Hallo,
als ich heute in der Systemsteuerung unnötige Programme aussortiert habe ist mir das Programm "Favorit" aufgefallen.
Es gab dabei keine Angabe wie groß es ist, und da ich es nicht kenne und auch nicht wissentlich installiert habe wollte ich es deinstallieren.
Dabei trat dann folgendes Problem auf:
Nach der Frage ob ich das Programm deinstallieren möchte öffnete sich ein schwarzes Fenster, das sich sofort wieder schloss und es passierte - garnichts!
Das Programm lässt sich also so nicht löschen.
Ich habe es daraufhin gegoogelt um herauszufinden um was für ein Programm es sich handelt und gelesen es wäre eine Art Spyware o.Ä.
Nun habe ich also Angst dass mein Computer "verseucht" ist und schonmal Malwarebytes darüberlaufen lassen. Gefunden hat es 21 "infizierte" Dateien, die Log Datei hänge ich an.
Es wäre sehr nett wenn ihr mir dabei helfen könntet.
LG Tibiana

Also ich habe jetzt auch noch mit OTL gescannt und die Log Dateien auch noch angehängt.
Tut mir leid wenn ich etwas übereifrig oder hektisch wirke, aber ein derartiges Problem hatte ich noch nie, und es macht mich etwas nervös/ängstlich :/

hi
Warum hat dein Windows noch nie Updates bekommen?
Servicepack 1 ist instaliert, aktuell währe servicepack 2
Internet explorer 8 ist instaliert, aktuell währe ie9
einige deiner USB sticks sind auch versaut (Mit Malware infiziert) oder du hattest einen solchen angeschlossen.
bitte schließe keine Sticks an momentan
dein Avira ist komplett veraltet, du hast avira 8, aktuell ist avira 113,
mir fallen da noch einige dinge auf, du musst dich auf jeden fall mal besser um deinen PC und die Software kümmern, kein Wunder, dass du dich mit Schadsoftware infizierst.

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

:OTL
O33 - MountPoints2\{03c943af-1deb-11dd-a4ee-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{03c943af-1deb-11dd-a4ee-001a92267e95}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\{442694f0-ed4d-11de-9132-001a92267e95}\Shell\AutoRun\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
O33 - MountPoints2\{442694f0-ed4d-11de-9132-001a92267e95}\Shell\open\command - "" = K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe
O33 - MountPoints2\{458518af-078b-11dd-ac4d-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{458518af-078b-11dd-ac4d-001a92267e95}\Shell\AutoRun\command - "" = F:\StartVMCLite.exe
O33 - MountPoints2\{458518e4-078b-11dd-ac4d-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{458518e4-078b-11dd-ac4d-001a92267e95}\Shell\AutoRun\command - "" = F:\StartVMCLite.exe
O33 - MountPoints2\{4869849f-a3df-11e0-88cb-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{4869849f-a3df-11e0-88cb-806e6f6e6963}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{930b149e-070a-11dd-8a7f-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{930b149e-070a-11dd-8a7f-806e6f6e6963}\Shell\AutoRun\command - "" = F:\StartVMCLite.exe
O33 - MountPoints2\{930b15ca-070a-11dd-8a7f-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{930b15ca-070a-11dd-8a7f-001a92267e95}\Shell\AutoRun\command - "" = F:\StartVMCLite.exe
O33 - MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\Shell\AutoRun\command - "" = K:\RavMon.exe
O33 - MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\Shell\explore\Command - "" = K:\RavMon.exe -e
O33 - MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\Shell\open\Command - "" = K:\RavMon.exe
O33 - MountPoints2\{a335d671-1716-11df-be30-001a92267e95}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{b5279cef-d9c6-11df-979f-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{b5279cef-d9c6-11df-979f-001a92267e95}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\Shell - "" = AutoRun
O33 - MountPoints2\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\F\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn

 :Files
:Commands
[EMPTYFLASH] 
[emptytemp]
         

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.

Also ich hab den OTL gestartet, und er hatte den killing Process schon abgeschlossen, dann kam allerdings eine Fehlermeldung dass OTL nicht mehr funktioniert und ich musste ihn schließen.
Jetzt macht der Conputer keinen Mucks mehr (ich schreibe von einem anderen Computer)
Was soll ich jetzt tun?

Edit: ich habe den explorer über den Taskmanager gestartet, jetzt funktioniert der Computer wieder normal.

Hi
starte mal neu, und versuche das OTL script erneut, alle Programme schließen.

Hallo,
Nach dem Neustart hat es jetzt geklappt.
Heraus kam:

All processes killed
========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{03c943af-1deb-11dd-a4ee-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03c943af-1deb-11dd-a4ee-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{03c943af-1deb-11dd-a4ee-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03c943af-1deb-11dd-a4ee-001a92267e95}\ not found.
File K:\LaunchU3.exe -a not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{442694f0-ed4d-11de-9132-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{442694f0-ed4d-11de-9132-001a92267e95}\ not found.
File K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{442694f0-ed4d-11de-9132-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{442694f0-ed4d-11de-9132-001a92267e95}\ not found.
File K:\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\autorunme.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{458518af-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{458518af-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{458518af-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{458518af-078b-11dd-ac4d-001a92267e95}\ not found.
File F:\StartVMCLite.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{458518e4-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{458518e4-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{458518e4-078b-11dd-ac4d-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{458518e4-078b-11dd-ac4d-001a92267e95}\ not found.
File F:\StartVMCLite.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4869849f-a3df-11e0-88cb-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4869849f-a3df-11e0-88cb-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4869849f-a3df-11e0-88cb-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4869849f-a3df-11e0-88cb-806e6f6e6963}\ not found.
File G:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{930b149e-070a-11dd-8a7f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{930b149e-070a-11dd-8a7f-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{930b149e-070a-11dd-8a7f-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{930b149e-070a-11dd-8a7f-806e6f6e6963}\ not found.
File F:\StartVMCLite.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{930b15ca-070a-11dd-8a7f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{930b15ca-070a-11dd-8a7f-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{930b15ca-070a-11dd-8a7f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{930b15ca-070a-11dd-8a7f-001a92267e95}\ not found.
File F:\StartVMCLite.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
File K:\RavMon.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
File K:\RavMon.exe -e not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99074e11-8ba2-11dd-86fd-001a92267e95}\ not found.
File K:\RavMon.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a335d671-1716-11df-be30-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a335d671-1716-11df-be30-001a92267e95}\ not found.
File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b5279cef-d9c6-11df-979f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b5279cef-d9c6-11df-979f-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b5279cef-d9c6-11df-979f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b5279cef-d9c6-11df-979f-001a92267e95}\ not found.
File K:\LaunchU3.exe -a not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c246df4f-a3d6-11e0-ba3f-001a92267e95}\ not found.
File G:\AutoRun.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Aileen
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Gast
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: Aileen
->Temp folder emptied: 37413 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 3030710 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gast
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1282677 bytes
->Java cache emptied: 23097 bytes
->FireFox cache emptied: 101838994 bytes
->Google Chrome cache emptied: 33605173 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 271932206 bytes
RecycleBin emptied: 9926810 bytes

Total Files Cleaned = 402,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 01062013_195747

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\TMP0000001777A501DF0EB42CCC not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

hi,
autorun deaktivieren:
http://www.trojaner-board.de/83238-a...sschalten.html
Alle deine Sticks anstecken (auch externe Festplatten, speicherkarten etc)
wenn du nicht alle anschließen kannst, bescheid geben.
malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Ok, soweit durch, erschienen ist:

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.01.06.04

Windows Vista Service Pack 1 x86 NTFS
Internet Explorer 8.0.6001.19088
Aileen :: AILEEN-PC [Administrator]

06.01.2013 20:20:19
mbam-log-2013-01-06 (20-20-19).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 483294
Laufzeit: 2 Stunde(n), 44 Minute(n), 21 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 14
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 2
C:\Program Files\Windows Live\Messenger\msimg32.dll (PUP.FunWebProducts) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Windows Live\Messenger\riched20.dll (PUP.FunWebProducts) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Hi
waren alle externen Datenträger angeschlossen?
hast du auf deinen externen Datenträgern wichtige Daten drauf? falls nein, solltest du die alle mal über computer, rechtsklick auf das jeweilige Laufwerk, formatieren.
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

So, auch der tdss killer ist fertig, ja alle externen Datenträger die vorhanden sind waren bzw, sind angeschlossen.
Beim Scan herausgekommen ist:

14:02:28.0621 1964 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
14:02:31.0585 1964 ============================================================
14:02:31.0585 1964 Current date / time: 2013/01/07 14:02:31.0585
14:02:31.0585 1964 SystemInfo:
14:02:31.0585 1964
14:02:31.0616 1964 OS Version: 6.0.6001 ServicePack: 1.0
14:02:31.0616 1964 Product type: Workstation
14:02:31.0616 1964 ComputerName: AILEEN-PC
14:02:31.0616 1964 UserName: Aileen
14:02:31.0616 1964 Windows directory: C:\Windows
14:02:31.0616 1964 System windows directory: C:\Windows
14:02:31.0616 1964 Processor architecture: Intel x86
14:02:31.0616 1964 Number of processors: 2
14:02:31.0616 1964 Page size: 0x1000
14:02:31.0616 1964 Boot type: Normal boot
14:02:31.0616 1964 ============================================================
14:02:44.0892 1964 Drive \Device\Harddisk0\DR0 - Size: 0x5D27216000 (372.61 Gb), SectorSize: 0x200, Cylinders: 0xC9E1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
14:02:46.0826 1964 Drive \Device\Harddisk1\DR1 - Size: 0xEEF00000 (3.73 Gb), SectorSize: 0x200, Cylinders: 0x1E7, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:02:46.0858 1964 ============================================================
14:02:46.0858 1964 \Device\Harddisk0\DR0:
14:02:46.0982 1964 MBR partitions:
14:02:46.0982 1964 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x2DED96E1
14:02:46.0982 1964 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2DED9720, BlocksNum 0xA5E1F0
14:02:46.0982 1964 \Device\Harddisk1\DR1:
14:02:46.0982 1964 MBR partitions:
14:02:46.0982 1964 ============================================================
14:02:47.0716 1964 C: <-> \Device\Harddisk0\DR0\Partition1
14:02:48.0246 1964 D: <-> \Device\Harddisk0\DR0\Partition2
14:02:48.0574 1964 ============================================================
14:02:48.0574 1964 Initialize success
14:02:48.0574 1964 ============================================================
14:05:13.0466 1004 ============================================================
14:05:13.0513 1004 Scan started
14:05:13.0513 1004 Mode: Manual; SigCheck; TDLFS;
14:05:13.0513 1004 ============================================================
14:05:27.0116 1004 ================ Scan system memory ========================
14:05:27.0116 1004 System memory - ok
14:05:27.0116 1004 ================ Scan services =============================
14:05:35.0946 1004 [ FCB8C7210F0135E24C6580F7F649C73C ] ACPI C:\Windows\system32\drivers\acpi.sys
14:05:42.0701 1004 ACPI - ok
14:05:43.0138 1004 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
14:05:44.0760 1004 adp94xx - ok
14:05:45.0072 1004 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
14:05:45.0852 1004 adpahci - ok
14:05:45.0961 1004 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
14:05:46.0663 1004 adpu160m - ok
14:05:46.0850 1004 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
14:05:47.0272 1004 adpu320 - ok
14:05:47.0724 1004 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:05:52.0622 1004 AeLookupSvc - ok
14:05:52.0981 1004 [ 48EB99503533C27AC6135648E5474457 ] AFD C:\Windows\system32\drivers\afd.sys
14:05:54.0182 1004 AFD - ok
14:05:54.0370 1004 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
14:05:54.0744 1004 agp440 - ok
14:05:54.0900 1004 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
14:05:55.0134 1004 aic78xx - ok
14:05:55.0212 1004 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
14:05:56.0491 1004 ALG - ok
14:05:56.0522 1004 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
14:05:56.0725 1004 aliide - ok
14:05:56.0819 1004 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
14:05:57.0022 1004 amdagp - ok
14:05:57.0100 1004 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
14:05:57.0256 1004 amdide - ok
14:05:57.0458 1004 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
14:05:58.0784 1004 AmdK7 - ok
14:05:58.0894 1004 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
14:05:59.0065 1004 AmdK8 - ok
14:05:59.0440 1004 [ A6FA9C14E649B2F3DE15390A1840774D ] AntiVirScheduler C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
14:05:59.0658 1004 AntiVirScheduler ( UnsignedFile.Multi.Generic ) - warning
14:05:59.0658 1004 AntiVirScheduler - detected UnsignedFile.Multi.Generic (1)
14:05:59.0736 1004 [ 58B3B75B49FF3EDFA71A2141F934629B ] AntiVirService C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
14:05:59.0861 1004 AntiVirService ( UnsignedFile.Multi.Generic ) - warning
14:05:59.0861 1004 AntiVirService - detected UnsignedFile.Multi.Generic (1)
14:05:59.0908 1004 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
14:06:00.0344 1004 Appinfo - ok
14:06:00.0469 1004 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
14:06:00.0578 1004 arc - ok
14:06:00.0672 1004 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
14:06:00.0750 1004 arcsas - ok
14:06:00.0922 1004 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:06:01.0202 1004 AsyncMac - ok
14:06:01.0265 1004 [ 2D9C903DC76A66813D350A562DE40ED9 ] atapi C:\Windows\system32\drivers\atapi.sys
14:06:01.0343 1004 atapi - ok
14:06:01.0546 1004 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:06:01.0686 1004 AudioEndpointBuilder - ok
14:06:01.0717 1004 [ 42076E29AAFA0830A2C5D4E310F58DD1 ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:06:01.0764 1004 Audiosrv - ok
14:06:02.0138 1004 [ 018FE8992FE4D70B69AE866EA0D83F0D ] Automatisches LiveUpdate - Scheduler C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
14:06:02.0435 1004 Automatisches LiveUpdate - Scheduler - ok
14:06:02.0528 1004 [ 71A751D7F8B0219BCF827596FC5AF318 ] avgio C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
14:06:02.0653 1004 avgio - ok
14:06:02.0731 1004 [ CD00804306496FA721504F570B9CAA82 ] avgntflt C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
14:06:02.0794 1004 avgntflt - ok
14:06:02.0825 1004 [ F1B3A45176F43CC59EECE1372D82B6D4 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
14:06:02.0950 1004 avipbb - ok
14:06:03.0059 1004 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
14:06:03.0277 1004 Beep - ok
14:06:03.0386 1004 [ 8582E233C346AEFE759833E8A30DD697 ] BFE C:\Windows\System32\bfe.dll
14:06:03.0620 1004 BFE - ok
14:06:03.0932 1004 [ 02ED7B4DBC2A3232A389106DA7515C3D ] BITS C:\Windows\System32\qmgr.dll
14:06:04.0354 1004 BITS - ok
14:06:04.0354 1004 blbdrive - ok
14:06:04.0416 1004 [ 8153396D5551276227FA146900F734E6 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:06:04.0634 1004 bowser - ok
14:06:04.0853 1004 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
14:06:05.0040 1004 BrFiltLo - ok
14:06:05.0087 1004 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
14:06:05.0227 1004 BrFiltUp - ok
14:06:05.0446 1004 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
14:06:05.0742 1004 Browser - ok
14:06:05.0945 1004 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
14:06:06.0101 1004 Brserid - ok
14:06:06.0163 1004 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
14:06:06.0272 1004 BrSerWdm - ok
14:06:06.0319 1004 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
14:06:06.0428 1004 BrUsbMdm - ok
14:06:06.0475 1004 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
14:06:06.0647 1004 BrUsbSer - ok
14:06:06.0772 1004 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
14:06:06.0834 1004 BTHMODEM - ok
14:06:07.0115 1004 [ E7AAB1A32AC2EEA4C4B735B8D034C802 ] ccEvtMgr c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
14:06:07.0224 1004 ccEvtMgr - ok
14:06:07.0240 1004 [ E7AAB1A32AC2EEA4C4B735B8D034C802 ] ccSetMgr c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
14:06:07.0286 1004 ccSetMgr - ok
14:06:07.0427 1004 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:06:07.0536 1004 cdfs - ok
14:06:07.0645 1004 [ 1EC25CEA0DE6AC4718BF89F9E1778B57 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
14:06:07.0786 1004 cdrom - ok
14:06:07.0864 1004 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] CertPropSvc C:\Windows\System32\certprop.dll
14:06:07.0942 1004 CertPropSvc - ok
14:06:08.0035 1004 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
14:06:08.0316 1004 circlass - ok
14:06:08.0456 1004 [ 465745561C832B29F7C48B488AAB3842 ] CLFS C:\Windows\system32\CLFS.sys
14:06:08.0550 1004 CLFS - ok
14:06:08.0690 1004 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:06:08.0768 1004 clr_optimization_v2.0.50727_32 - ok
14:06:09.0080 1004 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:06:09.0127 1004 clr_optimization_v4.0.30319_32 - ok
14:06:09.0205 1004 [ E7AAB1A32AC2EEA4C4B735B8D034C802 ] CLTNetCnService c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
14:06:09.0221 1004 CLTNetCnService - ok
14:06:09.0283 1004 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
14:06:09.0346 1004 cmdide - ok
14:06:09.0517 1004 [ 7CE352882828C12DD7632B172253A02C ] comHost c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
14:06:09.0829 1004 comHost - ok
14:06:09.0892 1004 [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
14:06:09.0954 1004 Compbatt - ok
14:06:09.0970 1004 COMSysApp - ok
14:06:10.0172 1004 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
14:06:10.0297 1004 crcdisk - ok
14:06:10.0328 1004 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
14:06:10.0422 1004 Crusoe - ok
14:06:10.0484 1004 [ 6DE363F9F99334514C46AEC02D3E3678 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:06:10.0640 1004 CryptSvc - ok
14:06:10.0859 1004 [ 301AE00E12408650BADDC04DBC832830 ] DcomLaunch C:\Windows\system32\rpcss.dll
14:06:10.0999 1004 DcomLaunch - ok
14:06:11.0030 1004 [ A3E9FA213F443AC77C7746119D13FEEC ] DfsC C:\Windows\system32\Drivers\dfsc.sys
14:06:11.0202 1004 DfsC - ok
14:06:11.0701 1004 [ FA3463F25F9CC9C3BCF1E7912FEFF099 ] DFSR C:\Windows\system32\DFSR.exe
14:06:12.0996 1004 DFSR - ok
14:06:13.0246 1004 [ 43A988A9C10333476CB5FB667CBD629D ] Dhcp C:\Windows\System32\dhcpcsvc.dll
14:06:13.0355 1004 Dhcp - ok
14:06:13.0464 1004 [ 64109E623ABD6955C8FB110B592E68B7 ] disk C:\Windows\system32\drivers\disk.sys
14:06:13.0526 1004 disk - ok
14:06:13.0620 1004 [ 4805D9A6D281C7A7DEFD9094DEC6AF7D ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:06:13.0823 1004 Dnscache - ok
14:06:13.0963 1004 [ 5AF620A08C614E24206B79E8153CF1A8 ] dot3svc C:\Windows\System32\dot3svc.dll
14:06:14.0150 1004 dot3svc - ok
14:06:14.0260 1004 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
14:06:14.0369 1004 DPS - ok
14:06:14.0478 1004 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:06:14.0572 1004 drmkaud - ok
14:06:14.0884 1004 [ 85F33880B8CFB554BD3D9CCDB486845A ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:06:15.0523 1004 DXGKrnl - ok
14:06:15.0632 1004 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
14:06:15.0851 1004 E1G60 - ok
14:06:16.0085 1004 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
14:06:16.0194 1004 EapHost - ok
14:06:16.0303 1004 [ DD2CD259D83D8B72C02C5F2331FF9D68 ] Ecache C:\Windows\system32\drivers\ecache.sys
14:06:16.0381 1004 Ecache - ok
14:06:16.0553 1004 [ FB069D8270853023F6E315745B5BBAD4 ] eeCtrl C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
14:06:17.0270 1004 eeCtrl - ok
14:06:17.0645 1004 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
14:06:17.0754 1004 ehRecvr - ok
14:06:17.0816 1004 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
14:06:18.0035 1004 ehSched - ok
14:06:18.0066 1004 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
14:06:18.0097 1004 ehstart - ok
14:06:18.0160 1004 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
14:06:18.0253 1004 elxstor - ok
14:06:18.0643 1004 [ 70B1A86DF0C8EAD17D2BC332EDAE2C7C ] EMDMgmt C:\Windows\system32\emdmgmt.dll
14:06:19.0330 1004 EMDMgmt - ok
14:06:19.0392 1004 [ 3CB3343D720168B575133A0A20DC2465 ] EventSystem C:\Windows\system32\es.dll
14:06:19.0642 1004 EventSystem - ok
14:06:19.0907 1004 [ 0D858EB20589A34EFB25695ACAA6AA2D ] exfat C:\Windows\system32\drivers\exfat.sys
14:06:20.0078 1004 exfat - ok
14:06:20.0141 1004 [ 3C489390C2E2064563727752AF8EAB9E ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:06:20.0281 1004 fastfat - ok
14:06:20.0437 1004 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
14:06:20.0749 1004 fdc - ok
14:06:20.0921 1004 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
14:06:21.0108 1004 fdPHost - ok
14:06:21.0217 1004 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
14:06:21.0436 1004 FDResPub - ok
14:06:21.0529 1004 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:06:21.0685 1004 FileInfo - ok
14:06:22.0060 1004 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:06:22.0356 1004 Filetrace - ok
14:06:22.0481 1004 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
14:06:22.0637 1004 flpydisk - ok
14:06:22.0793 1004 [ 05EA53AFE985443011E36DAB07343B46 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:06:22.0980 1004 FltMgr - ok
14:06:23.0276 1004 [ C9BE08664611DDAF98E2331E9288B00B ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:06:23.0557 1004 FontCache3.0.0.0 - ok
14:06:23.0620 1004 [ B74B0578FD1D3F897E95F2A2B69EA051 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
14:06:23.0698 1004 fssfltr - ok
14:06:24.0041 1004 [ 206AD9A89BF05DFA1621F1FC7B82592D ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
14:06:24.0446 1004 fsssvc - ok
14:06:24.0571 1004 [ 790A4CA68F44BE35967B3DF61F3E4675 ] FsUsbExDisk C:\Windows\system32\FsUsbExDisk.SYS
14:06:24.0712 1004 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning
14:06:24.0712 1004 FsUsbExDisk - detected UnsignedFile.Multi.Generic (1)
14:06:24.0805 1004 [ 65EA8B77B5851854F0C55C43FA51A198 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:06:24.0914 1004 Fs_Rec - ok
14:06:25.0008 1004 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
14:06:25.0086 1004 gagp30kx - ok
14:06:25.0226 1004 [ 007AEA2E06E7CEF7372E40C277163959 ] ggflt C:\Windows\system32\DRIVERS\ggflt.sys
14:06:25.0304 1004 ggflt - ok
14:06:25.0336 1004 [ C73DE35960CA75C5AB4AE636B127C64E ] ggsemc C:\Windows\system32\DRIVERS\ggsemc.sys
14:06:25.0460 1004 ggsemc - ok
14:06:25.0601 1004 [ D9F1113D9401185245573350712F92FC ] gpsvc C:\Windows\System32\gpsvc.dll
14:06:25.0772 1004 gpsvc - ok
14:06:25.0975 1004 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:06:26.0428 1004 HdAudAddService - ok
14:06:26.0584 1004 [ C87B1EE051C0464491C1A7B03FA0BC99 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
14:06:26.0708 1004 HDAudBus - ok
14:06:26.0755 1004 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
14:06:26.0896 1004 HidBth - ok
14:06:26.0927 1004 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
14:06:27.0145 1004 HidIr - ok
14:06:27.0223 1004 [ 8FA640195279ACE21BEA91396A0054FC ] hidserv C:\Windows\system32\hidserv.dll
14:06:27.0301 1004 hidserv - ok
14:06:27.0379 1004 [ 854CA287AB7FAF949617A788306D967E ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
14:06:27.0520 1004 HidUsb - ok
14:06:27.0598 1004 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
14:06:27.0707 1004 hkmsvc - ok
14:06:27.0800 1004 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
14:06:27.0894 1004 HpCISSs - ok
14:06:28.0066 1004 [ 96E241624C71211A79C84F50A8E71CAB ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:06:28.0487 1004 HTTP - ok
14:06:28.0580 1004 hwdatacard - ok
14:06:28.0674 1004 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
14:06:28.0752 1004 i2omp - ok
14:06:29.0048 1004 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
14:06:29.0173 1004 i8042prt - ok
14:06:29.0298 1004 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
14:06:29.0454 1004 iaStorV - ok
14:06:29.0782 1004 [ 7B630ACAED64FEF0C3E1CF255CB56686 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:06:30.0359 1004 idsvc - ok
14:06:30.0671 1004 [ 78432A57D085328CF8BAF125985425D2 ] IDSvix86 C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20061025.029\IDSvix86.sys
14:06:30.0827 1004 IDSvix86 - ok
14:06:30.0858 1004 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
14:06:30.0967 1004 iirsp - ok
14:06:31.0108 1004 [ A3BC480A2BF8AA8E4DABD2D5DCE0AFAC ] IKEEXT C:\Windows\System32\ikeext.dll
14:06:31.0295 1004 IKEEXT - ok
14:06:31.0919 1004 [ EDC37B918E583A5A813C53D4F5588255 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:06:33.0120 1004 IntcAzAudAddService - ok
14:06:33.0276 1004 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
14:06:33.0354 1004 intelide - ok
14:06:33.0432 1004 [ CE44CC04262F28216DD4341E9E36A16F ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
14:06:33.0588 1004 intelppm - ok
14:06:33.0775 1004 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
14:06:33.0869 1004 IPBusEnum - ok
14:06:33.0978 1004 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:06:34.0103 1004 IpFilterDriver - ok
14:06:34.0243 1004 [ 6A35D233693EDC29A12742049BC5E37F ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:06:34.0462 1004 iphlpsvc - ok
14:06:34.0477 1004 IpInIp - ok
14:06:34.0540 1004 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
14:06:34.0727 1004 IPMIDRV - ok
14:06:34.0867 1004 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
14:06:35.0070 1004 IPNAT - ok
14:06:35.0210 1004 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:06:35.0366 1004 IRENUM - ok
14:06:35.0429 1004 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
14:06:35.0569 1004 isapnp - ok
14:06:35.0725 1004 [ F247EEC28317F6C739C16DE420097301 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
14:06:35.0788 1004 iScsiPrt - ok
14:06:36.0037 1004 [ 36474FDE02F8422B8B1A52EAD9894DBC ] ISPwdSvc c:\Program Files\Norton Internet Security\isPwdSvc.exe
14:06:36.0240 1004 ISPwdSvc - ok
14:06:36.0302 1004 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
14:06:36.0412 1004 iteatapi - ok
14:06:36.0552 1004 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
14:06:36.0677 1004 iteraid - ok
14:06:36.0770 1004 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
14:06:36.0911 1004 kbdclass - ok
14:06:37.0020 1004 [ D2600CB17B7408B4A83F231DC9A11AC3 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
14:06:37.0223 1004 kbdhid - ok
14:06:37.0301 1004 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] KeyIso C:\Windows\system32\lsass.exe
14:06:37.0644 1004 KeyIso - ok
14:06:37.0816 1004 [ 7A0CF7908B6824D6A2A1D313E5AE3DCA ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:06:38.0502 1004 KSecDD - ok
14:06:38.0736 1004 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
14:06:39.0048 1004 KtmRm - ok
14:06:39.0157 1004 [ 1925E63C91CF1610AE41BFD539062079 ] LanmanServer C:\Windows\system32\srvsvc.dll
14:06:39.0485 1004 LanmanServer - ok
14:06:39.0953 1004 [ 2AE2E1628C5D3F1C0A46A67C9FA1DF15 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:06:40.0202 1004 LanmanWorkstation - ok
14:06:40.0468 1004 [ 6E5DAC168D1FF9843E84A59D51D31107 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe
14:06:40.0686 1004 LightScribeService ( UnsignedFile.Multi.Generic ) - warning
14:06:40.0686 1004 LightScribeService - detected UnsignedFile.Multi.Generic (1)
14:06:41.0544 1004 [ 3C7FCBBC35E0A52CE9B12E9CC4F5B991 ] LiveUpdate C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
14:06:43.0416 1004 LiveUpdate - ok
14:06:43.0494 1004 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:06:43.0712 1004 lltdio - ok
14:06:43.0806 1004 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:06:44.0212 1004 lltdsvc - ok
14:06:44.0305 1004 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
14:06:44.0461 1004 lmhosts - ok
14:06:44.0664 1004 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
14:06:44.0742 1004 LSI_FC - ok
14:06:44.0789 1004 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
14:06:44.0867 1004 LSI_SAS - ok
14:06:44.0992 1004 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
14:06:45.0038 1004 LSI_SCSI - ok
14:06:45.0116 1004 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
14:06:45.0194 1004 luafv - ok
14:06:45.0288 1004 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
14:06:45.0350 1004 MBAMSwissArmy - ok
14:06:45.0382 1004 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
14:06:45.0553 1004 Mcx2Svc - ok
14:06:45.0678 1004 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
14:06:45.0772 1004 megasas - ok
14:06:45.0834 1004 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
14:06:45.0974 1004 MMCSS - ok
14:06:46.0068 1004 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
14:06:46.0193 1004 Modem - ok
14:06:46.0318 1004 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
14:06:46.0489 1004 monitor - ok
14:06:46.0614 1004 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
14:06:46.0770 1004 mouclass - ok
14:06:46.0817 1004 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
14:06:46.0942 1004 mouhid - ok
14:06:47.0020 1004 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
14:06:47.0082 1004 MountMgr - ok
14:06:47.0472 1004 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
14:06:47.0644 1004 MozillaMaintenance - ok
14:06:47.0722 1004 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
14:06:47.0862 1004 mpio - ok
14:06:47.0940 1004 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:06:48.0080 1004 mpsdrv - ok
14:06:48.0190 1004 [ D1639BA315B0D79DEC49A4B0E1FB929B ] MpsSvc C:\Windows\system32\mpssvc.dll
14:06:48.0486 1004 MpsSvc - ok
14:06:48.0580 1004 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
14:06:48.0704 1004 Mraid35x - ok
14:06:48.0798 1004 [ AE3DE84536B6799D2267443CEC8EDBB9 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:06:49.0204 1004 MRxDAV - ok
14:06:49.0297 1004 [ 5734A0F2BE7E495F7D3ED6EFD4B9F5A1 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:06:49.0547 1004 mrxsmb - ok
14:06:49.0609 1004 [ 6B5FA5ADFACAC9DBBE0991F4566D7D55 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:06:49.0812 1004 mrxsmb10 - ok
14:06:49.0859 1004 [ 5C80D8159181C7ABF1B14BA703B01E0B ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:06:50.0030 1004 mrxsmb20 - ok
14:06:50.0108 1004 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
14:06:50.0218 1004 msahci - ok
14:06:50.0358 1004 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
14:06:50.0483 1004 msdsm - ok
14:06:50.0608 1004 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
14:06:50.0888 1004 MSDTC - ok
14:06:50.0998 1004 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:06:51.0107 1004 Msfs - ok
14:06:51.0216 1004 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
14:06:51.0310 1004 msisadrv - ok
14:06:51.0388 1004 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:06:51.0512 1004 MSiSCSI - ok
14:06:51.0528 1004 msiserver - ok
14:06:51.0637 1004 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:06:51.0762 1004 MSKSSRV - ok
14:06:51.0840 1004 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:06:51.0965 1004 MSPCLOCK - ok
14:06:52.0012 1004 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:06:52.0152 1004 MSPQM - ok
14:06:52.0277 1004 [ B5614AECB05A9340AA0FB55BF561CC63 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:06:52.0402 1004 MsRPC - ok
14:06:52.0464 1004 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
14:06:52.0526 1004 mssmbios - ok
14:06:52.0573 1004 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:06:52.0682 1004 MSTEE - ok
14:06:52.0745 1004 [ 6DFD1D322DE55B0B7DB7D21B90BEC49C ] Mup C:\Windows\system32\Drivers\mup.sys
14:06:52.0823 1004 Mup - ok
14:06:52.0963 1004 [ C43B25863FBD65B6D2A142AF3AE320CA ] napagent C:\Windows\system32\qagentRT.dll
14:06:53.0150 1004 napagent - ok
14:06:53.0260 1004 [ 3C21CE48FF529BB73DADB98770B54025 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:06:53.0650 1004 NativeWifiP - ok
14:06:53.0915 1004 [ EF04748A7A7266EDBDBE02B161A0685D ] NAVENG C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20061106.064\NAVENG.SYS
14:06:54.0024 1004 NAVENG - ok
14:06:54.0102 1004 [ 09F3BFDC47718459B42D696CB671F65F ] NAVEX15 C:\PROGRA~2\Symantec\DEFINI~1\VIRUSD~1\20061106.064\NAVEX15.SYS
14:06:54.0383 1004 NAVEX15 - ok
14:06:54.0617 1004 [ 9BDC71790FA08F0A0B5F10462B1BD0B1 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:06:54.0866 1004 NDIS - ok
14:06:54.0991 1004 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:06:55.0116 1004 NdisTapi - ok
14:06:55.0225 1004 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:06:55.0334 1004 Ndisuio - ok
14:06:55.0428 1004 [ 3D14C3B3496F88890D431E8AA022A411 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:06:55.0537 1004 NdisWan - ok
14:06:55.0615 1004 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:06:55.0740 1004 NDProxy - ok
14:06:55.0834 1004 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:06:55.0990 1004 NetBIOS - ok
14:06:56.0099 1004 [ 7C5FEE5B1C5728507CD96FB4A13E7A02 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
14:06:56.0239 1004 netbt - ok
14:06:56.0302 1004 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] Netlogon C:\Windows\system32\lsass.exe
14:06:56.0317 1004 Netlogon - ok
14:06:56.0458 1004 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
14:06:56.0645 1004 Netman - ok
14:06:56.0754 1004 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
14:06:56.0832 1004 netprofm - ok
14:06:57.0191 1004 [ 0AD5876EF4E9EB77C8F93EB5B2FFF386 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:06:57.0550 1004 NetTcpPortSharing - ok
14:06:57.0612 1004 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
14:06:57.0768 1004 nfrd960 - ok
14:06:57.0908 1004 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
14:06:58.0096 1004 NlaSvc - ok
14:06:58.0142 1004 [ ECB5003F484F9ED6C608D6D6C7886CBB ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:06:58.0314 1004 Npfs - ok
14:06:58.0392 1004 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
14:06:58.0486 1004 nsi - ok
14:06:58.0532 1004 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:06:58.0626 1004 nsiproxy - ok
14:06:58.0985 1004 [ B4EFFE29EB4F15538FD8A9681108492D ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:06:59.0297 1004 Ntfs - ok
14:06:59.0406 1004 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
14:06:59.0609 1004 ntrigdigi - ok
14:06:59.0718 1004 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
14:06:59.0999 1004 Null - ok
14:07:00.0560 1004 [ 1657F3FBD9061526C14FF37E79306F98 ] NVENETFD C:\Windows\system32\DRIVERS\nvm60x32.sys
14:07:00.0919 1004 NVENETFD - ok
14:07:04.0180 1004 [ 0A1B502CBC8230DA74BEFBAADDB58916 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:07:08.0532 1004 nvlddmkm - ok
14:07:08.0719 1004 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
14:07:08.0797 1004 nvraid - ok
14:07:08.0860 1004 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
14:07:08.0953 1004 nvstor - ok
14:07:09.0172 1004 [ EB5A13F9139F20AD71ADF4BF79C3AA29 ] nvsvc C:\Windows\system32\nvvsvc.exe
14:07:09.0390 1004 nvsvc - ok
14:07:09.0655 1004 [ 0629259E3AF6BB0534FCECA208973404 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
14:07:09.0983 1004 nvUpdatusService - ok
14:07:10.0310 1004 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
14:07:10.0498 1004 nv_agp - ok
14:07:10.0513 1004 NwlnkFlt - ok
14:07:10.0529 1004 NwlnkFwd - ok
14:07:10.0716 1004 [ 790E27C3DB53410B40FF9EF2FD10A1D9 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
14:07:10.0903 1004 ohci1394 - ok
14:07:11.0418 1004 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:07:11.0574 1004 ose - ok
14:07:11.0792 1004 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2pimsvc C:\Windows\system32\p2psvc.dll
14:07:12.0338 1004 p2pimsvc - ok
14:07:12.0510 1004 [ 5DE1A3972FD3112C75EB17BDCF454169 ] p2psvc C:\Windows\system32\p2psvc.dll
14:07:12.0650 1004 p2psvc - ok
14:07:12.0728 1004 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
14:07:12.0931 1004 Parport - ok
14:07:13.0087 1004 [ 3B38467E7C3DAED009DFE359E17F139F ] partmgr C:\Windows\system32\drivers\partmgr.sys
14:07:13.0165 1004 partmgr - ok
14:07:13.0243 1004 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
14:07:13.0384 1004 Parvdm - ok
14:07:13.0446 1004 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
14:07:13.0508 1004 PcaSvc - ok
14:07:13.0664 1004 [ 175CC28DCF819F78CAA3FBD44AD9E52A ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
14:07:13.0898 1004 pccsmcfd - ok
14:07:13.0961 1004 [ 01B94418DEB235DFF777CC80076354B4 ] pci C:\Windows\system32\drivers\pci.sys
14:07:14.0054 1004 pci - ok
14:07:14.0164 1004 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
14:07:14.0288 1004 pciide - ok
14:07:14.0429 1004 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
14:07:14.0538 1004 pcmcia - ok
14:07:14.0866 1004 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
14:07:15.0380 1004 PEAUTH - ok
14:07:15.0755 1004 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
14:07:17.0252 1004 pla - ok
14:07:17.0362 1004 [ 78F975CB6D18265BE6F492EDB2D7BC7B ] PlugPlay C:\Windows\system32\umpnpmgr.dll
14:07:17.0689 1004 PlugPlay - ok
14:07:17.0752 1004 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
14:07:18.0313 1004 PNRPAutoReg - ok
14:07:18.0485 1004 [ 5DE1A3972FD3112C75EB17BDCF454169 ] PNRPsvc C:\Windows\system32\p2psvc.dll
14:07:18.0641 1004 PNRPsvc - ok
14:07:18.0937 1004 [ 47B8F37AA18B74D8C2E1BC1A7A2C8F8A ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
14:07:19.0483 1004 PolicyAgent - ok
14:07:19.0670 1004 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
14:07:19.0889 1004 PptpMiniport - ok
14:07:20.0107 1004 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
14:07:20.0341 1004 Processor - ok
14:07:20.0653 1004 [ 18D9789A4664BF417EEA944D2776091A ] prodrv06 C:\Windows\System32\drivers\prodrv06.sys
14:07:20.0903 1004 prodrv06 ( UnsignedFile.Multi.Generic ) - warning
14:07:20.0903 1004 prodrv06 - detected UnsignedFile.Multi.Generic (1)
14:07:21.0012 1004 [ B627E4FC8585E8843C5905D4D3587A90 ] ProfSvc C:\Windows\system32\profsvc.dll
14:07:21.0402 1004 ProfSvc - ok
14:07:21.0511 1004 [ 8CC9671A7ED2902E747EE0892E1C8575 ] prohlp02 C:\Windows\system32\drivers\prohlp02.sys
14:07:21.0870 1004 prohlp02 ( UnsignedFile.Multi.Generic ) - warning
14:07:21.0870 1004 prohlp02 - detected UnsignedFile.Multi.Generic (1)
14:07:22.0151 1004 [ 960BCE3ED38761B446AABAC06C76BADF ] prosync1 C:\Windows\system32\drivers\prosync1.sys
14:07:22.0416 1004 prosync1 ( UnsignedFile.Multi.Generic ) - warning
14:07:22.0416 1004 prosync1 - detected UnsignedFile.Multi.Generic (1)
14:07:22.0510 1004 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:07:22.0666 1004 ProtectedStorage - ok
14:07:22.0900 1004 [ 390C204CED3785609AB24E9C52054A84 ] Ps2 C:\Windows\system32\DRIVERS\PS2.sys
14:07:23.0461 1004 Ps2 - ok
14:07:23.0742 1004 [ BFEF604508A0ED1EAE2A73E872555FFB ] PSched C:\Windows\system32\DRIVERS\pacer.sys
14:07:23.0992 1004 PSched - ok
14:07:24.0210 1004 [ FEFFCFDC528764A04C8ED63D5FA6E711 ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
14:07:24.0335 1004 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
14:07:24.0335 1004 PxHelp20 - detected UnsignedFile.Multi.Generic (1)
14:07:24.0694 1004 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
14:07:25.0474 1004 ql2300 - ok
14:07:25.0645 1004 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
14:07:26.0004 1004 ql40xx - ok
14:07:26.0316 1004 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
14:07:27.0096 1004 QWAVE - ok
14:07:27.0283 1004 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
14:07:27.0751 1004 QWAVEdrv - ok
14:07:28.0063 1004 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
14:07:28.0438 1004 RasAcd - ok
14:07:28.0672 1004 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
14:07:29.0108 1004 RasAuto - ok
14:07:29.0264 1004 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
14:07:29.0498 1004 Rasl2tp - ok
14:07:29.0654 1004 [ 6E7C284FC5C4EC07AD164D93810385A6 ] RasMan C:\Windows\System32\rasmans.dll
14:07:29.0857 1004 RasMan - ok
14:07:29.0951 1004 [ 3E9D9B048107B40D87B97DF2E48E0744 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
14:07:30.0138 1004 RasPppoe - ok
14:07:30.0403 1004 [ A7D141684E9500AC928A772ED8E6B671 ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
14:07:30.0544 1004 RasSstp - ok
14:07:30.0793 1004 [ 6E1C5D0457622F9EE35F683110E93D14 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
14:07:31.0058 1004 rdbss - ok
14:07:31.0183 1004 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
14:07:31.0339 1004 RDPCDD - ok
14:07:31.0495 1004 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
14:07:31.0698 1004 rdpdr - ok
14:07:31.0807 1004 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
14:07:31.0901 1004 RDPENCDD - ok
14:07:32.0010 1004 [ E1C18F4097A5ABCEC941DC4B2F99DB7E ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
14:07:32.0166 1004 RDPWD - ok
14:07:32.0244 1004 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
14:07:32.0431 1004 RemoteAccess - ok
14:07:32.0618 1004 [ CC4E32400F3C7253400CF8F3F3A0B676 ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:07:33.0008 1004 RemoteRegistry - ok
14:07:33.0164 1004 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
14:07:33.0476 1004 RpcLocator - ok
14:07:33.0632 1004 [ 301AE00E12408650BADDC04DBC832830 ] RpcSs C:\Windows\system32\rpcss.dll
14:07:33.0898 1004 RpcSs - ok
14:07:34.0038 1004 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
14:07:34.0178 1004 rspndr - ok
14:07:34.0225 1004 [ A911ECAC81F94ADEAFBE8E3F7873EDB0 ] SamSs C:\Windows\system32\lsass.exe
14:07:34.0288 1004 SamSs - ok
14:07:34.0381 1004 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
14:07:34.0490 1004 sbp2port - ok
14:07:34.0600 1004 [ 11387E32642269C7E62E8B52C060B3C6 ] SCardSvr C:\Windows\System32\SCardSvr.dll
14:07:34.0849 1004 SCardSvr - ok
14:07:35.0068 1004 [ 7B587B8A6D4A99F79D2902D0385F29BD ] Schedule C:\Windows\system32\schedsvc.dll
14:07:35.0333 1004 Schedule - ok
14:07:35.0411 1004 [ 87C2D0377B23E2D8A41093C2F5FB1A5B ] SCPolicySvc C:\Windows\System32\certprop.dll
14:07:35.0473 1004 SCPolicySvc - ok
14:07:35.0567 1004 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
14:07:35.0972 1004 SDRSVC - ok
14:07:36.0628 1004 [ 0F4A80438E7286A0E623582F5F2395BD ] SearchAnonymizer C:\Users\Aileen\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
14:07:36.0690 1004 SearchAnonymizer ( UnsignedFile.Multi.Generic ) - warning
14:07:36.0690 1004 SearchAnonymizer - detected UnsignedFile.Multi.Generic (1)
14:07:36.0893 1004 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
14:07:37.0033 1004 secdrv - ok
14:07:37.0127 1004 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
14:07:37.0252 1004 seclogon - ok
14:07:37.0813 1004 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
14:07:37.0891 1004 SENS - ok
14:07:38.0110 1004 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
14:07:38.0312 1004 Serenum - ok
14:07:38.0687 1004 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
14:07:38.0968 1004 Serial - ok
14:07:39.0124 1004 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
14:07:39.0264 1004 sermouse - ok
14:07:39.0794 1004 [ 9D38320BB32230349379DF5DDBBF7FCE ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
14:07:40.0418 1004 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
14:07:40.0418 1004 ServiceLayer - detected UnsignedFile.Multi.Generic (1)
14:07:40.0496 1004 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
14:07:40.0637 1004 SessionEnv - ok
14:07:40.0730 1004 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
14:07:40.0840 1004 sffdisk - ok
14:07:40.0886 1004 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
14:07:41.0058 1004 sffp_mmc - ok
14:07:41.0120 1004 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
14:07:41.0354 1004 sffp_sd - ok
14:07:41.0448 1004 [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01 C:\Windows\system32\drivers\sfhlp01.sys
14:07:41.0526 1004 sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
14:07:41.0526 1004 sfhlp01 - detected UnsignedFile.Multi.Generic (1)
14:07:41.0573 1004 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
14:07:41.0729 1004 sfloppy - ok
14:07:41.0916 1004 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
14:07:42.0197 1004 SharedAccess - ok
14:07:42.0415 1004 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:07:42.0805 1004 ShellHWDetection - ok
14:07:42.0930 1004 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
14:07:43.0070 1004 sisagp - ok
14:07:43.0164 1004 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
14:07:43.0211 1004 SiSRaid2 - ok
14:07:43.0273 1004 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
14:07:43.0382 1004 SiSRaid4 - ok
14:07:44.0318 1004 [ 0BA91E1358AD25236863039BB2609A2E ] slsvc C:\Windows\system32\SLsvc.exe
14:07:49.0092 1004 slsvc - ok
14:07:49.0201 1004 [ 7C6DC44CA0BFA6291629AB764200D1D4 ] SLUINotify C:\Windows\system32\SLUINotify.dll
14:07:49.0388 1004 SLUINotify - ok
14:07:49.0435 1004 [ 031E6BCD53C9B2B9ACE111EAFEC347B6 ] Smb C:\Windows\system32\DRIVERS\smb.sys
14:07:49.0607 1004 Smb - ok
14:07:49.0794 1004 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
14:07:50.0044 1004 SNMPTRAP - ok
14:07:50.0480 1004 [ 905782BCF15B6E5AF9905B77923C7FA2 ] SPBBCDrv C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys
14:07:50.0855 1004 SPBBCDrv - ok
14:07:50.0902 1004 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
14:07:51.0058 1004 spldr - ok
14:07:51.0198 1004 [ 3665F79026A3F91FBCA63F2C65A09B19 ] Spooler C:\Windows\System32\spoolsv.exe
14:07:51.0338 1004 Spooler - ok
14:07:51.0494 1004 [ 15E29EB26DD53EB6385629F4622B5519 ] SRTSP C:\Windows\system32\Drivers\SRTSP.SYS
14:07:51.0619 1004 SRTSP - ok
14:07:51.0697 1004 [ FD0C0333FAE09DBD1170E0D607ECA5C8 ] SRTSPL C:\Windows\system32\Drivers\SRTSPL.SYS
14:07:51.0806 1004 SRTSPL - ok
14:07:51.0838 1004 [ 7E60A4A4035BE470F47C6806DA57DB99 ] SRTSPX C:\Windows\system32\Drivers\SRTSPX.SYS
14:07:51.0900 1004 SRTSPX - ok
14:07:51.0994 1004 [ 2252AEF839B1093D16761189F45AF885 ] srv C:\Windows\system32\DRIVERS\srv.sys
14:07:52.0274 1004 srv - ok
14:07:52.0508 1004 [ B7FF59408034119476B00A81BB53D5D1 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
14:07:52.0992 1004 srv2 - ok
14:07:53.0039 1004 [ 2ACCC9B12AF02030F531E6CCA6F8B76E ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
14:07:53.0179 1004 srvnet - ok
14:07:53.0288 1004 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
14:07:53.0366 1004 SSDPSRV - ok
14:07:53.0444 1004 [ 8903659BA9DD138942CCFC5A347AB2A1 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
14:07:53.0507 1004 ssmdrv - ok
14:07:53.0678 1004 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
14:07:53.0881 1004 SstpSvc - ok
14:07:53.0975 1004 [ EF70B3D22B4BFFDA6EA851ECB063EFAA ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
14:07:54.0053 1004 StillCam - ok
14:07:54.0193 1004 [ 7DD08A597BC56051F320DA0BAF69E389 ] stisvc C:\Windows\System32\wiaservc.dll
14:07:54.0505 1004 stisvc - ok
14:07:54.0692 1004 [ D4CE4D370A26AE1BF41BE9F69D24D049 ] stllssvr c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
14:07:54.0848 1004 stllssvr - ok
14:07:54.0880 1004 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
14:07:54.0989 1004 swenum - ok
14:07:55.0098 1004 [ B36C7CDB86F7F7A8E884479219766950 ] swprv C:\Windows\System32\swprv.dll
14:07:55.0316 1004 swprv - ok
14:07:55.0894 1004 [ 2698CD77F4D73EA7988F0BC63DE8E3D6 ] Symantec Core LC C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
14:07:57.0360 1004 Symantec Core LC - ok
14:07:57.0532 1004 [ 2FE779B1A07747FED8074C433C3C4604 ] SymAppCore c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
14:07:57.0906 1004 SymAppCore - ok
14:07:58.0421 1004 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
14:07:59.0154 1004 Symc8xx - ok
14:07:59.0544 1004 [ 9D98270B5F10A4C84E8DA417C30756E1 ] SymEvent C:\Windows\system32\Drivers\SYMEVENT.SYS
14:07:59.0762 1004 SymEvent - ok
14:08:00.0028 1004 [ 7F4011A719BF30E3DBD84D3A0A45C91C ] SYMREDRV C:\Windows\System32\Drivers\SYMREDRV.SYS
14:08:00.0152 1004 SYMREDRV - ok
14:08:00.0511 1004 [ 2F03CBDB0F22278D05D5D616C993AB58 ] SYMTDI C:\Windows\System32\Drivers\SYMTDI.SYS
14:08:00.0698 1004 SYMTDI - ok
14:08:00.0730 1004 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
14:08:00.0808 1004 Sym_hi - ok
14:08:00.0964 1004 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
14:08:01.0042 1004 Sym_u3 - ok
14:08:01.0603 1004 [ 8710A92D0024B03B5FB9540DF1F71F1D ] SysMain C:\Windows\system32\sysmain.dll
14:08:01.0993 1004 SysMain - ok
14:08:02.0118 1004 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:08:02.0555 1004 TabletInputService - ok
14:08:02.0711 1004 [ 680916BB09EE0F3A6ACA7C274B0D633F ] TapiSrv C:\Windows\System32\tapisrv.dll
14:08:02.0851 1004 TapiSrv - ok
14:08:02.0992 1004 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
14:08:03.0101 1004 TBS - ok
14:08:03.0475 1004 [ 782568AB6A43160A159B6215B70BCCE9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
14:08:03.0943 1004 Tcpip - ok
14:08:04.0006 1004 [ 782568AB6A43160A159B6215B70BCCE9 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
14:08:04.0271 1004 Tcpip6 - ok
14:08:04.0364 1004 [ D4A2E4A4B011F3A883AF77315A5AE76B ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
14:08:04.0552 1004 tcpipreg - ok
14:08:04.0739 1004 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
14:08:04.0973 1004 TDPIPE - ok
14:08:05.0051 1004 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
14:08:05.0269 1004 TDTCP - ok
14:08:05.0472 1004 [ D09276B1FAB033CE1D40DCBDF303D10F ] tdx C:\Windows\system32\DRIVERS\tdx.sys
14:08:05.0815 1004 tdx - ok
14:08:05.0878 1004 [ A048056F5E1A96A9BF3071B91741A5AA ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
14:08:06.0002 1004 TermDD - ok
14:08:06.0283 1004 [ D605031E225AACCBCEB5B76A4F1603A6 ] TermService C:\Windows\System32\termsrv.dll
14:08:06.0658 1004 TermService - ok
14:08:06.0767 1004 [ 1E3FDB80E40A3CE645F229DFBDFB7694 ] Themes C:\Windows\system32\shsvcs.dll
14:08:06.0845 1004 Themes - ok
14:08:06.0876 1004 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
14:08:06.0970 1004 THREADORDER - ok
14:08:07.0157 1004 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
14:08:07.0313 1004 TrkWks - ok
14:08:07.0422 1004 [ 16613A1BAD034D4ECF957AF18B7C2FF5 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:08:07.0547 1004 TrustedInstaller - ok
14:08:07.0687 1004 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
14:08:07.0859 1004 tssecsrv - ok
14:08:08.0124 1004 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
14:08:08.0452 1004 tunmp - ok
14:08:08.0623 1004 [ 6042505FF6FA9AC1EF7684D0E03B6940 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
14:08:08.0795 1004 tunnel - ok
14:08:08.0920 1004 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
14:08:09.0044 1004 uagp35 - ok
14:08:09.0200 1004 [ 8B5088058FA1D1CD897A2113CCFF6C58 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
14:08:09.0372 1004 udfs - ok
14:08:09.0450 1004 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
14:08:09.0637 1004 UI0Detect - ok
14:08:09.0715 1004 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
14:08:09.0840 1004 uliagpkx - ok
14:08:09.0996 1004 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
14:08:10.0136 1004 uliahci - ok
14:08:10.0230 1004 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
14:08:10.0339 1004 UlSata - ok
14:08:10.0402 1004 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
14:08:10.0511 1004 ulsata2 - ok
14:08:10.0604 1004 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
14:08:10.0729 1004 umbus - ok
14:08:10.0901 1004 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
14:08:10.0979 1004 upnphost - ok
14:08:11.0260 1004 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
14:08:11.0494 1004 usbccgp - ok
14:08:11.0696 1004 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
14:08:17.0718 1004 usbcir - ok
14:08:18.0030 1004 [ CEBE90821810E76320155BEBA722FCF9 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
14:08:18.0186 1004 usbehci - ok
14:08:18.0311 1004 [ CC6B28E4CE39951357963119CE47B143 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
14:08:18.0514 1004 usbhub - ok
14:08:18.0560 1004 [ 7BDB7B0E7D45AC0402D78B90789EF47C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
14:08:18.0716 1004 usbohci - ok
14:08:18.0826 1004 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
14:08:19.0028 1004 usbprint - ok
14:08:19.0122 1004 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
14:08:19.0294 1004 usbscan - ok
14:08:19.0465 1004 [ 87BA6B83C5D19B69160968D07D6E2982 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:08:19.0715 1004 USBSTOR - ok
14:08:19.0808 1004 [ 325DBBACB8A36AF9988CCF40EAC228CC ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
14:08:19.0918 1004 usbuhci - ok
14:08:20.0308 1004 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
14:08:20.0464 1004 usbvideo - ok
14:08:22.0024 1004 [ 032A0ACC3909AE7215D524E29D536797 ] UxSms C:\Windows\System32\uxsms.dll
14:08:22.0164 1004 UxSms - ok
14:08:23.0116 1004 [ B13BC395B9D6116628F5AF47E0802AC4 ] vds C:\Windows\System32\vds.exe
14:08:23.0412 1004 vds - ok
14:08:24.0083 1004 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
14:08:24.0286 1004 vga - ok
14:08:24.0629 1004 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
14:08:24.0816 1004 VgaSave - ok
14:08:25.0159 1004 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
14:08:25.0268 1004 viaagp - ok
14:08:25.0705 1004 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
14:08:25.0892 1004 ViaC7 - ok
14:08:26.0267 1004 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
14:08:26.0548 1004 viaide - ok
14:08:26.0610 1004 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
14:08:26.0672 1004 volmgr - ok
14:08:26.0828 1004 [ 98F5FFE6316BD74E9E2C97206C190196 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
14:08:26.0953 1004 volmgrx - ok
14:08:27.0062 1004 [ D8B4A53DD2769F226B3EB374374987C9 ] volsnap C:\Windows\system32\drivers\volsnap.sys
14:08:27.0281 1004 volsnap - ok
14:08:27.0390 1004 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
14:08:27.0484 1004 vsmraid - ok
14:08:27.0998 1004 [ D5FB73D19C46ADE183F968E13F186B23 ] VSS C:\Windows\system32\vssvc.exe
14:08:28.0482 1004 VSS - ok
14:08:28.0794 1004 [ 1CF9206966A8458CDA9A8B20DF8AB7D3 ] W32Time C:\Windows\system32\w32time.dll
14:08:28.0950 1004 W32Time - ok
14:08:28.0997 1004 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
14:08:29.0106 1004 WacomPen - ok
14:08:29.0231 1004 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
14:08:29.0402 1004 Wanarp - ok
14:08:29.0465 1004 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
14:08:29.0496 1004 Wanarpv6 - ok
14:08:29.0683 1004 [ F3A5C2E1A6533192B070D06ECF6BE796 ] wcncsvc C:\Windows\System32\wcncsvc.dll
14:08:30.0042 1004 wcncsvc - ok
14:08:30.0167 1004 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:08:30.0307 1004 WcsPlugInService - ok
14:08:30.0416 1004 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
14:08:30.0494 1004 Wd - ok
14:08:30.0635 1004 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
14:08:30.0916 1004 Wdf01000 - ok
14:08:31.0056 1004 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:08:31.0212 1004 WdiServiceHost - ok
14:08:31.0228 1004 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
14:08:31.0290 1004 WdiSystemHost - ok
14:08:31.0462 1004 [ CF9A5F41789B642DB967021DE06A2713 ] WebClient C:\Windows\System32\webclnt.dll
14:08:31.0555 1004 WebClient - ok
14:08:31.0774 1004 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
14:08:32.0070 1004 Wecsvc - ok
14:08:32.0195 1004 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
14:08:32.0304 1004 wercplsupport - ok
14:08:32.0382 1004 [ FD1965AAA112C6818A30AB02742D0461 ] WerSvc C:\Windows\System32\WerSvc.dll
14:08:32.0554 1004 WerSvc - ok
14:08:32.0741 1004 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
14:08:32.0834 1004 WinDefend - ok
14:08:32.0897 1004 WinHttpAutoProxySvc - ok
14:08:33.0131 1004 [ 00B79A7C984678F24CF052E5BEB3A2F5 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
14:08:33.0240 1004 Winmgmt - ok
14:08:33.0724 1004 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
14:08:34.0769 1004 WinRM - ok
14:08:35.0096 1004 [ F03110711B17AD31271CB2BAF0DBB2B1 ] WinUSB C:\Windows\system32\DRIVERS\WinUSB.sys
14:08:35.0252 1004 WinUSB - ok
14:08:35.0455 1004 [ 275F4346E569DF56CFB95243BD6F6FF0 ] Wlansvc C:\Windows\System32\wlansvc.dll
14:08:35.0674 1004 Wlansvc - ok
14:08:35.0736 1004 [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
14:08:35.0939 1004 WmiAcpi - ok
14:08:36.0064 1004 [ ABA4CF9F856D9A3A25F4DDD7690A6E9D ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:08:36.0157 1004 wmiApSrv - ok
14:08:36.0422 1004 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
14:08:36.0672 1004 WMPNetworkSvc - ok
14:08:37.0078 1004 [ 017695393AFFFED8DE58ABD1B085BE6D ] WMZuneComm C:\Program Files\Zune\WMZuneComm.exe
14:08:37.0202 1004 WMZuneComm - ok
14:08:37.0249 1004 [ 5D94CD167751294962BA238D82DD1BB8 ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:08:37.0374 1004 WPCSvc - ok
14:08:37.0468 1004 [ 396D406292B0CD26E3504FFE82784702 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:08:37.0608 1004 WPDBusEnum - ok
14:08:37.0702 1004 [ 0CEC23084B51B8288099EB710224E955 ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
14:08:37.0811 1004 WpdUsb - ok
14:08:38.0404 1004 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
14:08:39.0059 1004 WPFFontCache_v0400 - ok
14:08:39.0106 1004 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:08:39.0246 1004 ws2ifsl - ok
14:08:39.0355 1004 [ 683DD16B590372F2C9661D277F35E49C ] wscsvc C:\Windows\System32\wscsvc.dll
14:08:39.0464 1004 wscsvc - ok
14:08:39.0558 1004 [ 4422AC5ED8D4C2F0DB63E71D4C069DD7 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
14:08:39.0698 1004 WSDPrintDevice - ok
14:08:39.0714 1004 WSearch - ok
14:08:39.0901 1004 [ 6298277B73C77FA99106B271A7525163 ] wuauserv C:\Windows\system32\wuaueng.dll
14:08:40.0853 1004 wuauserv - ok
14:08:40.0978 1004 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:08:41.0274 1004 WudfPf - ok
14:08:41.0492 1004 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
14:08:41.0617 1004 WUDFRd - ok
14:08:41.0711 1004 [ 2C0206FF8D2C75AC027D1096FA2FAFDA ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:08:41.0867 1004 wudfsvc - ok
14:08:43.0692 1004 [ 1076DF9ADE4E13EA3BF39D2165AEB903 ] ZuneNetworkSvc C:\Program Files\Zune\ZuneNss.exe
14:08:46.0016 1004 ZuneNetworkSvc - ok
14:08:46.0172 1004 [ DE1CDB333A402B279F04D627122FA08E ] ZuneWlanCfgSvc C:\Program Files\Zune\ZuneWlanCfgSvc.exe
14:08:46.0625 1004 ZuneWlanCfgSvc - ok
14:08:46.0640 1004 ================ Scan global ===============================
14:08:46.0828 1004 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
14:08:46.0984 1004 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
14:08:47.0062 1004 [ F42F8855CB5C22E203C6672B124F17FD ] C:\Windows\system32\winsrv.dll
14:08:47.0202 1004 [ 2B336AB6286D6C81FA02CBAB914E3C6C ] C:\Windows\system32\services.exe
14:08:47.0264 1004 [Global] - ok
14:08:47.0264 1004 ================ Scan MBR ==================================
14:08:47.0296 1004 [ 8913823FF508CCF109DB74B636C301DA ] \Device\Harddisk0\DR0
14:08:58.0122 1004 \Device\Harddisk0\DR0 - ok
14:08:58.0184 1004 [ 3E43A28ED30EBCDF4A960F1C38E82C66 ] \Device\Harddisk1\DR1
14:09:00.0602 1004 \Device\Harddisk1\DR1 - ok
14:09:00.0602 1004 ================ Scan VBR ==================================
14:09:00.0649 1004 [ 736206D4D9FAB427DCE063A58AC5AEC0 ] \Device\Harddisk0\DR0\Partition1
14:09:00.0696 1004 \Device\Harddisk0\DR0\Partition1 - ok
14:09:00.0727 1004 [ B50DD659EAA68069D6C0C7038B090BF8 ] \Device\Harddisk0\DR0\Partition2
14:09:00.0758 1004 \Device\Harddisk0\DR0\Partition2 - ok
14:09:00.0758 1004 ============================================================
14:09:00.0758 1004 Scan finished
14:09:00.0758 1004 ============================================================
14:09:01.0086 1856 Detected object count: 11
14:09:01.0086 1856 Actual detected object count: 11
14:09:18.0106 1856 AntiVirScheduler ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0106 1856 AntiVirScheduler ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0106 1856 AntiVirService ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0106 1856 AntiVirService ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0106 1856 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0106 1856 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0121 1856 LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0121 1856 LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0121 1856 prodrv06 ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0121 1856 prodrv06 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0121 1856 prohlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0121 1856 prohlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0137 1856 prosync1 ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0137 1856 prosync1 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0137 1856 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0137 1856 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0152 1856 SearchAnonymizer ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0152 1856 SearchAnonymizer ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0152 1856 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0152 1856 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:09:18.0152 1856 sfhlp01 ( UnsignedFile.Multi.Generic ) - skipped by user
14:09:18.0152 1856 sfhlp01 ( UnsignedFile.Multi.Generic ) - User select action: Skip

Hi,
combofix:

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,
hier ist das entstandene Logfile:

Combofix Logfile:

ComboFix 13-01-06.01 - Aileen 07.01.2013  16:10:31.1.2 - x86
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1252.49.1031.18.894.265 [GMT 1:00]
ausgeführt von:: c:\users\Aileen\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Aileen\AppData\Local\bdhsw.exe
c:\users\Aileen\AppData\Local\gaabcbed.exe
c:\users\Aileen\AppData\Local\sxbadqo.dat
c:\users\Aileen\AppData\Local\sxbadqo.exe
c:\users\Aileen\AppData\Local\sxbadqo_nav.dat
c:\users\Aileen\AppData\Local\sxbadqo_navps.dat
c:\users\Gast\AppData\Roaming\4976.B49
c:\windows\IsUn0407.exe
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
c:\windows\unin0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-12-07 bis 2013-01-07  ))))))))))))))))))))))))))))))
.
.
2100-02-08 14:03 . 2001-05-11 09:39	53248	----a-w-	c:\program files\ACMonitor_X73.exe
2013-01-07 15:25 . 2013-01-07 15:25	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-01-06 19:19 . 2013-01-06 19:19	40776	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2013-01-06 17:50 . 2013-01-06 17:50	--------	d-----w-	C:\_OTL
2013-01-06 15:59 . 2013-01-06 15:59	--------	d-----w-	c:\users\Aileen\AppData\Roaming\Malwarebytes
2013-01-06 15:59 . 2013-01-06 15:59	--------	d-----w-	c:\programdata\Malwarebytes
2013-01-06 15:59 . 2013-01-06 15:59	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2013-01-06 15:59 . 2012-12-14 15:49	21104	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-01-06 13:57 . 2013-01-06 13:56	93640	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2013-01-06 12:22 . 2012-11-08 18:00	6812136	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{48CF6050-512C-4BA2-BEE4-D53CF7512CDB}\mpengine.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-06 13:56 . 2012-09-20 18:35	859072	----a-w-	c:\windows\system32\npdeployJava1.dll
2013-01-06 13:56 . 2011-04-18 17:04	779704	----a-w-	c:\windows\system32\deployJava1.dll
2012-12-31 11:46 . 2012-09-14 15:34	697272	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-12-31 11:46 . 2012-09-14 15:34	73656	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-04 20:23 . 2011-02-03 21:10	31912	----a-w-	C:\symlcsv1.exe
2012-10-10 20:15 . 2012-10-10 20:15	1867112	----a-w-	c:\windows\system32\nvcuvenc.dll
2012-10-10 20:15 . 2012-10-10 20:15	2574696	----a-w-	c:\windows\system32\nvcuvid.dll
2012-10-10 20:14 . 2012-10-10 20:14	888168	----a-w-	c:\windows\system32\nvdispgenco32.dll
2012-10-10 20:14 . 2012-10-10 20:14	17559912	----a-w-	c:\windows\system32\nvcompiler.dll
2012-10-10 20:14 . 2012-10-10 20:14	2428776	----a-w-	c:\windows\system32\nvapi.dll
2012-10-10 20:14 . 2012-10-10 20:14	7697768	----a-w-	c:\windows\system32\nvcuda.dll
2012-10-10 20:14 . 2012-11-18 19:03	52584	----a-w-	c:\windows\system32\OpenCL.dll
2012-10-10 20:14 . 2012-10-10 20:14	10837352	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2012-10-10 20:14 . 2012-10-10 20:14	19906920	----a-w-	c:\windows\system32\nvoglv32.dll
2012-10-10 20:14 . 2012-10-10 20:14	1009512	----a-w-	c:\windows\system32\nvdispco32.dll
2012-10-10 20:14 . 2012-10-10 20:14	6127464	----a-w-	c:\windows\system32\nvopencl.dll
2012-10-10 20:14 . 2012-10-10 20:14	15309160	----a-w-	c:\windows\system32\nvd3dum.dll
2001-05-08 14:36 . 2000-12-05 13:56	114688	----a-w-	c:\program files\lxarscan.dll
2009-01-27 01:34 . 2012-12-18 17:58	1044480	----a-w-	c:\program files\mozilla firefox\plugins\libdivx.dll
2009-01-27 01:34 . 2012-12-18 17:58	200704	----a-w-	c:\program files\mozilla firefox\plugins\ssldivx.dll
2012-12-18 17:58 . 2012-12-18 17:58	262112	----a-w-	c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"ISUSPM"="c:\programdata\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"HP Photosmart 5510 series (NET)"="c:\program files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe" [2011-09-16 1804648]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 4874240]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"Ocs_SM"="c:\users\Aileen\AppData\Roaming\OCS\SM\SearchAnonymizer.exe" [2010-12-21 106496]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-08-31 249896]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 159456]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"PCDrProfiler"="c:\program files\PC-Doctor 5 for Windows\RunProfiler.exe" [2006-09-26 53248]
"Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-24 44136]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Mobipocket Reader Notifications"="c:\program files\Mobipocket.com\Mobipocket Reader\readernotify.exe" [2006-06-20 57344]
.
c:\users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]
.
c:\users\Aileen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Tintenwarnungen überwachen - HP Photosmart 5510 series (Netzwerk).lnk - c:\windows\system32\RunDll32.exe [2006-11-2 44544]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
2006-10-24 14:08	107112	----a-w-	c:\program files\Common Files\Symantec Shared\ccApp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IS CfgWiz]
2006-10-24 00:19	46728	----a-w-	c:\program files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 15:44	3883840	----a-w-	c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\osCheck]
2006-10-26 16:18	22696	----a-w-	c:\program files\Norton Internet Security\osCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 18305286
*NewlyCreated* - COMHOST
*Deregistered* - 18305286
.
Inhalt des "geplante Tasks" Ordners
.
2013-01-07 c:\windows\Tasks\User_Feed_Synchronization-{C5244619-BE93-4FFF-B0A9-688BD28186CB}.job
- c:\windows\system32\msfeedssync.exe [2011-06-15 04:32]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de
TCP: Interfaces\{2604438A-DF56-4402-94B8-2397D3E4C451}: NameServer = 192.168.178.1
FF - ProfilePath - c:\users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hh6xx4zn.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.de/search?q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de
FF - prefs.js: keyword.URL - hxxp://www.google.de/search?q=
FF - ExtSQL: !HIDDEN! 2009-08-12 16:10; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-My Web Search Bar Search Scope Monitor - c:\progra~1\MYWEBS~1\bar\3.bin\m3SrchMn.exe
MSConfigStartUp-MyWebSearch Email Plugin - c:\progra~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
MSConfigStartUp-sxbadqo - c:\users\aileen\appdata\local\sxbadqo.exe
AddRemove-Kalender-Excel_is1 - c:\users\Aileen\Documents\Kalender-Excel\unins000.exe
AddRemove-Zanzarah - c:\windows\IsUn0407.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-01-07 16:26
Windows 6.0.6001 Service Pack 1 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-01-07  16:31:05
ComboFix-quarantined-files.txt  2013-01-07 15:31
.
Vor Suchlauf: 14 Verzeichnis(se), 240.680.316.928 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 240.607.178.752 Bytes frei
.
- - End Of File - - FE2003811F56599FC953343F61FE08C7
         

--- --- ---

Hi
öffne bitte Computer, c: qoobox
rechtsklick quarantain, mit Winrar oder einem ähnlichem archivierungs Programm packen, Archiv hochladen:
Trojaner-Board Upload Channel
Bitte mitteilen, wenn erledigt

Ok, erledigt

Hi
Danke
jetzt müssen wir dein System updaten.
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.

Wenn du denkst, dass du fertig bist, prüfe bitte unter Rechtsklick auf Computer, Eigenschaften, welches Servicepack instaliert ist, und postest mir das bitte.