"authentifizierung erforderlich" ständig und PC extrem langsam

floridafan · 02.02.2013, 00:59

Bei meinem PC geht fast gar nichts mehr, alles braucht eine Ewigkeit und es kommt ständig ein Kästchen mit "Authentifizierung erforderlich" für zwei Seiten

Unten das Ergebnis des Scans mit OTL.

Für Hilfe wäre ich dankbar.

Zitat:

OTL logfile created on: 02.02.2013 00:45:37 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\User\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 56,95% Memory free
4,84 Gb Paging File | 3,74 Gb Available in Paging File | 77,21% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 931,51 Gb Total Space | 678,67 Gb Free Space | 72,86% Space Free | Partition Type: NTFS
Drive D: | 358,01 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: BENUTZER-4A24C5 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Dokumente und Einstellungen\User\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium\VaudiX\VaudiX.exe ()
PRC - C:\Programme\PowerISO\PWRISOVM.EXE (Power Software Ltd)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\PTBSync\PTBSync.exe (ElmüSoft)
PRC - C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
PRC - C:\Programme\PopTray\PopTray.exe (Renier Crause)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

========== Modules (No Company Name) ==========

MOD - C:\Programme\AVAST Software\Avast\defs\13020100\algo.dll ()
MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - c:\Programme\VaudiX\sprotector.dll ()
MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium\VaudiX\VaudiX.exe ()
MOD - C:\Programme\Notepad++\NppShell_05.dll ()
MOD - C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()

========== Services (SafeList) ==========

SRV - (JavaQuickStarterService) -- C:\Programme\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (PTBSync) -- C:\Programme\PTBSync\PTBSync.exe (ElmüSoft)
SRV - (NMSAccess) -- C:\Programme\CDBurnerXP\NMSAccessU.exe ()
SRV - (OMSI download service) -- C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (AswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (SWDUMon) -- C:\WINDOWS\system32\drivers\SWDUMon.sys ()
DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (Power Software Ltd)
DRV - (WinRing0_1_2_0) -- C:\WINDOWS\system32\drivers\ptbring0.sys (OpenLibSys.org)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (xfilt) -- C:\WINDOWS\system32\drivers\xfilt.sys (VIA Technologies, Inc.)
DRV - (videX32) -- C:\WINDOWS\system32\drivers\videX32.sys (VIA Technologies, Inc.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (s0016unic) -- C:\WINDOWS\system32\drivers\s0016unic.sys (MCCI Corporation)
DRV - (s0016nd5) -- C:\WINDOWS\system32\drivers\s0016nd5.sys (MCCI Corporation)
DRV - (s0016mdfl) -- C:\WINDOWS\system32\drivers\s0016mdfl.sys (MCCI Corporation)
DRV - (s0016mdm) -- C:\WINDOWS\system32\drivers\s0016mdm.sys (MCCI Corporation)
DRV - (s0016mgmt) -- C:\WINDOWS\system32\drivers\s0016mgmt.sys (MCCI Corporation)
DRV - (s0016obex) -- C:\WINDOWS\system32\drivers\s0016obex.sys (MCCI Corporation)
DRV - (s0016bus) -- C:\WINDOWS\system32\drivers\s0016bus.sys (MCCI Corporation)
DRV - (hwdatacard) -- C:\WINDOWS\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (AsIO) -- C:\WINDOWS\system32\drivers\AsIO.sys ()
DRV - (ASInsHelp) -- C:\WINDOWS\system32\drivers\AsInsHelp32.sys ()
DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys ()
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
DRV - (FIXUSTOR) -- C:\WINDOWS\system32\drivers\fixustor.sys (Genesys Logic)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.com
IE - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.quebles.com/
IE - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\..\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}: "URL" = hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb
IE - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultenginename,S: S", ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "www.google.de"
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.order.1,S: S", ""
FF - prefs.js..browser.search.selectedEngine: "Google.de"
FF - prefs.js..browser.search.selectedEngine,S: S", ""
FF - prefs.js..browser.startup.homepage: "hxxp://search.quebles.com/"
FF - prefs.js..extensions.enabledAddons: Noia4Options%40ArisT2:1.7.7
FF - prefs.js..extensions.enabledAddons: simpleadblock%40wips.com:1.0.8
FF - prefs.js..extensions.enabledAddons: %7B0538E3E3-7E9B-4d49-8831-A227C80A7AD3%7D:2.2.2
FF - prefs.js..extensions.enabledAddons: %7Bc36177c0-224a-11da-8cd6-0800200c9a91%7D:3.9.81
FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10
FF - prefs.js..extensions.enabledAddons: %7Bdf4e4df5-5cb7-46b0-9aef-6c784c3249f8%7D:1.2.0
FF - prefs.js..extensions.enabledAddons: fbp%40fbpurity.com:8.0.1
FF - prefs.js..extensions.enabledAddons: %7B0545b830-f0aa-4d7e-8820-50a4629a56fe%7D:17.6
FF - prefs.js..extensions.enabledAddons: hotmailwatcher%40sonthakit:1.57
FF - prefs.js..extensions.enabledAddons: %7B1280606b-2510-4fe0-97ef-9b5a22eafe30%7D:0.7.9.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:17.0.1
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
FF - prefs.js..keyword.URL: ""

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\GEMEIN~1\Nero\BROWSE~1\NPBROW~1.DLL File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.129\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.129\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Programme\AVAST Software\Avast\WebRep\FF [2012.10.30 10:54:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.12.09 00:03:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins

[2012.04.20 01:27:55 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Extensions
[2013.01.25 18:38:25 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions
[2012.10.09 08:08:04 | 000,000,000 | ---D | M] (Forecastfox) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2012.12.24 10:08:06 | 000,000,000 | ---D | M] ("ColorfulTabs") -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
[2012.12.26 17:15:52 | 000,000,000 | ---D | M] (Vaudix) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\50db22f7199e2@50db22f719a08.com
[2013.01.25 18:38:24 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\staged
[2012.10.06 11:57:55 | 000,215,605 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\fbdislike@doweb.fr.xpi
[2012.12.14 11:19:18 | 000,062,582 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\fbp@fbpurity.com.xpi
[2012.10.06 10:00:20 | 000,827,050 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\ffe_ff3aeroff4@game-point.net.xpi
[2012.12.29 11:31:10 | 000,197,293 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\hotmailwatcher@sonthakit.xpi
[2013.01.25 18:38:25 | 000,726,825 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\jid1-uabu5A9hduqzCw@jetpack.xpi
[2011.08.12 09:24:04 | 000,246,802 | R--- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\lazarus@interclue.com.xpi
[2012.12.01 18:44:28 | 000,106,259 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\Noia4Options@ArisT2.xpi
[2012.10.03 20:41:48 | 000,644,177 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\simpleadblock@wips.com.xpi
[2013.01.09 18:27:27 | 000,516,839 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
[2012.07.11 13:12:13 | 000,177,357 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
[2012.10.06 10:02:38 | 002,966,066 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi
[2011.11.08 09:40:06 | 000,434,392 | R--- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
[2012.10.06 09:53:00 | 001,669,514 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{ded0fc70-7215-4802-afeb-b2982d3e7225}.xpi
[2012.11.07 20:04:52 | 000,026,136 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi
[2012.12.01 10:59:22 | 001,527,378 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\extensions\{faf13420-5e24-11e0-80e3-0800200c9a66}.xpi
[2012.09.24 21:50:27 | 000,000,853 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\11-suche.xml
[2012.09.24 21:50:28 | 000,002,209 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\englische-ergebnisse.xml
[2012.09.24 21:50:27 | 000,010,506 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\gmx-suche.xml
[2012.07.14 13:32:41 | 000,002,101 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\googlede.xml
[2012.09.24 21:50:28 | 000,002,368 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\lastminute.xml
[2012.09.24 21:50:26 | 000,005,489 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Profiles\tg3ik75x.default\searchplugins\webde-suche.xml
[2012.12.09 00:02:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.12.09 00:03:05 | 000,262,112 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012.12.09 00:02:55 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.12.09 00:02:55 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.12.09 00:02:55 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.12.09 00:02:55 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.12.09 00:02:55 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.12.09 00:02:55 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

========== Chrome ==========

CHR - homepage: hxxp://www.google.de/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google

riginalQueryForSuggestion}{google:assistedQueryStats}{google:se archFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: hxxp://www.google.de/
CHR - plugin: Erster Nutzer (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Error reading preferences file
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: avast! WebRep = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1473_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: YouTube = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Google-Suche = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: avast! WebRep = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1473_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Google Mail = C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2006.02.28 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Programme\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Vaudix) - {B6EF4F46-9999-C439-ACCE-C58F2BC4F255} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vaudix\50db22f719b5f.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avast] C:\Programme\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Programme\PowerISO\PWRISOVM.EXE (Power Software Ltd)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\.DEFAULT..\Run: [BrowserChoice] C:\WINDOWS\System32\browserchoice.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\Run: [BrowserChoice] C:\WINDOWS\System32\browserchoice.exe (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\ckdatabase.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\PopTray.lnk = C:\Programme\PopTray\PopTray.exe (Renier Crause)
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\rsdatabase.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase2.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf2.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbinfo.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbversion5.txt ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\spywareblaster.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1993962763-1390067357-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: &Alles mit BitComet herunterladen - C:\Programme\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Mit BitComet herunter&laden - C:\Programme\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - Reg Error: Key error. File not found
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - Reg Error: Key error. File not found
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Programme\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C225D6-3792-4AC7-A769-128F828C1F4D}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~1\vaudix\sprote~1.dll) - c:\Programme\VaudiX\sprotector.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\dimsntfy: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Desktop-Hintergrund.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\User\Anwendungsdaten\Mozilla\Firefox\Desktop-Hintergrund.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.04.02 18:48:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{085e4dcb-8e26-11e1-918a-001d602f5adb}\Shell\AutoRun\command - "" = I:\setupSNK.exe
O33 - MountPoints2\{085e4dcc-8e26-11e1-918a-001d602f5adb}\Shell\AutoRun\command - "" = setupSNK.exe
O33 - MountPoints2\{18a67739-8ba7-11e1-bee1-001d602f5adb}\Shell\AutoRun\command - "" = H:\setupSNK.exe
O33 - MountPoints2\{b63ab8a3-8ade-11e1-97e9-001d602f5adb}\Shell - "" = AutoRun
O33 - MountPoints2\{b63ab8a3-8ade-11e1-97e9-001d602f5adb}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{b63ab8a3-8ade-11e1-97e9-001d602f5adb}\Shell\AutoRun\command - "" = H:\setup.exe
O33 - MountPoints2\{d2492a13-8b02-11e1-ba99-001d602f5adb}\Shell - "" = AutoRun
O33 - MountPoints2\{d2492a13-8b02-11e1-ba99-001d602f5adb}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d2492a13-8b02-11e1-ba99-001d602f5adb}\Shell\AutoRun\command - "" = H:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013.01.30 21:35:22 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\User\Recent
[2013.01.14 17:43:13 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.01.14 17:43:13 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.01.14 17:43:13 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.01.03 22:07:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\User\Startmenü\Programme\Notepad++
[2013.01.03 22:07:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Notepad++
[2013.01.03 22:06:57 | 000,000,000 | ---D | C] -- C:\Programme\Notepad++
[2013.01.03 22:06:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Notepad++
[2012.06.06 10:51:26 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpe29.dll

========== Files - Modified Within 30 Days ==========

[2013.02.02 00:17:00 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013.02.01 22:55:01 | 000,000,352 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.02.01 14:42:11 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013.02.01 14:42:11 | 000,000,536 | -H-- | M] () -- C:\WINDOWS\tasks\VaudiXUpdaterTask{3FE72EEC-0704-40C2-928F-A46DF9B9BCBF}.job
[2013.02.01 14:42:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.01.31 23:24:15 | 000,001,777 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Google Chrome.lnk
[2013.01.30 21:36:04 | 000,015,296 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Eigene Dateien\cc_20130130_213556.reg
[2013.01.30 08:07:22 | 000,019,180 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung4.jpg
[2013.01.30 08:06:38 | 000,018,936 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung3.jpg
[2013.01.29 21:51:03 | 000,028,695 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung2.jpg
[2013.01.29 21:49:47 | 000,037,738 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung1.jpg
[2013.01.27 15:40:27 | 000,043,623 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\Sony-Ericsson-Xperia-Play-Prototyp.jpg
[2013.01.27 14:02:07 | 000,013,118 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\RD GL 130107 STDPLAN 070113-010213_END_WO4.pdf
[2013.01.27 12:15:27 | 000,013,736 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.01.21 20:02:47 | 002,117,332 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\CIMG3713.JPG
[2013.01.21 07:41:53 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.01.21 07:41:52 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.01.15 07:50:46 | 000,677,273 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase.dtb
[2013.01.15 07:50:46 | 000,039,720 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf.dtb
[2013.01.14 17:40:37 | 000,492,198 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.01.14 17:40:37 | 000,472,494 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.01.14 17:40:37 | 000,090,456 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.01.14 17:40:37 | 000,075,588 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.01.12 03:30:20 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013.01.12 03:26:16 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2013.01.12 03:24:49 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2013.01.04 02:00:17 | 000,125,836 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\malteser.jpg
[2013.01.04 00:14:00 | 000,005,528 | ---- | M] () -- C:\Dokumente und Einstellungen\User\Desktop\facebook.rtf

========== Files Created - No Company Name ==========

[2013.01.30 21:36:02 | 000,015,296 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Eigene Dateien\cc_20130130_213556.reg
[2013.01.30 08:07:19 | 000,019,180 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung4.jpg
[2013.01.30 08:06:35 | 000,018,936 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung3.jpg
[2013.01.29 21:51:02 | 000,028,695 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung2.jpg
[2013.01.29 21:49:09 | 000,037,738 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\heizung1.jpg
[2013.01.27 15:40:26 | 000,043,623 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\Sony-Ericsson-Xperia-Play-Prototyp.jpg
[2013.01.27 14:02:06 | 000,013,118 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\RD GL 130107 STDPLAN 070113-010213_END_WO4.pdf
[2013.01.21 20:02:42 | 002,117,332 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\CIMG3713.JPG
[2013.01.04 02:00:17 | 000,125,836 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Desktop\malteser.jpg
[2012.07.26 09:34:16 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\sutil32.dll
[2012.07.13 16:07:47 | 000,000,215 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2012.07.13 12:43:32 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll
[2012.06.14 22:01:44 | 000,007,929 | ---- | C] () -- C:\WINDOWS\ePrompter.ini
[2012.05.31 13:46:40 | 000,223,134 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1338468045.bdinstall.bin
[2012.05.01 22:46:00 | 000,000,058 | ---- | C] () -- C:\WINDOWS\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.05.01 22:46:00 | 000,000,058 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2012.05.01 22:34:51 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt
[2012.05.01 13:01:05 | 000,021,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2012.04.28 02:56:30 | 000,255,988 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\1335577825.bdinstall.bin
[2012.04.27 23:05:51 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2012.04.27 01:13:00 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\UMonit.exe
[2012.04.27 01:13:00 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\ustor.dll
[2012.04.27 01:13:00 | 000,001,251 | ---- | C] () -- C:\WINDOWS\System32\IconCfg0.ini
[2012.04.27 00:10:04 | 000,011,232 | ---- | C] () -- C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012.04.26 01:32:00 | 000,012,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp64.sys
[2012.04.26 01:32:00 | 000,010,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys
[2012.04.24 21:41:07 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2012.04.24 15:30:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012.04.24 14:50:46 | 000,001,179 | ---- | C] () -- C:\WINDOWS\ATICIM.INI
[2012.04.24 03:46:17 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\AsIO.dll
[2012.04.24 03:46:17 | 000,012,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2012.04.23 06:48:55 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.04.22 14:19:24 | 000,182,830 | ---- | C] () -- C:\WINDOWS\hpoins47.dat
[2012.04.22 14:19:23 | 000,000,601 | ---- | C] () -- C:\WINDOWS\hpomdl47.dat
[2012.04.22 12:36:31 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2012.04.21 17:44:11 | 000,044,544 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.20 16:58:48 | 000,111,104 | ---- | C] () -- C:\WINDOWS\System32\Uharc.exe
[2012.04.20 16:58:48 | 000,008,636 | ---- | C] () -- C:\WINDOWS\System32\modifype.exe
[2012.04.20 16:58:47 | 000,517,120 | ---- | C] () -- C:\WINDOWS\System32\CLWCP.exe
[2012.04.20 04:02:04 | 000,017,408 | ---- | C] () -- C:\Dokumente und Einstellungen\User\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db
[2012.04.20 03:27:03 | 000,000,858 | RHS- | C] () -- C:\Dokumente und Einstellungen\All Users\ntuser.pol
[2012.04.02 21:30:58 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.04.02 21:30:01 | 000,103,824 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.04.02 19:10:52 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2012.04.02 19:10:46 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2012.04.02 19:10:46 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012.04.02 19:04:10 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2012.04.02 18:52:26 | 000,013,794 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2012.04.02 18:52:19 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2012.04.02 18:52:18 | 000,013,421 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2012.04.02 18:52:12 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2012.04.02 18:49:47 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.04.02 18:45:47 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== ZeroAccess Check ==========

[2012.04.02 19:12:00 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010.04.16 16:35:16 | 001,506,304 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 11:18:19 | 000,473,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2006.02.28 13:00:00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.07.19 00:01:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\4Sync
[2012.04.23 16:54:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ashampoo
[2012.06.07 15:23:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avanquest
[2012.10.30 10:53:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software
[2012.09.27 11:48:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Backup
[2012.04.28 02:55:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BDLogging
[2012.06.06 10:54:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BVRP Software
[2012.04.22 12:39:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Canneverbe Limited
[2012.05.01 22:45:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DonationCoder
[2012.04.26 23:25:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DriverGenius
[2012.04.20 03:47:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure
[2012.10.01 11:06:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nitro PDF
[2012.09.27 21:20:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Panda Software
[2012.12.26 17:15:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium
[2012.05.01 19:49:05 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PTBSync
[2012.04.26 20:40:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Publish Data
[2012.05.06 16:27:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2013.02.01 14:45:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2012.12.26 17:14:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vaudix
[2012.04.21 12:44:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vodafone
[2012.12.26 17:15:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WoW Worldwide Software LTD
[2012.04.20 16:24:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Vodafone
[2012.05.06 16:23:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\{DCD48218-E972-4d0c-9E5F-43462BC13E3B}
[2012.04.23 16:57:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Ashampoo
[2012.12.31 15:22:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\BitComet
[2012.04.22 12:39:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Canneverbe Limited
[2012.06.12 23:50:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\CrystalIdea Software
[2012.05.01 22:46:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\DonationCoder
[2012.05.03 01:37:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Downloaded Installations
[2012.11.02 11:41:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Foxit Software
[2012.09.25 23:11:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\HWM BlackBox
[2012.12.31 14:16:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Marine Aquarium 3
[2012.09.06 16:27:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Nitro PDF
[2013.01.03 22:15:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Notepad++
[2012.07.08 22:44:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Oracle
[2012.12.31 14:02:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\PowerISO
[2012.04.28 02:51:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\QuickScan
[2012.05.01 22:49:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Samsung
[2012.09.22 14:44:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\ScreenCapturePrint
[2012.04.23 02:08:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\ViGlance
[2012.04.20 17:07:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\ViStart
[2012.04.20 16:24:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\User\Anwendungsdaten\Vodafone

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 105 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:5C321E34

< End of report >

Zitat:

OTL Extras logfile created on: 02.02.2013 00:45:37 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\User\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,71 Gb Available Physical Memory | 56,95% Memory free
4,84 Gb Paging File | 3,74 Gb Available in Paging File | 77,21% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 931,51 Gb Total Space | 678,67 Gb Free Space | 72,86% Space Free | Partition Type: NTFS
Drive D: | 358,01 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: BENUTZER-4A24C5 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = htmlfile] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-1993962763-1390067357-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"49152:TCP" = 49152:TCP:*:Enabled:BitComet 49152 TCP
"49152:UDP" = 49152:UDP:*:Enabled:BitComet 49152 UDP

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programme\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Programme\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard Co.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programme\HP\Digital Imaging\bin\hpqkygrp.exe" = C:\Programme\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard Co.)
"C:\Programme\BitComet\BitComet.exe" = C:\Programme\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client -- (www.BitComet.com)
"C:\WINDOWS\system32\msiexec.exe" = C:\WINDOWS\system32\msiexec.exe:*:Enabled:UpdateManagerSetup -- (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{014E482A-0C27-47E3-BA82-307E9DCA2F47}" = HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0713D1F9-DD77-42C1-8C7D-54D479E2E743}" = Nero SoundTrax 11
"{083F79E4-6FE9-46FB-A6C6-4F8862742947}" = ATI HYDRAVISION
"{0D7A4289-99CF-4B8D-B812-86BE50A54552}" = Nero Video 11
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{11D3EF85-63E1-4AE4-A7C1-9241BDB16B51}" = Nero ControlCenter 11
"{1545207E-C6F3-31D7-9918-BDBB65075FBF}" = Microsoft .NET Framework 3.5 Language Pack - deu
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2432E589-6256-4513-B0BF-EFA8E325D5F0}" = Nero SharedVideoCodecs
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 11
"{2CA7225D-CB12-462A-9DD1-50319E158BA5}" = Nero 11 PiP Effects Basic
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.011.00
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{390757AA-8830-43DC-AEE0-4E5B6F8439EB}" = Nero SoundTrax 11 Help (CHM)
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51865D9D-8F63-46F2-87AB-9E72F93B618C}" = welcome
"{53F7746A-96AA-49A5-86B8-59989680DAC5}" = Nero Burning ROM 11 Help (CHM)
"{55C2143E-FBA5-442F-9AFA-726FF068F39D}" = Nero CoverDesigner 11 Help (CHM)
"{57F80ECF-E27C-4EEE-AB58-E971BACE2639}" = Nero Recode 11 Help (CHM)
"{5A212B2D-140D-46F4-B625-2D1CA5A00594}" = Nero 11 Kwik Themes Basic
"{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard
"{60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C}" = 32 Bit HP CIO Components Installer
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{681002C6-5019-81A2-7871-A43754F71E56}" =
"{6AB2427E-A18F-4809-9A12-29F5EBABBB3A}" = Nero BackItUp 11 Help (CHM)
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8014FACB-1D1D-48C2-94AA-E29EE2E6B9CE}" = Nero WaveEditor 11
"{835C8360-278A-8D86-6F6D-6FA858BFA196}" = VaudiX
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8FA53ACE-B718-4FAE-B7BF-95B0FCB320C8}" = SAMSUNG USB Driver for Mobile Phones
"{90850407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{9193490D-5229-4FC4-9BB9-A6D63C09574A}" = High-Definition Video Playback
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{942E5031-2BD6-4C1B-918C-C8A1CBAE7B8C}" = Microsoft IntelliPoint 8.2
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{959B7F35-2819-40C5-A0CD-3C53B5FCC935}" = Genesys USB Mass Storage Device
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A7A0BF2E-31CC-49E3-9913-52C503EB969D}" = Nero Audio Pack 1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}" = Nero BackItUp 11
"{B1846721-A8E6-46C7-83B6-0DCF7ADB4267}" = Nero Burning ROM 11
"{B9B1BA7F-7E07-49DD-A713-5B397A5BB66B}" = Nero Kwik Media Help (CHM)
"{BBFB2E59-B0DB-42C8-8F4D-CF4E85471667}" = Toolbox
"{BE814218-3919-4EA3-868A-2F60BC135CB4}" = Nero Kwik Media
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C941F1F1-25B3-4DF5-83E6-888C51A1AAB6}" = AVIVO Codecs
"{CE28E6F5-4A03-4DED-B954-D0779B47FFBF}" = Works Update
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01CE99A-8802-483C-A79F-298B691EB432}" = Nero RescueAgent 11 Help (CHM)
"{D2CBEFA4-F2D3-4E97-A171-8BFD6A31A5EC}" = Nero Express 11 Help (CHM)
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare Software
"{D4D66270-9147-4BDF-9946-FCA2B303AA8F}" = Nero ControlCenter 11 Help (CHM)
"{DEAD07C6-D070-43AB-A60D-D9ABE55E296D}_is1" = JPEGCrops 0.7.5 beta
"{E10AAE4A-98B8-420A-BD93-E0520C23D624}" = Nero Express 11
"{E51BC4B0-EA5E-49CC-AF3B-93B5C627EC22}" = Nero 11 Effects Basic
"{EB8DED20-A887-4A9C-BB5A-F3E7523DFB44}" = Nero WaveEditor 11 Help (CHM)
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3743A2C-5D5F-4456-8F98-5DF36A954C50}" = Nero 11 Image Samples
"{F49EF443-B2BD-4F10-8A46-87AFCDB90EDD}" = Nero 11 Disc Menus Basic
"{F80BD4BC-06B8-488E-A62E-C4755013DD71}" = Network
"{F88E2E04-7EF5-488C-8E38-C94EB808458E}" = PS_AIO_07_B110_SW_Min
"{FAC3C37E-EDAB-4F3A-A173-A7C70CC88F09}" = Nero Video 11 Help (CHM)
"{FF44BCE5-5A18-4051-85F0-BC172D7B4695}" = Nero CoverDesigner 11
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"Ashampoo Burning Studio 2012_is1" = Ashampoo Burning Studio 2012 v.10.0.15
"ATI Display Driver" = ATI Display Driver
"avast" = avast! Free Antivirus
"BitComet" = BitComet 1.32
"CCleaner" = CCleaner
"ClearSkinFX for Digital Cameras_is1" = ClearSkinFX for Digital Cameras
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.61.5
"ESET Online Scanner" = ESET Online Scanner v3
"Foxit Reader_is1" = Foxit Reader
"Google Chrome" = Google Chrome
"ie8" = Windows Internet Explorer 8
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.0.1400
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2
"Mozilla Firefox 17.0.1 (x86 de)" = Mozilla Firefox 17.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"PopTray" = PopTray 3.20
"PowerISO" = PowerISO
"PTBSync" = PTBSync (Atomuhr Synchronisation & Terminkalender)
"Revo Uninstaller" = Revo Uninstaller 1.94
"ScreenshotCaptor_is1" = Screenshot Captor 3.04.01
"SereneScreen Marine Aquarium 3_is1" = SereneScreen Marine Aquarium 3
"SP_a3f6cbbc" =
"SpywareBlaster_is1" = SpywareBlaster 4.6
"UnderCoverXP_is1" = UnderCoverXP 1.23
"VLC media player" = VLC media player 2.0.4
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 01.02.2013 03:09:37 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 03:10:37 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 03:11:37 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 03:12:37 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 03:13:37 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 13:04:19 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 18:04:32 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 18:05:32 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 18:06:32 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

Error - 01.02.2013 18:07:32 | Computer Name = BENUTZER-4A24C5 | Source = GenericUpdater | ID = 0
Description =

[ System Events ]
Error - 30.01.2013 12:58:07 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Upload-Manager" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1079

Error - 31.01.2013 02:35:49 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Upload-Manager" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1079

Error - 31.01.2013 12:30:06 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Upload-Manager" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1079

Error - 31.01.2013 12:30:42 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst WMI-Leistungsadapter.

Error - 31.01.2013 12:30:42 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMI-Leistungsadapter" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1053

Error - 01.02.2013 01:53:48 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Upload-Manager" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1079

Error - 01.02.2013 01:53:50 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
PCIIde ViaIde

Error - 01.02.2013 09:42:26 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Upload-Manager" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1079

Error - 01.02.2013 09:43:01 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst WMI-Leistungsadapter.

Error - 01.02.2013 09:43:01 | Computer Name = BENUTZER-4A24C5 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMI-Leistungsadapter" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1053

< End of report >

markusg · 02.02.2013, 01:11

hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.

• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.

Code:

ATTFilter

:OTL
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\rsdatabase.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase2.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf2.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbinfo.dtb ()
O4 - Startup: C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbversion5.txt ()
 :Files
:Commands
[EMPTYFLASH] 
[emptytemp]

• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!

Drücke bitte die

+ E Taste.

Öffne dein Systemlaufwerk ( meistens C: )
Suche nun
folgenden Ordner: _OTL und öffne diesen.
Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
Dies wird eine Movedfiles.zip Datei in _OTL erstellen
Lade diese bitte in unseren Uploadchannel
hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

floridafan · 02.02.2013, 10:14

Zitat:

All processes killed
========== OTL ==========
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\rsdatabase.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabase2.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbdatabaseinf2.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbinfo.dtb moved successfully.
C:\Dokumente und Einstellungen\User\Startmenü\Programme\Autostart\sbversion5.txt moved successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator

User: Administrator.BENUTZER-4A24C5

User: Administrator.BENUTZER-4A24C5.000

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: User
->Flash cache emptied: 2711 bytes

Total Flash Files Cleaned = 0,00 mb

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Administrator.BENUTZER-4A24C5
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Administrator.BENUTZER-4A24C5.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: User
->Temp folder emptied: 470965627 bytes
->Temporary Internet Files folder emptied: 47509 bytes
->FireFox cache emptied: 92942172 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5286931 bytes
RecycleBin emptied: 430500 bytes

Total Files Cleaned = 543,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 02022013_093610

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Upload müsste geklappt haben?

markusg · 02.02.2013, 18:56

hatt er, danke
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten
c: öffnen, tdsskiller-datum-version.txt öffnen, Inhalt posten

floridafan · 03.02.2013, 12:20

Hier den Text.

Zitat:

12:15:10.0109 0388 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
12:15:10.0281 0388 ============================================================
12:15:10.0281 0388 Current date / time: 2013/02/03 12:15:10.0281
12:15:10.0281 0388 SystemInfo:
12:15:10.0281 0388
12:15:10.0281 0388 OS Version: 5.1.2600 ServicePack: 2.0
12:15:10.0281 0388 Product type: Workstation
12:15:10.0281 0388 ComputerName: BENUTZER-4A24C5
12:15:10.0281 0388 UserName: User
12:15:10.0281 0388 Windows directory: C:\WINDOWS
12:15:10.0281 0388 System windows directory: C:\WINDOWS
12:15:10.0281 0388 Processor architecture: Intel x86
12:15:10.0281 0388 Number of processors: 2
12:15:10.0281 0388 Page size: 0x1000
12:15:10.0281 0388 Boot type: Normal boot
12:15:10.0281 0388 ============================================================
12:15:11.0921 0388 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1883756, SectorsPerTrack: 0x13, TracksPerCylinder: 0x4, Type 'K0', Flags 0x00000054
12:15:11.0921 0388 ============================================================
12:15:11.0921 0388 \Device\Harddisk0\DR0:
12:15:11.0921 0388 MBR partitions:
12:15:11.0921 0388 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x13, BlocksNum 0x74706D29
12:15:11.0921 0388 ============================================================
12:15:11.0984 0388 C: <-> \Device\Harddisk0\DR0\Partition1
12:15:11.0984 0388 ============================================================
12:15:11.0984 0388 Initialize success
12:15:11.0984 0388 ============================================================
12:15:23.0156 1644 ============================================================
12:15:23.0156 1644 Scan started
12:15:23.0156 1644 Mode: Manual; SigCheck; TDLFS;
12:15:23.0156 1644 ============================================================
12:15:23.0593 1644 ================ Scan system memory ========================
12:15:23.0593 1644 System memory - ok
12:15:23.0609 1644 ================ Scan services =============================
12:15:23.0953 1644 [ 68885EFEBC326F7FC9D0A35625D47BEA ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
12:15:24.0062 1644 Aavmker4 - ok
12:15:24.0078 1644 Abiosdsk - ok
12:15:24.0078 1644 abp480n5 - ok
12:15:24.0203 1644 [ 94B4741D2CF9ED38140B831293D1601A ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
12:15:25.0796 1644 ACPI - ok
12:15:25.0843 1644 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
12:15:25.0984 1644 ACPIEC - ok
12:15:25.0984 1644 adpu160m - ok
12:15:26.0062 1644 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
12:15:26.0109 1644 aec ( UnsignedFile.Multi.Generic ) - warning
12:15:26.0109 1644 aec - detected UnsignedFile.Multi.Generic (1)
12:15:26.0171 1644 [ 55E6E1C51B6D30E54335750955453702 ] AFD C:\WINDOWS\System32\drivers\afd.sys
12:15:26.0234 1644 AFD - ok
12:15:26.0250 1644 Aha154x - ok
12:15:26.0250 1644 aic78u2 - ok
12:15:26.0265 1644 aic78xx - ok
12:15:26.0296 1644 [ 1AAB6C5F8376357CB9B16C38C42C4076 ] Alerter C:\WINDOWS\system32\alrsvc.dll
12:15:26.0468 1644 Alerter - ok
12:15:26.0515 1644 [ 6596DD260FFDE1BDC994C1DF236307BB ] ALG C:\WINDOWS\System32\alg.exe
12:15:26.0640 1644 ALG - ok
12:15:26.0656 1644 AliIde - ok
12:15:27.0281 1644 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
12:15:28.0312 1644 Ambfilt - ok
12:15:28.0359 1644 [ 22AD3EC1F0486C863D70CDD50B97761B ] AmdK8 C:\WINDOWS\system32\DRIVERS\AmdK8.sys
12:15:28.0437 1644 AmdK8 - ok
12:15:28.0453 1644 amsint - ok
12:15:28.0531 1644 [ BECD5328E7869807D6557BE4FE60C72F ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
12:15:28.0703 1644 AppMgmt - ok
12:15:28.0718 1644 asc - ok
12:15:28.0718 1644 asc3350p - ok
12:15:28.0718 1644 asc3550 - ok
12:15:28.0765 1644 [ 310C1844D7B7144288196DCF19FF578C ] ASInsHelp C:\WINDOWS\system32\drivers\AsInsHelp32.sys
12:15:28.0781 1644 ASInsHelp - ok
12:15:28.0828 1644 [ 663F2FB92608073824EE3106886120F3 ] AsIO C:\WINDOWS\system32\drivers\AsIO.sys
12:15:28.0843 1644 AsIO - ok
12:15:28.0937 1644 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
12:15:29.0000 1644 aspnet_state - ok
12:15:29.0015 1644 [ 598DAF89E7B2AD88FF6511CB9C4BA61A ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
12:15:29.0031 1644 aswFsBlk - ok
12:15:29.0078 1644 [ 8E69710F6A1016D47CCDDA6393F97D32 ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
12:15:29.0078 1644 aswMon2 - ok
12:15:29.0125 1644 [ 816C6DCD6BF930C8FD8F68137E1BDDC4 ] AswRdr C:\WINDOWS\system32\drivers\AswRdr.sys
12:15:29.0140 1644 AswRdr - ok
12:15:29.0406 1644 [ 6C8B09E245795E98B6BCC983D0AA4D26 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
12:15:29.0578 1644 aswSnx - ok
12:15:29.0718 1644 [ 437E3F4B4529AA616D4979A2B74CF8C5 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
12:15:29.0812 1644 aswSP - ok
12:15:29.0828 1644 [ BD07C8162C7FAD38FE4AAAE18E835216 ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
12:15:29.0843 1644 aswTdi - ok
12:15:29.0875 1644 [ 02000ABF34AF4C218C35D257024807D6 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:15:30.0000 1644 AsyncMac - ok
12:15:30.0031 1644 [ CDFE4411A69C224BD1D11B2DA92DAC51 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
12:15:30.0140 1644 atapi - ok
12:15:30.0156 1644 Atdisk - ok
12:15:30.0406 1644 [ 471087B5E1E01CC82604E81EA14781D8 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
12:15:30.0750 1644 Ati HotKey Poller ( UnsignedFile.Multi.Generic ) - warning
12:15:30.0750 1644 Ati HotKey Poller - detected UnsignedFile.Multi.Generic (1)
12:15:31.0000 1644 [ B979BA0120B6DB757196A8E2E873FE3C ] ATI Smart C:\WINDOWS\system32\ati2sgag.exe
12:15:31.0421 1644 ATI Smart ( UnsignedFile.Multi.Generic ) - warning
12:15:31.0421 1644 ATI Smart - detected UnsignedFile.Multi.Generic (1)
12:15:32.0765 1644 [ C0B86ECB324E50F6BBD529F9D5C6B24B ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
12:15:33.0843 1644 ati2mtag ( UnsignedFile.Multi.Generic ) - warning
12:15:33.0843 1644 ati2mtag - detected UnsignedFile.Multi.Generic (1)
12:15:33.0890 1644 [ EC88DA854AB7D7752EC8BE11A741BB7F ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:15:34.0000 1644 Atmarpc - ok
12:15:34.0031 1644 [ E98B8250398F6637B335A76BA8DFB602 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
12:15:34.0156 1644 AudioSrv - ok
12:15:34.0203 1644 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
12:15:34.0328 1644 audstub - ok
12:15:34.0453 1644 [ FB05FF189FC5F57DE636315B1F5E56DB ] avast! Antivirus C:\Programme\AVAST Software\Avast\AvastSvc.exe
12:15:34.0468 1644 avast! Antivirus - ok
12:15:34.0500 1644 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
12:15:34.0640 1644 Beep - ok
12:15:34.0796 1644 [ 3A5E54A9AB96EF2D273B58136FB58EFE ] BITS C:\WINDOWS\system32\qmgr.dll
12:15:35.0156 1644 BITS - ok
12:15:35.0234 1644 [ D8653DCD80CF2EBB333FC4FCC43A7DEF ] Browser C:\WINDOWS\System32\browser.dll
12:15:35.0375 1644 Browser - ok
12:15:35.0390 1644 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
12:15:35.0515 1644 cbidf2k - ok
12:15:35.0515 1644 cd20xrnt - ok
12:15:35.0531 1644 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
12:15:35.0671 1644 Cdaudio - ok
12:15:35.0703 1644 [ CD7D5152DF32B47F4E36F710B35AAE02 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
12:15:35.0812 1644 Cdfs - ok
12:15:35.0859 1644 [ AF9C19B3100FE010496B1A27181FBF72 ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
12:15:35.0968 1644 Cdrom - ok
12:15:35.0968 1644 Changer - ok
12:15:35.0984 1644 [ 234D52C63C67A8CF4AF9BECCE43BFB4A ] CiSvc C:\WINDOWS\system32\cisvc.exe
12:15:36.0109 1644 CiSvc - ok
12:15:36.0140 1644 [ 0461868578D29DC18FB1C79933C5158A ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
12:15:36.0250 1644 ClipSrv - ok
12:15:36.0312 1644 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:15:36.0390 1644 clr_optimization_v2.0.50727_32 - ok
12:15:36.0500 1644 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:15:36.0562 1644 clr_optimization_v4.0.30319_32 - ok
12:15:36.0562 1644 CmdIde - ok
12:15:36.0578 1644 COMSysApp - ok
12:15:36.0578 1644 Cpqarray - ok
12:15:36.0656 1644 [ 1A5F9DB98DF7955B4C7CBDBF2C638238 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
12:15:36.0812 1644 CryptSvc - ok
12:15:36.0812 1644 dac2w2k - ok
12:15:36.0812 1644 dac960nt - ok
12:15:37.0000 1644 [ D45BBCDDC74A1B0259A0C4B00C190D20 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
12:15:37.0265 1644 DcomLaunch - ok
12:15:37.0343 1644 [ 69F986B2688BA95A0D9362B0E233D5FF ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
12:15:37.0500 1644 Dhcp - ok
12:15:37.0546 1644 [ 00CA44E4534865F8A3B64F7C0984BFF0 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
12:15:37.0671 1644 Disk - ok
12:15:37.0687 1644 dmadmin - ok
12:15:37.0984 1644 [ 5789B83BA87FC84C3568CF86CACEF8CE ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
12:15:38.0515 1644 dmboot - ok
12:15:38.0593 1644 [ 084EB0A50A4F7B4705C8A57F234E5291 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
12:15:38.0765 1644 dmio - ok
12:15:38.0765 1644 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
12:15:38.0890 1644 dmload - ok
12:15:38.0937 1644 [ FA2D9D1A9F6B5A88D01E1685CE2378BA ] dmserver C:\WINDOWS\System32\dmserver.dll
12:15:39.0078 1644 dmserver - ok
12:15:39.0156 1644 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
12:15:39.0250 1644 DMusic ( UnsignedFile.Multi.Generic ) - warning
12:15:39.0250 1644 DMusic - detected UnsignedFile.Multi.Generic (1)
12:15:39.0296 1644 [ D1F5B71BBAEEE07B78980DBD878C0BC7 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
12:15:39.0437 1644 Dnscache - ok
12:15:39.0437 1644 dpti2o - ok
12:15:39.0484 1644 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
12:15:39.0531 1644 drmkaud ( UnsignedFile.Multi.Generic ) - warning
12:15:39.0531 1644 drmkaud - detected UnsignedFile.Multi.Generic (1)
12:15:39.0562 1644 [ 877A4512CC9074D6954776AF47021766 ] ERSvc C:\WINDOWS\System32\ersvc.dll
12:15:39.0671 1644 ERSvc - ok
12:15:39.0750 1644 [ 65F6B774819BD727358157CEDEA67B8E ] Eventlog C:\WINDOWS\system32\services.exe
12:15:39.0843 1644 Eventlog - ok
12:15:39.0937 1644 [ D68ED3908C7A0DB446111D34AC40DC18 ] EventSystem C:\WINDOWS\system32\es.dll
12:15:40.0046 1644 EventSystem - ok
12:15:40.0109 1644 [ 3117F595E9615E04F05A54FC15A03B20 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
12:15:40.0250 1644 Fastfat - ok
12:15:40.0312 1644 [ BAC5F7F0C2B8C1B9832594851E0F9914 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
12:15:40.0515 1644 FastUserSwitchingCompatibility - ok
12:15:40.0546 1644 [ CED2E8396A8838E59D8FD529C680E02C ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
12:15:40.0640 1644 Fdc - ok
12:15:40.0687 1644 [ 8787449F8EF116DB0E8E06C3555746A7 ] FET5X86V C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
12:15:40.0718 1644 FET5X86V - ok
12:15:40.0750 1644 [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS C:\WINDOWS\system32\DRIVERS\fetnd5.sys
12:15:40.0859 1644 FETNDIS - ok
12:15:40.0890 1644 [ 9E9AF89F9B14AA6249065C309CE73BD8 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
12:15:41.0031 1644 Fips - ok
12:15:41.0046 1644 [ 9FCAAECBC801E2822E3CAF870DDA0385 ] FIXUSTOR C:\WINDOWS\system32\DRIVERS\fixustor.sys
12:15:41.0062 1644 FIXUSTOR - ok
12:15:41.0093 1644 [ 0DD1DE43115B93F4D85E889D7A86F548 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
12:15:41.0187 1644 Flpydisk - ok
12:15:41.0250 1644 [ 157754F0DF355A9E0A6F54721914F9C6 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
12:15:41.0390 1644 FltMgr - ok
12:15:41.0468 1644 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
12:15:41.0500 1644 FontCache3.0.0.0 - ok
12:15:41.0515 1644 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
12:15:41.0640 1644 Fs_Rec - ok
12:15:41.0687 1644 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:15:41.0843 1644 Ftdisk - ok
12:15:41.0875 1644 [ 4216CD545E5C30807B560C5DCAA812E6 ] gagp30kx C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
12:15:42.0015 1644 gagp30kx - ok
12:15:42.0031 1644 [ C0F1D4A21DE5A415DF8170616703DEBF ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
12:15:42.0140 1644 Gpc - ok
12:15:42.0250 1644 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Programme\Google\Update\GoogleUpdate.exe
12:15:42.0296 1644 gupdate - ok
12:15:42.0359 1644 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Programme\Google\Update\GoogleUpdate.exe
12:15:42.0359 1644 gupdatem - ok
12:15:42.0453 1644 [ 3FCC124B6E08EE0E9351F717DD136939 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
12:15:42.0500 1644 HDAudBus - ok
12:15:42.0546 1644 [ BA85BCF1A2BCF927C3600574173403E0 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:15:42.0671 1644 helpsvc - ok
12:15:42.0687 1644 [ B647CA198B9C73056ABFB0A9D8F4916D ] HidServ C:\WINDOWS\System32\hidserv.dll
12:15:42.0812 1644 HidServ - ok
12:15:42.0828 1644 [ 1DE6783B918F540149AA69943BDFEBA8 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
12:15:42.0968 1644 hidusb - ok
12:15:42.0968 1644 hpn - ok
12:15:43.0265 1644 [ 9D23402D305869844BC6004A05CC74BA ] HPSLPSVC C:\Programme\HP\Digital Imaging\bin\HPSLPSVC32.DLL
12:15:43.0625 1644 HPSLPSVC - ok
12:15:43.0687 1644 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
12:15:43.0734 1644 HPZid412 - ok
12:15:43.0765 1644 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
12:15:43.0828 1644 HPZipr12 - ok
12:15:43.0843 1644 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
12:15:43.0906 1644 HPZius12 - ok
12:15:44.0015 1644 [ 9F8B0F4276F618964FD118BE4289B7CD ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
12:15:44.0125 1644 HTTP - ok
12:15:44.0140 1644 [ 9EC7E866BBDBF3ECC0E67F4E0A838EB2 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
12:15:44.0250 1644 HTTPFilter - ok
12:15:44.0328 1644 [ 2310CA92D37D97C9231ADF1796B47B9D ] hwdatacard C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
12:15:44.0390 1644 hwdatacard - ok
12:15:44.0390 1644 i2omgmt - ok
12:15:44.0406 1644 i2omp - ok
12:15:44.0437 1644 [ 7C575018D0413440D75432A78B88C899 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:15:45.0265 1644 i8042prt - ok
12:15:45.0671 1644 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:15:46.0218 1644 idsvc - ok
12:15:46.0281 1644 [ F8AA320C6A0409C0380E5D8A99D76EC6 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
12:15:46.0375 1644 Imapi - ok
12:15:46.0484 1644 [ 57D7267A9ED91ECAF4336B08C9628FCA ] ImapiService C:\WINDOWS\system32\imapi.exe
12:15:46.0625 1644 ImapiService - ok
12:15:46.0640 1644 ini910u - ok
12:15:49.0046 1644 [ 723907CC600271BB216FAAA0B6877678 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
12:15:50.0875 1644 IntcAzAudAddService - ok
12:15:50.0875 1644 IntelIde - ok
12:15:50.0921 1644 [ 4448006B6BC60E6C027932CFC38D6855 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
12:15:51.0031 1644 Ip6Fw - ok
12:15:51.0062 1644 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:15:51.0187 1644 IpFilterDriver - ok
12:15:51.0218 1644 [ E1EC7F5DA720B640CD8FB8424F1B14BB ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
12:15:51.0312 1644 IpInIp - ok
12:15:51.0390 1644 [ B5A8E215AC29D24D60B4D1250EF05ACE ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
12:15:51.0515 1644 IpNat - ok
12:15:51.0546 1644 [ 64537AA5C003A6AFEEE1DF819062D0D1 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
12:15:51.0656 1644 IPSec - ok
12:15:51.0687 1644 [ 50708DAA1B1CBB7D6AC1CF8F56A24410 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
12:15:51.0781 1644 IRENUM - ok
12:15:51.0859 1644 [ CE9B7AFDF0A3D7DD8D1487262316B959 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
12:15:52.0046 1644 isapnp - ok
12:15:52.0281 1644 [ CC54FD59486BEF7CE70275FAC2FD9D34 ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe
12:15:52.0359 1644 JavaQuickStarterService - ok
12:15:52.0390 1644 [ B128FC0A5CD83F669D5DE4B58F77C7D6 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:15:52.0500 1644 Kbdclass - ok
12:15:52.0531 1644 [ 7EC877AA899323B92874FE62C7DDCDE7 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
12:15:52.0625 1644 kbdhid - ok
12:15:52.0734 1644 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
12:15:52.0781 1644 kmixer ( UnsignedFile.Multi.Generic ) - warning
12:15:52.0781 1644 kmixer - detected UnsignedFile.Multi.Generic (1)
12:15:52.0828 1644 [ 674D3E5A593475915DC6643317192403 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
12:15:52.0859 1644 KSecDD - ok
12:15:52.0953 1644 [ F8170AA51CD202BC062B8A0983F361B7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
12:15:53.0109 1644 lanmanserver - ok
12:15:53.0187 1644 [ F716A6F5BABB6DA60C0532510AB52245 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
12:15:53.0265 1644 lanmanworkstation - ok
12:15:53.0265 1644 lbrtfdc - ok
12:15:53.0328 1644 [ 4C25FADD7FE1D5BD779B20D3D0EB8D7C ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
12:15:53.0421 1644 LmHosts - ok
12:15:53.0484 1644 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\WINDOWS\system32\drivers\mbamswissarmy.sys
12:15:53.0500 1644 MBAMSwissArmy - ok
12:15:53.0531 1644 [ E5215AB942C5AC5F7EB0E54871D7A27C ] Messenger C:\WINDOWS\System32\msgsvc.dll
12:15:53.0640 1644 Messenger - ok
12:15:53.0671 1644 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
12:15:53.0828 1644 mnmdd - ok
12:15:53.0890 1644 [ BB2470D20405B272EA47CA5E18F1C58E ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
12:15:54.0015 1644 mnmsrvc - ok
12:15:54.0046 1644 [ 91A3DA4B12F6F1D760463A7F7857F748 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
12:15:54.0156 1644 Modem - ok
12:15:54.0687 1644 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
12:15:55.0546 1644 Monfilt - ok
12:15:55.0578 1644 [ 71E15CA47FD947552054AFB28536268F ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
12:15:55.0703 1644 Mouclass - ok
12:15:55.0750 1644 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
12:15:55.0875 1644 mouhid - ok
12:15:55.0890 1644 [ 65653F3B4477F3C63E68A9659F85EE2E ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
12:15:56.0000 1644 MountMgr - ok
12:15:56.0109 1644 [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
12:15:56.0171 1644 MozillaMaintenance - ok
12:15:56.0171 1644 mraid35x - ok
12:15:56.0250 1644 [ 46EDCC8F2DB2F322C24F48785CB46366 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:15:56.0406 1644 MRxDAV - ok
12:15:56.0593 1644 [ FB6C89BB3CE282B08BDB1E3C179E1C39 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:15:56.0859 1644 MRxSmb - ok
12:15:56.0906 1644 [ D059F9C7752EF461476E83180DAA5C62 ] MSDTC C:\WINDOWS\system32\msdtc.exe
12:15:57.0015 1644 MSDTC - ok
12:15:57.0062 1644 [ 561B3A4333CA2DBDBA28B5B956822519 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
12:15:57.0156 1644 Msfs - ok
12:15:57.0156 1644 MSIServer - ok
12:15:57.0187 1644 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
12:15:57.0203 1644 MSKSSRV ( UnsignedFile.Multi.Generic ) - warning
12:15:57.0203 1644 MSKSSRV - detected UnsignedFile.Multi.Generic (1)
12:15:57.0203 1644 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:15:57.0234 1644 MSPCLOCK ( UnsignedFile.Multi.Generic ) - warning
12:15:57.0234 1644 MSPCLOCK - detected UnsignedFile.Multi.Generic (1)
12:15:57.0234 1644 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
12:15:57.0250 1644 MSPQM ( UnsignedFile.Multi.Generic ) - warning
12:15:57.0250 1644 MSPQM - detected UnsignedFile.Multi.Generic (1)
12:15:57.0250 1644 [ 469541F8BFD2B32659D5D463A6714BCE ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:15:57.0359 1644 mssmbios - ok
12:15:57.0390 1644 [ D48659BB24C48345D926ECB45C1EBDF5 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys
12:15:57.0406 1644 MTsensor - ok
12:15:57.0453 1644 [ 82035E0F41C2DD05AE41D27FE6CF7DE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
12:15:57.0578 1644 Mup - ok
12:15:57.0640 1644 [ 558635D3AF1C7546D26067D5D9B6959E ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
12:15:57.0796 1644 NDIS - ok
12:15:57.0796 1644 [ 08D43BBDACDF23F34D79E44ED35C1B4C ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:15:57.0921 1644 NdisTapi - ok
12:15:57.0937 1644 [ 34D6CD56409DA9A7ED573E1C90A308BF ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:15:58.0062 1644 Ndisuio - ok
12:15:58.0109 1644 [ 0B90E255A9490166AB368CD55A529893 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:15:58.0218 1644 NdisWan - ok
12:15:58.0265 1644 [ 59FC3FB44D2669BC144FD87826BB571F ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
12:15:58.0375 1644 NDProxy - ok
12:15:58.0437 1644 [ 69C503C004F49AEE8B8E3067CC047BA7 ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
12:15:58.0468 1644 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
12:15:58.0468 1644 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
12:15:58.0484 1644 [ 3A2ACA8FC1D7786902CA434998D7CEB4 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
12:15:58.0578 1644 NetBIOS - ok
12:15:58.0656 1644 [ 0C80E410CD2F47134407EE7DD19CC86B ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
12:15:58.0781 1644 NetBT - ok
12:15:58.0875 1644 [ F4EFF57254F565F39B6029150414A0D5 ] NetDDE C:\WINDOWS\system32\netdde.exe
12:15:59.0015 1644 NetDDE - ok
12:15:59.0062 1644 [ F4EFF57254F565F39B6029150414A0D5 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
12:15:59.0203 1644 NetDDEdsdm - ok
12:15:59.0250 1644 [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] Netlogon C:\WINDOWS\system32\lsass.exe
12:15:59.0343 1644 Netlogon - ok
12:15:59.0421 1644 [ CDF4DA6B518105343FE9E8AFBBF8FBF4 ] Netman C:\WINDOWS\System32\netman.dll
12:15:59.0593 1644 Netman - ok
12:15:59.0687 1644 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:15:59.0734 1644 NetTcpPortSharing - ok
12:15:59.0843 1644 [ 774274C487493452DF3B0126DBE7FF3B ] Nla C:\WINDOWS\System32\mswsock.dll
12:16:00.0000 1644 Nla - ok
12:16:00.0078 1644 [ 7AEA4DF1CA68FD45DD4BBE1F0243CE7F ] NMSAccess C:\Programme\CDBurnerXP\NMSAccessU.exe
12:16:00.0125 1644 NMSAccess - ok
12:16:00.0140 1644 [ 4F601BCB8F64EA3AC0994F98FED03F8E ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
12:16:00.0234 1644 Npfs - ok
12:16:00.0468 1644 [ B78BE402C3F63DD55521F73876951CDD ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
12:16:00.0828 1644 Ntfs - ok
12:16:00.0843 1644 [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
12:16:00.0937 1644 NtLmSsp - ok
12:16:01.0125 1644 [ 428AA946A8D9F32DBB4260C8E6E13377 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
12:16:01.0484 1644 NtmsSvc - ok
12:16:01.0484 1644 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
12:16:01.0609 1644 Null - ok
12:16:01.0640 1644 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:16:01.0781 1644 NwlnkFlt - ok
12:16:01.0796 1644 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:16:01.0906 1644 NwlnkFwd - ok
12:16:02.0015 1644 [ DA345DE3B450E9E1691E7B9956D8FFC3 ] OMSI download service C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
12:16:02.0046 1644 OMSI download service ( UnsignedFile.Multi.Generic ) - warning
12:16:02.0046 1644 OMSI download service - detected UnsignedFile.Multi.Generic (1)
12:16:02.0187 1644 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
12:16:02.0234 1644 ose - ok
12:16:02.0265 1644 [ B2F17A2EDB5450E61973A037F63A595B ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
12:16:02.0375 1644 Parport - ok
12:16:02.0375 1644 [ 3334430C29DC338092F79C38EF7B4CD0 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
12:16:02.0500 1644 PartMgr - ok
12:16:02.0531 1644 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
12:16:02.0671 1644 ParVdm - ok
12:16:02.0734 1644 [ 6FB463E5B243FBD6F3D3C83F914D94FB ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
12:16:02.0875 1644 PCI - ok
12:16:02.0875 1644 PCIDump - ok
12:16:02.0890 1644 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
12:16:03.0015 1644 PCIIde - ok
12:16:03.0093 1644 [ E2363F4C1DAFF89ABEE5F593E13D8A05 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
12:16:03.0218 1644 Pcmcia - ok
12:16:03.0218 1644 PDCOMP - ok
12:16:03.0218 1644 PDFRAME - ok
12:16:03.0234 1644 PDRELI - ok
12:16:03.0234 1644 PDRFRAME - ok
12:16:03.0250 1644 perc2 - ok
12:16:03.0250 1644 perc2hib - ok
12:16:03.0312 1644 [ 65F6B774819BD727358157CEDEA67B8E ] PlugPlay C:\WINDOWS\system32\services.exe
12:16:03.0375 1644 PlugPlay - ok
12:16:03.0406 1644 [ 12B4549D515CB26BB8D375038017CA65 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
12:16:03.0437 1644 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
12:16:03.0437 1644 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
12:16:03.0468 1644 [ 896D916DE06F5502D301E8C4DC442AE8 ] Point32 C:\WINDOWS\system32\DRIVERS\point32.sys
12:16:03.0484 1644 Point32 - ok
12:16:03.0484 1644 [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
12:16:03.0578 1644 PolicyAgent - ok
12:16:03.0625 1644 [ 1C5CC65AAC0783C344F16353E60B72AC ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
12:16:03.0718 1644 PptpMiniport - ok
12:16:03.0750 1644 [ 3D7F196E77F986C106E9320B81A5EBBF ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
12:16:03.0843 1644 Processor - ok
12:16:03.0859 1644 [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
12:16:03.0953 1644 ProtectedStorage - ok
12:16:03.0984 1644 [ 48671F327553DCF1D27F6197F622A668 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
12:16:04.0125 1644 PSched - ok
12:16:04.0140 1644 PTBSync - ok
12:16:04.0171 1644 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
12:16:04.0312 1644 Ptilink - ok
12:16:04.0312 1644 ql1080 - ok
12:16:04.0328 1644 Ql10wnt - ok
12:16:04.0328 1644 ql12160 - ok
12:16:04.0328 1644 ql1240 - ok
12:16:04.0343 1644 ql1280 - ok
12:16:04.0359 1644 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
12:16:04.0484 1644 RasAcd - ok
12:16:04.0562 1644 [ E3C6E87C1F84584A773D7C3DD205DBFF ] RasAuto C:\WINDOWS\System32\rasauto.dll
12:16:04.0703 1644 RasAuto - ok
12:16:04.0734 1644 [ 98FAEB4A4DCF812BA1C6FCA4AA3E115C ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:16:04.0828 1644 Rasl2tp - ok
12:16:04.0906 1644 [ A5D2D745A2AEFA327DCA6DA317B5FD70 ] RasMan C:\WINDOWS\System32\rasmans.dll
12:16:05.0093 1644 RasMan - ok
12:16:05.0109 1644 [ 7306EEED8895454CBED4669BE9F79FAA ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:16:05.0203 1644 RasPppoe - ok
12:16:05.0218 1644 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
12:16:05.0343 1644 Raspti - ok
12:16:05.0406 1644 [ 29D66245ADBA878FFF574CD66ABD2884 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
12:16:05.0546 1644 Rdbss - ok
12:16:05.0546 1644 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:16:05.0671 1644 RDPCDD - ok
12:16:05.0765 1644 [ A2CAE2C60BC37E0751EF9DDA7CEAF4AD ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
12:16:05.0906 1644 rdpdr - ok
12:16:05.0984 1644 [ D4F5643D7714EF499AE9527FDCD50894 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
12:16:06.0125 1644 RDPWD - ok
12:16:06.0218 1644 [ AEC159942DF64A9890072D7BB1797762 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
12:16:06.0375 1644 RDSessMgr - ok
12:16:06.0421 1644 [ AA56702E230860565CB8D43680F57F33 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
12:16:06.0515 1644 redbook - ok
12:16:06.0562 1644 [ EBA80CDF25E02084857957E820004934 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
12:16:06.0703 1644 RemoteAccess - ok
12:16:06.0750 1644 [ AE81CF7D7CFA79CD03E8FB99788A7E09 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
12:16:06.0859 1644 RemoteRegistry - ok
12:16:06.0953 1644 [ DA23F9F3F1B1871120F980A6879581AC ] RpcLocator C:\WINDOWS\system32\locator.exe
12:16:07.0140 1644 RpcLocator - ok
12:16:07.0296 1644 [ D45BBCDDC74A1B0259A0C4B00C190D20 ] RpcSs C:\WINDOWS\system32\rpcss.dll
12:16:07.0468 1644 RpcSs - ok
12:16:07.0546 1644 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
12:16:07.0718 1644 RSVP - ok
12:16:07.0796 1644 [ 59509AD6CBC28F2C73056268985B3E48 ] s0016bus C:\WINDOWS\system32\DRIVERS\s0016bus.sys
12:16:07.0812 1644 s0016bus - ok
12:16:07.0843 1644 [ B98C3A6F91F4FBA285AF9606A240C6B4 ] s0016mdfl C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys
12:16:07.0843 1644 s0016mdfl - ok
12:16:07.0906 1644 [ 8A83426F4FB7B5212825D9DE76368B1A ] s0016mdm C:\WINDOWS\system32\DRIVERS\s0016mdm.sys
12:16:07.0937 1644 s0016mdm - ok
12:16:08.0000 1644 [ 7A78BBA97FEB5E6D24C49E93A3BF7287 ] s0016mgmt C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys
12:16:08.0031 1644 s0016mgmt - ok
12:16:08.0062 1644 [ 34EF7B5F611957B73E7219DD5A222AD1 ] s0016nd5 C:\WINDOWS\system32\DRIVERS\s0016nd5.sys
12:16:08.0062 1644 s0016nd5 - ok
12:16:08.0125 1644 [ 36792935847143E4A3CDA0DC87248487 ] s0016obex C:\WINDOWS\system32\DRIVERS\s0016obex.sys
12:16:08.0156 1644 s0016obex - ok
12:16:08.0218 1644 [ 927208754FB27FC3E7A659E77500C5D1 ] s0016unic C:\WINDOWS\system32\DRIVERS\s0016unic.sys
12:16:08.0234 1644 s0016unic - ok
12:16:08.0250 1644 [ 183805EB05BCA5A1E4AAAED4D2BE3690 ] SamSs C:\WINDOWS\system32\lsass.exe
12:16:08.0343 1644 SamSs - ok
12:16:08.0406 1644 [ B4CF7B42DE6CFA6FDE7D6AF4DAA55F57 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
12:16:08.0546 1644 SCardSvr - ok
12:16:08.0640 1644 [ 89CF8543BB208261C5A684636D379154 ] SCDEmu C:\WINDOWS\system32\drivers\SCDEmu.sys
12:16:08.0640 1644 SCDEmu - ok
12:16:08.0781 1644 [ D5E73842F38E24457C63FEF8CEFFBE19 ] Schedule C:\WINDOWS\system32\schedsvc.dll
12:16:08.0984 1644 Schedule - ok
12:16:09.0000 1644 [ D26E26EA516450AF9D072635C60387F4 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
12:16:09.0125 1644 Secdrv - ok
12:16:09.0140 1644 [ FED544B43903FB801B106F062110358A ] seclogon C:\WINDOWS\System32\seclogon.dll
12:16:09.0250 1644 seclogon - ok
12:16:09.0265 1644 [ AB74D986C1DD0D0C95B6AD37EC1E9F4F ] SENS C:\WINDOWS\system32\sens.dll
12:16:09.0375 1644 SENS - ok
12:16:09.0406 1644 [ A2D868AEEFF612E70E213C451A70CAFB ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
12:16:09.0515 1644 serenum - ok
12:16:09.0546 1644 [ CD5B9995AFCDB466C9EFC048D167E3BE ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
12:16:09.0656 1644 Serial - ok
12:16:09.0687 1644 [ 0D13B6DF6E9E101013A7AFB0CE629FE0 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
12:16:09.0796 1644 Sfloppy - ok
12:16:09.0968 1644 [ 9245420422E409A25C1410ACB4244060 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
12:16:10.0312 1644 SharedAccess - ok
12:16:10.0375 1644 [ BAC5F7F0C2B8C1B9832594851E0F9914 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
12:16:10.0484 1644 ShellHWDetection - ok
12:16:10.0500 1644 Simbad - ok
12:16:10.0515 1644 Sparrow - ok
12:16:10.0562 1644 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
12:16:10.0562 1644 splitter ( UnsignedFile.Multi.Generic ) - warning
12:16:10.0562 1644 splitter - detected UnsignedFile.Multi.Generic (1)
12:16:10.0593 1644 [ 54E7113A4BD696E430919BCAF5C65E06 ] Spooler C:\WINDOWS\system32\spoolsv.exe
12:16:10.0734 1644 Spooler - ok
12:16:10.0765 1644 [ E4200CB2F418D8FC4ACDD7E38C419D6A ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
12:16:10.0875 1644 sr - ok
12:16:10.0937 1644 [ 015F302C4CF961F20C3F98F3A7CA7917 ] srservice C:\WINDOWS\system32\srsvc.dll
12:16:11.0125 1644 srservice - ok
12:16:11.0265 1644 [ 7A4F147CC6B133F905F6E65E2F8669FB ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
12:16:11.0484 1644 Srv - ok
12:16:11.0515 1644 [ 6FA03B462B2FFFE2627171B7FE73EE29 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
12:16:11.0656 1644 SSDPSRV - ok
12:16:11.0656 1644 [ 306521935042FC0A6988D528643619B3 ] StarOpen C:\WINDOWS\system32\drivers\StarOpen.sys
12:16:11.0671 1644 StarOpen ( UnsignedFile.Multi.Generic ) - warning
12:16:11.0671 1644 StarOpen - detected UnsignedFile.Multi.Generic (1)
12:16:11.0812 1644 [ 7E751068ADA60FC77638622E86A7CD9E ] stisvc C:\WINDOWS\system32\wiaservc.dll
12:16:12.0140 1644 stisvc - ok
12:16:12.0171 1644 [ 1FD8760CFCB68178F147EA97F0A8AC45 ] SWDUMon C:\WINDOWS\system32\DRIVERS\SWDUMon.sys
12:16:12.0187 1644 SWDUMon - ok
12:16:12.0203 1644 [ 03C1BAE4766E2450219D20B993D6E046 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
12:16:12.0312 1644 swenum - ok
12:16:12.0359 1644 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
12:16:12.0375 1644 swmidi ( UnsignedFile.Multi.Generic ) - warning
12:16:12.0375 1644 swmidi - detected UnsignedFile.Multi.Generic (1)
12:16:12.0375 1644 SwPrv - ok
12:16:12.0390 1644 symc810 - ok
12:16:12.0390 1644 symc8xx - ok
12:16:12.0390 1644 sym_hi - ok
12:16:12.0406 1644 sym_u3 - ok
12:16:12.0468 1644 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
12:16:12.0484 1644 sysaudio ( UnsignedFile.Multi.Generic ) - warning
12:16:12.0484 1644 sysaudio - detected UnsignedFile.Multi.Generic (1)
12:16:12.0515 1644 [ 6D0C43DF9D3A7C5A9B4F94772CBD5DDC ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
12:16:12.0671 1644 SysmonLog - ok
12:16:12.0781 1644 [ 4584E2A5FE662AB3E7C32936E1449043 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
12:16:12.0984 1644 TapiSrv - ok
12:16:13.0125 1644 [ 2A5554FC5B1E04E131230E3CE035C3F9 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
12:16:13.0359 1644 Tcpip - ok
12:16:13.0375 1644 [ 38D437CF2D98965F239B0ABCD66DCB0F ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
12:16:13.0468 1644 TDPIPE - ok
12:16:13.0500 1644 [ ED0580AF02502D00AD8C4C066B156BE9 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
12:16:13.0593 1644 TDTCP - ok
12:16:13.0625 1644 [ A540A99C281D933F3D69D55E48727F47 ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
12:16:13.0734 1644 TermDD - ok
12:16:13.0859 1644 [ 1850BC10DE5DCCCEDE063FC2D0F2CEDA ] TermService C:\WINDOWS\System32\termsrv.dll
12:16:14.0109 1644 TermService - ok
12:16:14.0156 1644 [ BAC5F7F0C2B8C1B9832594851E0F9914 ] Themes C:\WINDOWS\System32\shsvcs.dll
12:16:14.0265 1644 Themes - ok
12:16:14.0312 1644 [ 58708746B8267033E5CF2B29659E7F74 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
12:16:14.0453 1644 TlntSvr - ok
12:16:14.0453 1644 TosIde - ok
12:16:14.0515 1644 [ A34E894201D66E380E1FA96FE11B587E ] TrkWks C:\WINDOWS\system32\trkwks.dll
12:16:14.0656 1644 TrkWks - ok
12:16:14.0687 1644 [ 12F70256F140CD7D52C58C7048FDE657 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
12:16:14.0781 1644 Udfs - ok
12:16:14.0796 1644 ultra - ok
12:16:14.0890 1644 [ AFF2E5045961BBC0A602BB6F95EB1345 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
12:16:15.0093 1644 Update - ok
12:16:15.0140 1644 [ BA85BCF1A2BCF927C3600574173403E0 ] uploadmgr C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
12:16:15.0250 1644 uploadmgr - ok
12:16:15.0328 1644 [ 09D4A2D7C5A8ABEC227D118765FAADDF ] upnphost C:\WINDOWS\System32\upnphost.dll
12:16:15.0500 1644 upnphost - ok
12:16:15.0531 1644 [ A99F867E76CFDAA28EE305B93F70E84F ] UPS C:\WINDOWS\System32\ups.exe
12:16:15.0640 1644 UPS - ok
12:16:15.0671 1644 [ BFFD9F120CC63BCBAA3D840F3EEF9F79 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
12:16:15.0765 1644 usbccgp - ok
12:16:15.0796 1644 [ 15E993BA2F6946B2BFBBFCD30398621E ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
12:16:15.0890 1644 usbehci - ok
12:16:15.0921 1644 [ C72F40947F92CEA56A8FB532EDF025F1 ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
12:16:16.0015 1644 usbhub - ok
12:16:16.0031 1644 [ A42369B7CD8886CD7C70F33DA6FCBCF5 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
12:16:16.0156 1644 usbprint - ok
12:16:16.0156 1644 [ A6BC71402F4F7DD5B77FD7F4A8DDBA85 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
12:16:16.0265 1644 usbscan - ok
12:16:16.0296 1644 [ 6CD7B22193718F1D17A47A1CD6D37E75 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:16:16.0390 1644 usbstor - ok
12:16:16.0421 1644 [ F8FD1400092E23C8F2F31406EF06167B ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
12:16:16.0531 1644 usbuhci - ok
12:16:16.0546 1644 [ 8A60EDD72B4EA5AEA8202DAF0E427925 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
12:16:16.0640 1644 VgaSave - ok
12:16:16.0656 1644 [ 59CB1338AD3654417BEA49636457F65D ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
12:16:16.0750 1644 ViaIde - ok
12:16:16.0781 1644 [ C147AFA614B9925479D47CD173329789 ] videX32 C:\WINDOWS\system32\DRIVERS\videX32.sys
12:16:16.0796 1644 videX32 - ok
12:16:16.0812 1644 [ D6888520FF56D72A50437E371CA25FC9 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
12:16:16.0921 1644 VolSnap - ok
12:16:17.0031 1644 [ 6635ECBF0D8090DC3A452D0D072B5D5B ] VSS C:\WINDOWS\System32\vssvc.exe
12:16:17.0281 1644 VSS - ok
12:16:17.0359 1644 [ C6D874CD2A5B83CD11CDEBD28A638584 ] W32Time C:\WINDOWS\system32\w32time.dll
12:16:17.0531 1644 W32Time - ok
12:16:17.0562 1644 [ 984EF0B9788ABF89974CFED4BFBAACBC ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
12:16:17.0687 1644 Wanarp - ok
12:16:17.0921 1644 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
12:16:18.0015 1644 Wdf01000 - ok
12:16:18.0031 1644 WDICA - ok
12:16:18.0093 1644 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
12:16:18.0093 1644 wdmaud ( UnsignedFile.Multi.Generic ) - warning
12:16:18.0093 1644 wdmaud - detected UnsignedFile.Multi.Generic (1)
12:16:18.0140 1644 [ 1EB51FEEA9D3208EAE60604F4346C02E ] WebClient C:\WINDOWS\System32\webclnt.dll
12:16:18.0265 1644 WebClient - ok
12:16:18.0437 1644 [ DA2DADB42916E59C6E4BBA593BCCDA73 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
12:16:18.0578 1644 winmgmt - ok
12:16:18.0609 1644 [ 845AF1BA23C8D5E64DEF61BCC441604C ] WinRing0_1_2_0 C:\WINDOWS\system32\Drivers\ptbring0.sys
12:16:18.0625 1644 WinRing0_1_2_0 - ok
12:16:18.0687 1644 [ D68CC4EBF7B03FD770D5962295AD814E ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
12:16:18.0812 1644 WmdmPmSN - ok
12:16:19.0109 1644 [ 80D811741505365B79CBDB1254D5C98B ] Wmi C:\WINDOWS\System32\advapi32.dll
12:16:19.0546 1644 Wmi - ok
12:16:19.0609 1644 [ 042A78FCD1ADFB0FBA9865D55C6F5CC1 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
12:16:19.0765 1644 WmiApSrv - ok
12:16:20.0140 1644 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
12:16:20.0578 1644 WPFFontCache_v0400 - ok
12:16:20.0609 1644 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
12:16:20.0718 1644 WS2IFSL - ok
12:16:20.0781 1644 [ BD3561AAE748150CF51C2CA876449EA7 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
12:16:20.0921 1644 wscsvc - ok
12:16:20.0937 1644 [ 1EDDD5C0ECF3FA6EDFD8A25B2B4E7DF6 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
12:16:21.0062 1644 wuauserv - ok
12:16:21.0218 1644 [ AE83ADA96575DACF533C2BCB1FC163DC ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
12:16:21.0562 1644 WZCSVC - ok
12:16:21.0578 1644 [ C7F0D7AA3A3C2DF333AFDD593106F39F ] xfilt C:\WINDOWS\system32\DRIVERS\xfilt.sys
12:16:21.0593 1644 xfilt - ok
12:16:21.0656 1644 [ 8302DE1C64618D72346DD0034DBC5D9B ] xmlprov C:\WINDOWS\System32\xmlprov.dll
12:16:21.0812 1644 xmlprov - ok
12:16:21.0812 1644 ================ Scan global ===============================
12:16:21.0859 1644 [ 1B91BAC6996731EE8925F58205DCB016 ] C:\WINDOWS\system32\basesrv.dll
12:16:22.0000 1644 [ 6D4006EF6E45030BCA14CBFE8893E9B9 ] C:\WINDOWS\system32\winsrv.dll
12:16:22.0250 1644 [ 6D4006EF6E45030BCA14CBFE8893E9B9 ] C:\WINDOWS\system32\winsrv.dll
12:16:22.0312 1644 [ 65F6B774819BD727358157CEDEA67B8E ] C:\WINDOWS\system32\services.exe
12:16:22.0328 1644 [Global] - ok
12:16:22.0328 1644 ================ Scan MBR ==================================
12:16:22.0375 1644 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
12:16:22.0812 1644 \Device\Harddisk0\DR0 - ok
12:16:22.0812 1644 ================ Scan VBR ==================================
12:16:22.0812 1644 [ 56778AD193CF0A2984E968798D95EEB1 ] \Device\Harddisk0\DR0\Partition1
12:16:22.0812 1644 \Device\Harddisk0\DR0\Partition1 - ok
12:16:22.0828 1644 ============================================================
12:16:22.0828 1644 Scan finished
12:16:22.0828 1644 ============================================================
12:16:22.0937 1708 Detected object count: 18
12:16:22.0937 1708 Actual detected object count: 18
12:16:32.0671 1708 aec ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 aec ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 Ati HotKey Poller ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 Ati HotKey Poller ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 ATI Smart ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 ATI Smart ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 ati2mtag ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 ati2mtag ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 DMusic ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 DMusic ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 drmkaud ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 drmkaud ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0671 1708 kmixer ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0671 1708 kmixer ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 MSKSSRV ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 MSKSSRV ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 MSPCLOCK ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 MSPCLOCK ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 MSPQM ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 MSPQM ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 OMSI download service ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 OMSI download service ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0687 1708 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0687 1708 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0703 1708 splitter ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0703 1708 splitter ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0703 1708 StarOpen ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0703 1708 StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0703 1708 swmidi ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0703 1708 swmidi ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0703 1708 sysaudio ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0703 1708 sysaudio ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:16:32.0703 1708 wdmaud ( UnsignedFile.Multi.Generic ) - skipped by user
12:16:32.0703 1708 wdmaud ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:17:46.0734 2308 Deinitialize success

markusg · 04.02.2013, 12:56

Hi,
combofix:

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

floridafan · 04.02.2013, 20:32

ComboFix geht bei meinem PC nicht, es legt alles lahm, war leider immer schon so, egal wie oder in welchem Modus.

markusg · 05.02.2013, 17:03

hattest du es versucht?
wieso musstest du denn combofix überhaupt einsetzen, das sollte man nicht einfach so tun

floridafan · 05.02.2013, 21:40

Weil mir im Herbst hier jemand vom Trojaner-Board gesagt hat ich solle es tun, ganz einfach. Was wäre denn so schlimm, wenn man es selber laufen lässt??
Aber es geht auf jedenfall leider nicht. Was kann ich stattdessen tun?

markusg · 05.02.2013, 21:50

weil du damit evtl. etwas löscht, was nicht gelöscht werden soll...
- servicepack3:
Download: Windows XP Service Pack 3-Netzwerkinstallationspaket für IT-Spezialisten und Entwickler - Microsoft Download Center - Download Details
- internet explorer 8, auch wenn du nen andern browser nutzt, muss er aktuell sein.
Download: Windows Internet Explorer 8 für Windows XP - Microsoft Download Center - Download Details
- automatische updates so konfigurieren, das sie automatisch geladen/instaliert werden:
Konfigurieren und Verwenden des Features "Automatische Updates" in Windows
wenn ferit, melden bitte

floridafan · 05.02.2013, 22:28

Service Pack 3 geht bei mir auch nicht, mein PC kommt fast ganz zum erliegen, wenn ich das installiere und es geht gar nichts mehr. Hatte ich alles schon mit ihrem Kollegen M-K-D-B durchgekaut.

Kann ich gefundenen Rootkits löschen (TDSS-Killer Fund)?

markusg · 05.02.2013, 22:34

nein das sind keine rootkits.
ich würd dann an deiner Stelle mal versuchen, dass System neu zu instalieren, für servicepack 2 bekommst du keine Updates und dein PC ist anfällig für Angriffe aus dem Netz.

floridafan · 05.02.2013, 22:52

Da müsste ich mir erst eine externe Festplatte zulegen. einen zweiten PC haben...und viel Zeit.
Also keine Test mehr?

markusg · 05.02.2013, 22:53

tritt das Problem denn noch auf?

floridafan · 05.02.2013, 23:01

Stockt hin und wieder noch, ja, aber besser als vorher.
Vielen Dank jedenfalls für die Hilfe.

05.02.2013, 22:53	#14
markusg /// Malware-holic	"authentifizierung erforderlich" ständig und PC extrem langsam tritt das Problem denn noch auf? __________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet

"authentifizierung erforderlich" ständig und PC extrem langsam

Log-Analyse und Auswertung: "authentifizierung erforderlich" ständig und PC extrem langsam