwlDaemon"="c:\program files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-08-06 349480]
"Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2009-08-19 489472]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-08-12 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-08-12 387608]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-08-12 365592]
"PLFSetI"="c:\windows\PLFSetI.exe" [2009-10-14 200704]
"lxddmon.exe"="c:\program files (x86)\Lexmark 2500 Series\lxddmon.exe" [2009-04-27 291496]
"lxddamon"="c:\program files (x86)\Lexmark 2500 Series\lxddamon.exe" [2009-04-27 25256]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://start.icq.com/
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_3810tz&r=273604102306l0331z105t4851v745
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_3810tz&r=273604102306l0331z105t4851v745
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\users\Michi\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\users\Michi\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/ig?ct=1056757711&source=hade
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Uninstall_is1 - c:\program files (x86)\Common Files\DVDVideoSoft\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-01-03 20:56:44 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-01-03 19:56
.
Vor Suchlauf: 15 Verzeichnis(se), 215.619.301.376 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 216.130.412.544 Bytes frei
.
- - End Of File - - 4B43658F0F7877AAF5F092436AB3AC30
|
|
03.01.2013, 21:06
| #8 |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung Hi lade den CCleaner standard: CCleaner - Download - Filepony falls der CCleaner bereits instaliert, überspringen. öffnen, Tools,uninstall Llist, als txt speichern. öffnen. hinter, jedes von dir benötigte programm, schreibe notwendig. hinter, jedes, von dir nicht benötigte, unnötig. hinter, dir unbekannte, unbekannt. liste posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.01.2013, 21:35
| #9 |
| | GVU-Trojaner - vollständige Bereinigung Acer Backup Manager NewTech Infosystems 03.09.2009 23,1MB 2.0.0.22 notwendig Acer Crystal Eye webcam Ver:1.1.97.717 Chicony Electronics Co.,Ltd. 14.10.2009 1.1.97.717 notwendig Acer eRecovery Management Acer Incorporated 03.09.2009 4.05.3003 notwendig Acer GameZone Console Oberon Media, Inc. 03.09.2009 5.1.0.2 notwendig Acer GridVista Acer Inc. 14.10.2009 3.01.0730 notwendig Acer PowerSmart Manager Acer Incorporated 03.09.2009 4.07.3006 notwendig Acer Registration Acer Incorporated 14.10.2009 1.02.3004 notwendig Acer ScreenSaver Acer Incorporated 14.10.2009 1.2.0810 notwendig Acer Updater Acer Incorporated 03.09.2009 1.01.3014 notwendig Acer VCM Acer Incorporated 03.09.2009 4.05.3000 notwendig Acrobat.com Adobe Systems Incorporated 03.09.2009 1,60MB 1.6.65 notwendig Adobe AIR Adobe Systems Inc. 04.09.2009 1.5.0.7220 unbekannt Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 18.02.2011 10.0.42.34 notwendig Adobe Flash Player 11 Plugin Adobe Systems Incorporated 11.12.2012 6,00MB 11.5.502.135 notwendig Adobe Reader 9.5.2 MUI Adobe Systems Incorporated 16.08.2012 656MB 9.5.2 notwendig Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver Atheros Communications Inc. 03.09.2009 1.0.0.10 unbekannt Avira Free Antivirus Avira 14.11.2012 104MB 12.1.9.1236 notwendig Big Fish Games: Game Manager 21.08.2011 3.0.1.60 notwendig CCleaner Piriform 19.12.2012 3.26 Citavi Swiss Academic Software 11.01.2011 55,1MB 3.0.1.0 unbekannt Compatibility Pack für 2007 Office System Microsoft Corporation 11.12.2012 236MB 12.0.6612.1000 unbekannt CyberLink PowerDVD 8 CyberLink Corp. 14.10.2009 95,9MB 8.1.3201.50 unnötig DivX-Setup DivX, Inc. 25.07.2010 1.0.2.23 notwendig Dropbox Dropbox, Inc. 08.06.2012 1.4.8 unnötig ElsterFormular Landesfinanzdirektion Thüringen 19.05.2012 160MB 13.2.0.8623p notwendig eSobi v2 esobi Inc. 03.09.2009 20,4MB 2.0.4.000274 unbekannt Free Studio version 5.7.6.1015 DVDVideoSoft Ltd. 16.10.2012 546MB 5.7.6.1015 notwendig ICQ7.2 ICQ 11.01.2011 7.2 notwendig Identity Card Acer Incorporated 14.10.2009 1.00.3001 notwendig Intel(R) Graphics Media Accelerator Driver Intel Corporation 14.10.2009 54,2MB notwendig Intel® Matrix Storage Manager Intel Corporation 14.10.2009 notwendig Java 7 Update 9 Oracle 05.11.2012 128MB 7.0.90 unbekannt Launch Manager Acer Inc. 14.10.2009 3.0.05 notwendig Lexmark 2500 Series Lexmark International, Inc. 05.09.2010 notwendig Lexmark 2500 Series Lexmark International, Inc. 05.09.2010 notwendig Malwarebytes Anti-Malware Version 1.65.1.1000 Malwarebytes Corporation 27.12.2012 19,4MB 1.65.1.1000 Microsoft .NET Framework 1.1 13.10.2012 unbekannt Microsoft .NET Framework 4 Client Profile Microsoft Corporation 01.02.2011 38,8MB 4.0.30319 unbekannt Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 01.02.2011 2,93MB 4.0.30319 unbekannt Microsoft Office File Validation Add-In Microsoft Corporation 15.09.2011 7,95MB 14.0.5130.5003 unbekannt Microsoft Office Language Pack 2007 - German/Deutsch Microsoft Corporation 20.01.2012 12.0.6612.1000 notwendig Microsoft Office Live Add-in 1.5 Microsoft Corporation 25.04.2012 508KB 2.0.4024.1 unbekannt Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Corporation 15.11.2012 19,9MB 12.0.6612.1000 notwendig Microsoft Office Professional 2007 Microsoft Corporation 20.01.2012 12.0.6612.1000 notwendig Microsoft Office Suite Activation Assistant Microsoft Corporation 03.09.2009 8,36MB 2.9 unbekannt Microsoft Silverlight Microsoft Corporation 09.05.2012 226MB 4.1.10329.0 unbekannt Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 14.10.2009 1,72MB 3.1.0000 unbekannt Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 14.04.2010 252KB 8.0.50727.4053 unbekannt Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 16.06.2011 300KB 8.0.56336 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 08.12.2010 1,42MB 9.0.21022 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 13.04.2010 596KB 9.0.30729.4148 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 16.06.2011 600KB 9.0.30729.6161 unbekannt Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 17.10.2011 12,2MB 10.0.40219 unbekannt Microsoft Works Microsoft Corporation 10.10.2012 1,34GB 9.7.0621 notwendig Microsoft XNA Framework Redistributable 3.1 Microsoft Corporation 23.11.2012 7,55MB 3.1.10527.0 unbekannt Mozilla Firefox 17.0.1 (x86 de) Mozilla 09.12.2012 42,2MB 17.0.1 notwendig Mozilla Maintenance Service Mozilla 09.12.2012 329KB 17.0.1 notwendig MyWinLocker Egis Technology Inc. 03.09.2009 47,9MB 3.1.72.0 unbekannt Norton Online Backup Symantec 03.09.2009 2,09MB 1.2.0.36 unbekannt Pando Media Booster Pando Networks Inc. 11.10.2012 5,46MB 2.6.0.8 unbekannt PDF24 Creator 3.2.0 PDF24.org 01.07.2011 33,2MB notwendig Realtek High Definition Audio Driver Realtek Semiconductor Corp. 03.09.2009 6.0.1.5888 notwendig Realtek USB 2.0 Card Reader Realtek Semiconductor Corp. 03.09.2009 6.1.7100.30087 notwendig Skype™ 5.10 Skype Technologies S.A. 16.09.2012 19,4MB 5.10.116 notwendig Spotify Spotify AB 05.11.2012 0.8.5.1333.g822e0de8 notwendig Synaptics Pointing Device Driver Synaptics Incorporated 04.09.2009 13.2.2.0 unbekannt TomTom HOME Ihr Firmenname 09.09.2012 48,1MB 2.9.1 notwendig TomTom HOME Visual Studio Merge Modules TomTom International B.V. 24.12.2010 1,88MB 1.0.2 notwendig Uninstall 1.0.0.1 03.12.2010 10,4MB unbekannt Welcome Center Acer Incorporated 14.10.2009 1.00.3005 unbekannt WIDCOMM Bluetooth Software Broadcom Corporation 14.10.2009 144MB 6.2.0.9700 notwendig Windows Live Anmelde-Assistent Microsoft Corporation 14.10.2009 1,93MB 5.000.818.5 unbekannt Windows Live Essentials Microsoft Corporation 14.10.2009 14.0.8064.0206 unbekannt Windows Live Sync Microsoft Corporation 14.10.2009 2,79MB 14.0.8064.206 unbekannt Windows Live-Uploadtool Microsoft Corporation 14.10.2009 224KB 14.0.8014.1029 unbekannt |
|
03.01.2013, 21:41
| #10 |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung deinstaliere: Adobe Flash Player alle Adobe - Adobe Flash Player installieren neueste version laden adobe reader: Adobe - Adobe Reader herunterladen - Alle Versionen haken bei mcafee security scan raus nehmen bitte auch mal den adobe reader wie folgt konfigurieren: adobe reader öffnen, bearbeiten, voreinstellungen. allgemein: nur zertifizierte zusatz module verwenden, anhaken. internet: hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc. es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht. bei javascript den haken bei java script verwenden raus nehmen bei updater, automatisch instalieren wählen. übernehmen /ok deinstaliere: Citavi CyberLink Dropbox eSobi Java downloade Java jre: Java-Downloads für alle Betriebssysteme klicke: Download der Java-Software für Windows Offline laden, und instalieren deinstaliere: Windows Live : alle von dir nicht genutzten Öffne ccleaner, analysieren, starten, PC neustarten. Downloade Dir bitte AdwCleaner auf deinen Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.01.2013, 22:37
| #11 |
| | GVU-Trojaner - vollständige Bereinigung # AdwCleaner v2.104 - Datei am 03/01/2013 um 22:33:48 erstellt # Aktualisiert am 29/12/2012 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzer : Michi - MICHI-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Michi\Desktop\adwcleaner.exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gefunden : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\icqplugin.xml Datei Gefunden : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\icqplugin-1.xml Datei Gefunden : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\SweetIm.xml Ordner Gefunden : C:\ProgramData\ICQ\ICQToolbar Ordner Gefunden : C:\ProgramData\Partner Ordner Gefunden : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\SweetIMToolbarData ***** [Registrierungsdatenbank] ***** Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gefunden : HKCU\Software\Softonic Schlüssel Gefunden : HKCU\Software\SweetIM Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} Schlüssel Gefunden : HKLM\Software\SweetIM Schlüssel Gefunden : HKU\S-1-5-21-2008492655-792361683-3770733439-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} ***** [Internet Browser] ***** -\\ Internet Explorer v8.0.7600.17153 [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.icq.com/ [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd -\\ Mozilla Firefox v17.0.1 (de) Datei : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\prefs.js Gefunden : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q="[...] ************************* AdwCleaner[R1].txt - [2421 octets] - [03/01/2013 22:33:48] ########## EOF - C:\AdwCleaner[R1].txt - [2481 octets] ########## |
|
03.01.2013, 22:42
| #12 |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung Hi Downloade Dir bitte AdwCleaner auf deinen Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.01.2013, 22:53
| #13 |
| | GVU-Trojaner - vollständige Bereinigung # AdwCleaner v2.104 - Datei am 03/01/2013 um 22:46:39 erstellt # Aktualisiert am 29/12/2012 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzer : Michi - MICHI-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Michi\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\icqplugin.xml Datei Gelöscht : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\icqplugin-1.xml Datei Gelöscht : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\searchplugins\SweetIm.xml Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar Ordner Gelöscht : C:\ProgramData\Partner Ordner Gelöscht : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\SweetIMToolbarData ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\SweetIM Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19} Schlüssel Gelöscht : HKLM\Software\SweetIM ***** [Internet Browser] ***** -\\ Internet Explorer v8.0.7600.17153 Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.icq.com/ --> hxxp://www.google.com Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com -\\ Mozilla Firefox v17.0.1 (de) Datei : C:\Users\Michi\AppData\Roaming\Mozilla\Firefox\Profiles\1cj2eup5.default\prefs.js Gelöscht : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q="[...] ************************* AdwCleaner[R1].txt - [2548 octets] - [03/01/2013 22:33:48] AdwCleaner[S1].txt - [2394 octets] - [03/01/2013 22:46:39] ########## EOF - C:\AdwCleaner[S1].txt - [2454 octets] ########## |
|
03.01.2013, 22:54
| #14 |
| /// Malware-holic | GVU-Trojaner - vollständige Bereinigung ok, nu testen wie pc und programme laufen, nach neustart
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
|
03.01.2013, 23:04
| #15 |
| | GVU-Trojaner - vollständige Bereinigung Läuft alles normal, PC und Programme funktionieren noch |
|
| Themen zu GVU-Trojaner - vollständige Bereinigung |
| 7-zip, anhang, anti-malware, befinden, eingefangen, exploit.drop.gsa, folgende, gefangen, java/jogek.qk, konnte, malwarebytes, programm, pup.offerbundler.st, rechner, sauber, scanne, scannen, schädlinge, tr/ransom.if, tr/scar.dhbr, trojan.fakems, trojan.ransom.sugen, virus, vollständig, würde |
Linear-Darstellung
