Tag zusammen,

ich habe mir heute gegen 10:00 h wohl auch den DVU - Trojaner eingehandelt.
Nichts ging mehr. Nicht mal abgesicherter Modus (Win XP Prof.).

1. Schritt: Avira Rescue Disc - FEHLANZEIGE
2. Schritt: Kaspersky Notfall CD 10 - TEILERFOLG
3. Schritt: Ich konnte erkennen, dass es sich eigentlich nur um eine
grafische Oberflche handelt, die automatisch startet und auch nur vollständig erscheint, wenn Verbindung ins WWW besteht. Auf X - Versuche Klammergriff dann eine erste Reaktion - ich konnte im Taskmanager in die Prozesse wechseln und alles einzeln beenden
4. Schritt: malwarebytes Anti-Malware gedownt
- prima, alles scheint wie vor dem Angriff - *freu*

5. Schritt: Rat hier im Forum befolgt und Defogger installiert:


CODE:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:18 on 11/01/2013 (*****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

6. Schritt: OTL installiert und gescannt

CODE "OTL.txt":
OTL logfile created on: 11.01.2013 15:26:20 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Björn\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,50 Gb Total Physical Memory | 2,88 Gb Available Physical Memory | 82,26% Memory free
5,34 Gb Paging File | 4,75 Gb Available in Paging File | 89,07% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 100,01 Gb Total Space | 70,87 Gb Free Space | 70,86% Space Free | Partition Type: NTFS
Drive D: | 365,75 Gb Total Space | 144,48 Gb Free Space | 39,50% Space Free | Partition Type: NTFS

Computer Name: ****-PC | User Name: *****| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.01.11 15:21:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Björn\Desktop\OTL.exe
PRC - [2012.12.14 16:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012.12.14 16:49:28 | 000,512,360 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012.08.27 18:51:00 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.14 19:24:07 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.14 19:24:04 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2012.05.14 19:24:04 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012.05.14 19:24:02 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe
PRC - [2012.05.14 19:24:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.01.18 10:44:32 | 002,057,048 | ---- | M] (Tobit.Software) -- D:\Tobit Radio.fx\Client\rfx-tray.exe
PRC - [2010.06.14 14:07:14 | 000,615,936 | ---- | M] (Nokia) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe
PRC - [2010.06.07 12:51:24 | 000,138,752 | ---- | M] (Nokia) -- C:\Programme\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2010.05.14 11:44:46 | 000,248,552 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
PRC - [2009.10.27 09:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Programme\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008.06.15 14:34:20 | 000,071,096 | ---- | M] () -- C:\Programme\CDBurnerXP\NMSAccessU.exe
PRC - [2008.04.14 15:35:46 | 001,519,616 | ---- | M] () -- C:\Programme\MSI\TV@nywhere AD V1.1\HyperMediaCenter 3.5\DTVR\Scheduled.exe
PRC - [2008.04.14 06:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.06.28 08:40:33 | 000,077,824 | ---- | M] () -- C:\Programme\MSI\TV@nywhere AD V1.1\TV Tuner Card Utilities\HMCP3XCtl.exe
PRC - [2001.12.20 09:42:00 | 000,035,328 | ---- | M] (Logitech Inc. ) -- C:\Programme\Logitech\MouseWare\system\EM_EXEC.EXE
PRC - [2001.12.20 01:59:00 | 000,204,800 | ---- | M] (Logitech Inc. ) -- C:\Programme\Logitech\iTouch\iTouch.exe
PRC - [2001.12.20 01:59:00 | 000,139,264 | ---- | M] () -- C:\Programme\Logitech\iTouch\KbdTray.exe
PRC - [2001.11.07 11:59:06 | 000,086,016 | ---- | M] (MusicMatch) -- C:\Programme\MusicMatch\MusicMatch Jukebox\mm_tray.exe
PRC - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
PRC - [2000.07.06 21:12:18 | 000,032,768 | R--- | M] () -- C:\WINDOWS\twain_32\D66U\D066UUTY.EXE


========== Modules (No Company Name) ==========

MOD - [2012.07.31 02:08:04 | 000,016,872 | ---- | M] () -- C:\Programme\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2012.05.14 19:24:07 | 000,398,288 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2012.01.26 12:39:32 | 009,560,576 | ---- | M] () -- D:\Tobit Radio.fx\Client\tobitclt.dll
MOD - [2012.01.26 11:13:36 | 000,215,552 | ---- | M] () -- D:\Tobit Radio.fx\Client\rfx-client$.ger
MOD - [2011.03.17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009.02.27 16:41:26 | 000,311,296 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU
MOD - [2008.11.12 14:54:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
MOD - [2008.06.15 14:34:20 | 000,071,096 | ---- | M] () -- C:\Programme\CDBurnerXP\NMSAccessU.exe
MOD - [2008.04.14 15:35:46 | 001,519,616 | ---- | M] () -- C:\Programme\MSI\TV@nywhere AD V1.1\HyperMediaCenter 3.5\DTVR\Scheduled.exe
MOD - [2008.04.14 06:52:18 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007.06.28 08:40:33 | 000,077,824 | ---- | M] () -- C:\Programme\MSI\TV@nywhere AD V1.1\TV Tuner Card Utilities\HMCP3XCtl.exe
MOD - [2003.09.10 04:42:28 | 000,045,056 | ---- | M] () -- C:\Programme\MSI\TV@nywhere AD V1.1\HyperMediaCenter 3.5\DTVR\kwspnd.dll
MOD - [2001.12.20 01:59:00 | 000,139,264 | ---- | M] () -- C:\Programme\Logitech\iTouch\KbdTray.exe
MOD - [2000.07.06 21:12:18 | 000,032,768 | R--- | M] () -- C:\WINDOWS\twain_32\D66U\D066UUTY.EXE


========== Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2013.01.09 10:17:32 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.12.14 16:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.12.14 16:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012.05.14 19:24:07 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.14 19:24:04 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)
SRV - [2012.05.14 19:24:02 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2012.05.14 19:24:02 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.01.26 15:08:56 | 003,665,752 | ---- | M] () [Auto | Stopped] -- D:\Tobit Radio.fx\Server\rfx-server.exe -- (Radio.fx)
SRV - [2010.06.14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.01.09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2010.01.09 20:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2008.12.05 17:25:10 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2008.06.15 14:34:20 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Programme\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012.12.14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012.05.14 19:24:08 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.14 19:24:08 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.10.19 17:03:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.02.26 13:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.02.26 13:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.02.26 13:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.02.26 13:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008.12.04 17:50:55 | 000,027,924 | ---- | M] (MusicMatch, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\MxlW2k.sys -- (MxlW2k)
DRV - [2008.12.02 12:59:55 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2008.08.26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.05.16 05:33:14 | 000,115,752 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016unic.sys -- (s0016unic)
DRV - [2008.05.16 05:33:14 | 000,025,512 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016nd5.sys -- (s0016nd5)
DRV - [2008.05.16 05:33:14 | 000,015,016 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV - [2008.05.16 05:33:12 | 000,120,744 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mdm.sys -- (s0016mdm)
DRV - [2008.05.16 05:33:12 | 000,114,216 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016mgmt.sys -- (s0016mgmt)
DRV - [2008.05.16 05:33:12 | 000,110,632 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016obex.sys -- (s0016obex)
DRV - [2008.05.16 05:33:12 | 000,089,256 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus)
DRV - [2008.04.14 00:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MPE.sys -- (MPE)
DRV - [2008.02.14 10:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2008.01.09 10:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri)
DRV - [2008.01.03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.12.04 19:34:18 | 000,946,816 | ---- | M] (NXP Semiconductors Germany GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)
DRV - [2007.10.08 13:32:56 | 000,036,400 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lgtosync.sys -- (LGTO_Sync)
DRV - [2007.08.29 03:04:04 | 000,116,264 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SI3112r.sys -- (SI3112r)
DRV - [2007.08.29 03:04:04 | 000,019,240 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\SiWinAcc.sys -- (SiFilter)
DRV - [2005.04.07 16:18:34 | 000,003,840 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\BANTExt.sys -- (BANTExt)
DRV - [2001.12.19 10:42:00 | 000,067,694 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFlt2.sys -- (LMouFlt2)
DRV - [2001.12.19 10:42:00 | 000,022,206 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFlt2.sys -- (LHidFlt2)
DRV - [2001.12.19 10:42:00 | 000,005,838 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LKbdFlt2.sys -- (LKbdFlt2)
DRV - [2001.12.17 10:42:00 | 000,039,932 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidUsb.sys -- (LHidUsb)
DRV - [2001.12.17 10:42:00 | 000,013,052 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LCcfltr.sys -- (LCcfltr)
DRV - [2001.12.17 10:42:00 | 000,010,496 | ---- | M] (Logitech Inc. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\itchfltr.sys -- (itchfltr)
DRV - [2001.02.05 18:21:14 | 000,272,016 | R--- | M] (U.S. Robotics Corp) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wdxwmac.sys -- (wdxwmac)
DRV - [2001.01.18 14:34:38 | 000,027,792 | R--- | M] (U.S. Robotics Corp) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ndiscapi.sys -- (NDISCAPI)
DRV - [2001.01.18 14:34:38 | 000,026,064 | R--- | M] (U.S. Robotics Corp) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\capi.sys -- (CAPI)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\..\SearchScopes,DefaultScope = {7AA7FB6A-67FC-4992-BA4F-C13EF6C14D34}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{7AA7FB6A-67FC-4992-BA4F-C13EF6C14D34}: "URL" = hxxp://www.google.de/search?q={searchTerms}&rlz=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2010.05.04 18:26:34 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.04.21 16:12:52 | 000,000,000 | ---D | M] (Toolbar fuer eBay) -- C:\Programme\Mozilla Firefox\extensions\{000E148C-F7A7-445A-9044-93BF6CE09ECB}
[1999.12.31 16:00:00 | 000,164,120 | ---- | M] (Tracker Software Products Ltd.) -- C:\Programme\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll

O1 HOSTS File: ([2007.07.27 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (TBSB03968 Class) - {AA61DE26-FA67-4575-9033-918671094293} - C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Toolbar fuer eBay) - {000E148C-F7A7-445A-9044-93BF6CE09ECB} - C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Toolbar fuer eBay) - {000E148C-F7A7-445A-9044-93BF6CE09ECB} - C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll ()
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [BCSSync] C:\Programme\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Corel Reminder] File not found
O4 - HKLM..\Run: [D066UUtility] C:\WINDOWS\twain_32\D66U\D066UUTY.EXE ()
O4 - HKLM..\Run: [EM_EXEC] C:\Programme\Logitech\MouseWare\system\EM_EXEC.EXE (Logitech Inc. )
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe (HP)
O4 - HKLM..\Run: [MMTray] C:\Programme\MusicMatch\MusicMatch Jukebox\mm_tray.exe (MusicMatch)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe (Logitech Inc. )
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe" File not found
O4 - HKCU..\Run: [Center Agent] C:\Programme\MSI\TV@nywhere AD V1.1\HyperMediaCenter 3.5\DTVR\Scheduled.exe ()
O4 - HKCU..\Run: [hddhealth] C:\Programme\HDD Health\hddhealth.exe -wl File not found
O4 - HKCU..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background File not found
O4 - HKCU..\Run: [PC Suite Tray] C:\Programme\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKCU..\Run: [rfxsrvtray] D:\Tobit Radio.fx\Client\rfx-tray.exe (Tobit.Software)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\CAPI Tray.lnk = C:\Programme\U.S. Robotics ISDN Utilities\ccmon.exe (Sto//mann E+V GmbH )
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Remote Control.lnk = C:\Programme\MSI\TV@nywhere AD V1.1\TV Tuner Card Utilities\HMCP3XCtl.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\Björn\Startmenü\Programme\Autostart\Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1220467195744 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.30
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5BB7A547-4FB4-4FD5-BBCF-BA7017907C52}: DhcpNameServer = 192.168.0.30
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Programme\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\TPSvc: DllName - (TPSvc.dll) - File not found
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Björn\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Björn\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Programme\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.12.28 20:46:22 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{532074be-b584-11dc-99d6-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{532074be-b584-11dc-99d6-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{532074be-b584-11dc-99d6-806d6172696f}\Shell\AutoRun\command - "" = E:\Programs\nu2menu\nu2menu.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013.01.11 15:21:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Björn\Desktop\OTL.exe
[2013.01.11 14:51:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Malwarebytes
[2013.01.11 14:51:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2013.01.11 14:51:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2013.01.11 14:51:26 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2013.01.11 14:51:25 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2013.01.10 10:46:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\aicon
[2013.01.10 10:46:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\@icon sushi
[2013.01.09 11:17:51 | 000,000,000 | ---D | C] -- D:\Eigene Dateien\DVDVideoSoft
[2013.01.09 11:17:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft
[2013.01.09 11:17:38 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DVDVideoSoft
[2013.01.09 11:17:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\DVDVideoSoft
[2010.05.04 20:18:09 | 002,921,383 | ---- | C] (Landesfinanzdirektion Thüringen) -- C:\Programme\uninstall.exe
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.01.11 15:21:04 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Björn\Desktop\OTL.exe
[2013.01.11 15:17:28 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.01.11 15:16:56 | 000,203,520 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013.01.11 15:16:53 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.01.11 15:16:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.01.11 15:13:16 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\defogger_reenable
[2013.01.11 15:11:25 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Defogger.exe
[2013.01.11 14:59:05 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.01.11 14:52:00 | 000,001,044 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2013.01.11 14:51:28 | 000,000,762 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.10 15:37:39 | 000,111,104 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.01.10 10:49:02 | 000,000,479 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\E b a y.lnk
[2013.01.10 10:46:42 | 000,000,534 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\@icon sushi.lnk
[2013.01.10 10:36:19 | 000,000,037 | ---- | M] () -- C:\WINDOWS\iTouch.ini
[2013.01.09 17:29:24 | 000,479,082 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.01.09 17:29:24 | 000,437,174 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.01.09 17:29:24 | 000,092,232 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.01.09 17:29:24 | 000,069,400 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.01.09 13:44:14 | 000,032,411 | ---- | M] () -- C:\WINDOWS\SGTBox.INI
[2013.01.09 11:17:46 | 000,000,912 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\DVDVideoSoft Free Studio.lnk
[2013.01.09 11:17:46 | 000,000,765 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Free Audio CD to MP3 Converter.lnk
[2013.01.09 10:08:38 | 000,016,960 | ---- | M] () -- D:\Eigene Dateien\camping_carnet09.pdf
[2013.01.07 18:27:26 | 000,000,050 | ---- | M] () -- C:\WINDOWS\InfModM.ini
[2013.01.06 12:40:22 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.12.31 17:31:32 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.12.30 12:53:34 | 000,000,694 | ---- | M] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Monatseinkommen 2013.lnk
[2012.12.21 13:57:48 | 000,341,832 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.12.21 00:34:11 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.12.14 16:49:28 | 000,021,104 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.01.11 15:13:16 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\defogger_reenable
[2013.01.11 15:11:18 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Defogger.exe
[2013.01.11 14:51:28 | 000,000,762 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.01.10 10:46:42 | 000,000,534 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\@icon sushi.lnk
[2013.01.10 10:34:15 | 000,000,479 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\E b a y.lnk
[2013.01.09 11:17:46 | 000,000,912 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\DVDVideoSoft Free Studio.lnk
[2013.01.09 11:17:46 | 000,000,765 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Free Audio CD to MP3 Converter.lnk
[2013.01.09 10:08:38 | 000,016,960 | ---- | C] () -- D:\Eigene Dateien\camping_carnet09.pdf
[2012.12.30 12:51:25 | 000,000,694 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Desktop\Monatseinkommen 2013.lnk
[2012.02.15 16:36:05 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011.04.09 17:14:35 | 000,554,496 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2010.05.04 20:18:09 | 000,000,564 | ---- | C] () -- C:\Programme\Uninstall ElsterFormular.lnk
[2008.12.28 11:23:00 | 000,000,274 | ---- | C] () -- C:\Programme\PhonTool.ini
[2008.12.28 11:23:00 | 000,000,109 | ---- | C] () -- C:\Programme\params.ini
[2008.12.28 11:23:00 | 000,000,061 | ---- | C] () -- C:\Programme\wfcom.ini
[2008.12.28 11:23:00 | 000,000,029 | ---- | C] () -- C:\Programme\whconfig.ini
[2008.12.28 11:22:59 | 002,692,223 | ---- | C] () -- C:\Programme\userguide.pdf
[2008.12.28 11:22:59 | 000,012,800 | ---- | C] () -- C:\Programme\liesmich.wri
[2008.12.28 11:22:41 | 000,035,914 | ---- | C] () -- C:\Programme\modems.pac
[2008.12.28 11:22:38 | 000,002,560 | ---- | C] () -- C:\Programme\wmodems.dat
[2008.12.28 11:22:38 | 000,000,127 | ---- | C] () -- C:\Programme\custom.ini
[2008.12.05 17:54:44 | 000,111,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.12.03 09:08:04 | 000,000,306 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\TV2.INI
[2008.12.03 09:08:03 | 000,071,033 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\KTVR1.chl
[2008.12.03 09:08:03 | 000,000,149 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\KTVR1.cfg
[2008.12.03 09:03:59 | 000,000,881 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\PInfo.config
[2008.12.03 09:03:59 | 000,000,038 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\KAgent.cfg
[2008.12.03 09:03:59 | 000,000,008 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\SPInfo.cfg
[2008.12.02 12:55:40 | 000,000,313 | ---- | C] () -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\wincmd.ini

========== ZeroAccess Check ==========

[2007.12.28 21:39:29 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 06:52:26 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 11:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 06:52:34 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2009.09.17 09:34:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BVRP Software
[2012.01.11 17:17:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular
[2010.10.25 13:51:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2009.01.09 17:17:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2009.11.15 12:03:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PIXELA
[2009.08.30 15:23:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
[2013.01.10 10:46:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\aicon
[2008.10.18 14:08:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Canneverbe_Limited
[2013.01.09 13:45:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Canon
[2009.11.15 13:47:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Cuttermaran
[2009.01.09 00:29:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\DataLayer
[2010.01.11 20:50:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Desktopicon
[2013.01.09 11:17:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\DVDVideoSoft
[2012.01.11 16:52:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\elsterformular
[2008.12.03 09:24:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\EPGData
[2009.08.30 15:24:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\GHISLER
[2010.04.16 16:05:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Helios
[2008.12.03 12:54:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\KWorld Multimedia
[2008.12.07 22:48:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Mp3tag
[2008.12.03 08:39:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\MSI
[2010.04.01 09:16:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Nokia
[2008.12.04 16:51:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Opera
[2009.01.09 17:23:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\PC Suite
[2008.12.10 10:32:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\PersBackup
[2010.10.07 20:17:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\R.4C
[2009.09.17 09:42:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Sony
[2011.04.09 17:15:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Tobit
[2010.01.05 21:49:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Toolbars
[2011.11.11 17:36:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\TS3Client
[2008.08.14 20:44:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Windows Desktop Search
[2008.10.18 14:36:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Björn\Anwendungsdaten\Windows Search

========== Purity Check ==========

< End of report >

CODE "EXTRAS.txt"
OTL Extras logfile created on: 11.01.2013 15:26:20 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Björn\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,50 Gb Total Physical Memory | 2,88 Gb Available Physical Memory | 82,26% Memory free
5,34 Gb Paging File | 4,75 Gb Available in Paging File | 89,07% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 100,01 Gb Total Space | 70,87 Gb Free Space | 70,86% Space Free | Partition Type: NTFS
Drive D: | 365,75 Gb Total Space | 144,48 Gb Free Space | 39,50% Space Free | Partition Type: NTFS

Computer Name: *****-PC| User Name: *****| Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Programme\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Opera\opera.exe" (Opera Software)
https [open] -- "C:\Programme\Opera\opera.exe" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Programme\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Mp3tag] -- "C:\Programme\Mp3tag\Mp3tag.exe" "/fp:%1" (Florian Heidenreich)
Directory [PlayWithVLC] -- C:\Programme\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
"C:\Programme\Windows Live\Messenger\livecall.exe" = C:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Programme\Windows Live\Messenger\msnmsgr.exe" = C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
"C:\Programme\Windows Live\Messenger\livecall.exe" = C:\Programme\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)
"C:\Programme\Corel\Graphics10\Register\NAVBrowser.exe" = C:\Programme\Corel\Graphics10\Register\NAVBrowser.exe:*isabled:NAVBrowser -- (Naviant, Inc.)
"C:\WINDOWS\system32\fxsclnt.exe" = C:\WINDOWS\system32\fxsclnt.exe:*:Enabled:Microsoft Fax Console -- (Microsoft Corporation)
"C:\WINDOWS\system32\usmt\migwiz.exe" = C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistent zum Übertragen von Dateien und Einstellungen -- (Microsoft Corporation)
"H:\WS_FTP\WS_FTP95.exe" = H:\WS_FTP\WS_FTP95.exe:*:Enabled:WS_FTP 95
"C:\Programme\WS_FTP\WS_FTP95.exe" = C:\Programme\WS_FTP\WS_FTP95.exe:*:Enabled:WS_FTP 95 -- (Ipswitch, Inc. 81 Hartwell Ave. Lexington, MA 02173)
"E:\setup.exe" = E:\setup.exe:*:Enabled:setup
"C:\Programme\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe" = C:\Programme\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.2 -- (Sony Creative Software Inc.)
"C:\Programme\Opera\opera.exe" = C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"E:\fsetup.exe" = E:\fsetup.exe:*:Enabled:AVM FSetup Application
"D:\Programme\Klebezettel NG\klebez.exe" = D:\Programme\Klebezettel NG\klebez.exe:*:Enabled:Elektronische Haftnotizen für Windows
"C:\Programme\Microsoft Office\Office14\ONENOTE.EXE" = C:\Programme\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote -- (Microsoft Corporation)
"C:\Programme\Microsoft Office\Office14\OUTLOOK.EXE" = C:\Programme\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Programme\Microsoft Office\Office14\GROOVE.EXE" = C:\Programme\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace -- (Microsoft Corporation)
"D:\Tobit Radio.fx\Server\rfx-server.exe" = D:\Tobit Radio.fx\Server\rfx-server.exe:*:Enabled:Radio.fx Server -- ()
"D:\Tobit Radio.fx\Client\rfx-client.exe" = D:\Tobit Radio.fx\Client\rfx-client.exe:*:Enabled:Radio.fx Client -- (Tobit.Software)
"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Programme\Opera\pluginwrapper\opera_plugin_wrapper.exe" = C:\Programme\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper
"C:\Programme\Java\jre6\bin\java.exe" = C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"@icon sushi_is1" = @icon sushi 1.21
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{036AA4D4-6D32-11D4-9875-00105ACE7734}" = Logitech iTouch Software
"{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009
"{0878E100-C0BB-41E8-B4C6-C486B61FDA7B}" = Canon PhotoRecord
"{089DD780-DB3F-4CDB-A0C2-111360247298}" = PC Connectivity Solution
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{1B9B5B3B-28E7-4E59-A80D-D670AA984514}" = Nokia Connectivity Cable Driver
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{218BBBE3-FE63-4BB2-81A8-7435575A84FA}" = PhotoStitch
"{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 23
"{28291BD5-92D2-4685-82DC-CCA925C53CCA}" = RemoteCapture Task 1.1
"{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Internet Library
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{45EF4EE3-F591-4B74-A477-0CAE12934CE7}" = RAW Image Task 1.2
"{49F864F5-1A85-4E69-8764-C7E4EABD8BA0}" = MSI TV Tuner Card Utilities
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C96958A-6562-4143-B820-FF4890D3B734}" = Camera Window DVC
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Fotostory 3 für Windows
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5809E7CF-4DCF-11D4-9875-00105ACE7734}" = Logitech MouseWare 9.42 .1
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74DAA2E2-A7DB-4CA3-8F99-62EB23BA3377}" = TV@nywhere Pro Teletext
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{81D62C32-0984-11D3-86CD-00105AD33021}" = Caere Scan Manager 5.1
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AF1E098-1A5C-4336-BBE2-D047ABB401ED}" = MovieEdit Task
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{90140000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 14
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2010
"{90140000-0012-0000-0000-0000000FF1CE}_Office14.STANDARD_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.STANDARD_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.STANDARD_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.STANDARD_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.PROPLUS_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.STANDARD_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.PROPLUS_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.STANDARD_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.PROPLUS_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.STANDARD_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.STANDARD_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}_Office14.PROPLUS_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{91203BD3-6C3E-472F-ADBD-F60FDC7C4010}" = Camera Window DS
"{91F1A0D6-23AD-49FE-8D4E-379485652214}" = Camera Support Core Library
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{98EA51C9-B0B0-45BC-8641-3E119EA47D7B}" = Sony Ericsson Media Manager 1.2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E50DEC9-081B-441F-B647-98DBEA8B01DD}" = CorelDRAW 10
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A2A227E0-8DEC-11D2-A564-B2890D000000}" = Jaws PDF Creator
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC54E544-3E42-443C-A91D-A00A6974C592}" = NVIDIA PhysX v8.10.13
"{AC76BA86-7AD7-1031-7B44-A95000000001}" = Adobe Reader 9.5.2 - Deutsch
"{AE112F6D-D1B3-11D4-8577-00105ADDC431}" = mb Software ArCon 6
"{B6EC7388-E277-4A5B-8C8F-71067A41BA64}" = TextPad 5
"{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}" = Canon ZoomBrowser EX
"{C7281207-4AA4-425E-B57A-0E9EF8445635}" = Camera Window MC
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CBE0FCA1-4E95-11D4-9875-00105ACE7734}" = Logitech-Handbuch
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow! 1.0
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F45298E5-0083-426F-A668-1A2C5F04B8A0}" = PhoneTools
"34EA302E7F4CBD17A19E33BBCB72363234956D7E" = Windows-Treiberpaket - Nokia Modem (06/09/2010 4.5)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"7-Zip" = 7-Zip 4.57
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player
"ArcSoft PhotoBase" = ArcSoft PhotoBase
"Avira AntiVir Desktop" = Avira Antivirus Premium 2012
"AVMFBox" = AVM FRITZ!Box Dokumentation
"AVMFBoxPrinter" = AVM FRITZ!Box Druckeranschluss
"Belarc Advisor 2.0" = Belarc Advisor 7.2
"Canon ScanGear Toolbox CS" = Canon ScanGear Toolbox CS 2.5
"Canon ScanGear Toolbox FAU" = Canon ScanGear Toolbox FAU 2.5
"CCleaner" = CCleaner (remove only)
"CorelDRAW 10_TV" = CorelDRAW 10_TV
"DIKE" = DIKE
"EEEE705096F837B7907659F100C9FE6DA001970F" = Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.7)
"ElsterFormular 11.4.1.4323" = ElsterFormular
"ElsterFormular 13.0.0.8086p" = ElsterFormular
"Free Audio CD to MP3 Converter_is1" = Free Audio CD to MP3 Converter version 1.3.12.1228
"Google Updater" = Google Updater
"hp deskjet 960c series" = hp deskjet 960c series (nur entfernen)
"HyperMediaCenter 3.5_is1" = HyperMediaCenter 3.5
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{218BBBE3-FE63-4BB2-81A8-7435575A84FA}" = Canon Utilities PhotoStitch 3.1
"InstallShield_{28291BD5-92D2-4685-82DC-CCA925C53CCA}" = Canon RemoteCapture Task for ZoomBrowser EX
"InstallShield_{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Canon Internet Library for ZoomBrowser EX
"InstallShield_{45EF4EE3-F591-4B74-A477-0CAE12934CE7}" = Canon RAW Image Task for ZoomBrowser EX
"InstallShield_{4C96958A-6562-4143-B820-FF4890D3B734}" = Canon Camera Window DVC for ZoomBrowser EX
"InstallShield_{8AF1E098-1A5C-4336-BBE2-D047ABB401ED}" = Canon MovieEdit Task for ZoomBrowser EX
"InstallShield_{91203BD3-6C3E-472F-ADBD-F60FDC7C4010}" = Canon Camera Window DS for ZoomBrowser EX
"InstallShield_{91F1A0D6-23AD-49FE-8D4E-379485652214}" = Canon Camera Support Core Library
"InstallShield_{C7281207-4AA4-425E-B57A-0E9EF8445635}" = Canon Camera Window for ZoomBrowser EX
"IrfanView" = IrfanView (remove only)
"ISDN TOOLS" = Uninstall U.S. Robotics ISDN Utilities
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mp3tag" = Mp3tag
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MUSICMATCH Jukebox" = MUSICMATCH Jukebox
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Drivers" = NVIDIA Drivers
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Office14.STANDARD" = Microsoft Office Standard 2010
"OmniPagePro9.0DeinstKey" = OmniPage Pro 9.0
"Opera 12.12.1707" = Opera 12.12
"TBSB03968.TBSB03968Toolbar" = Toolbar fuer eBay
"Tobit Radio.fx Server" = Radio.fx
"TVP3XDrv" = MSI TV@nywhere A/D V1.1 BDA Driver
"VLC media player" = VLC media player 0.9.8a
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XP RegTune 2.12" = XP RegTune 2.12
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 10.01.2013 03:29:04 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3013
Description = Eintrag <D:\TOBIT RADIO.FX\SERVER\RADIO.FX.DB-JOURNAL> in der Hash-Zuordnung
kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details:
Ein
an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)

Error - 10.01.2013 07:37:56 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3013
Description = Eintrag <D:\TOBIT RADIO.FX\SERVER\RADIO.FX.DB-JOURNAL> in der Hash-Zuordnung
kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details:
Ein
an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)

Error - 10.01.2013 07:49:48 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3013
Description = Eintrag <D:\TOBIT RADIO.FX\SERVER\RADIO.FX.DB-JOURNAL> in der Hash-Zuordnung
kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details:
Ein
an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)

Error - 11.01.2013 04:37:49 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3013
Description = Eintrag <D:\TOBIT RADIO.FX\SERVER\RADIO.FX.DB-JOURNAL> in der Hash-Zuordnung
kann nicht aktualisiert werden. Kontext: Anwendung, SystemIndex Katalog Details:
Ein
an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)

Error - 11.01.2013 05:13:24 | Computer Name = ****-PC | Source = Avira Antivirus | ID = 4122
Description = Die Datei AvShadow konnte nicht geladen werden. Fehlercode: 0x3e5

Error - 11.01.2013 09:23:40 | Computer Name = ****-PC | Source = Windows Search Service | ID = 7040
Description = Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der
Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.

Details:

0xc0041801 (0xc0041801)

Error - 11.01.2013 09:23:41 | Computer Name = ****-PC | Source = Windows Search Service | ID = 7040
Description = Der Suchdienst hat beschädigte Datendateien im Index erkannt. Der
Dienst versucht, dieses Problem durch Neuerstellung des Index automatisch zu beheben.

Kontext:
Windows Anwendung, SystemIndex Katalog Details: 0xc0041801 (0xc0041801)

Error - 11.01.2013 09:23:41 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3029
Description = Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext:
Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindex kann nicht gelesen
werden. (0xc0041800)

Error - 11.01.2013 09:23:41 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3028
Description = Das Gatherer-Objekt kann nicht initialisiert werden. Kontext: Windows
Anwendung, SystemIndex Katalog Details: Der Inhaltsindex kann nicht gelesen werden.
(0xc0041800)

Error - 11.01.2013 09:23:41 | Computer Name = ****-PC | Source = Windows Search Service | ID = 3058
Description = Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung

Details:
Der
Inhaltsindex kann nicht gelesen werden. (0xc0041800)

[ System Events ]
Error - 11.01.2013 09:24:19 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Windows
Search.

Error - 11.01.2013 09:24:19 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1053

Error - 11.01.2013 09:24:19 | Computer Name = ****-PC | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1053" aufgetreten, als der Dienst "WSearch"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error - 11.01.2013 09:28:25 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "ServiceLayer" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.

Error - 11.01.2013 09:28:28 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Cyberlink RichVideo Service(CRVS)" wurde unerwartet beendet.
Dies ist bereits 1 Mal passiert.

Error - 11.01.2013 09:28:31 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Windows-Bilderfassung (WIA)" wurde unerwartet beendet. Dies
ist bereits 1 Mal passiert.

Error - 11.01.2013 09:28:55 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "WMI-Leistungsadapter" wurde unerwartet beendet. Dies ist bereits
1 Mal passiert.

Error - 11.01.2013 10:06:03 | Computer Name = ****-PC | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
wurde angehalten.

Error - 11.01.2013 10:06:33 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
agp440 IntelIde

Error - 11.01.2013 10:17:28 | Computer Name = ****-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Radio.fx Server" wurde unerwartet beendet. Dies ist bereits
1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt:
Starten Sie den Dienst neu..

< End of report >

7. Schritt: gmer scannen lassen

CODE:
GMER 2.0.18444 - hxxp://www.gmer.net
Rootkit scan 2013-01-11 19:14:27
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Scsi\SI3112r1Port2Path0Target0Lun0 SiI_____ rev.1100 465,76GB
Running: gmer-2.0.18444.exe; Driver: C:\DOKUME~1\BJRN~1\LOKALE~1\Temp\awdcapow.sys


---- System - GMER 2.0 ----

SSDT B16F7BBC ZwClose
SSDT B16F7B76 ZwCreateKey
SSDT B16F7BC6 ZwCreateSection
SSDT B16F7B9E ZwCreateSymbolicLinkObject
SSDT B16F7B6C ZwCreateThread
SSDT B16F7B7B ZwDeleteKey
SSDT B16F7B85 ZwDeleteValueKey
SSDT B16F7BB7 ZwDuplicateObject
SSDT B16F7BA3 ZwLoadDriver
SSDT B16F7B8A ZwLoadKey
SSDT B16F7B58 ZwOpenProcess
SSDT B16F7B99 ZwOpenSection
SSDT B16F7B5D ZwOpenThread
SSDT B16F7BDF ZwQueryValueKey
SSDT B16F7B94 ZwReplaceKey
SSDT B16F7BD0 ZwRequestWaitReplyPort
SSDT B16F7B8F ZwRestoreKey
SSDT B16F7BCB ZwSetContextThread
SSDT B16F7BD5 ZwSetSecurityObject
SSDT B16F7BA8 ZwSetSystemInformation
SSDT B16F7B80 ZwSetValueKey
SSDT B16F7BDA ZwSystemDebugControl
SSDT B16F7B67 ZwTerminateProcess
SSDT B16F7B62 ZwWriteVirtualMemory

---- Kernel code sections - GMER 2.0 ----

.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB8994360, 0x34CDBF, 0xE8000020]

---- User code sections - GMER 2.0 ----

.text C:\WINDOWS\system32\SearchIndexer.exe[388] kernel32.dll!WriteFile 7C8112FF 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)
.text D:\Tobit Radio.fx\Server\rfx-server.exe[1988] kernel32.dll!SetUnhandledExceptionFilter 7C8449CD 5 Bytes JMP 00642C40 D:\Tobit Radio.fx\Server\rfx-server.exe
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!GetSysColor 7E368E78 5 Bytes JMP 10083A50 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!GetSysColorBrush 7E368EAB 5 Bytes JMP 10083A90 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!SetScrollInfo 7E369056 7 Bytes JMP 10090D70 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!EndDialog 7E374A4E 5 Bytes JMP 10054EB0 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!DefWindowProcA 7E37C17E 7 Bytes JMP 10054ED0 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!GetScrollInfo 7E37DFE2 7 Bytes JMP 10090CC0 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!ShowScrollBar 7E37F2F2 5 Bytes JMP 10090E40 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!GetScrollPos 7E37F704 5 Bytes JMP 10090D00 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!SetScrollPos 7E37F750 5 Bytes JMP 10090DB0 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!GetScrollRange 7E37F787 5 Bytes JMP 10090D30 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!SetScrollRange 7E37F99B 5 Bytes JMP 10090DF0 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!DrawFrameControl 7E38E940 7 Bytes JMP 10081650 D:\Tobit Radio.fx\Client\TOBITCLT.dll
.text D:\Tobit Radio.fx\Client\rfx-tray.exe[2496] USER32.dll!EnableScrollBar 7E3B8005 7 Bytes JMP 10090C80 D:\Tobit Radio.fx\Client\TOBITCLT.dll

---- Files - GMER 2.0 ----

File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS.log 131072 bytes
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS0057D.log 131072 bytes
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS0057E.log 0 bytes
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS0057F.log 131072 bytes
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS00580.log 131072 bytes
File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Search\Data\Applications\Windows\MSS00581.log 131072 bytes

---- EOF - GMER 2.0 ----


Nun meine Frage an die Community: hab ich´s alles weg bekommen ?

Gruß´von der Küste

Deichfisch

Hi
und die Malwarebytes und kaspersky funde sollen wir erraten, oder postest du die?
Malwarebytes öffnen, Logdateien, berichte mit Funden posten.

NATÜRLICH - ich Trottel....

hier Malwarebytes

Malwarebytes Anti-Malware (Test) 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.01.11.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Björn :: *****-PC [Administrator]

Schutz: Aktiviert

11.01.2013 14:52:37
MBAM-log-2013-01-11 (15-01-09).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 303136
Laufzeit: 7 Minute(n), 46 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|svñhîst (Trojan.Agent) -> Daten: %USERPROFILE%\wgsdgsdgdsgsd.exe -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 1
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bösartig: (1) Gut: (0) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Dokumente und Einstellungen\Björn\wgsdgsdgdsgsd.exe (Exploit.Drop.GS) -> Keine Aktion durchgeführt.

(Ende)

KASPERSKY hat keine Log-Datei angelegt, leif über DOS-Ebene

Hi
hattest du den Malwarebytes fund gelöscht? falls nein, tu das bitte, danach:
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

Über Maleware hatte ich 3 Treffer.
Ich habe "ENtfernen" ausgewählt. Danach leif der PC wieder normal an.
Dazu habe ich noch weitere Log-Dateien. Bin da mit der Reihenfolge durcheinander gekommen.

Hier nun TDSSKiller-Ergebniss:

20:47:10.0062 2404 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
20:47:10.0515 2404 ============================================================
20:47:10.0515 2404 Current date / time: 2013/01/11 20:47:10.0515
20:47:10.0515 2404 SystemInfo:
20:47:10.0515 2404
20:47:10.0515 2404 OS Version: 5.1.2600 ServicePack: 3.0
20:47:10.0515 2404 Product type: Workstation
20:47:10.0515 2404 ComputerName: OTTEN-PC
20:47:10.0515 2404 UserName: Björn
20:47:10.0515 2404 Windows directory: C:\WINDOWS
20:47:10.0515 2404 System windows directory: C:\WINDOWS
20:47:10.0515 2404 Processor architecture: Intel x86
20:47:10.0515 2404 Number of processors: 4
20:47:10.0515 2404 Page size: 0x1000
20:47:10.0515 2404 Boot type: Normal boot
20:47:10.0515 2404 ============================================================
20:47:15.0937 2404 Drive \Device\Harddisk0\DR0 - Size: 0x74709FDE00 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000058
20:47:15.0953 2404 ============================================================
20:47:15.0953 2404 \Device\Harddisk0\DR0:
20:47:15.0953 2404 MBR partitions:
20:47:15.0953 2404 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC803400
20:47:15.0968 2404 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC80347E, BlocksNum 0x2DB7D902
20:47:15.0968 2404 ============================================================
20:47:16.0015 2404 C: <-> \Device\Harddisk0\DR0\Partition1
20:47:16.0140 2404 D: <-> \Device\Harddisk0\DR0\Partition2
20:47:16.0171 2404 ============================================================
20:47:16.0171 2404 Initialize success
20:47:16.0171 2404 ============================================================
20:47:28.0968 1180 ============================================================
20:47:28.0968 1180 Scan started
20:47:28.0968 1180 Mode: Manual;
20:47:28.0968 1180 ============================================================
20:47:30.0734 1180 ================ Scan system memory ========================
20:47:30.0734 1180 System memory - ok
20:47:30.0734 1180 ================ Scan services =============================
20:47:30.0843 1180 [ 998519AA8465768A7880B5671C8C6714 ] 3xHybrid C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
20:47:30.0859 1180 3xHybrid - ok
20:47:30.0859 1180 Abiosdsk - ok
20:47:30.0859 1180 abp480n5 - ok
20:47:30.0906 1180 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:47:30.0906 1180 ACPI - ok
20:47:30.0921 1180 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
20:47:30.0921 1180 ACPIEC - ok
20:47:30.0968 1180 [ C1EB9968EC89FBA5F3A264E2E57923AB ] Adobe LM Service C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
20:47:30.0968 1180 Adobe LM Service - ok
20:47:31.0031 1180 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:47:31.0031 1180 AdobeFlashPlayerUpdateSvc - ok
20:47:31.0031 1180 adpu160m - ok
20:47:31.0062 1180 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
20:47:31.0062 1180 aec - ok
20:47:31.0093 1180 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
20:47:31.0093 1180 AFD - ok
20:47:31.0109 1180 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
20:47:31.0109 1180 agp440 - ok
20:47:31.0109 1180 Aha154x - ok
20:47:31.0125 1180 aic78u2 - ok
20:47:31.0125 1180 aic78xx - ok
20:47:31.0140 1180 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
20:47:31.0140 1180 Alerter - ok
20:47:31.0156 1180 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
20:47:31.0156 1180 ALG - ok
20:47:31.0156 1180 AliIde - ok
20:47:31.0156 1180 amsint - ok
20:47:31.0203 1180 [ B9B5DFAFEA592BD4CA967824EBB42E3D ] AntiVirMailService C:\Programme\Avira\AntiVir Desktop\avmailc.exe
20:47:31.0203 1180 AntiVirMailService - ok
20:47:31.0234 1180 [ 67B1D78711B4386C26241096326EE14A ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
20:47:31.0234 1180 AntiVirSchedulerService - ok
20:47:31.0265 1180 [ 845C4E7AE211EDAD5E0B832126F56932 ] AntiVirService C:\Programme\Avira\AntiVir Desktop\avguard.exe
20:47:31.0265 1180 AntiVirService - ok
20:47:31.0281 1180 [ 30D71E0C149943A8985D02EA0944F2FE ] AntiVirWebService C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE
20:47:31.0296 1180 AntiVirWebService - ok
20:47:31.0328 1180 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
20:47:31.0328 1180 AppMgmt - ok
20:47:31.0328 1180 asc - ok
20:47:31.0328 1180 asc3350p - ok
20:47:31.0343 1180 asc3550 - ok
20:47:31.0390 1180 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
20:47:31.0406 1180 aspnet_state - ok
20:47:31.0421 1180 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:47:31.0421 1180 AsyncMac - ok
20:47:31.0437 1180 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
20:47:31.0437 1180 atapi - ok
20:47:31.0453 1180 Atdisk - ok
20:47:31.0453 1180 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:47:31.0468 1180 Atmarpc - ok
20:47:31.0468 1180 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
20:47:31.0468 1180 AudioSrv - ok
20:47:31.0515 1180 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
20:47:31.0531 1180 audstub - ok
20:47:31.0531 1180 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
20:47:31.0531 1180 avgntflt - ok
20:47:31.0562 1180 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
20:47:31.0562 1180 avipbb - ok
20:47:31.0562 1180 [ 271CFD1A989209B1964E24D969552BF7 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
20:47:31.0578 1180 avkmgr - ok
20:47:31.0593 1180 [ 5D7BE7B19E827125E016325334E58FF1 ] BANTExt C:\WINDOWS\System32\Drivers\BANTExt.sys
20:47:31.0593 1180 BANTExt - ok
20:47:31.0640 1180 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
20:47:31.0640 1180 Beep - ok
20:47:31.0671 1180 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
20:47:31.0687 1180 BITS - ok
20:47:31.0718 1180 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
20:47:31.0718 1180 Browser - ok
20:47:31.0750 1180 [ 368540EEB1C4C9D8A9F03F467EEFC30E ] CAPI C:\WINDOWS\system32\DRIVERS\capi.sys
20:47:31.0750 1180 CAPI - ok
20:47:31.0765 1180 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
20:47:31.0765 1180 cbidf2k - ok
20:47:31.0781 1180 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
20:47:31.0796 1180 CCDECODE - ok
20:47:31.0796 1180 cd20xrnt - ok
20:47:31.0796 1180 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
20:47:31.0796 1180 Cdaudio - ok
20:47:31.0796 1180 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
20:47:31.0796 1180 Cdfs - ok
20:47:31.0812 1180 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:47:31.0812 1180 Cdrom - ok
20:47:31.0812 1180 Changer - ok
20:47:31.0812 1180 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
20:47:31.0812 1180 CiSvc - ok
20:47:31.0828 1180 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
20:47:31.0828 1180 ClipSrv - ok
20:47:31.0843 1180 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:47:31.0953 1180 clr_optimization_v2.0.50727_32 - ok
20:47:31.0968 1180 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
20:47:31.0968 1180 CmBatt - ok
20:47:31.0968 1180 CmdIde - ok
20:47:31.0968 1180 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
20:47:31.0968 1180 Compbatt - ok
20:47:31.0968 1180 COMSysApp - ok
20:47:31.0984 1180 Cpqarray - ok
20:47:32.0000 1180 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
20:47:32.0000 1180 CryptSvc - ok
20:47:32.0015 1180 dac2w2k - ok
20:47:32.0015 1180 dac960nt - ok
20:47:32.0046 1180 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
20:47:32.0046 1180 DcomLaunch - ok
20:47:32.0046 1180 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
20:47:32.0062 1180 Dhcp - ok
20:47:32.0062 1180 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
20:47:32.0062 1180 Disk - ok
20:47:32.0062 1180 dmadmin - ok
20:47:32.0093 1180 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
20:47:32.0109 1180 dmboot - ok
20:47:32.0109 1180 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
20:47:32.0109 1180 dmio - ok
20:47:32.0109 1180 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
20:47:32.0109 1180 dmload - ok
20:47:32.0125 1180 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
20:47:32.0125 1180 dmserver - ok
20:47:32.0140 1180 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
20:47:32.0140 1180 DMusic - ok
20:47:32.0156 1180 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
20:47:32.0156 1180 Dnscache - ok
20:47:32.0187 1180 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
20:47:32.0187 1180 Dot3svc - ok
20:47:32.0187 1180 dpti2o - ok
20:47:32.0203 1180 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
20:47:32.0203 1180 drmkaud - ok
20:47:32.0218 1180 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
20:47:32.0218 1180 EapHost - ok
20:47:32.0234 1180 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
20:47:32.0234 1180 ERSvc - ok
20:47:32.0250 1180 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
20:47:32.0250 1180 Eventlog - ok
20:47:32.0296 1180 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
20:47:32.0296 1180 EventSystem - ok
20:47:32.0296 1180 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
20:47:32.0312 1180 Fastfat - ok
20:47:32.0328 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
20:47:32.0328 1180 FastUserSwitchingCompatibility - ok
20:47:32.0359 1180 [ 030DEF1B6AD98FA70A51C9994DABC924 ] Fax C:\WINDOWS\system32\fxssvc.exe
20:47:32.0359 1180 Fax - ok
20:47:32.0375 1180 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
20:47:32.0375 1180 Fdc - ok
20:47:32.0375 1180 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
20:47:32.0390 1180 Fips - ok
20:47:32.0390 1180 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
20:47:32.0390 1180 Flpydisk - ok
20:47:32.0406 1180 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
20:47:32.0406 1180 FltMgr - ok
20:47:32.0468 1180 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
20:47:32.0468 1180 FontCache3.0.0.0 - ok
20:47:32.0468 1180 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:47:32.0468 1180 Fs_Rec - ok
20:47:32.0468 1180 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:47:32.0468 1180 Ftdisk - ok
20:47:32.0500 1180 [ 5C230948DD6652228F88CA7AE6CB276C ] gdrv C:\WINDOWS\gdrv.sys
20:47:32.0781 1180 gdrv - ok
20:47:32.0812 1180 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:47:32.0828 1180 Gpc - ok
20:47:32.0875 1180 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Programme\Google\Update\GoogleUpdate.exe
20:47:32.0875 1180 gupdate - ok
20:47:32.0875 1180 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Programme\Google\Update\GoogleUpdate.exe
20:47:32.0875 1180 gupdatem - ok
20:47:32.0906 1180 [ 408DDD80EEDE47175F6844817B90213E ] gusvc C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
20:47:32.0921 1180 gusvc - ok
20:47:32.0937 1180 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
20:47:32.0937 1180 HDAudBus - ok
20:47:32.0968 1180 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
20:47:32.0968 1180 helpsvc - ok
20:47:32.0984 1180 [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ C:\WINDOWS\System32\hidserv.dll
20:47:32.0984 1180 HidServ - ok
20:47:33.0000 1180 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:47:33.0000 1180 HidUsb - ok
20:47:33.0015 1180 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
20:47:33.0015 1180 hkmsvc - ok
20:47:33.0015 1180 hpn - ok
20:47:33.0046 1180 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
20:47:33.0046 1180 HTTP - ok
20:47:33.0062 1180 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
20:47:33.0062 1180 HTTPFilter - ok
20:47:33.0062 1180 i2omgmt - ok
20:47:33.0062 1180 i2omp - ok
20:47:33.0093 1180 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:47:33.0093 1180 i8042prt - ok
20:47:33.0140 1180 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:47:33.0156 1180 idsvc - ok
20:47:33.0171 1180 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
20:47:33.0171 1180 Imapi - ok
20:47:33.0187 1180 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
20:47:33.0187 1180 ImapiService - ok
20:47:33.0187 1180 ini910u - ok
20:47:33.0281 1180 [ 08BAF30F6DE95814F58AF9CE7BBC5614 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
20:47:33.0328 1180 IntcAzAudAddService - ok
20:47:33.0343 1180 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
20:47:33.0343 1180 IntelIde - ok
20:47:33.0359 1180 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:47:33.0359 1180 intelppm - ok
20:47:33.0375 1180 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
20:47:33.0375 1180 Ip6Fw - ok
20:47:33.0390 1180 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:47:33.0406 1180 IpFilterDriver - ok
20:47:33.0406 1180 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:47:33.0406 1180 IpInIp - ok
20:47:33.0421 1180 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:47:33.0421 1180 IpNat - ok
20:47:33.0421 1180 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:47:33.0421 1180 IPSec - ok
20:47:33.0421 1180 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
20:47:33.0437 1180 IRENUM - ok
20:47:33.0437 1180 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:47:33.0437 1180 isapnp - ok
20:47:33.0468 1180 [ E28B9746A8888C6536691D6F72FC6A61 ] itchfltr C:\WINDOWS\system32\DRIVERS\itchfltr.sys
20:47:33.0468 1180 itchfltr - ok
20:47:33.0531 1180 [ E731921DB2E17DCD3DB472FAD5549C57 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
20:47:33.0531 1180 JavaQuickStarterService - ok
20:47:33.0546 1180 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:47:33.0546 1180 Kbdclass - ok
20:47:33.0546 1180 [ B6D6C117D771C98130497265F26D1882 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
20:47:33.0546 1180 kbdhid - ok
20:47:33.0578 1180 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
20:47:33.0578 1180 kmixer - ok
20:47:33.0593 1180 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
20:47:33.0593 1180 KSecDD - ok
20:47:33.0640 1180 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
20:47:33.0656 1180 lanmanserver - ok
20:47:33.0703 1180 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
20:47:33.0703 1180 lanmanworkstation - ok
20:47:33.0703 1180 lbrtfdc - ok
20:47:33.0734 1180 [ 753C8202C18E118B5863F81D4AF50588 ] LCcfltr C:\WINDOWS\system32\drivers\lccfltr.sys
20:47:33.0734 1180 LCcfltr - ok
20:47:33.0765 1180 [ E6BECE8B315BBE2148EFB742B5EF06F2 ] LGTO_Sync C:\WINDOWS\system32\Drivers\lgtosync.sys
20:47:33.0765 1180 LGTO_Sync - ok
20:47:33.0765 1180 [ E8E25EDB0D3AB0BC459405BCAF824FDF ] LHidFlt2 C:\WINDOWS\system32\DRIVERS\LHidFlt2.sys
20:47:33.0765 1180 LHidFlt2 - ok
20:47:33.0765 1180 [ 85FEA0F9EA1A406D00E2BC175F50BFA3 ] LHidUsb C:\WINDOWS\system32\drivers\lhidusb.sys
20:47:33.0765 1180 LHidUsb - ok
20:47:33.0765 1180 [ 18E48E9D5683860773A078C7C3837DAF ] LKbdFlt2 C:\WINDOWS\system32\DRIVERS\LKbdFlt2.sys
20:47:33.0765 1180 LKbdFlt2 - ok
20:47:33.0781 1180 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
20:47:33.0781 1180 LmHosts - ok
20:47:33.0781 1180 [ D1D5F7CBECEF5C0C9F019B0C534BE289 ] LMouFlt2 C:\WINDOWS\system32\DRIVERS\LMouFlt2.sys
20:47:33.0781 1180 LMouFlt2 - ok
20:47:33.0781 1180 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
20:47:33.0796 1180 MBAMProtector - ok
20:47:33.0812 1180 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
20:47:33.0828 1180 MBAMScheduler - ok
20:47:33.0843 1180 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
20:47:33.0859 1180 MBAMService - ok
20:47:33.0906 1180 [ AA8C480CE9AE04768D7472954598E9BC ] MDM C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
20:47:33.0906 1180 MDM - ok
20:47:33.0921 1180 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
20:47:33.0921 1180 Messenger - ok
20:47:33.0968 1180 Microsoft SharePoint Workspace Audit Service - ok
20:47:33.0984 1180 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
20:47:33.0984 1180 mnmdd - ok
20:47:34.0000 1180 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
20:47:34.0000 1180 mnmsrvc - ok
20:47:34.0015 1180 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
20:47:34.0015 1180 Modem - ok
20:47:34.0031 1180 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:47:34.0031 1180 Mouclass - ok
20:47:34.0046 1180 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:47:34.0046 1180 mouhid - ok
20:47:34.0046 1180 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
20:47:34.0046 1180 MountMgr - ok
20:47:34.0062 1180 [ C0F8E0C2C3C0437CF37C6781896DC3EC ] MPE C:\WINDOWS\system32\DRIVERS\MPE.sys
20:47:34.0062 1180 MPE - ok
20:47:34.0062 1180 mraid35x - ok
20:47:34.0078 1180 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:47:34.0078 1180 MRxDAV - ok
20:47:34.0093 1180 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:47:34.0093 1180 MRxSmb - ok
20:47:34.0125 1180 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
20:47:34.0125 1180 MSDTC - ok
20:47:34.0125 1180 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
20:47:34.0125 1180 Msfs - ok
20:47:34.0125 1180 MSIServer - ok
20:47:34.0156 1180 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:47:34.0156 1180 MSKSSRV - ok
20:47:34.0156 1180 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:47:34.0156 1180 MSPCLOCK - ok
20:47:34.0171 1180 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
20:47:34.0171 1180 MSPQM - ok
20:47:34.0187 1180 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:47:34.0187 1180 mssmbios - ok
20:47:34.0203 1180 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
20:47:34.0203 1180 MSTEE - ok
20:47:34.0218 1180 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
20:47:34.0218 1180 Mup - ok
20:47:34.0250 1180 [ EC36CA3DDD05E45FAA7FCA551EC1CF3C ] MxlW2k C:\WINDOWS\system32\drivers\MxlW2k.sys
20:47:34.0250 1180 MxlW2k - ok
20:47:34.0265 1180 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
20:47:34.0265 1180 NABTSFEC - ok
20:47:34.0296 1180 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
20:47:34.0296 1180 napagent - ok
20:47:34.0328 1180 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
20:47:34.0328 1180 NDIS - ok
20:47:34.0343 1180 [ FA7EEC11104893BF6BB9C97DE8E2F3BA ] NDISCAPI C:\WINDOWS\system32\DRIVERS\ndiscapi.sys
20:47:34.0343 1180 NDISCAPI - ok
20:47:34.0343 1180 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
20:47:34.0343 1180 NdisIP - ok
20:47:34.0359 1180 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:47:34.0359 1180 NdisTapi - ok
20:47:34.0359 1180 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:47:34.0359 1180 Ndisuio - ok
20:47:34.0359 1180 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:47:34.0359 1180 NdisWan - ok
20:47:34.0375 1180 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
20:47:34.0375 1180 NDProxy - ok
20:47:34.0390 1180 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
20:47:34.0390 1180 NetBIOS - ok
20:47:34.0406 1180 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
20:47:34.0421 1180 NetBT - ok
20:47:34.0437 1180 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
20:47:34.0437 1180 NetDDE - ok
20:47:34.0437 1180 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
20:47:34.0453 1180 NetDDEdsdm - ok
20:47:34.0468 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
20:47:34.0468 1180 Netlogon - ok
20:47:34.0500 1180 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
20:47:34.0500 1180 Netman - ok
20:47:34.0531 1180 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:47:34.0531 1180 NetTcpPortSharing - ok
20:47:34.0546 1180 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
20:47:34.0546 1180 Nla - ok
20:47:34.0546 1180 NMIndexingService - ok
20:47:34.0593 1180 [ FD306FBCCE7ADB1077B709742E7148E9 ] NMSAccessU C:\Programme\CDBurnerXP\NMSAccessU.exe
20:47:34.0593 1180 NMSAccessU - ok
20:47:34.0640 1180 [ C3963D85B721A7F80D8A55F4E2867A3A ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
20:47:34.0640 1180 nmwcd - ok
20:47:34.0687 1180 [ 3859C69A77793180548802DAC9F34A38 ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
20:47:34.0687 1180 nmwcdc - ok
20:47:34.0703 1180 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
20:47:34.0703 1180 Npfs - ok
20:47:34.0718 1180 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
20:47:34.0718 1180 Ntfs - ok
20:47:34.0718 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
20:47:34.0718 1180 NtLmSsp - ok
20:47:34.0765 1180 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
20:47:34.0765 1180 NtmsSvc - ok
20:47:34.0781 1180 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
20:47:34.0781 1180 Null - ok
20:47:34.0921 1180 [ 61BF339927F7A02C395F89FD8AD7CCFB ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
20:47:34.0968 1180 nv - ok
20:47:34.0968 1180 [ 45C2D5328DF5A613895CCBC5652D261F ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
20:47:34.0984 1180 NVSvc - ok
20:47:35.0000 1180 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:47:35.0000 1180 NwlnkFlt - ok
20:47:35.0000 1180 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:47:35.0000 1180 NwlnkFwd - ok
20:47:35.0031 1180 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
20:47:35.0031 1180 ose - ok
20:47:35.0171 1180 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:47:35.0250 1180 osppsvc - ok
20:47:35.0265 1180 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
20:47:35.0265 1180 Parport - ok
20:47:35.0281 1180 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
20:47:35.0281 1180 PartMgr - ok
20:47:35.0296 1180 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
20:47:35.0296 1180 ParVdm - ok
20:47:35.0328 1180 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
20:47:35.0328 1180 pccsmcfd - ok
20:47:35.0328 1180 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
20:47:35.0328 1180 PCI - ok
20:47:35.0328 1180 PCIDump - ok
20:47:35.0343 1180 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
20:47:35.0343 1180 PCIIde - ok
20:47:35.0359 1180 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
20:47:35.0359 1180 Pcmcia - ok
20:47:35.0359 1180 PDCOMP - ok
20:47:35.0359 1180 PDFRAME - ok
20:47:35.0375 1180 PDRELI - ok
20:47:35.0375 1180 PDRFRAME - ok
20:47:35.0375 1180 perc2 - ok
20:47:35.0375 1180 perc2hib - ok
20:47:35.0390 1180 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
20:47:35.0390 1180 PlugPlay - ok
20:47:35.0406 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
20:47:35.0406 1180 PolicyAgent - ok
20:47:35.0421 1180 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:47:35.0421 1180 PptpMiniport - ok
20:47:35.0421 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
20:47:35.0421 1180 ProtectedStorage - ok
20:47:35.0421 1180 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
20:47:35.0421 1180 PSched - ok
20:47:35.0421 1180 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:47:35.0421 1180 Ptilink - ok
20:47:35.0437 1180 ql1080 - ok
20:47:35.0437 1180 Ql10wnt - ok
20:47:35.0437 1180 ql12160 - ok
20:47:35.0437 1180 ql1240 - ok
20:47:35.0437 1180 ql1280 - ok
20:47:35.0578 1180 [ B40AA9BE30D62B288DBF4AAA83FB2A49 ] Radio.fx D:\Tobit Radio.fx\Server\rfx-server.exe
20:47:35.0656 1180 Radio.fx - ok
20:47:35.0671 1180 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:47:35.0671 1180 RasAcd - ok
20:47:35.0687 1180 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
20:47:35.0703 1180 RasAuto - ok
20:47:35.0718 1180 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:47:35.0718 1180 Rasl2tp - ok
20:47:35.0750 1180 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
20:47:35.0750 1180 RasMan - ok
20:47:35.0750 1180 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:47:35.0765 1180 RasPppoe - ok
20:47:35.0765 1180 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
20:47:35.0765 1180 Raspti - ok
20:47:35.0781 1180 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:47:35.0781 1180 Rdbss - ok
20:47:35.0781 1180 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:47:35.0781 1180 RDPCDD - ok
20:47:35.0796 1180 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:47:35.0796 1180 rdpdr - ok
20:47:35.0828 1180 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
20:47:35.0828 1180 RDPWD - ok
20:47:35.0890 1180 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
20:47:35.0890 1180 RDSessMgr - ok
20:47:35.0906 1180 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
20:47:35.0906 1180 redbook - ok
20:47:35.0921 1180 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
20:47:35.0921 1180 RemoteAccess - ok
20:47:35.0968 1180 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
20:47:35.0968 1180 RemoteRegistry - ok
20:47:36.0078 1180 [ 4D05898896EC49CF663DDA61041AB096 ] RichVideo C:\Programme\CyberLink\Shared Files\RichVideo.exe
20:47:36.0109 1180 RichVideo - ok
20:47:36.0187 1180 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
20:47:36.0187 1180 RpcLocator - ok
20:47:36.0203 1180 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
20:47:36.0203 1180 RpcSs - ok
20:47:36.0234 1180 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
20:47:36.0250 1180 RSVP - ok
20:47:36.0265 1180 [ 89619EF503F949FAE09252A8B883EE11 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
20:47:36.0265 1180 RTLE8023xp - ok
20:47:36.0281 1180 [ 59509AD6CBC28F2C73056268985B3E48 ] s0016bus C:\WINDOWS\system32\DRIVERS\s0016bus.sys
20:47:36.0281 1180 s0016bus - ok
20:47:36.0312 1180 [ B98C3A6F91F4FBA285AF9606A240C6B4 ] s0016mdfl C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys
20:47:36.0312 1180 s0016mdfl - ok
20:47:36.0328 1180 [ 8A83426F4FB7B5212825D9DE76368B1A ] s0016mdm C:\WINDOWS\system32\DRIVERS\s0016mdm.sys
20:47:36.0328 1180 s0016mdm - ok
20:47:36.0343 1180 [ 7A78BBA97FEB5E6D24C49E93A3BF7287 ] s0016mgmt C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys
20:47:36.0343 1180 s0016mgmt - ok
20:47:36.0359 1180 [ 34EF7B5F611957B73E7219DD5A222AD1 ] s0016nd5 C:\WINDOWS\system32\DRIVERS\s0016nd5.sys
20:47:36.0359 1180 s0016nd5 - ok
20:47:36.0375 1180 [ 36792935847143E4A3CDA0DC87248487 ] s0016obex C:\WINDOWS\system32\DRIVERS\s0016obex.sys
20:47:36.0375 1180 s0016obex - ok
20:47:36.0390 1180 [ 927208754FB27FC3E7A659E77500C5D1 ] s0016unic C:\WINDOWS\system32\DRIVERS\s0016unic.sys
20:47:36.0390 1180 s0016unic - ok
20:47:36.0406 1180 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
20:47:36.0406 1180 SamSs - ok
20:47:36.0421 1180 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
20:47:36.0421 1180 SCardSvr - ok
20:47:36.0453 1180 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
20:47:36.0453 1180 Schedule - ok
20:47:36.0484 1180 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:47:36.0484 1180 Secdrv - ok
20:47:36.0484 1180 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
20:47:36.0484 1180 seclogon - ok
20:47:36.0515 1180 [ E5B56569A9F79B70314FEDE6C953641E ] seehcri C:\WINDOWS\system32\DRIVERS\seehcri.sys
20:47:36.0515 1180 seehcri - ok
20:47:36.0515 1180 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
20:47:36.0515 1180 SENS - ok
20:47:36.0546 1180 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] Serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
20:47:36.0546 1180 Serenum - ok
20:47:36.0546 1180 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
20:47:36.0546 1180 Serial - ok
20:47:36.0609 1180 [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer C:\Programme\PC Connectivity Solution\ServiceLayer.exe
20:47:36.0640 1180 ServiceLayer - ok
20:47:36.0671 1180 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
20:47:36.0671 1180 Sfloppy - ok
20:47:36.0703 1180 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
20:47:36.0718 1180 SharedAccess - ok
20:47:36.0750 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
20:47:36.0765 1180 ShellHWDetection - ok
20:47:36.0781 1180 [ 3DA2F680BFC8E92A535CEA5A5D80AC37 ] SI3112r C:\WINDOWS\system32\DRIVERS\SI3112r.sys
20:47:36.0796 1180 SI3112r - ok
20:47:36.0796 1180 [ D893AA1D1EE007B7AB1B16E1099E9F17 ] SiFilter C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys
20:47:36.0796 1180 SiFilter - ok
20:47:36.0796 1180 Simbad - ok
20:47:36.0828 1180 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
20:47:36.0828 1180 SLIP - ok
20:47:36.0828 1180 Sparrow - ok
20:47:36.0843 1180 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
20:47:36.0843 1180 splitter - ok
20:47:36.0859 1180 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
20:47:36.0859 1180 Spooler - ok
20:47:36.0875 1180 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
20:47:36.0875 1180 sr - ok
20:47:36.0890 1180 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
20:47:36.0890 1180 srservice - ok
20:47:36.0921 1180 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
20:47:36.0921 1180 Srv - ok
20:47:36.0937 1180 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
20:47:36.0937 1180 SSDPSRV - ok
20:47:36.0968 1180 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
20:47:36.0968 1180 ssmdrv - ok
20:47:37.0000 1180 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
20:47:37.0000 1180 stisvc - ok
20:47:37.0015 1180 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
20:47:37.0015 1180 streamip - ok
20:47:37.0046 1180 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
20:47:37.0046 1180 swenum - ok
20:47:37.0046 1180 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
20:47:37.0046 1180 swmidi - ok
20:47:37.0046 1180 SwPrv - ok
20:47:37.0046 1180 symc810 - ok
20:47:37.0062 1180 symc8xx - ok
20:47:37.0062 1180 sym_hi - ok
20:47:37.0062 1180 sym_u3 - ok
20:47:37.0062 1180 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
20:47:37.0062 1180 sysaudio - ok
20:47:37.0078 1180 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
20:47:37.0078 1180 SysmonLog - ok
20:47:37.0093 1180 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
20:47:37.0109 1180 TapiSrv - ok
20:47:37.0125 1180 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:47:37.0140 1180 Tcpip - ok
20:47:37.0156 1180 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
20:47:37.0156 1180 TDPIPE - ok
20:47:37.0156 1180 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
20:47:37.0156 1180 TDTCP - ok
20:47:37.0171 1180 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
20:47:37.0171 1180 TermDD - ok
20:47:37.0187 1180 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
20:47:37.0187 1180 TermService - ok
20:47:37.0203 1180 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
20:47:37.0203 1180 Themes - ok
20:47:37.0234 1180 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
20:47:37.0234 1180 TlntSvr - ok
20:47:37.0234 1180 TosIde - ok
20:47:37.0250 1180 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
20:47:37.0265 1180 TrkWks - ok
20:47:37.0281 1180 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
20:47:37.0281 1180 Udfs - ok
20:47:37.0296 1180 ultra - ok
20:47:37.0312 1180 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
20:47:37.0312 1180 Update - ok
20:47:37.0328 1180 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
20:47:37.0328 1180 upnphost - ok
20:47:37.0359 1180 [ 0CCADC7391021376EDBB8AA649D04E68 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
20:47:37.0359 1180 upperdev - ok
20:47:37.0375 1180 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
20:47:37.0375 1180 UPS - ok
20:47:37.0390 1180 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
20:47:37.0390 1180 usbccgp - ok
20:47:37.0406 1180 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:47:37.0406 1180 usbehci - ok
20:47:37.0437 1180 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:47:37.0437 1180 usbhub - ok
20:47:37.0453 1180 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
20:47:37.0453 1180 usbprint - ok
20:47:37.0468 1180 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
20:47:37.0468 1180 usbscan - ok
20:47:37.0484 1180 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
20:47:37.0484 1180 usbser - ok
20:47:37.0484 1180 [ 68B4F83CCCF70A2FF32EE142C234332A ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
20:47:37.0500 1180 UsbserFilt - ok
20:47:37.0500 1180 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:47:37.0500 1180 USBSTOR - ok
20:47:37.0515 1180 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:47:37.0515 1180 usbuhci - ok
20:47:37.0515 1180 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
20:47:37.0515 1180 VgaSave - ok
20:47:37.0531 1180 ViaIde - ok
20:47:37.0546 1180 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
20:47:37.0546 1180 VolSnap - ok
20:47:37.0578 1180 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
20:47:37.0578 1180 VSS - ok
20:47:37.0625 1180 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
20:47:37.0625 1180 W32Time - ok
20:47:37.0640 1180 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:47:37.0640 1180 Wanarp - ok
20:47:37.0671 1180 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
20:47:37.0671 1180 Wdf01000 - ok
20:47:37.0687 1180 WDICA - ok
20:47:37.0703 1180 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
20:47:37.0703 1180 wdmaud - ok
20:47:37.0734 1180 [ 352FCF15E77C34E62C56B83C078B6555 ] wdxwmac C:\WINDOWS\system32\DRIVERS\wdxwmac.sys
20:47:37.0734 1180 wdxwmac - ok
20:47:37.0750 1180 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
20:47:37.0750 1180 WebClient - ok
20:47:37.0812 1180 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
20:47:37.0812 1180 winmgmt - ok
20:47:37.0828 1180 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
20:47:37.0843 1180 WmdmPmSN - ok
20:47:37.0859 1180 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
20:47:37.0859 1180 Wmi - ok
20:47:37.0875 1180 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
20:47:37.0875 1180 WmiApSrv - ok
20:47:37.0937 1180 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
20:47:37.0953 1180 WMPNetworkSvc - ok
20:47:37.0968 1180 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
20:47:37.0968 1180 WS2IFSL - ok
20:47:37.0984 1180 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
20:47:37.0984 1180 wscsvc - ok
20:47:38.0000 1180 WSearch - ok
20:47:38.0015 1180 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
20:47:38.0015 1180 WSTCODEC - ok
20:47:38.0031 1180 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
20:47:38.0031 1180 wuauserv - ok
20:47:38.0062 1180 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
20:47:38.0062 1180 WudfPf - ok
20:47:38.0062 1180 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
20:47:38.0078 1180 WudfRd - ok
20:47:38.0093 1180 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
20:47:38.0093 1180 WudfSvc - ok
20:47:38.0109 1180 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
20:47:38.0109 1180 WZCSVC - ok
20:47:38.0140 1180 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
20:47:38.0140 1180 xmlprov - ok
20:47:38.0140 1180 ================ Scan global ===============================
20:47:38.0156 1180 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
20:47:38.0187 1180 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:47:38.0187 1180 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:47:38.0203 1180 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
20:47:38.0203 1180 [Global] - ok
20:47:38.0203 1180 ================ Scan MBR ==================================
20:47:38.0218 1180 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
20:47:38.0375 1180 \Device\Harddisk0\DR0 - ok
20:47:38.0375 1180 ================ Scan VBR ==================================
20:47:38.0375 1180 [ 5A66E88A08C7F06576EC70FDDE55A493 ] \Device\Harddisk0\DR0\Partition1
20:47:38.0375 1180 \Device\Harddisk0\DR0\Partition1 - ok
20:47:38.0390 1180 [ FAAA497B4B989FC5928BA2BF704B62C7 ] \Device\Harddisk0\DR0\Partition2
20:47:38.0390 1180 \Device\Harddisk0\DR0\Partition2 - ok
20:47:38.0390 1180 ============================================================
20:47:38.0390 1180 Scan finished
20:47:38.0390 1180 ============================================================
20:47:38.0406 0456 Detected object count: 0
20:47:38.0406 0456 Actual detected object count: 0
20:48:21.0453 2576 ============================================================
20:48:21.0453 2576 Scan started
20:48:21.0453 2576 Mode: Manual; SigCheck; TDLFS;
20:48:21.0453 2576 ============================================================
20:48:22.0203 2576 ================ Scan system memory ========================
20:48:22.0203 2576 System memory - ok
20:48:22.0203 2576 ================ Scan services =============================
20:48:22.0312 2576 [ 998519AA8465768A7880B5671C8C6714 ] 3xHybrid C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
20:48:22.0562 2576 3xHybrid - ok
20:48:22.0562 2576 Abiosdsk - ok
20:48:22.0562 2576 abp480n5 - ok
20:48:22.0593 2576 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
20:48:23.0046 2576 ACPI - ok
20:48:23.0062 2576 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
20:48:23.0187 2576 ACPIEC - ok
20:48:23.0218 2576 [ C1EB9968EC89FBA5F3A264E2E57923AB ] Adobe LM Service C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
20:48:23.0218 2576 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
20:48:23.0218 2576 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
20:48:23.0265 2576 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
20:48:23.0281 2576 AdobeFlashPlayerUpdateSvc - ok
20:48:23.0296 2576 adpu160m - ok
20:48:23.0328 2576 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
20:48:23.0437 2576 aec - ok
20:48:23.0484 2576 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
20:48:23.0546 2576 AFD - ok
20:48:23.0578 2576 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
20:48:23.0687 2576 agp440 - ok
20:48:23.0687 2576 Aha154x - ok
20:48:23.0703 2576 aic78u2 - ok
20:48:23.0703 2576 aic78xx - ok
20:48:23.0718 2576 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
20:48:23.0843 2576 Alerter - ok
20:48:23.0859 2576 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
20:48:23.0968 2576 ALG - ok
20:48:23.0968 2576 AliIde - ok
20:48:23.0984 2576 amsint - ok
20:48:24.0015 2576 [ B9B5DFAFEA592BD4CA967824EBB42E3D ] AntiVirMailService C:\Programme\Avira\AntiVir Desktop\avmailc.exe
20:48:24.0062 2576 AntiVirMailService - ok
20:48:24.0078 2576 [ 67B1D78711B4386C26241096326EE14A ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
20:48:24.0093 2576 AntiVirSchedulerService - ok
20:48:24.0109 2576 [ 845C4E7AE211EDAD5E0B832126F56932 ] AntiVirService C:\Programme\Avira\AntiVir Desktop\avguard.exe
20:48:24.0125 2576 AntiVirService - ok
20:48:24.0140 2576 [ 30D71E0C149943A8985D02EA0944F2FE ] AntiVirWebService C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE
20:48:24.0171 2576 AntiVirWebService - ok
20:48:24.0203 2576 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
20:48:24.0328 2576 AppMgmt - ok
20:48:24.0328 2576 asc - ok
20:48:24.0328 2576 asc3350p - ok
20:48:24.0328 2576 asc3550 - ok
20:48:24.0375 2576 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
20:48:24.0390 2576 aspnet_state - ok
20:48:24.0406 2576 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
20:48:24.0531 2576 AsyncMac - ok
20:48:24.0546 2576 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
20:48:24.0671 2576 atapi - ok
20:48:24.0671 2576 Atdisk - ok
20:48:24.0687 2576 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
20:48:24.0796 2576 Atmarpc - ok
20:48:24.0796 2576 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
20:48:24.0890 2576 AudioSrv - ok
20:48:24.0921 2576 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
20:48:25.0000 2576 audstub - ok
20:48:25.0000 2576 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
20:48:25.0343 2576 avgntflt - ok
20:48:25.0359 2576 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
20:48:25.0375 2576 avipbb - ok
20:48:25.0390 2576 [ 271CFD1A989209B1964E24D969552BF7 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
20:48:25.0390 2576 avkmgr - ok
20:48:25.0406 2576 [ 5D7BE7B19E827125E016325334E58FF1 ] BANTExt C:\WINDOWS\System32\Drivers\BANTExt.sys
20:48:25.0406 2576 BANTExt ( UnsignedFile.Multi.Generic ) - warning
20:48:25.0406 2576 BANTExt - detected UnsignedFile.Multi.Generic (1)
20:48:25.0437 2576 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
20:48:25.0515 2576 Beep - ok
20:48:25.0546 2576 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
20:48:25.0656 2576 BITS - ok
20:48:25.0687 2576 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
20:48:25.0750 2576 Browser - ok
20:48:25.0765 2576 [ 368540EEB1C4C9D8A9F03F467EEFC30E ] CAPI C:\WINDOWS\system32\DRIVERS\capi.sys
20:48:25.0781 2576 CAPI ( UnsignedFile.Multi.Generic ) - warning
20:48:25.0781 2576 CAPI - detected UnsignedFile.Multi.Generic (1)
20:48:25.0796 2576 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
20:48:25.0921 2576 cbidf2k - ok
20:48:25.0953 2576 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
20:48:26.0062 2576 CCDECODE - ok
20:48:26.0062 2576 cd20xrnt - ok
20:48:26.0078 2576 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
20:48:26.0171 2576 Cdaudio - ok
20:48:26.0203 2576 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
20:48:26.0281 2576 Cdfs - ok
20:48:26.0296 2576 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
20:48:26.0375 2576 Cdrom - ok
20:48:26.0375 2576 Changer - ok
20:48:26.0406 2576 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
20:48:26.0484 2576 CiSvc - ok
20:48:26.0484 2576 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
20:48:26.0562 2576 ClipSrv - ok
20:48:26.0593 2576 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:48:26.0609 2576 clr_optimization_v2.0.50727_32 - ok
20:48:26.0609 2576 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
20:48:26.0703 2576 CmBatt - ok
20:48:26.0703 2576 CmdIde - ok
20:48:26.0703 2576 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
20:48:26.0796 2576 Compbatt - ok
20:48:26.0796 2576 COMSysApp - ok
20:48:26.0812 2576 Cpqarray - ok
20:48:26.0812 2576 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
20:48:26.0890 2576 CryptSvc - ok
20:48:26.0890 2576 dac2w2k - ok
20:48:26.0890 2576 dac960nt - ok
20:48:26.0921 2576 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
20:48:27.0000 2576 DcomLaunch - ok
20:48:27.0015 2576 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
20:48:27.0093 2576 Dhcp - ok
20:48:27.0109 2576 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
20:48:27.0187 2576 Disk - ok
20:48:27.0187 2576 dmadmin - ok
20:48:27.0218 2576 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
20:48:27.0312 2576 dmboot - ok
20:48:27.0328 2576 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
20:48:27.0406 2576 dmio - ok
20:48:27.0421 2576 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
20:48:27.0500 2576 dmload - ok
20:48:27.0515 2576 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
20:48:27.0593 2576 dmserver - ok
20:48:27.0609 2576 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
20:48:27.0703 2576 DMusic - ok
20:48:27.0718 2576 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
20:48:27.0750 2576 Dnscache - ok
20:48:27.0781 2576 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
20:48:27.0859 2576 Dot3svc - ok
20:48:27.0859 2576 dpti2o - ok
20:48:27.0859 2576 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
20:48:27.0937 2576 drmkaud - ok
20:48:27.0953 2576 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
20:48:28.0046 2576 EapHost - ok
20:48:28.0062 2576 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
20:48:28.0171 2576 ERSvc - ok
20:48:28.0187 2576 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
20:48:28.0203 2576 Eventlog - ok
20:48:28.0218 2576 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
20:48:28.0250 2576 EventSystem - ok
20:48:28.0265 2576 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
20:48:28.0343 2576 Fastfat - ok
20:48:28.0375 2576 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
20:48:28.0406 2576 FastUserSwitchingCompatibility - ok
20:48:28.0437 2576 [ 030DEF1B6AD98FA70A51C9994DABC924 ] Fax C:\WINDOWS\system32\fxssvc.exe
20:48:28.0515 2576 Fax - ok
20:48:28.0531 2576 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
20:48:28.0609 2576 Fdc - ok
20:48:28.0609 2576 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
20:48:28.0703 2576 Fips - ok
20:48:28.0718 2576 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
20:48:28.0796 2576 Flpydisk - ok
20:48:28.0828 2576 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
20:48:28.0921 2576 FltMgr - ok
20:48:28.0968 2576 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
20:48:28.0984 2576 FontCache3.0.0.0 - ok
20:48:28.0984 2576 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
20:48:29.0078 2576 Fs_Rec - ok
20:48:29.0109 2576 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
20:48:29.0203 2576 Ftdisk - ok
20:48:29.0234 2576 [ 5C230948DD6652228F88CA7AE6CB276C ] gdrv C:\WINDOWS\gdrv.sys
20:48:29.0250 2576 gdrv - ok
20:48:29.0265 2576 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
20:48:29.0343 2576 Gpc - ok
20:48:29.0390 2576 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Programme\Google\Update\GoogleUpdate.exe
20:48:29.0406 2576 gupdate - ok
20:48:29.0406 2576 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Programme\Google\Update\GoogleUpdate.exe
20:48:29.0421 2576 gupdatem - ok
20:48:29.0437 2576 [ 408DDD80EEDE47175F6844817B90213E ] gusvc C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
20:48:29.0453 2576 gusvc - ok
20:48:29.0468 2576 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
20:48:29.0546 2576 HDAudBus - ok
20:48:29.0578 2576 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
20:48:29.0656 2576 helpsvc - ok
20:48:29.0656 2576 [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ C:\WINDOWS\System32\hidserv.dll
20:48:29.0734 2576 HidServ - ok
20:48:29.0750 2576 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
20:48:29.0828 2576 HidUsb - ok
20:48:29.0843 2576 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
20:48:29.0921 2576 hkmsvc - ok
20:48:29.0921 2576 hpn - ok
20:48:29.0953 2576 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
20:48:30.0000 2576 HTTP - ok
20:48:30.0031 2576 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
20:48:30.0125 2576 HTTPFilter - ok
20:48:30.0125 2576 i2omgmt - ok
20:48:30.0125 2576 i2omp - ok
20:48:30.0156 2576 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
20:48:30.0234 2576 i8042prt - ok
20:48:30.0281 2576 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
20:48:30.0343 2576 idsvc - ok
20:48:30.0343 2576 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
20:48:30.0421 2576 Imapi - ok
20:48:30.0437 2576 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
20:48:30.0515 2576 ImapiService - ok
20:48:30.0531 2576 ini910u - ok
20:48:30.0625 2576 [ 08BAF30F6DE95814F58AF9CE7BBC5614 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
20:48:31.0125 2576 IntcAzAudAddService - ok
20:48:31.0140 2576 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
20:48:31.0265 2576 IntelIde - ok
20:48:31.0265 2576 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
20:48:31.0375 2576 intelppm - ok
20:48:31.0390 2576 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
20:48:31.0468 2576 Ip6Fw - ok
20:48:31.0500 2576 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
20:48:31.0578 2576 IpFilterDriver - ok
20:48:31.0593 2576 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
20:48:31.0671 2576 IpInIp - ok
20:48:31.0687 2576 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
20:48:31.0781 2576 IpNat - ok
20:48:31.0781 2576 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
20:48:31.0859 2576 IPSec - ok
20:48:31.0875 2576 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
20:48:31.0953 2576 IRENUM - ok
20:48:31.0968 2576 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
20:48:32.0046 2576 isapnp - ok
20:48:32.0093 2576 [ E28B9746A8888C6536691D6F72FC6A61 ] itchfltr C:\WINDOWS\system32\DRIVERS\itchfltr.sys
20:48:32.0125 2576 itchfltr - ok
20:48:32.0203 2576 [ E731921DB2E17DCD3DB472FAD5549C57 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
20:48:32.0218 2576 JavaQuickStarterService - ok
20:48:32.0218 2576 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
20:48:32.0296 2576 Kbdclass - ok
20:48:32.0312 2576 [ B6D6C117D771C98130497265F26D1882 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
20:48:32.0390 2576 kbdhid - ok
20:48:32.0406 2576 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
20:48:32.0484 2576 kmixer - ok
20:48:32.0500 2576 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
20:48:32.0562 2576 KSecDD - ok
20:48:32.0593 2576 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
20:48:32.0625 2576 lanmanserver - ok
20:48:32.0656 2576 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
20:48:32.0687 2576 lanmanworkstation - ok
20:48:32.0703 2576 lbrtfdc - ok
20:48:32.0718 2576 [ 753C8202C18E118B5863F81D4AF50588 ] LCcfltr C:\WINDOWS\system32\drivers\lccfltr.sys
20:48:32.0765 2576 LCcfltr - ok
20:48:32.0796 2576 [ E6BECE8B315BBE2148EFB742B5EF06F2 ] LGTO_Sync C:\WINDOWS\system32\Drivers\lgtosync.sys
20:48:32.0796 2576 LGTO_Sync - ok
20:48:32.0812 2576 [ E8E25EDB0D3AB0BC459405BCAF824FDF ] LHidFlt2 C:\WINDOWS\system32\DRIVERS\LHidFlt2.sys
20:48:32.0828 2576 LHidFlt2 - ok
20:48:32.0828 2576 [ 85FEA0F9EA1A406D00E2BC175F50BFA3 ] LHidUsb C:\WINDOWS\system32\drivers\lhidusb.sys
20:48:32.0843 2576 LHidUsb - ok
20:48:32.0859 2576 [ 18E48E9D5683860773A078C7C3837DAF ] LKbdFlt2 C:\WINDOWS\system32\DRIVERS\LKbdFlt2.sys
20:48:32.0875 2576 LKbdFlt2 - ok
20:48:32.0906 2576 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
20:48:32.0984 2576 LmHosts - ok
20:48:32.0984 2576 [ D1D5F7CBECEF5C0C9F019B0C534BE289 ] LMouFlt2 C:\WINDOWS\system32\DRIVERS\LMouFlt2.sys
20:48:33.0015 2576 LMouFlt2 - ok
20:48:33.0046 2576 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
20:48:33.0062 2576 MBAMProtector - ok
20:48:33.0093 2576 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
20:48:33.0125 2576 MBAMScheduler - ok
20:48:33.0156 2576 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
20:48:33.0203 2576 MBAMService - ok
20:48:33.0250 2576 [ AA8C480CE9AE04768D7472954598E9BC ] MDM C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
20:48:33.0265 2576 MDM ( UnsignedFile.Multi.Generic ) - warning
20:48:33.0265 2576 MDM - detected UnsignedFile.Multi.Generic (1)
20:48:33.0296 2576 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
20:48:33.0421 2576 Messenger - ok
20:48:33.0468 2576 Microsoft SharePoint Workspace Audit Service - ok
20:48:33.0484 2576 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
20:48:33.0609 2576 mnmdd - ok
20:48:33.0625 2576 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
20:48:33.0718 2576 mnmsrvc - ok
20:48:33.0750 2576 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
20:48:33.0859 2576 Modem - ok
20:48:33.0875 2576 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
20:48:34.0000 2576 Mouclass - ok
20:48:34.0031 2576 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
20:48:34.0156 2576 mouhid - ok
20:48:34.0171 2576 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
20:48:34.0265 2576 MountMgr - ok
20:48:34.0281 2576 [ C0F8E0C2C3C0437CF37C6781896DC3EC ] MPE C:\WINDOWS\system32\DRIVERS\MPE.sys
20:48:34.0359 2576 MPE - ok
20:48:34.0359 2576 mraid35x - ok
20:48:34.0375 2576 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
20:48:34.0453 2576 MRxDAV - ok
20:48:34.0484 2576 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
20:48:34.0531 2576 MRxSmb - ok
20:48:34.0562 2576 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
20:48:34.0640 2576 MSDTC - ok
20:48:34.0656 2576 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
20:48:34.0734 2576 Msfs - ok
20:48:34.0734 2576 MSIServer - ok
20:48:34.0750 2576 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
20:48:34.0828 2576 MSKSSRV - ok
20:48:34.0828 2576 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
20:48:34.0906 2576 MSPCLOCK - ok
20:48:34.0937 2576 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
20:48:35.0046 2576 MSPQM - ok
20:48:35.0078 2576 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
20:48:35.0140 2576 mssmbios - ok
20:48:35.0156 2576 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
20:48:35.0234 2576 MSTEE - ok
20:48:35.0250 2576 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
20:48:35.0265 2576 Mup - ok
20:48:35.0296 2576 [ EC36CA3DDD05E45FAA7FCA551EC1CF3C ] MxlW2k C:\WINDOWS\system32\drivers\MxlW2k.sys
20:48:35.0312 2576 MxlW2k ( UnsignedFile.Multi.Generic ) - warning
20:48:35.0312 2576 MxlW2k - detected UnsignedFile.Multi.Generic (1)
20:48:35.0328 2576 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
20:48:35.0406 2576 NABTSFEC - ok
20:48:35.0437 2576 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
20:48:35.0515 2576 napagent - ok
20:48:35.0531 2576 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
20:48:35.0609 2576 NDIS - ok
20:48:35.0625 2576 [ FA7EEC11104893BF6BB9C97DE8E2F3BA ] NDISCAPI C:\WINDOWS\system32\DRIVERS\ndiscapi.sys
20:48:35.0625 2576 NDISCAPI ( UnsignedFile.Multi.Generic ) - warning
20:48:35.0625 2576 NDISCAPI - detected UnsignedFile.Multi.Generic (1)
20:48:35.0625 2576 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
20:48:35.0703 2576 NdisIP - ok
20:48:35.0718 2576 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
20:48:35.0750 2576 NdisTapi - ok
20:48:35.0765 2576 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
20:48:35.0859 2576 Ndisuio - ok
20:48:35.0859 2576 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
20:48:35.0937 2576 NdisWan - ok
20:48:35.0953 2576 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
20:48:36.0000 2576 NDProxy - ok
20:48:36.0015 2576 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
20:48:36.0078 2576 NetBIOS - ok
20:48:36.0125 2576 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
20:48:36.0187 2576 NetBT - ok
20:48:36.0218 2576 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
20:48:36.0312 2576 NetDDE - ok
20:48:36.0312 2576 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
20:48:36.0390 2576 NetDDEdsdm - ok
20:48:36.0406 2576 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
20:48:36.0484 2576 Netlogon - ok
20:48:36.0515 2576 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
20:48:36.0593 2576 Netman - ok
20:48:36.0609 2576 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:48:36.0625 2576 NetTcpPortSharing - ok
20:48:36.0656 2576 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
20:48:36.0671 2576 Nla - ok
20:48:36.0671 2576 NMIndexingService - ok
20:48:36.0718 2576 [ FD306FBCCE7ADB1077B709742E7148E9 ] NMSAccessU C:\Programme\CDBurnerXP\NMSAccessU.exe
20:48:36.0734 2576 NMSAccessU - ok
20:48:36.0750 2576 [ C3963D85B721A7F80D8A55F4E2867A3A ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
20:48:36.0906 2576 nmwcd - ok
20:48:36.0921 2576 [ 3859C69A77793180548802DAC9F34A38 ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
20:48:36.0968 2576 nmwcdc - ok
20:48:37.0000 2576 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
20:48:37.0078 2576 Npfs - ok
20:48:37.0109 2576 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
20:48:37.0406 2576 Ntfs - ok
20:48:37.0421 2576 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
20:48:37.0531 2576 NtLmSsp - ok
20:48:37.0562 2576 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
20:48:37.0703 2576 NtmsSvc - ok
20:48:37.0718 2576 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
20:48:37.0843 2576 Null - ok
20:48:38.0015 2576 [ 61BF339927F7A02C395F89FD8AD7CCFB ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
20:48:38.0375 2576 nv - ok
20:48:38.0390 2576 [ 45C2D5328DF5A613895CCBC5652D261F ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
20:48:38.0406 2576 NVSvc - ok
20:48:38.0437 2576 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
20:48:38.0562 2576 NwlnkFlt - ok
20:48:38.0578 2576 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
20:48:38.0656 2576 NwlnkFwd - ok
20:48:38.0687 2576 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
20:48:38.0703 2576 ose - ok
20:48:38.0828 2576 [ 358A9CCA612C68EB2F07DDAD4CE1D8D7 ] osppsvc C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:48:39.0125 2576 osppsvc - ok
20:48:39.0156 2576 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
20:48:39.0234 2576 Parport - ok
20:48:39.0250 2576 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
20:48:39.0328 2576 PartMgr - ok
20:48:39.0343 2576 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
20:48:39.0437 2576 ParVdm - ok
20:48:39.0453 2576 [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
20:48:39.0500 2576 pccsmcfd - ok
20:48:39.0515 2576 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
20:48:39.0593 2576 PCI - ok
20:48:39.0593 2576 PCIDump - ok
20:48:39.0593 2576 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
20:48:39.0687 2576 PCIIde - ok
20:48:39.0718 2576 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
20:48:39.0812 2576 Pcmcia - ok
20:48:39.0812 2576 PDCOMP - ok
20:48:39.0812 2576 PDFRAME - ok
20:48:39.0812 2576 PDRELI - ok
20:48:39.0812 2576 PDRFRAME - ok
20:48:39.0828 2576 perc2 - ok
20:48:39.0828 2576 perc2hib - ok
20:48:39.0843 2576 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
20:48:39.0859 2576 PlugPlay - ok
20:48:39.0875 2576 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
20:48:39.0953 2576 PolicyAgent - ok
20:48:40.0000 2576 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
20:48:40.0093 2576 PptpMiniport - ok
20:48:40.0093 2576 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
20:48:40.0171 2576 ProtectedStorage - ok
20:48:40.0187 2576 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
20:48:40.0265 2576 PSched - ok
20:48:40.0265 2576 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
20:48:40.0359 2576 Ptilink - ok
20:48:40.0359 2576 ql1080 - ok
20:48:40.0359 2576 Ql10wnt - ok
20:48:40.0359 2576 ql12160 - ok
20:48:40.0375 2576 ql1240 - ok
20:48:40.0375 2576 ql1280 - ok
20:48:40.0500 2576 [ B40AA9BE30D62B288DBF4AAA83FB2A49 ] Radio.fx D:\Tobit Radio.fx\Server\rfx-server.exe
20:48:40.0703 2576 Radio.fx - ok
20:48:40.0734 2576 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
20:48:40.0812 2576 RasAcd - ok
20:48:40.0843 2576 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
20:48:40.0937 2576 RasAuto - ok
20:48:40.0953 2576 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
20:48:41.0046 2576 Rasl2tp - ok
20:48:41.0078 2576 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
20:48:41.0171 2576 RasMan - ok
20:48:41.0171 2576 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
20:48:41.0281 2576 RasPppoe - ok
20:48:41.0281 2576 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
20:48:41.0375 2576 Raspti - ok
20:48:41.0390 2576 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
20:48:41.0468 2576 Rdbss - ok
20:48:41.0468 2576 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
20:48:41.0562 2576 RDPCDD - ok
20:48:41.0578 2576 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
20:48:41.0656 2576 rdpdr - ok
20:48:41.0687 2576 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
20:48:41.0750 2576 RDPWD - ok
20:48:41.0750 2576 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
20:48:41.0843 2576 RDSessMgr - ok
20:48:41.0859 2576 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
20:48:41.0937 2576 redbook - ok
20:48:41.0953 2576 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
20:48:42.0031 2576 RemoteAccess - ok
20:48:42.0062 2576 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
20:48:42.0125 2576 RemoteRegistry - ok
20:48:42.0203 2576 [ 4D05898896EC49CF663DDA61041AB096 ] RichVideo C:\Programme\CyberLink\Shared Files\RichVideo.exe
20:48:42.0218 2576 RichVideo - ok
20:48:42.0234 2576 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
20:48:42.0312 2576 RpcLocator - ok
20:48:42.0343 2576 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
20:48:42.0375 2576 RpcSs - ok
20:48:42.0406 2576 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
20:48:42.0515 2576 RSVP - ok
20:48:42.0546 2576 [ 89619EF503F949FAE09252A8B883EE11 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
20:48:42.0578 2576 RTLE8023xp - ok
20:48:42.0593 2576 [ 59509AD6CBC28F2C73056268985B3E48 ] s0016bus C:\WINDOWS\system32\DRIVERS\s0016bus.sys
20:48:42.0609 2576 s0016bus - ok
20:48:42.0625 2576 [ B98C3A6F91F4FBA285AF9606A240C6B4 ] s0016mdfl C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys
20:48:42.0625 2576 s0016mdfl - ok
20:48:42.0640 2576 [ 8A83426F4FB7B5212825D9DE76368B1A ] s0016mdm C:\WINDOWS\system32\DRIVERS\s0016mdm.sys
20:48:42.0656 2576 s0016mdm - ok
20:48:42.0671 2576 [ 7A78BBA97FEB5E6D24C49E93A3BF7287 ] s0016mgmt C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys
20:48:42.0687 2576 s0016mgmt - ok
20:48:42.0703 2576 [ 34EF7B5F611957B73E7219DD5A222AD1 ] s0016nd5 C:\WINDOWS\system32\DRIVERS\s0016nd5.sys
20:48:42.0703 2576 s0016nd5 - ok
20:48:42.0718 2576 [ 36792935847143E4A3CDA0DC87248487 ] s0016obex C:\WINDOWS\system32\DRIVERS\s0016obex.sys
20:48:42.0734 2576 s0016obex - ok
20:48:42.0765 2576 [ 927208754FB27FC3E7A659E77500C5D1 ] s0016unic C:\WINDOWS\system32\DRIVERS\s0016unic.sys
20:48:42.0781 2576 s0016unic - ok
20:48:42.0796 2576 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
20:48:42.0859 2576 SamSs - ok
20:48:42.0890 2576 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
20:48:42.0968 2576 SCardSvr - ok
20:48:43.0000 2576 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
20:48:43.0093 2576 Schedule - ok
20:48:43.0109 2576 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
20:48:43.0187 2576 Secdrv - ok
20:48:43.0203 2576 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
20:48:43.0281 2576 seclogon - ok
20:48:43.0312 2576 [ E5B56569A9F79B70314FEDE6C953641E ] seehcri C:\WINDOWS\system32\DRIVERS\seehcri.sys
20:48:43.0343 2576 seehcri - ok
20:48:43.0359 2576 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
20:48:43.0453 2576 SENS - ok
20:48:43.0468 2576 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] Serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
20:48:43.0562 2576 Serenum - ok
20:48:43.0578 2576 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
20:48:43.0640 2576 Serial - ok
20:48:43.0703 2576 [ 2D841B7B7F6DEC32162EDFCC69D61F42 ] ServiceLayer C:\Programme\PC Connectivity Solution\ServiceLayer.exe
20:48:43.0750 2576 ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
20:48:43.0750 2576 ServiceLayer - detected UnsignedFile.Multi.Generic (1)
20:48:43.0796 2576 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
20:48:43.0875 2576 Sfloppy - ok
20:48:43.0921 2576 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
20:48:44.0031 2576 SharedAccess - ok
20:48:44.0062 2576 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
20:48:44.0078 2576 ShellHWDetection - ok
20:48:44.0093 2576 [ 3DA2F680BFC8E92A535CEA5A5D80AC37 ] SI3112r C:\WINDOWS\system32\DRIVERS\SI3112r.sys
20:48:44.0109 2576 SI3112r - ok
20:48:44.0109 2576 [ D893AA1D1EE007B7AB1B16E1099E9F17 ] SiFilter C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys
20:48:44.0125 2576 SiFilter - ok
20:48:44.0125 2576 Simbad - ok
20:48:44.0156 2576 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
20:48:44.0218 2576 SLIP - ok
20:48:44.0234 2576 Sparrow - ok
20:48:44.0250 2576 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
20:48:44.0328 2576 splitter - ok
20:48:44.0359 2576 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
20:48:44.0390 2576 Spooler - ok
20:48:44.0390 2576 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
20:48:44.0468 2576 sr - ok
20:48:44.0484 2576 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
20:48:44.0562 2576 srservice - ok
20:48:44.0593 2576 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
20:48:44.0656 2576 Srv - ok
20:48:44.0671 2576 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
20:48:44.0750 2576 SSDPSRV - ok
20:48:44.0781 2576 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
20:48:44.0796 2576 ssmdrv - ok
20:48:44.0812 2576 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
20:48:44.0906 2576 stisvc - ok
20:48:44.0921 2576 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
20:48:45.0000 2576 streamip - ok
20:48:45.0031 2576 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
20:48:45.0109 2576 swenum - ok
20:48:45.0109 2576 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
20:48:45.0187 2576 swmidi - ok
20:48:45.0187 2576 SwPrv - ok
20:48:45.0187 2576 symc810 - ok
20:48:45.0203 2576 symc8xx - ok
20:48:45.0203 2576 sym_hi - ok
20:48:45.0203 2576 sym_u3 - ok
20:48:45.0203 2576 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
20:48:45.0281 2576 sysaudio - ok
20:48:45.0312 2576 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
20:48:45.0390 2576 SysmonLog - ok
20:48:45.0421 2576 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
20:48:45.0515 2576 TapiSrv - ok
20:48:45.0531 2576 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
20:48:45.0578 2576 Tcpip - ok
20:48:45.0593 2576 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
20:48:45.0656 2576 TDPIPE - ok
20:48:45.0671 2576 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
20:48:45.0750 2576 TDTCP - ok
20:48:45.0765 2576 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
20:48:45.0843 2576 TermDD - ok
20:48:45.0843 2576 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
20:48:45.0937 2576 TermService - ok
20:48:45.0953 2576 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
20:48:45.0968 2576 Themes - ok
20:48:45.0984 2576 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
20:48:46.0078 2576 TlntSvr - ok
20:48:46.0078 2576 TosIde - ok
20:48:46.0093 2576 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
20:48:46.0171 2576 TrkWks - ok
20:48:46.0187 2576 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
20:48:46.0265 2576 Udfs - ok
20:48:46.0265 2576 ultra - ok
20:48:46.0296 2576 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
20:48:46.0406 2576 Update - ok
20:48:46.0421 2576 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
20:48:46.0500 2576 upnphost - ok
20:48:46.0515 2576 [ 0CCADC7391021376EDBB8AA649D04E68 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
20:48:46.0562 2576 upperdev - ok
20:48:46.0562 2576 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
20:48:46.0640 2576 UPS - ok
20:48:46.0656 2576 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
20:48:46.0734 2576 usbccgp - ok
20:48:46.0765 2576 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
20:48:46.0843 2576 usbehci - ok
20:48:46.0859 2576 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
20:48:46.0937 2576 usbhub - ok
20:48:46.0968 2576 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
20:48:47.0046 2576 usbprint - ok
20:48:47.0140 2576 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
20:48:47.0218 2576 usbscan - ok
20:48:47.0328 2576 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
20:48:47.0421 2576 usbser - ok
20:48:47.0453 2576 [ 68B4F83CCCF70A2FF32EE142C234332A ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
20:48:47.0500 2576 UsbserFilt - ok
20:48:47.0531 2576 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
20:48:47.0625 2576 USBSTOR - ok
20:48:47.0656 2576 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
20:48:47.0859 2576 usbuhci - ok
20:48:48.0015 2576 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
20:48:48.0187 2576 VgaSave - ok
20:48:48.0187 2576 ViaIde - ok
20:48:48.0265 2576 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
20:48:48.0500 2576 VolSnap - ok
20:48:48.0546 2576 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
20:48:48.0671 2576 VSS - ok
20:48:48.0718 2576 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
20:48:48.0828 2576 W32Time - ok
20:48:48.0859 2576 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
20:48:48.0984 2576 Wanarp - ok
20:48:49.0031 2576 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
20:48:49.0062 2576 Wdf01000 - ok
20:48:49.0062 2576 WDICA - ok
20:48:49.0109 2576 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
20:48:49.0218 2576 wdmaud - ok
20:48:49.0250 2576 [ 352FCF15E77C34E62C56B83C078B6555 ] wdxwmac C:\WINDOWS\system32\DRIVERS\wdxwmac.sys
20:48:49.0250 2576 wdxwmac ( UnsignedFile.Multi.Generic ) - warning
20:48:49.0250 2576 wdxwmac - detected UnsignedFile.Multi.Generic (1)
20:48:49.0281 2576 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
20:48:49.0390 2576 WebClient - ok
20:48:49.0437 2576 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
20:48:49.0562 2576 winmgmt - ok
20:48:49.0593 2576 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
20:48:49.0656 2576 WmdmPmSN - ok
20:48:49.0687 2576 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
20:48:49.0750 2576 Wmi - ok
20:48:49.0765 2576 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
20:48:49.0875 2576 WmiApSrv - ok
20:48:49.0937 2576 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
20:48:49.0984 2576 WMPNetworkSvc - ok
20:48:50.0015 2576 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
20:48:50.0140 2576 WS2IFSL - ok
20:48:50.0171 2576 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
20:48:50.0281 2576 wscsvc - ok
20:48:50.0296 2576 WSearch - ok
20:48:50.0328 2576 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
20:48:50.0453 2576 WSTCODEC - ok
20:48:50.0453 2576 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
20:48:50.0562 2576 wuauserv - ok
20:48:50.0593 2576 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
20:48:50.0625 2576 WudfPf - ok
20:48:50.0640 2576 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
20:48:50.0656 2576 WudfRd - ok
20:48:50.0703 2576 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
20:48:50.0718 2576 WudfSvc - ok
20:48:50.0734 2576 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
20:48:50.0828 2576 WZCSVC - ok
20:48:50.0843 2576 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
20:48:50.0937 2576 xmlprov - ok
20:48:50.0937 2576 ================ Scan global ===============================
20:48:50.0953 2576 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
20:48:50.0984 2576 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:48:50.0984 2576 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
20:48:51.0000 2576 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
20:48:51.0000 2576 [Global] - ok
20:48:51.0000 2576 ================ Scan MBR ==================================
20:48:51.0015 2576 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
20:48:51.0250 2576 \Device\Harddisk0\DR0 - ok
20:48:51.0250 2576 ================ Scan VBR ==================================
20:48:51.0250 2576 [ 5A66E88A08C7F06576EC70FDDE55A493 ] \Device\Harddisk0\DR0\Partition1
20:48:51.0265 2576 \Device\Harddisk0\DR0\Partition1 - ok
20:48:51.0265 2576 [ FAAA497B4B989FC5928BA2BF704B62C7 ] \Device\Harddisk0\DR0\Partition2
20:48:51.0265 2576 \Device\Harddisk0\DR0\Partition2 - ok
20:48:51.0265 2576 ============================================================
20:48:51.0265 2576 Scan finished
20:48:51.0265 2576 ============================================================
20:48:51.0359 0832 Detected object count: 8
20:48:51.0359 0832 Actual detected object count: 8
20:49:18.0156 0832 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0156 0832 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0156 0832 BANTExt ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0156 0832 BANTExt ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 CAPI ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 CAPI ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 MDM ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 MDM ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 MxlW2k ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 MxlW2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 NDISCAPI ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 NDISCAPI ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:49:18.0171 0832 wdxwmac ( UnsignedFile.Multi.Generic ) - skipped by user
20:49:18.0171 0832 wdxwmac ( UnsignedFile.Multi.Generic ) - User select action: Skip

Hi, alles klar, frag nur sicherheitshalber.
combofix:

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Fertig !

Allerdings wurde eine PC-Neustart nicht verlangt und auch nicht autom. durchgeführt.

hier die Log-txt:
Combofix Logfile:

ComboFix 13-01-11.02 - Björn 12.01.2013  14:24:17.1.4 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.3582.3008 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Bj÷rn\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Jacqueline\WINDOWS
c:\programme\Uninstall.exe
C:\Thumbs.db
c:\windows\IsUn0407.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\unin0407.exe
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2012-12-12 bis 2013-01-12  ))))))))))))))))))))))))))))))
.
.
2013-01-11 13:51 . 2013-01-11 13:51	--------	d-----w-	c:\dokumente und einstellungen\Björn\Anwendungsdaten\Malwarebytes
2013-01-11 13:51 . 2013-01-11 13:51	--------	d-----w-	c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes
2013-01-11 13:51 . 2012-12-14 15:49	21104	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-01-11 13:51 . 2013-01-11 13:51	--------	d-----w-	c:\programme\Malwarebytes' Anti-Malware
2013-01-10 09:46 . 2013-01-10 09:46	--------	d-----w-	c:\dokumente und einstellungen\Björn\Anwendungsdaten\aicon
2013-01-09 10:17 . 2013-01-09 10:17	--------	d-----w-	c:\dokumente und einstellungen\Björn\Anwendungsdaten\DVDVideoSoft
2013-01-09 10:17 . 2013-01-09 10:17	--------	d-----w-	c:\programme\Gemeinsame Dateien\DVDVideoSoft
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-09 09:17 . 2012-05-02 13:44	697864	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2013-01-09 09:17 . 2011-05-17 13:53	74248	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-16 12:23 . 2007-07-27 12:00	290560	----a-w-	c:\windows\system32\atmfd.dll
2012-11-13 11:55 . 2007-07-27 12:00	1866496	----a-w-	c:\windows\system32\win32k.sys
2012-11-06 02:01 . 2007-05-15 14:43	1371648	----a-w-	c:\windows\system32\msxml6.dll
2012-11-02 02:02 . 2007-07-27 12:00	375296	----a-w-	c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2007-07-27 12:00	916992	----a-w-	c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2007-07-27 12:00	43520	----a-w-	c:\windows\system32\licmgr10.dll
2012-11-01 12:17 . 2007-07-27 12:00	1469440	------w-	c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2007-07-27 12:00	385024	----a-w-	c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA61DE26-FA67-4575-9033-918671094293}]
2008-08-14 13:57	2484224	----a-w-	c:\dokumente und einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{000E148C-F7A7-445A-9044-93BF6CE09ECB}"= "c:\dokumente und einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll" [2008-08-14 2484224]
.
[HKEY_CLASSES_ROOT\clsid\{000e148c-f7a7-445a-9044-93bf6ce09ecb}]
[HKEY_CLASSES_ROOT\TBSB03968.TBSB03968.3]
[HKEY_CLASSES_ROOT\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKEY_CLASSES_ROOT\TBSB03968.TBSB03968]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{000E148C-F7A7-445A-9044-93BF6CE09ECB}"= "c:\dokumente und einstellungen\Björn\Anwendungsdaten\Toolbars\Toolbar fuer eBay\ebay.dll" [2008-08-14 2484224]
.
[HKEY_CLASSES_ROOT\clsid\{000e148c-f7a7-445a-9044-93bf6ce09ecb}]
[HKEY_CLASSES_ROOT\TBSB03968.TBSB03968.3]
[HKEY_CLASSES_ROOT\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKEY_CLASSES_ROOT\TBSB03968.TBSB03968]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"="c:\programme\MSI\TV@nywhere AD V1.1\HyperMediaCenter 3.5\DTVR\Scheduled.exe" [2008-04-14 1519616]
"PC Suite Tray"="c:\programme\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]
"rfxsrvtray"="d:\tobit radio.fx\Client\rfx-tray.exe" [2012-01-18 2057048]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-11-12 13672448]
"nwiz"="nwiz.exe" [2008-11-12 1630208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-11-12 86016]
"D066UUtility"="c:\windows\TWAIN_32\D66U\D066UUTY.EXE" [2000-07-06 32768]
"zBrowser Launcher"="c:\programme\Logitech\iTouch\iTouch.exe" [2001-12-20 204800]
"EM_EXEC"="c:\progra~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2001-12-20 35328]
"MMTray"="c:\programme\MusicMatch\MusicMatch Jukebox\mm_tray.exe" [2001-11-07 86016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-09 196608]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2010-05-14 248552]
"BCSSync"="c:\programme\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2011-10-24 421888]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2012-08-27 348664]
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\Björn\Startmenü\Programme\Autostart\
Adobe Gamma.lnk - c:\programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
CAPI Tray.lnk - c:\programme\U.S. Robotics ISDN Utilities\ccmon.exe [2008-12-4 131072]
Microsoft Office.lnk - c:\programme\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Remote Control.lnk - c:\programme\MSI\TV@nywhere AD V1.1\TV Tuner Card Utilities\HMCP3XCtl.exe [2008-12-3 77824]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programme\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Corel\\Graphics10\\Register\\NAVBrowser.exe"=
"c:\\WINDOWS\\system32\\fxsclnt.exe"=
"c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"c:\\Programme\\WS_FTP\\WS_FTP95.exe"=
"c:\\Programme\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Programme\\Opera\\opera.exe"=
"c:\\Programme\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Programme\\Microsoft Office\\Office14\\OUTLOOK.EXE"=
"c:\\Programme\\Microsoft Office\\Office14\\GROOVE.EXE"=
"d:\\Tobit Radio.fx\\Server\\rfx-server.exe"=
"d:\\Tobit Radio.fx\\Client\\rfx-client.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\Java\\jre6\\bin\\java.exe"=
.
R0 SI3112r;Silicon Image SiI 3512 SATARaid Controller;c:\windows\system32\drivers\SI3112r.sys [03.12.2008 13:14 116264]
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [27.11.2011 21:01 36000]
R2 AntiVirMailService;Avira Email Schutz;c:\programme\Avira\AntiVir Desktop\avmailc.exe [27.11.2011 21:01 375760]
R2 AntiVirSchedulerService;Avira Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [27.11.2011 21:01 86224]
R2 AntiVirWebService;Avira Browser Schutz;c:\programme\Avira\AntiVir Desktop\avwebgrd.exe [27.11.2011 21:01 465360]
R2 CAPI;CAPI 2.0 Service;c:\windows\system32\drivers\capi.sys [04.12.2008 18:09 26064]
R2 LGTO_Sync;Sync Driver;c:\windows\system32\drivers\lgtosync.sys [28.12.2007 20:58 36400]
R2 MBAMScheduler;MBAMScheduler;c:\programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [11.01.2013 14:51 398184]
R2 NDISCAPI;NDIS CAPI Service;c:\windows\system32\drivers\ndiscapi.sys [04.12.2008 18:09 27792]
R2 Radio.fx;Radio.fx Server;d:\tobit radio.fx\Server\rfx-server.exe [09.04.2011 17:14 3665752]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [03.12.2008 08:37 946816]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [11.01.2013 14:51 21104]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [17.09.2009 09:32 27632]
R3 wdxwmac;U.S. Robotics ISDN PCI NDIS WAN Driver;c:\windows\system32\drivers\wdxwmac.sys [04.12.2008 18:09 272016]
S2 MBAMService;MBAMService;c:\programme\Malwarebytes' Anti-Malware\mbamservice.exe [11.01.2013 14:51 682344]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [30.08.2009 15:39 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [30.08.2009 15:46 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [30.08.2009 15:46 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [30.08.2009 15:47 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [30.08.2009 15:49 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [30.08.2009 15:47 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [30.08.2009 15:48 115752]
.
Inhalt des "geplante Tasks" Ordners
.
2013-01-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-02 09:17]
.
2011-11-21 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2013-01-11 c:\windows\Tasks\Google Software Updater.job
- c:\programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-14 09:42]
.
2013-01-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-01-08 09:15]
.
2013-01-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-01-08 09:15]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
IE: An OneNote s&enden - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~4\Office10\EXCEL.EXE/3000
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000
LSP: c:\programme\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.0.30
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe
HKCU-Run-hddhealth - c:\programme\HDD Health\hddhealth.exe
HKLM-Run-Corel Reminder - (no file)
Notify-TPSvc - TPSvc.dll
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-@icon sushi_is1 - d:\programme\aicon\unins000.exe
AddRemove-ArcSoft PhotoBase - c:\windows\IsUn0407.exe
AddRemove-Canon ScanGear Toolbox CS - c:\windows\IsUn0407.exe
AddRemove-Canon ScanGear Toolbox FAU - c:\windows\IsUn0407.exe
AddRemove-DIKE - c:\windows\unin0407.exe
AddRemove-ElsterFormular 11.4.1.4323 - c:\programme\uninstall.exe
AddRemove-MUSICMATCH Jukebox - c:\windows\IsUn0407.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-01-12 14:31
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'lsass.exe'(784)
c:\programme\Avira\AntiVir Desktop\avsda.dll
.
Zeit der Fertigstellung: 2013-01-12  14:33:59
ComboFix-quarantined-files.txt  2013-01-12 13:33
.
Vor Suchlauf: 9 Verzeichnis(se), 75.723.493.376 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 78.455.312.384 Bytes frei
.
WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 61630591A5D8E2D0DABFA7EE0165DF4E
         

--- --- ---


Eine andere Frage hätte ich noch, weiß aber nicht, ob die hier richtig platziert ist:

Ich habe Avira Antivirus Premium zu laufen und zahle jedes Jahr für die Lizenzverlängerung. Avira hatte ja nichts von der Schadsoftware bemerkt.

Wäre es sinnvoll weitere Scanner laufen zu lassen, und falls ja, welche sind empfehlenswert (kostenlos, nicht die Performance beeinträchtigend usw.)

Was wird aus den auf den Desktop installierten Programmen wit OTL, Defogger usw. ... kann ich die nach Bereinigung bedenkenlos wieder löschen ?

An dieser Stelle bereits jetzt schonmal ercht herzlochen Dank für Eure Hilfe !!!

Hi
zur absicherung, und der Löschung der Tools kommen wir noch.

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Ich hatte heute im Laufe des Tages den PC aufgeräumt. In diesem Zusammenhang hatte ich auch eine ältere Version von CCleaner laufen lassen, allerdings die log nicht gespeichert.

Eben habe ichd ie neue Version nochmal drüber laufen lassen. Nachfolgend die txt

Noch etwas ist heute passiert: AVIRA hat 1 Trojaner neu entdeckt und in Quarantäne verschoben. Allerdings konnte ich im Netz keine Infos zu dem TR/Tobfy.G.160 abrufen.
Keine Ahnung was das war.

txt:
7-Zip 4.57 notwendig
Adobe AIR notwendig
Adobe Flash Player 11 Plugin notwendig
Adobe Flash Player ActiveX notwendig
Adobe Photoshop CS2 notwendig
Adobe Reader 9.5.2 - Deutsch notwendig
Avira Antivirus Premium 2012 notwendig
AVM FRITZ!Box Dokumentation notwendig
AVM FRITZ!Box Druckeranschluss notwendig
Caere Scan Manager 5.1 Caere Corporation notwendig
Canon Camera Window DS for ZoomBrowser EX notwendig
Canon Camera Window DVC for ZoomBrowser EX notwendig
Canon Camera Window for ZoomBrowser EX Canon notwendig
Canon Internet Library for ZoomBrowser EX notwendig
Canon MovieEdit Task for ZoomBrowser EX Canon notwendig
Canon PhotoRecord Cisra 08.12.2008 notwendig
Canon RAW Image Task for ZoomBrowser EX Canon notwendig
Canon RemoteCapture Task for ZoomBrowser EX notwendig
Canon Utilities PhotoStitch 3.1 Canon notwendig
Canon ZoomBrowser EX Canon notwendig
CCleaner Piriform notwendig
CDBurnerXP CDBurnerXP notwendig
CorelDRAW 10_TV notwendig
ElsterFormular notwendig
Fotostory 3 für Windows Microsoft Corporation unnötig (?)
Free Audio CD to MP3 Converter version notwendig
Google Chrome Google Inc. notwendig
Google Updater Google Inc. notwendig
hp deskjet 960c series notwendig
HyperMediaCenter 3.5 notwendig
IrfanView (remove only) notwendig
Java(TM) 6 Update 23 notwendig
Jaws PDF Creator notwendig
Logitech iTouch Software notwendig
Logitech MouseWare 9.42 .1 notwendig
Logitech-Handbuch notwendig
Malwarebytes Anti-Malware Version 1.70.0.1100 notwendig
mb Software ArCon 6 notwendig
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU Microsoft Corporation 28.03.2008 6,18MB 2.1.21022
Microsoft .NET Framework 2.0 Service Pack 2 Microsoft Corporation 09.01.2013 185,00MB 2.2.30729
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU Microsoft Corporation 28.03.2008 16,81MB 3.1.21022
Microsoft .NET Framework 3.0 Service Pack 2 Microsoft Corporation 09.01.2013 251,00MB 3.2.30729
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 09.01.2013
Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Corporation 28.12.2007 1
Microsoft Office Professional Plus 2010 notwendig
Microsoft Office Standard 2010 notwendig
Microsoft Office XP Professional mit FrontPage unnötig
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 20.09.2008 1,74MB 3.1.0000
Microsoft User-Mode Driver Framework Feature Pack 1.9 Microsoft Corporation 25.10.2010
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 31.08.2009 0,11MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 17.06.2011 5,28MB 8.0.61001
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 29.07.2009 0,15MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 23.03.2011 10,29MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 19.03.2009 10,28MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 17.06.2011 10,20MB 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 27.10.2011 14,97MB 10.0.40219
Microsoft-Basissmartcard-Kryptografiedienstanbieterpaket Microsoft Corporation 02.12.2008
Mp3tag Florian Heidenreich notwendig
MSI TV Tuner Card Utilities notwendig
MSI TV@nywhere A/D V1.1 BDA Driver notwendig
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 03.12.2008 2,67MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 25.11.2009 2,77MB 4.20.9876.0
MSXML 6.0 Parser (KB933579) Microsoft Corporation 28.12.2007 1,31MB 6.10.1200.0
Nokia Connectivity Cable Driver Nokia notwendig
Nokia PC Suite Nokia notwendig
NVIDIA Drivers NVIDIA Corporation notwendig
NVIDIA PhysX v8.10.13 NVIDIA Corporation notwendig
OmniPage Pro 9.0 notwendig
PC Connectivity Solution notwendig
PhoneTools notwendig
PhotoNow! 1.0 notwendig
PowerDirector notwendig
Radio.fx notwendig
REALTEK GbE & FE Ethernet PCI-E NIC Driver notwendig
Realtek High Definition Audio Driver notwendig
TV@nywhere Pro Teletext notwendig
Uninstall U.S. Robotics ISDN Utilities notwendig
VLC media player 0.9.8a VideoLAN Team notwendig
Windows Genuine Advantage Validation Tool (KB892130) unbekannt
Windows Internet Explorer 7 unnötig
Windows Media Format 11 runtime notwendig
Windows Media Player 11 notwendig
Windows-Treiberpaket - Nokia Modem (06/09/2010 4.5) notwendig
Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.7) notwendig
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) notwendig
XP RegTune 2.12 PolarSoft / S. Berger Softwareentwicklung notwendig

hi
und die Fundmeldung soll ich erraten? du musst mir schon alles posten was passiert.
Avira, ereignisse, fundmeldung suchen und posten, mit Pfadangabe

Okay - man merkt wohl deulich, dass ich nicht viel Ahnung habe, oder ?

Hier die Ereignisse aus Avira:

14.01.2013 16:10 [Echtzeit Scanner] Malware gefunden
In der Datei 'E:\Sprengmeister.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Ezoons.A.2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern

14.01.2013 16:10 [Echtzeit Scanner] Malware gefunden
In der Datei 'E:\Sprengmeister.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Ezoons.A.2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern

14.01.2013 16:10 [Echtzeit Scanner] Malware gefunden
In der Datei 'E:\Sprengmeister.exe'
wurde ein Virus oder unerwünschtes Programm 'TR/Ezoons.A.2' [trojan] gefunden.
Ausgeführte Aktion: Zugriff verweigern

14.01.2013 13:44 [System Scanner] Malware gefunden
Die Datei 'C:\System Volume
Information\_restore{63BD0E97-17CA-42DF-96B2-FAFF37D47BF9}\RP607\A0194459.exe'
enthielt einen Virus oder unerwünschtes Programm 'TR/Tobfy.G.160' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '529c597c.qua'
verschoben!

14.01.2013 13:44 [System Scanner] Malware gefunden
Die Datei 'C:\Dokumente und
Einstellungen\Björn\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\19\5c763f53-20
7d0fd1'
enthielt einen Virus oder unerwünschtes Programm 'TR/Tobfy.G.160' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a0576e6.qua'
verschoben!


==> unter Pfad E:/Sprengmeister.exe meldete sich Avira, als ich beim Aufräumen alte CD eingelesen habe. Die CD ist unwichtig und wanderte direkt ins Recycling.

Ich hoffe so kannst Du was mit den Daten anfangen ?

hi
passt.
ist e: evtl. ein externes Laufwerk? usb stick, platte etc?

e:/ war eine CD - die ist nun ausgemistet und wartet auf Recyclingentsorgung

meinst Du mit "passt" das ich nun desinfiziert bzw. dekontaminiert bin ?
darf ich die zusätzlichen Tools wieder löschen ?

ich werde, nachdem Du mir geschrieben hast, dass ich "sauber" bin, ein komplette Datensicherung (extern) durchführen - sicher ist sicher

Hi, frage, wenn du sagst, du willst ne Datensicherung machen, heißt das, mit anschließener neuinstalation von Windows? weil dann könnten wir uns abschließene Scritte sparen und ich müsste meine Anleitungen dem entsprechend anpassen

Nein. Neuinstallation wollte ich vermeiden.

Ich sichere nur die persönlichen Daten mehr oder minder regelmäßig extern und elektrisch gesichert, da mir durch Blitzschlag schon mal der Rechner abgeschmiert ist.

Neuinstallation ist mir doch etwas zu aufwendig..... zumal ich auch nur eine OEM fahre