Computer gesperrt und 100 Euro zahlen

horrn · 17.02.2013, 18:29

Liebe Community,

gestern hab ich meinen geliebten Computer meinem Neffen überlassen. Nach einer Weile kam er dann zu mir auf die Baustelle und hat gesagt, er habe einen cheat für GTA gesucht und dann sei der Computer gesperrt worden und man solle 100 Euro überweisen. Ich hab ihn gleich mit einem anderem Computer eine RescueCD von Kaspersky runterladen lassen und einmal scannen lassen. Nichts wurde gefunden. Dann habe ich die Sensitivität auf hoch gestellt. Es wurde in seinem Account eine dll gefunden, die infiziert war; die wurde gelöscht. Es wurde noch weitere Schadsoftware gefunden, aber ich habe den Prozeß dann abgebrochen, weil ich auf dieses Bord gestoßen bin.

Mit den Logfiles ist der Beitrag zu lange, deshalb habe ich sie in einer zip-Datei angehängt.
Meinen Namen hab ich in Mustermann geändert.

Im Anhang ist:
Otl-anonym.txt
Extras-anonym.txt
Gmer-anonym.txt
kaspersky-anonym.txt

Ich hoffe ihr könnt mir helfen. Ich habe mir die Hinweise für Hilfesuchende durchgelesen und hoffentlich alles richtig gemacht.

Danke erst mal für die gute Anleitung im Vorfeld.
Falls ich was besser oder anders machen muss, bitte mir sagen. Ich werde mich anstrengen.

markusg · 17.02.2013, 19:01

Hi,

otl fix

Fixen mit OTL

Starte bitte die OTL.exe.
Kopiere nun den Inhalt aus der Codebox in die Textbox.

Code:

ATTFilter

:OTL
[2013.02.16 14:49:27 | 095,023,320 | ---- | M] () -- C:\ProgramData\2931474.pad
[2013.02.16 14:17:12 | 000,002,802 | ---- | M] () -- C:\ProgramData\2931474.js
[2013.02.16 14:17:12 | 000,000,153 | ---- | M] () -- C:\ProgramData\2931474.reg
[2013.02.16 14:17:12 | 000,000,063 | ---- | M] () -- C:\ProgramData\2931474.bat
:files
:Commands
[emptytemp]

Solltest du deinen Benutzernamen z. B. durch "*****" unkenntlich gemacht haben, so füge an entsprechender Stelle deinen richtigen Benutzernamen ein. Andernfalls wird der Fix nicht funktionieren.
Schließe bitte nun alle Programme.
Klicke nun bitte auf den Fix Button.
OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
Nach dem Neustart findest Du ein Textdokument auf deinem Desktop.
( Auch zu finden unter C:\_OTL\MovedFiles\<Uhrzeit_Datum>.txt)
Kopiere nun den Inhalt hier in Deinen Thread

horrn · 17.02.2013, 21:44

Hallo,
vielen Dank für die schnelle Hilfe.
Ich hab im Abgesichertem Modus gestartet und die Anweisung befolgt. Dann musste ich den Neustart machen, wie angekündigt. Scheint alles geklappt zu haben; unten folgt der Text der Log-Datei.
Soll ich jetzt Daten sichern und neu aufsetzten oder ist das Problem behoben. Muss ich noch eine Lücke im Betriebssystem zu machen?
Danke!!

All processes killed
========== OTL ==========
C:\ProgramData\2931474.pad moved successfully.
C:\ProgramData\2931474.js moved successfully.
C:\ProgramData\2931474.reg moved successfully.
C:\ProgramData\2931474.bat moved successfully.
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gast
->Temp folder emptied: 1293356 bytes
->Temporary Internet Files folder emptied: 140603 bytes
->FireFox cache emptied: 142562 bytes
->Opera cache emptied: 336107 bytes

User: Gum der Spieler
->Temp folder emptied: 9722068 bytes
->Temporary Internet Files folder emptied: 4490863 bytes
->Java cache emptied: 110235 bytes
->FireFox cache emptied: 7226221 bytes
->Opera cache emptied: 39970358 bytes
->Flash cache emptied: 506 bytes

User: Jan
->Temp folder emptied: 48814435 bytes
->Temporary Internet Files folder emptied: 68689 bytes
->FireFox cache emptied: 51172136 bytes
->Google Chrome cache emptied: 12542494 bytes
->Opera cache emptied: 12459287 bytes
->Flash cache emptied: 1721 bytes

User: Michael xxxxxx
->Temp folder emptied: 47431595 bytes
->Temporary Internet Files folder emptied: 2880919 bytes
->Java cache emptied: 197764 bytes
->FireFox cache emptied: 42748380 bytes
->Google Chrome cache emptied: 345438388 bytes
->Opera cache emptied: 9278069 bytes
->Flash cache emptied: 4444 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 1117480 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 602112 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 34871702 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67899 bytes
RecycleBin emptied: 7259640095 bytes

Total Files Cleaned = 7.565,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 02172013_212608

Files\Folders moved on Reboot...
File\Folder C:\Users\Gum der Spieler\AppData\Local\Temp\IswTmp\Logs\TrustcheckerIEPlugin.swl.old not found!
C:\Users\Michael xxxxx\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

markusg · 18.02.2013, 15:14

Hi,
ob du neu aufsetzen möchtest oder nicht, musst du mir sagen, ich denke wir können alles entfernen, aber 100 %ig sicher ist soetwas natürlich nie, wir können mit unseren Scans immer nur einen gewissen Grad an Sicherheit erreichen.
Wenn das für dich ok ist, machen wir weiter, wenn nicht, setzen wir neu auf.

horrn · 18.02.2013, 20:08

Ich wäre im Moment froh, wenn ich nicht neu aufsetzen müsste. Wenn Du eine Chance siehst, dass man die Kiste heilen kann, fänd ich es toll, das zu probieren.

markusg · 18.02.2013, 20:11

Hi, klar.
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

horrn · 18.02.2013, 22:02

So hallo, ich hab den TDSSKiller angewendet. Einstellung hab ich wie bebildert vorgenommen. Ich bin immer noch offline geblieben, aber habe nicht mehr im Abgesichertem Modus gestartet.
Hier den TDSSKiller-Logfile (Name durch "Mustermann" ersetzt):

21:53:31.0335 5324 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:53:33.0335 5324 ============================================================
21:53:33.0335 5324 Current date / time: 2013/02/18 21:53:33.0335
21:53:33.0335 5324 SystemInfo:
21:53:33.0335 5324
21:53:33.0335 5324 OS Version: 6.1.7601 ServicePack: 1.0
21:53:33.0335 5324 Product type: Workstation
21:53:33.0335 5324 ComputerName: WASSERKRAFT
21:53:33.0335 5324 UserName: Mustermann
21:53:33.0335 5324 Windows directory: C:\Windows
21:53:33.0335 5324 System windows directory: C:\Windows
21:53:33.0335 5324 Running under WOW64
21:53:33.0335 5324 Processor architecture: Intel x64
21:53:33.0335 5324 Number of processors: 8
21:53:33.0335 5324 Page size: 0x1000
21:53:33.0335 5324 Boot type: Normal boot
21:53:33.0335 5324 ============================================================
21:53:33.0914 5324 Drive \Device\Harddisk0\DR0 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:53:33.0916 5324 Drive \Device\Harddisk1\DR1 - Size: 0x3BD800000 (14.96 Gb), SectorSize: 0x200, Cylinders: 0x7A1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
21:53:33.0918 5324 ============================================================
21:53:33.0918 5324 \Device\Harddisk0\DR0:
21:53:33.0918 5324 MBR partitions:
21:53:33.0918 5324 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:53:33.0918 5324 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xC3639800
21:53:33.0918 5324 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0xC366C000, BlocksNum 0x2579C000
21:53:33.0918 5324 \Device\Harddisk1\DR1:
21:53:33.0919 5324 MBR partitions:
21:53:33.0919 5324 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x2000, BlocksNum 0x1DEA000
21:53:33.0919 5324 ============================================================
21:53:33.0937 5324 C: <-> \Device\Harddisk0\DR0\Partition2
21:53:33.0967 5324 D: <-> \Device\Harddisk0\DR0\Partition3
21:53:33.0967 5324 ============================================================
21:53:33.0967 5324 Initialize success
21:53:33.0967 5324 ============================================================
21:53:42.0629 3344 ============================================================
21:53:42.0629 3344 Scan started
21:53:42.0629 3344 Mode: Manual; SigCheck; TDLFS;
21:53:42.0629 3344 ============================================================
21:53:43.0090 3344 ================ Scan system memory ========================
21:53:43.0090 3344 System memory - ok
21:53:43.0090 3344 ================ Scan services =============================
21:53:43.0206 3344 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
21:53:43.0239 3344 1394ohci - ok
21:53:43.0274 3344 [ 6E9C8B324980AFE454C6F7762E2B4478 ] acedrv07 C:\Windows\system32\drivers\acedrv07.sys
21:53:43.0277 3344 acedrv07 ( UnsignedFile.Multi.Generic ) - warning
21:53:43.0277 3344 acedrv07 - detected UnsignedFile.Multi.Generic (1)
21:53:43.0312 3344 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:53:43.0320 3344 ACPI - ok
21:53:43.0354 3344 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:53:43.0361 3344 AcpiPmi - ok
21:53:43.0407 3344 [ 71C577ED817C6D8E13F890CD9A2D3EE6 ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
21:53:43.0417 3344 ADIHdAudAddService - ok
21:53:43.0505 3344 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:53:43.0513 3344 AdobeFlashPlayerUpdateSvc - ok
21:53:43.0540 3344 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
21:53:43.0549 3344 adp94xx - ok
21:53:43.0558 3344 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
21:53:43.0566 3344 adpahci - ok
21:53:43.0575 3344 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
21:53:43.0582 3344 adpu320 - ok
21:53:43.0593 3344 [ 3BDB13C79CC8C06E2F8182595903ED69 ] AEADIFilters C:\Windows\system32\AEADISRV.EXE
21:53:43.0600 3344 AEADIFilters - ok
21:53:43.0613 3344 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:53:43.0632 3344 AeLookupSvc - ok
21:53:43.0671 3344 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
21:53:43.0680 3344 AFD - ok
21:53:43.0714 3344 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:53:43.0720 3344 agp440 - ok
21:53:43.0737 3344 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
21:53:43.0743 3344 ALG - ok
21:53:43.0745 3344 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
21:53:43.0750 3344 aliide - ok
21:53:43.0806 3344 ALSysIO - ok
21:53:43.0814 3344 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
21:53:43.0820 3344 amdide - ok
21:53:43.0831 3344 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
21:53:43.0837 3344 AmdK8 - ok
21:53:43.0848 3344 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
21:53:43.0854 3344 AmdPPM - ok
21:53:43.0875 3344 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:53:43.0881 3344 amdsata - ok
21:53:43.0892 3344 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
21:53:43.0899 3344 amdsbs - ok
21:53:43.0909 3344 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:53:43.0915 3344 amdxata - ok
21:53:44.0012 3344 [ 459465DA28E49B358ECFE0D788F328F4 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:53:44.0018 3344 AntiVirSchedulerService - ok
21:53:44.0067 3344 [ BCDD17E8469D647A71B347C4B6F86685 ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:53:44.0073 3344 AntiVirService - ok
21:53:44.0099 3344 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
21:53:44.0117 3344 AppID - ok
21:53:44.0124 3344 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:53:44.0143 3344 AppIDSvc - ok
21:53:44.0183 3344 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
21:53:44.0200 3344 Appinfo - ok
21:53:44.0336 3344 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:53:44.0342 3344 Apple Mobile Device - ok
21:53:44.0351 3344 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
21:53:44.0357 3344 arc - ok
21:53:44.0367 3344 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
21:53:44.0373 3344 arcsas - ok
21:53:44.0432 3344 [ A82C01606DC27D05D9D3BFB6BB807E32 ] AsIO C:\Windows\syswow64\drivers\AsIO.sys
21:53:44.0441 3344 AsIO - ok
21:53:44.0462 3344 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:53:44.0480 3344 AsyncMac - ok
21:53:44.0492 3344 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
21:53:44.0497 3344 atapi - ok
21:53:44.0519 3344 [ FC0E8778C000291CAF60EB88C011E931 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
21:53:44.0528 3344 atksgt - ok
21:53:44.0569 3344 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:53:44.0590 3344 AudioEndpointBuilder - ok
21:53:44.0603 3344 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:53:44.0623 3344 AudioSrv - ok
21:53:44.0658 3344 [ BFE9598EBC3934CF8D876A303849C896 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
21:53:44.0665 3344 avgntflt - ok
21:53:44.0696 3344 [ F74D86A9FB35FA5F24627B8DBBF3A9A4 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
21:53:44.0703 3344 avipbb - ok
21:53:44.0720 3344 [ CD0E732347BF09717E0BDDC0C66699AB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
21:53:44.0726 3344 avkmgr - ok
21:53:44.0747 3344 [ C6F4C466B654C1BE98AF31418BB5AC30 ] AVM WLAN Connection Service C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
21:53:44.0751 3344 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - warning
21:53:44.0751 3344 AVM WLAN Connection Service - detected UnsignedFile.Multi.Generic (1)
21:53:44.0766 3344 [ 1DC2F715792CF33428AD7993ACBD224D ] avmeject C:\Windows\system32\drivers\avmeject.sys
21:53:44.0772 3344 avmeject - ok
21:53:44.0823 3344 [ 53A05544AB5D067B56F133225DBFC21B ] avmike C:\Program Files\FRITZ!Fernzugang\avmike.exe
21:53:44.0831 3344 avmike - ok
21:53:44.0873 3344 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:53:44.0882 3344 AxInstSV - ok
21:53:44.0895 3344 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
21:53:44.0902 3344 b06bdrv - ok
21:53:44.0932 3344 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
21:53:44.0940 3344 b57nd60a - ok
21:53:44.0958 3344 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
21:53:44.0964 3344 BDESVC - ok
21:53:44.0966 3344 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
21:53:44.0984 3344 Beep - ok
21:53:45.0032 3344 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
21:53:45.0053 3344 BFE - ok
21:53:45.0098 3344 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
21:53:45.0120 3344 BITS - ok
21:53:45.0135 3344 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
21:53:45.0141 3344 blbdrive - ok
21:53:45.0185 3344 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:53:45.0194 3344 Bonjour Service - ok
21:53:45.0215 3344 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:53:45.0221 3344 bowser - ok
21:53:45.0228 3344 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:53:45.0235 3344 BrFiltLo - ok
21:53:45.0239 3344 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:53:45.0247 3344 BrFiltUp - ok
21:53:45.0278 3344 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
21:53:45.0285 3344 Browser - ok
21:53:45.0296 3344 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:53:45.0304 3344 Brserid - ok
21:53:45.0315 3344 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:53:45.0323 3344 BrSerWdm - ok
21:53:45.0327 3344 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:53:45.0334 3344 BrUsbMdm - ok
21:53:45.0341 3344 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:53:45.0347 3344 BrUsbSer - ok
21:53:45.0354 3344 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
21:53:45.0362 3344 BTHMODEM - ok
21:53:45.0372 3344 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
21:53:45.0391 3344 bthserv - ok
21:53:45.0410 3344 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:53:45.0428 3344 cdfs - ok
21:53:45.0466 3344 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:53:45.0472 3344 cdrom - ok
21:53:45.0506 3344 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
21:53:45.0523 3344 CertPropSvc - ok
21:53:45.0554 3344 [ DC716E2329403300B2477997581BBFD7 ] certsrv C:\Program Files\FRITZ!Fernzugang\certsrv.exe
21:53:45.0560 3344 certsrv - ok
21:53:45.0569 3344 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
21:53:45.0576 3344 circlass - ok
21:53:45.0591 3344 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
21:53:45.0600 3344 CLFS - ok
21:53:45.0675 3344 [ 524DC3807CB1746225F9D26ADD19C319 ] CLKMSVC10_38F51D56 C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
21:53:45.0683 3344 CLKMSVC10_38F51D56 - ok
21:53:45.0713 3344 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:53:45.0720 3344 clr_optimization_v2.0.50727_32 - ok
21:53:45.0742 3344 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:53:45.0748 3344 clr_optimization_v2.0.50727_64 - ok
21:53:45.0836 3344 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:53:45.0842 3344 clr_optimization_v4.0.30319_32 - ok
21:53:45.0865 3344 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:53:45.0871 3344 clr_optimization_v4.0.30319_64 - ok
21:53:45.0881 3344 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:53:45.0887 3344 CmBatt - ok
21:53:45.0921 3344 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:53:45.0926 3344 cmdide - ok
21:53:45.0965 3344 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
21:53:45.0977 3344 CNG - ok
21:53:45.0979 3344 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:53:45.0985 3344 Compbatt - ok
21:53:46.0010 3344 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
21:53:46.0018 3344 CompositeBus - ok
21:53:46.0032 3344 COMSysApp - ok
21:53:46.0041 3344 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
21:53:46.0046 3344 crcdisk - ok
21:53:46.0092 3344 [ C8BD651E13895B93ED9EC5B4F1DF42BC ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
21:53:46.0094 3344 Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - warning
21:53:46.0094 3344 Creative ALchemy AL6 Licensing Service - detected UnsignedFile.Multi.Generic (1)
21:53:46.0118 3344 [ C0EAD9F8AB83D41FF07303C75589C2B8 ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
21:53:46.0120 3344 Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - warning
21:53:46.0120 3344 Creative Audio Engine Licensing Service - detected UnsignedFile.Multi.Generic (1)
21:53:46.0153 3344 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:53:46.0159 3344 CryptSvc - ok
21:53:46.0204 3344 [ 07BA6D17E66879018B30B6C3F976EBED ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
21:53:46.0208 3344 CTAudSvcService ( UnsignedFile.Multi.Generic ) - warning
21:53:46.0208 3344 CTAudSvcService - detected UnsignedFile.Multi.Generic (1)
21:53:46.0221 3344 [ 8EC96B753727B380089D66D4AB5869DF ] CYUSB C:\Windows\system32\Drivers\CYUSB.sys
21:53:46.0228 3344 CYUSB - ok
21:53:46.0248 3344 [ FBCB29A76E8105D682B02C69BA9B5C22 ] DAdderFltr C:\Windows\system32\drivers\dadder.sys
21:53:46.0254 3344 DAdderFltr - ok
21:53:46.0293 3344 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:53:46.0314 3344 DcomLaunch - ok
21:53:46.0329 3344 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
21:53:46.0349 3344 defragsvc - ok
21:53:46.0380 3344 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:53:46.0398 3344 DfsC - ok
21:53:46.0441 3344 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
21:53:46.0449 3344 Dhcp - ok
21:53:46.0453 3344 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
21:53:46.0472 3344 discache - ok
21:53:46.0485 3344 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
21:53:46.0490 3344 Disk - ok
21:53:46.0508 3344 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:53:46.0515 3344 Dnscache - ok
21:53:46.0549 3344 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
21:53:46.0568 3344 dot3svc - ok
21:53:46.0598 3344 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
21:53:46.0616 3344 DPS - ok
21:53:46.0629 3344 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:53:46.0636 3344 drmkaud - ok
21:53:46.0668 3344 [ 21A9BC94BB9C7765195ABBCA8169309A ] dvdfabio C:\Windows\system32\drivers\dvdfabio.sys
21:53:46.0674 3344 dvdfabio - ok
21:53:46.0707 3344 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:53:46.0719 3344 DXGKrnl - ok
21:53:46.0727 3344 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
21:53:46.0746 3344 EapHost - ok
21:53:46.0793 3344 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
21:53:46.0816 3344 ebdrv - ok
21:53:46.0843 3344 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
21:53:46.0849 3344 EFS - ok
21:53:46.0895 3344 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:53:46.0905 3344 ehRecvr - ok
21:53:46.0921 3344 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
21:53:46.0928 3344 ehSched - ok
21:53:46.0947 3344 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
21:53:46.0956 3344 elxstor - ok
21:53:46.0988 3344 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:53:46.0994 3344 ErrDev - ok
21:53:47.0035 3344 [ 932C05033053ADA2404FD836C9AB2C70 ] EuMusDesignVirtualAudioCableWdm C:\Windows\system32\DRIVERS\vrtaucbl.sys
21:53:47.0041 3344 EuMusDesignVirtualAudioCableWdm - ok
21:53:47.0054 3344 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
21:53:47.0075 3344 EventSystem - ok
21:53:47.0084 3344 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
21:53:47.0103 3344 exfat - ok
21:53:47.0160 3344 [ 86B0FBC17425B0A00D431B3C8F4D2F9D ] Ext2Fsd C:\Windows\system32\drivers\Ext2Fsd.sys
21:53:47.0171 3344 Ext2Fsd - ok
21:53:47.0184 3344 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:53:47.0203 3344 fastfat - ok
21:53:47.0246 3344 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
21:53:47.0256 3344 Fax - ok
21:53:47.0264 3344 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:53:47.0270 3344 fdc - ok
21:53:47.0277 3344 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
21:53:47.0296 3344 fdPHost - ok
21:53:47.0306 3344 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
21:53:47.0324 3344 FDResPub - ok
21:53:47.0334 3344 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:53:47.0340 3344 FileInfo - ok
21:53:47.0348 3344 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:53:47.0366 3344 Filetrace - ok
21:53:47.0368 3344 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:53:47.0374 3344 flpydisk - ok
21:53:47.0410 3344 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:53:47.0417 3344 FltMgr - ok
21:53:47.0461 3344 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
21:53:47.0472 3344 FontCache - ok
21:53:47.0518 3344 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:53:47.0524 3344 FontCache3.0.0.0 - ok
21:53:47.0534 3344 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:53:47.0540 3344 FsDepends - ok
21:53:47.0563 3344 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:53:47.0569 3344 Fs_Rec - ok
21:53:47.0604 3344 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:53:47.0613 3344 fvevol - ok
21:53:47.0634 3344 [ 444534CBA693DD23C1CC589681E01656 ] FWLANUSB C:\Windows\system32\DRIVERS\fwlanusb.sys
21:53:47.0643 3344 FWLANUSB - ok
21:53:47.0658 3344 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
21:53:47.0664 3344 gagp30kx - ok
21:53:47.0693 3344 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:53:47.0698 3344 GEARAspiWDM - ok
21:53:47.0726 3344 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
21:53:47.0747 3344 gpsvc - ok
21:53:47.0836 3344 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:53:47.0842 3344 gupdate - ok
21:53:47.0844 3344 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:53:47.0850 3344 gupdatem - ok
21:53:47.0881 3344 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
21:53:47.0887 3344 hamachi - ok
21:53:47.0981 3344 [ 785FD63B74B30986A9F2C7D965CA509F ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
21:53:48.0005 3344 Hamachi2Svc - ok
21:53:48.0007 3344 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:53:48.0013 3344 hcw85cir - ok
21:53:48.0044 3344 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:53:48.0053 3344 HdAudAddService - ok
21:53:48.0072 3344 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
21:53:48.0079 3344 HDAudBus - ok
21:53:48.0089 3344 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
21:53:48.0095 3344 HidBatt - ok
21:53:48.0106 3344 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
21:53:48.0114 3344 HidBth - ok
21:53:48.0124 3344 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
21:53:48.0131 3344 HidIr - ok
21:53:48.0136 3344 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
21:53:48.0155 3344 hidserv - ok
21:53:48.0184 3344 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys
21:53:48.0190 3344 HidUsb - ok
21:53:48.0226 3344 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:53:48.0244 3344 hkmsvc - ok
21:53:48.0274 3344 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:53:48.0282 3344 HomeGroupListener - ok
21:53:48.0317 3344 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:53:48.0324 3344 HomeGroupProvider - ok
21:53:48.0360 3344 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:53:48.0366 3344 HpSAMD - ok
21:53:48.0409 3344 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:53:48.0430 3344 HTTP - ok
21:53:48.0464 3344 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:53:48.0469 3344 hwpolicy - ok
21:53:48.0511 3344 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:53:48.0517 3344 i8042prt - ok
21:53:48.0544 3344 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:53:48.0552 3344 iaStorV - ok
21:53:48.0601 3344 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:53:48.0612 3344 idsvc - ok
21:53:48.0624 3344 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
21:53:48.0629 3344 iirsp - ok
21:53:48.0648 3344 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
21:53:48.0670 3344 IKEEXT - ok
21:53:48.0678 3344 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
21:53:48.0684 3344 intelide - ok
21:53:48.0706 3344 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:53:48.0712 3344 intelppm - ok
21:53:48.0718 3344 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:53:48.0736 3344 IPBusEnum - ok
21:53:48.0772 3344 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:53:48.0790 3344 IpFilterDriver - ok
21:53:48.0823 3344 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:53:48.0832 3344 iphlpsvc - ok
21:53:48.0842 3344 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:53:48.0848 3344 IPMIDRV - ok
21:53:48.0861 3344 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:53:48.0879 3344 IPNAT - ok
21:53:48.0926 3344 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
21:53:48.0936 3344 iPod Service - ok
21:53:48.0955 3344 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:53:48.0963 3344 IRENUM - ok
21:53:48.0971 3344 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:53:48.0976 3344 isapnp - ok
21:53:48.0989 3344 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:53:48.0996 3344 iScsiPrt - ok
21:53:49.0048 3344 [ BE72D2B3A99615F84E270C80F0A18448 ] ISWKL C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys
21:53:49.0055 3344 ISWKL - ok
21:53:49.0139 3344 [ D9A4C1353CC653F8E2FE4D2C6A490E96 ] IswSvc C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
21:53:49.0150 3344 IswSvc - ok
21:53:49.0173 3344 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:53:49.0178 3344 kbdclass - ok
21:53:49.0217 3344 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:53:49.0224 3344 kbdhid - ok
21:53:49.0234 3344 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
21:53:49.0241 3344 KeyIso - ok
21:53:49.0289 3344 [ E656FE10D6D27794AFA08136685A69E8 ] KL1 C:\Windows\system32\DRIVERS\kl1.sys
21:53:49.0298 3344 KL1 - ok
21:53:49.0309 3344 [ D865DD8B0448E3F963D68C04C532858F ] kl2 C:\Windows\system32\DRIVERS\kl2.sys
21:53:49.0315 3344 kl2 - ok
21:53:49.0371 3344 [ 055790D38D7EC73AEF03E4AA7F67BA03 ] KLIF C:\Windows\system32\DRIVERS\klif.sys
21:53:49.0381 3344 KLIF - ok
21:53:49.0399 3344 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:53:49.0405 3344 KSecDD - ok
21:53:49.0428 3344 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:53:49.0435 3344 KSecPkg - ok
21:53:49.0444 3344 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:53:49.0462 3344 ksthunk - ok
21:53:49.0491 3344 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
21:53:49.0512 3344 KtmRm - ok
21:53:49.0553 3344 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
21:53:49.0572 3344 LanmanServer - ok
21:53:49.0596 3344 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:53:49.0615 3344 LanmanWorkstation - ok
21:53:49.0631 3344 [ 156AB2E56DC3CA0B582E3362E07CDED7 ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
21:53:49.0637 3344 lirsgt - ok
21:53:49.0647 3344 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:53:49.0665 3344 lltdio - ok
21:53:49.0684 3344 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:53:49.0704 3344 lltdsvc - ok
21:53:49.0711 3344 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:53:49.0730 3344 lmhosts - ok
21:53:49.0743 3344 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
21:53:49.0750 3344 LSI_FC - ok
21:53:49.0755 3344 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
21:53:49.0761 3344 LSI_SAS - ok
21:53:49.0770 3344 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:53:49.0776 3344 LSI_SAS2 - ok
21:53:49.0782 3344 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:53:49.0788 3344 LSI_SCSI - ok
21:53:49.0804 3344 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
21:53:49.0822 3344 luafv - ok
21:53:49.0839 3344 [ BEB897CE49F7C991845D3AEA0D298E53 ] Lycosa C:\Windows\system32\drivers\Lycosa.sys
21:53:49.0845 3344 Lycosa - ok
21:53:49.0872 3344 [ 754C8BF43F0DD4B54865F174A62761E9 ] MCfilt C:\Windows\system32\drivers\MCfilt64.sys
21:53:49.0878 3344 MCfilt - ok
21:53:49.0908 3344 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:53:49.0915 3344 Mcx2Svc - ok
21:53:49.0923 3344 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
21:53:49.0928 3344 megasas - ok
21:53:49.0937 3344 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
21:53:49.0945 3344 MegaSR - ok
21:53:49.0957 3344 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
21:53:49.0976 3344 MMCSS - ok
21:53:49.0981 3344 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
21:53:49.0999 3344 Modem - ok
21:53:50.0031 3344 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:53:50.0039 3344 monitor - ok
21:53:50.0047 3344 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:53:50.0052 3344 mouclass - ok
21:53:50.0065 3344 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:53:50.0071 3344 mouhid - ok
21:53:50.0108 3344 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:53:50.0115 3344 mountmgr - ok
21:53:50.0154 3344 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
21:53:50.0161 3344 mpio - ok
21:53:50.0173 3344 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:53:50.0191 3344 mpsdrv - ok
21:53:50.0230 3344 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:53:50.0252 3344 MpsSvc - ok
21:53:50.0280 3344 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:53:50.0289 3344 MRxDAV - ok
21:53:50.0321 3344 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:53:50.0327 3344 mrxsmb - ok
21:53:50.0357 3344 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:53:50.0364 3344 mrxsmb10 - ok
21:53:50.0372 3344 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:53:50.0378 3344 mrxsmb20 - ok
21:53:50.0407 3344 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
21:53:50.0413 3344 msahci - ok
21:53:50.0427 3344 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:53:50.0433 3344 msdsm - ok
21:53:50.0442 3344 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
21:53:50.0450 3344 MSDTC - ok
21:53:50.0465 3344 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:53:50.0483 3344 Msfs - ok
21:53:50.0485 3344 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:53:50.0503 3344 mshidkmdf - ok
21:53:50.0511 3344 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:53:50.0517 3344 msisadrv - ok
21:53:50.0529 3344 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:53:50.0548 3344 MSiSCSI - ok
21:53:50.0550 3344 msiserver - ok
21:53:50.0560 3344 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:53:50.0579 3344 MSKSSRV - ok
21:53:50.0592 3344 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:53:50.0610 3344 MSPCLOCK - ok
21:53:50.0613 3344 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:53:50.0631 3344 MSPQM - ok
21:53:50.0659 3344 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:53:50.0667 3344 MsRPC - ok
21:53:50.0675 3344 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
21:53:50.0680 3344 mssmbios - ok
21:53:50.0685 3344 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:53:50.0703 3344 MSTEE - ok
21:53:50.0711 3344 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
21:53:50.0717 3344 MTConfig - ok
21:53:50.0756 3344 [ 19B006B181E3875FD254F7B67ACF1E7C ] MTsensor C:\Windows\system32\DRIVERS\ASACPI.sys
21:53:50.0762 3344 MTsensor - ok
21:53:50.0774 3344 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
21:53:50.0780 3344 Mup - ok
21:53:50.0813 3344 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
21:53:50.0833 3344 napagent - ok
21:53:50.0857 3344 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:53:50.0867 3344 NativeWifiP - ok
21:53:50.0917 3344 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:53:50.0929 3344 NDIS - ok
21:53:50.0940 3344 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:53:50.0959 3344 NdisCap - ok
21:53:50.0976 3344 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:53:50.0994 3344 NdisTapi - ok
21:53:51.0024 3344 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:53:51.0042 3344 Ndisuio - ok
21:53:51.0079 3344 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:53:51.0097 3344 NdisWan - ok
21:53:51.0125 3344 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:53:51.0143 3344 NDProxy - ok
21:53:51.0148 3344 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:53:51.0168 3344 NetBIOS - ok
21:53:51.0217 3344 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:53:51.0236 3344 NetBT - ok
21:53:51.0268 3344 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
21:53:51.0274 3344 Netlogon - ok
21:53:51.0294 3344 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
21:53:51.0314 3344 Netman - ok
21:53:51.0343 3344 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:53:51.0349 3344 NetMsmqActivator - ok
21:53:51.0351 3344 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:53:51.0357 3344 NetPipeActivator - ok
21:53:51.0379 3344 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
21:53:51.0400 3344 netprofm - ok
21:53:51.0403 3344 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:53:51.0409 3344 NetTcpActivator - ok
21:53:51.0411 3344 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:53:51.0417 3344 NetTcpPortSharing - ok
21:53:51.0423 3344 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
21:53:51.0429 3344 nfrd960 - ok
21:53:51.0464 3344 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:53:51.0472 3344 NlaSvc - ok
21:53:51.0490 3344 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:53:51.0508 3344 Npfs - ok
21:53:51.0517 3344 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
21:53:51.0536 3344 nsi - ok
21:53:51.0538 3344 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:53:51.0556 3344 nsiproxy - ok
21:53:51.0610 3344 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:53:51.0628 3344 Ntfs - ok
21:53:51.0633 3344 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
21:53:51.0651 3344 Null - ok
21:53:51.0694 3344 [ 1F07B814C0BB5AABA703ABFF1F31F2E8 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
21:53:51.0701 3344 NVHDA - ok
21:53:51.0872 3344 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:53:51.0981 3344 nvlddmkm - ok
21:53:52.0000 3344 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:53:52.0006 3344 nvraid - ok
21:53:52.0016 3344 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:53:52.0023 3344 nvstor - ok
21:53:52.0046 3344 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc C:\Windows\system32\nvvsvc.exe
21:53:52.0059 3344 nvsvc - ok
21:53:52.0108 3344 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
21:53:52.0123 3344 nvUpdatusService - ok
21:53:52.0155 3344 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:53:52.0161 3344 nv_agp - ok
21:53:52.0199 3344 [ 9ED2D6751813F5589710A8122CD227B2 ] NWIM C:\Windows\system32\DRIVERS\avmnwim.sys
21:53:52.0207 3344 NWIM - ok
21:53:52.0262 3344 [ 05965ED689DFF62ED50F3CE86B758985 ] nwtsrv C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
21:53:52.0268 3344 nwtsrv - ok
21:53:52.0304 3344 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:53:52.0310 3344 ohci1394 - ok
21:53:52.0325 3344 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:53:52.0333 3344 p2pimsvc - ok
21:53:52.0346 3344 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
21:53:52.0355 3344 p2psvc - ok
21:53:52.0360 3344 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:53:52.0367 3344 Parport - ok
21:53:52.0403 3344 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:53:52.0409 3344 partmgr - ok
21:53:52.0430 3344 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:53:52.0439 3344 PcaSvc - ok
21:53:52.0473 3344 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
21:53:52.0480 3344 pci - ok
21:53:52.0481 3344 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
21:53:52.0487 3344 pciide - ok
21:53:52.0490 3344 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
21:53:52.0497 3344 pcmcia - ok
21:53:52.0507 3344 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
21:53:52.0512 3344 pcw - ok
21:53:52.0524 3344 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:53:52.0546 3344 PEAUTH - ok
21:53:52.0600 3344 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:53:52.0607 3344 PerfHost - ok
21:53:52.0650 3344 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
21:53:52.0676 3344 pla - ok
21:53:52.0712 3344 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:53:52.0720 3344 PlugPlay - ok
21:53:52.0731 3344 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:53:52.0738 3344 PNRPAutoReg - ok
21:53:52.0742 3344 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:53:52.0750 3344 PNRPsvc - ok
21:53:52.0798 3344 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:53:52.0818 3344 PolicyAgent - ok
21:53:52.0834 3344 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
21:53:52.0853 3344 Power - ok
21:53:52.0889 3344 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:53:52.0907 3344 PptpMiniport - ok
21:53:52.0914 3344 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:53:52.0920 3344 Processor - ok
21:53:52.0956 3344 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
21:53:52.0963 3344 ProfSvc - ok
21:53:52.0968 3344 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:53:52.0974 3344 ProtectedStorage - ok
21:53:53.0007 3344 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:53:53.0025 3344 Psched - ok
21:53:53.0047 3344 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
21:53:53.0064 3344 ql2300 - ok
21:53:53.0076 3344 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
21:53:53.0082 3344 ql40xx - ok
21:53:53.0098 3344 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
21:53:53.0108 3344 QWAVE - ok
21:53:53.0115 3344 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:53:53.0123 3344 QWAVEdrv - ok
21:53:53.0135 3344 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:53:53.0153 3344 RasAcd - ok
21:53:53.0169 3344 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:53:53.0187 3344 RasAgileVpn - ok
21:53:53.0197 3344 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
21:53:53.0216 3344 RasAuto - ok
21:53:53.0250 3344 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:53:53.0269 3344 Rasl2tp - ok
21:53:53.0301 3344 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
21:53:53.0321 3344 RasMan - ok
21:53:53.0329 3344 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:53:53.0348 3344 RasPppoe - ok
21:53:53.0354 3344 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:53:53.0372 3344 RasSstp - ok
21:53:53.0414 3344 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:53:53.0433 3344 rdbss - ok
21:53:53.0445 3344 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
21:53:53.0452 3344 rdpbus - ok
21:53:53.0458 3344 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:53:53.0476 3344 RDPCDD - ok
21:53:53.0497 3344 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:53:53.0515 3344 RDPENCDD - ok
21:53:53.0526 3344 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:53:53.0544 3344 RDPREFMP - ok
21:53:53.0570 3344 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:53:53.0577 3344 RDPWD - ok
21:53:53.0613 3344 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:53:53.0620 3344 rdyboost - ok
21:53:53.0639 3344 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:53:53.0657 3344 RemoteAccess - ok
21:53:53.0660 3344 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:53:53.0680 3344 RemoteRegistry - ok
21:53:53.0692 3344 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:53:53.0711 3344 RpcEptMapper - ok
21:53:53.0723 3344 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
21:53:53.0729 3344 RpcLocator - ok
21:53:53.0768 3344 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
21:53:53.0788 3344 RpcSs - ok
21:53:53.0799 3344 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:53:53.0818 3344 rspndr - ok
21:53:53.0848 3344 [ BAEFEE35D27A5440D35092CE10267BEC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
21:53:53.0855 3344 RTL8167 - ok
21:53:53.0859 3344 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
21:53:53.0865 3344 SamSs - ok
21:53:53.0927 3344 [ 5EFBBFCC6ADAC121C8E2FE76641ED329 ] SANDRA C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\WNt500x64\Sandra.sys
21:53:53.0932 3344 SANDRA - ok
21:53:53.0956 3344 [ 73F57D41DB71CA5A4398EB574012D0AE ] SandraAgentSrv C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\RpcAgentSrv.exe
21:53:53.0960 3344 SandraAgentSrv ( UnsignedFile.Multi.Generic ) - warning
21:53:53.0960 3344 SandraAgentSrv - detected UnsignedFile.Multi.Generic (1)
21:53:53.0994 3344 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:53:54.0000 3344 sbp2port - ok
21:53:54.0013 3344 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:53:54.0033 3344 SCardSvr - ok
21:53:54.0052 3344 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:53:54.0070 3344 scfilter - ok
21:53:54.0103 3344 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
21:53:54.0127 3344 Schedule - ok
21:53:54.0139 3344 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
21:53:54.0157 3344 SCPolicySvc - ok
21:53:54.0167 3344 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:53:54.0174 3344 SDRSVC - ok
21:53:54.0185 3344 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:53:54.0203 3344 secdrv - ok
21:53:54.0215 3344 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
21:53:54.0233 3344 seclogon - ok
21:53:54.0242 3344 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
21:53:54.0261 3344 SENS - ok
21:53:54.0264 3344 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:53:54.0271 3344 SensrSvc - ok
21:53:54.0277 3344 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:53:54.0283 3344 Serenum - ok
21:53:54.0295 3344 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:53:54.0302 3344 Serial - ok
21:53:54.0337 3344 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
21:53:54.0343 3344 sermouse - ok
21:53:54.0378 3344 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
21:53:54.0397 3344 SessionEnv - ok
21:53:54.0422 3344 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:53:54.0430 3344 sffdisk - ok
21:53:54.0433 3344 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:53:54.0441 3344 sffp_mmc - ok
21:53:54.0448 3344 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:53:54.0456 3344 sffp_sd - ok
21:53:54.0464 3344 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
21:53:54.0470 3344 sfloppy - ok
21:53:54.0492 3344 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:53:54.0512 3344 SharedAccess - ok
21:53:54.0551 3344 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:53:54.0571 3344 ShellHWDetection - ok
21:53:54.0588 3344 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:53:54.0594 3344 SiSRaid2 - ok
21:53:54.0600 3344 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
21:53:54.0606 3344 SiSRaid4 - ok
21:53:54.0653 3344 [ 8C4F0DCC6A5100D48F9B2F950CDD220F ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:53:54.0659 3344 SkypeUpdate - ok
21:53:54.0674 3344 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:53:54.0693 3344 Smb - ok
21:53:54.0706 3344 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:53:54.0713 3344 SNMPTRAP - ok
21:53:54.0718 3344 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
21:53:54.0724 3344 spldr - ok
21:53:54.0761 3344 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
21:53:54.0770 3344 Spooler - ok
21:53:54.0842 3344 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
21:53:54.0879 3344 sppsvc - ok
21:53:54.0892 3344 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:53:54.0910 3344 sppuinotify - ok
21:53:54.0941 3344 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
21:53:54.0949 3344 srv - ok
21:53:54.0983 3344 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:53:54.0990 3344 srv2 - ok
21:53:54.0996 3344 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:53:55.0002 3344 srvnet - ok
21:53:55.0012 3344 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:53:55.0032 3344 SSDPSRV - ok
21:53:55.0042 3344 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:53:55.0061 3344 SstpSvc - ok
21:53:55.0077 3344 Steam Client Service - ok
21:53:55.0155 3344 [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:53:55.0164 3344 Stereo Service - ok
21:53:55.0175 3344 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
21:53:55.0180 3344 stexstor - ok
21:53:55.0219 3344 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
21:53:55.0231 3344 stisvc - ok
21:53:55.0259 3344 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
21:53:55.0264 3344 swenum - ok
21:53:55.0276 3344 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
21:53:55.0298 3344 swprv - ok
21:53:55.0330 3344 SynasUSB - ok
21:53:55.0359 3344 [ BCB6AA197267D3506BE2535342FC40E0 ] synusb64 C:\Windows\system32\DRIVERS\synusb64.sys
21:53:55.0365 3344 synusb64 - ok
21:53:55.0417 3344 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
21:53:55.0435 3344 SysMain - ok
21:53:55.0454 3344 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:53:55.0464 3344 TabletInputService - ok
21:53:55.0485 3344 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:53:55.0504 3344 TapiSrv - ok
21:53:55.0510 3344 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
21:53:55.0529 3344 TBS - ok
21:53:55.0580 3344 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:53:55.0600 3344 Tcpip - ok
21:53:55.0655 3344 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:53:55.0675 3344 TCPIP6 - ok
21:53:55.0703 3344 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:53:55.0709 3344 tcpipreg - ok
21:53:55.0719 3344 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:53:55.0725 3344 TDPIPE - ok
21:53:55.0752 3344 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:53:55.0758 3344 TDTCP - ok
21:53:55.0792 3344 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:53:55.0810 3344 tdx - ok
21:53:55.0869 3344 [ 33966A658FF37E0C65D46E59F37E2380 ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
21:53:55.0898 3344 TeamViewer7 - ok
21:53:55.0906 3344 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
21:53:55.0912 3344 TermDD - ok
21:53:55.0950 3344 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
21:53:55.0972 3344 TermService - ok
21:53:55.0981 3344 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
21:53:55.0990 3344 Themes - ok
21:53:56.0007 3344 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
21:53:56.0026 3344 THREADORDER - ok
21:53:56.0063 3344 [ DE0D1F435F1DE2ED0102152E9BF70FA6 ] tmbulk C:\Windows\system32\Drivers\tmbulk.sys
21:53:56.0069 3344 tmbulk - ok
21:53:56.0105 3344 [ 2867DEC7A25DCF98CA65BBDCEDA0A78E ] TmBusEn C:\Windows\system32\DRIVERS\TmBusEn.sys
21:53:56.0107 3344 TmBusEn ( UnsignedFile.Multi.Generic ) - warning
21:53:56.0107 3344 TmBusEn - detected UnsignedFile.Multi.Generic (1)
21:53:56.0110 3344 [ C0C94A84AF75661E951AEAC04F044351 ] TmFilter C:\Windows\system32\DRIVERS\TmFilter.sys
21:53:56.0112 3344 TmFilter ( UnsignedFile.Multi.Generic ) - warning
21:53:56.0112 3344 TmFilter - detected UnsignedFile.Multi.Generic (1)
21:53:56.0141 3344 [ 59F698C8B9D9BBB84F3499A92C4B53E7 ] TmHid C:\Windows\system32\DRIVERS\TmHid.sys
21:53:56.0143 3344 TmHid ( UnsignedFile.Multi.Generic ) - warning
21:53:56.0143 3344 TmHid - detected UnsignedFile.Multi.Generic (1)
21:53:56.0155 3344 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
21:53:56.0174 3344 TrkWks - ok
21:53:56.0196 3344 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:53:56.0215 3344 TrustedInstaller - ok
21:53:56.0248 3344 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:53:56.0266 3344 tssecsrv - ok
21:53:56.0278 3344 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:53:56.0284 3344 TsUsbFlt - ok
21:53:56.0320 3344 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:53:56.0338 3344 tunnel - ok
21:53:56.0347 3344 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
21:53:56.0353 3344 uagp35 - ok
21:53:56.0380 3344 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:53:56.0399 3344 udfs - ok
21:53:56.0409 3344 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:53:56.0416 3344 UI0Detect - ok
21:53:56.0424 3344 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:53:56.0429 3344 uliagpkx - ok
21:53:56.0453 3344 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
21:53:56.0459 3344 umbus - ok
21:53:56.0477 3344 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
21:53:56.0483 3344 UmPass - ok
21:53:56.0492 3344 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
21:53:56.0512 3344 upnphost - ok
21:53:56.0536 3344 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
21:53:56.0544 3344 usbaudio - ok
21:53:56.0562 3344 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:53:56.0568 3344 usbccgp - ok
21:53:56.0599 3344 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:53:56.0607 3344 usbcir - ok
21:53:56.0622 3344 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:53:56.0628 3344 usbehci - ok
21:53:56.0636 3344 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:53:56.0643 3344 usbhub - ok
21:53:56.0703 3344 [ F9B3054339A71F16430F6585EBC8BE96 ] USBMULCD C:\Windows\system32\drivers\CM10664.sys
21:53:56.0716 3344 USBMULCD - ok
21:53:56.0721 3344 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
21:53:56.0727 3344 usbohci - ok
21:53:56.0729 3344 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:53:56.0736 3344 usbprint - ok
21:53:56.0744 3344 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:53:56.0750 3344 USBSTOR - ok
21:53:56.0752 3344 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
21:53:56.0757 3344 usbuhci - ok
21:53:56.0764 3344 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
21:53:56.0782 3344 UxSms - ok
21:53:56.0793 3344 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
21:53:56.0799 3344 VaultSvc - ok
21:53:56.0841 3344 [ 0D01EB55906ACEE95128381F032AF24C ] vdrive C:\Windows\system32\DRIVERS\vdrive.sys
21:53:56.0847 3344 vdrive - ok
21:53:56.0862 3344 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:53:56.0868 3344 vdrvroot - ok
21:53:56.0891 3344 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
21:53:56.0912 3344 vds - ok
21:53:56.0924 3344 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:53:56.0931 3344 vga - ok
21:53:56.0941 3344 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
21:53:56.0959 3344 VgaSave - ok
21:53:56.0974 3344 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:53:56.0981 3344 vhdmp - ok
21:53:56.0989 3344 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
21:53:56.0994 3344 viaide - ok
21:53:57.0022 3344 [ 3B59BB6D10CF969DBE4DB93D9EAD7FB4 ] VKbms C:\Windows\system32\DRIVERS\VKbms.sys
21:53:57.0028 3344 VKbms - ok
21:53:57.0036 3344 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:53:57.0042 3344 volmgr - ok
21:53:57.0077 3344 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:53:57.0085 3344 volmgrx - ok
21:53:57.0096 3344 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:53:57.0104 3344 volsnap - ok
21:53:57.0140 3344 [ 1065A957523ED51AAFFF737CC63010A6 ] Vsdatant C:\Windows\system32\DRIVERS\vsdatant.sys
21:53:57.0150 3344 Vsdatant - ok
21:53:57.0196 3344 vsmon - ok
21:53:57.0213 3344 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
21:53:57.0220 3344 vsmraid - ok
21:53:57.0272 3344 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
21:53:57.0298 3344 VSS - ok
21:53:57.0305 3344 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
21:53:57.0312 3344 vwifibus - ok
21:53:57.0323 3344 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
21:53:57.0344 3344 W32Time - ok
21:53:57.0351 3344 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
21:53:57.0357 3344 WacomPen - ok
21:53:57.0384 3344 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:53:57.0402 3344 WANARP - ok
21:53:57.0404 3344 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:53:57.0422 3344 Wanarpv6 - ok
21:53:57.0454 3344 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
21:53:57.0469 3344 wbengine - ok
21:53:57.0480 3344 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:53:57.0489 3344 WbioSrvc - ok
21:53:57.0501 3344 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:53:57.0512 3344 wcncsvc - ok
21:53:57.0517 3344 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:53:57.0523 3344 WcsPlugInService - ok
21:53:57.0529 3344 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
21:53:57.0535 3344 Wd - ok
21:53:57.0571 3344 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:53:57.0583 3344 Wdf01000 - ok
21:53:57.0589 3344 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:53:57.0599 3344 WdiServiceHost - ok
21:53:57.0601 3344 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:53:57.0610 3344 WdiSystemHost - ok
21:53:57.0648 3344 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
21:53:57.0659 3344 WebClient - ok
21:53:57.0672 3344 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:53:57.0692 3344 Wecsvc - ok
21:53:57.0701 3344 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:53:57.0721 3344 wercplsupport - ok
21:53:57.0732 3344 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
21:53:57.0751 3344 WerSvc - ok
21:53:57.0759 3344 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:53:57.0777 3344 WfpLwf - ok
21:53:57.0789 3344 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:53:57.0794 3344 WIMMount - ok
21:53:57.0807 3344 WinDefend - ok
21:53:57.0810 3344 WinHttpAutoProxySvc - ok
21:53:57.0839 3344 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:53:57.0858 3344 Winmgmt - ok
21:53:57.0889 3344 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
21:53:57.0918 3344 WinRM - ok
21:53:57.0937 3344 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
21:53:57.0951 3344 Wlansvc - ok
21:53:58.0016 3344 [ 98F138897EF4246381D197CB81846D62 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:53:58.0039 3344 wlidsvc - ok
21:53:58.0081 3344 [ 680A7846370000D20D7E74917D5B7936 ] WmBEnum C:\Windows\system32\drivers\WmBEnum.sys
21:53:58.0087 3344 WmBEnum - ok
21:53:58.0115 3344 [ 14C35BA8189C6F65D839163AA285E954 ] WmFilter C:\Windows\system32\drivers\WmFilter.sys
21:53:58.0121 3344 WmFilter - ok
21:53:58.0146 3344 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:53:58.0152 3344 WmiAcpi - ok
21:53:58.0161 3344 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:53:58.0169 3344 wmiApSrv - ok
21:53:58.0172 3344 WMPNetworkSvc - ok
21:53:58.0182 3344 [ 8488DD91A3EE54A8E29F02AD7BB8201E ] WmVirHid C:\Windows\system32\drivers\WmVirHid.sys
21:53:58.0188 3344 WmVirHid - ok
21:53:58.0197 3344 [ 14802B3A30AA849C97CB968CCC813BF3 ] WmXlCore C:\Windows\system32\drivers\WmXlCore.sys
21:53:58.0203 3344 WmXlCore - ok
21:53:58.0208 3344 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:53:58.0215 3344 WPCSvc - ok
21:53:58.0245 3344 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:53:58.0253 3344 WPDBusEnum - ok
21:53:58.0262 3344 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:53:58.0280 3344 ws2ifsl - ok
21:53:58.0290 3344 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
21:53:58.0299 3344 wscsvc - ok
21:53:58.0301 3344 WSearch - ok
21:53:58.0356 3344 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
21:53:58.0381 3344 wuauserv - ok
21:53:58.0411 3344 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:53:58.0417 3344 WudfPf - ok
21:53:58.0444 3344 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:53:58.0451 3344 WUDFRd - ok
21:53:58.0487 3344 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:53:58.0493 3344 wudfsvc - ok
21:53:58.0500 3344 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
21:53:58.0510 3344 WwanSvc - ok
21:53:58.0589 3344 [ 74983ADDCA2D9618512C088D856D6615 ] {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054} C:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl
21:53:58.0596 3344 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054} - ok
21:53:58.0596 3344 ================ Scan global ===============================
21:53:58.0608 3344 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
21:53:58.0627 3344 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
21:53:58.0631 3344 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
21:53:58.0650 3344 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
21:53:58.0671 3344 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
21:53:58.0673 3344 [Global] - ok
21:53:58.0673 3344 ================ Scan MBR ==================================
21:53:58.0682 3344 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:53:58.0855 3344 \Device\Harddisk0\DR0 - ok
21:53:58.0858 3344 [ DDAE9D649DB12F6AFF24483F2C298989 ] \Device\Harddisk1\DR1
21:53:58.0975 3344 \Device\Harddisk1\DR1 - ok
21:53:58.0975 3344 ================ Scan VBR ==================================
21:53:58.0976 3344 [ 9DE1F4B34475B25BE14A20EFCFB54BD3 ] \Device\Harddisk0\DR0\Partition1
21:53:58.0977 3344 \Device\Harddisk0\DR0\Partition1 - ok
21:53:58.0987 3344 [ 3A976F8F69D373C07397C94F2C1B5AA4 ] \Device\Harddisk0\DR0\Partition2
21:53:58.0988 3344 \Device\Harddisk0\DR0\Partition2 - ok
21:53:59.0008 3344 [ C5EC936F0AA28FDC887E0D6019E57C2E ] \Device\Harddisk0\DR0\Partition3
21:53:59.0009 3344 \Device\Harddisk0\DR0\Partition3 - ok
21:53:59.0011 3344 [ 8DE7640FC04EB8FBB9CE5C15FB381415 ] \Device\Harddisk1\DR1\Partition1
21:53:59.0012 3344 \Device\Harddisk1\DR1\Partition1 - ok
21:53:59.0012 3344 ============================================================
21:53:59.0012 3344 Scan finished
21:53:59.0012 3344 ============================================================
21:53:59.0016 2504 Detected object count: 9
21:53:59.0016 2504 Actual detected object count: 9
21:54:03.0070 2504 acedrv07 ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0070 2504 acedrv07 ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0071 2504 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0071 2504 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0071 2504 Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0071 2504 Creative ALchemy AL6 Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0072 2504 Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0072 2504 Creative Audio Engine Licensing Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0072 2504 CTAudSvcService ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0072 2504 CTAudSvcService ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0073 2504 SandraAgentSrv ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0073 2504 SandraAgentSrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0073 2504 TmBusEn ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0073 2504 TmBusEn ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0074 2504 TmFilter ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0074 2504 TmFilter ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:03.0074 2504 TmHid ( UnsignedFile.Multi.Generic ) - skipped by user
21:54:03.0075 2504 TmHid ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:54:06.0080 5952 Deinitialize success

markusg · 18.02.2013, 22:05

Hi
inet Verbindung herstellen bitte.
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

horrn · 19.02.2013, 22:32

Hallo,
diesmal weiß ich nicht ob Alles geklappt hat.
Ich hatte das Lan-Kabel angeschlossen, aber keinen Zugang zum Internet. Weiß noch nicht warum, oder ob das überhaupt wichtig ist.
Dann habe ich den Avira-Echtzeitscanner ausgeschaltet, aber trotzdem hat Avira die Registry geschützt, als Combofix lief. Ich hab Combofix zu Ende durchlaufen lassen. Es hat gemeldet, dass es ein paar Dateien und ein Verzeichnis löscht, ist dann aber ewig im Schlussbild hängengeblieben, bis ich aufgegeben hab.
Dann habe ich Avira deinstalliert, das System neu gestartet und Combofix nochmal gestrartet. Diesmal wollte Combofix nichts mehr löschen und es kam nach einer Wartezeit diesmal auch der Log-file, den ich wieder anonymisiert hab:

Combofix Logfile:

Code:

ATTFilter

ComboFix 13-02-18.02 - Mustermann 19.02.2013  21:53:34.2.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.12279.10074 [GMT 1:00]
ausgeführt von:: c:\users\Mustermann\Desktop\ComboFix.exe
AV: ZoneAlarm Free Firewall Antivirus *Disabled/Updated* {DE038A5B-9EDD-18A9-2361-FF7D98D43730}
FW: ZoneAlarm Free Firewall Firewall *Enabled* {E6380B7E-D4B2-19F1-083E-56486607704B}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ZoneAlarm Free Firewall Anti-Spyware *Disabled/Outdated* {65626BBF-B8E7-1727-19D1-C40FE3537D8D}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Vorheriger Suchlauf -------
.
C:\Install.exe
c:\windows\IsUn0407.exe
c:\windows\system\Pncrt.dll
c:\windows\SysWow64\URTTemp
c:\windows\SysWow64\URTTemp\regtlib.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-01-19 bis 2013-02-19  ))))))))))))))))))))))))))))))
.
.
2013-02-19 21:02 . 2013-02-19 21:02	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-02-19 21:02 . 2013-02-19 21:02	--------	d-----w-	c:\users\Jan\AppData\Local\temp
2013-02-19 21:02 . 2013-02-19 21:02	--------	d-----w-	c:\users\Gum der Spieler\AppData\Local\temp
2013-02-19 21:02 . 2013-02-19 21:02	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2013-02-19 21:02 . 2013-02-19 21:02	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-02-19 20:58 . 2013-02-19 20:58	69000	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{A3769F5A-3242-4379-B5A8-C8AD4BFBA4F1}\offreg.dll
2013-02-18 20:20 . 2013-02-18 20:20	--------	d-----w-	C:\found.000
2013-02-17 20:26 . 2013-02-17 20:26	--------	d-----w-	C:\_OTL
2013-02-16 16:49 . 2013-02-17 04:49	--------	d---a-w-	C:\Kaspersky Rescue Disk 10.0
2013-02-15 21:13 . 2013-02-15 21:13	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2013-02-15 21:13 . 2013-02-15 21:13	--------	d-----r-	c:\program files (x86)\Skype
2013-02-15 19:36 . 2013-02-16 11:32	--------	d-----w-	c:\users\Gum der Spieler\AppData\Roaming\Bioshock
2013-02-15 16:36 . 2013-02-16 11:22	--------	d-----w-	c:\users\Gum der Spieler\AppData\Roaming\Skype
2013-02-15 14:23 . 2013-02-15 14:23	--------	d-----w-	c:\users\Gum der Spieler\AppData\Roaming\Apple Computer
2013-02-12 21:32 . 2013-01-05 05:53	5553512	----a-w-	c:\windows\system32\ntoskrnl.exe
2013-02-12 21:32 . 2013-01-05 05:00	3967848	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2013-02-12 21:32 . 2013-01-05 05:00	3913064	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2013-02-12 21:32 . 2013-01-04 03:26	3153408	----a-w-	c:\windows\system32\win32k.sys
2013-02-12 21:32 . 2012-12-20 13:55	12295168	----a-w-	c:\windows\system32\ieframe.dll
2013-02-12 21:32 . 2012-12-20 13:56	9058304	----a-w-	c:\windows\system32\mshtml.dll
2013-02-12 21:32 . 2012-12-20 13:59	1188864	----a-w-	c:\windows\system32\wininet.dll
2013-02-12 21:32 . 2012-12-20 13:55	2458112	----a-w-	c:\windows\system32\iertutil.dll
2013-02-12 21:32 . 2012-12-20 12:53	981504	----a-w-	c:\windows\SysWow64\wininet.dll
2013-01-29 20:49 . 2013-01-29 20:49	--------	d-----w-	c:\users\Mustermann\AppData\Local\Apple Computer
2013-01-29 20:49 . 2013-01-29 20:50	--------	d-----w-	c:\users\Mustermann\AppData\Roaming\Apple Computer
2013-01-29 20:49 . 2012-08-21 12:01	33240	----a-w-	c:\windows\system32\drivers\GEARAspiWDM.sys
2013-01-29 20:48 . 2013-01-29 20:49	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-01-29 20:48 . 2013-01-29 20:49	--------	d-----w-	c:\program files\iTunes
2013-01-29 20:48 . 2013-01-29 20:49	--------	d-----w-	c:\program files (x86)\iTunes
2013-01-29 20:48 . 2013-01-29 20:48	--------	d-----w-	c:\programdata\Apple Computer
2013-01-29 20:48 . 2013-01-29 20:48	--------	d-----w-	c:\program files\iPod
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\users\Mustermann\AppData\Local\Apple
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\program files (x86)\Apple Software Update
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\program files\Common Files\Apple
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\program files\Bonjour
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\program files (x86)\Bonjour
2013-01-29 20:47 . 2013-01-29 20:48	--------	d-----w-	c:\program files (x86)\Common Files\Apple
2013-01-29 20:47 . 2013-01-29 20:47	--------	d-----w-	c:\programdata\Apple
2013-01-27 16:10 . 2013-01-27 16:10	--------	d-----w-	c:\program files (x86)\Kalypso
2013-01-26 23:11 . 2013-01-26 23:11	--------	d-----w-	c:\users\Mustermann\Daedalic
2013-01-25 23:12 . 2013-01-25 23:12	--------	d-----w-	c:\program files (x86)\Thrustmaster
2013-01-25 23:12 . 2011-01-26 15:04	30208	----a-w-	c:\windows\SysWow64\drivers\TmBusEn.sys
2013-01-25 23:12 . 2011-01-26 15:04	24704	----a-w-	c:\windows\SysWow64\drivers\TmHid.sys
2013-01-25 23:12 . 2011-01-26 15:04	55296	----a-w-	c:\windows\SysWow64\TmClass.dll
2013-01-25 23:12 . 2011-01-26 15:04	24576	----a-w-	c:\windows\SysWow64\drivers\TmFilter.sys
2013-01-25 23:00 . 2013-01-25 23:00	--------	d-----w-	c:\program files\Thrustmaster
2013-01-23 20:35 . 2013-01-23 20:35	--------	d-----w-	c:\users\Mustermann\AppData\Roaming\Broken Rules
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-12 22:39 . 2011-05-25 10:27	70004024	----a-w-	c:\windows\system32\MRT.exe
2013-02-07 23:10 . 2012-04-03 20:45	697712	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-07 23:10 . 2011-05-22 22:51	74096	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-08 21:10 . 2013-01-08 21:10	750488	----a-w-	c:\windows\system32\npdeployJava1.dll
2013-01-08 21:10 . 2013-01-08 21:10	660368	----a-w-	c:\windows\system32\deployJava1.dll
2013-01-08 21:10 . 2013-01-08 21:10	263560	----a-w-	c:\windows\system32\javaws.exe
2013-01-08 21:10 . 2013-01-08 21:10	188808	----a-w-	c:\windows\system32\javaw.exe
2013-01-08 21:10 . 2013-01-08 21:10	188808	----a-w-	c:\windows\system32\java.exe
2013-01-04 04:43 . 2013-02-12 21:31	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2012-12-16 17:11 . 2012-12-21 00:49	46080	----a-w-	c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-21 00:49	367616	----a-w-	c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-21 00:49	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-21 00:49	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2012-12-13 22:05 . 2012-05-12 23:17	466456	----a-w-	c:\windows\system32\wrap_oal.dll
2012-12-13 22:05 . 2012-05-12 23:17	444952	----a-w-	c:\windows\SysWow64\wrap_oal.dll
2012-12-13 22:05 . 2012-05-12 23:17	122904	----a-w-	c:\windows\system32\OpenAL32.dll
2012-12-13 22:05 . 2012-05-12 23:17	109080	----a-w-	c:\windows\SysWow64\OpenAL32.dll
2012-12-13 10:49 . 2011-05-07 16:51	450136	----a-w-	c:\windows\system32\drivers\vsdatant.sys
2012-12-07 13:20 . 2013-01-09 01:49	441856	----a-w-	c:\windows\system32\Wpc.dll
2012-12-07 13:15 . 2013-01-09 01:49	2746368	----a-w-	c:\windows\system32\gameux.dll
2012-12-07 12:26 . 2013-01-09 01:49	308736	----a-w-	c:\windows\SysWow64\Wpc.dll
2012-12-07 12:20 . 2013-01-09 01:49	2576384	----a-w-	c:\windows\SysWow64\gameux.dll
2012-12-07 11:20 . 2013-01-09 01:49	30720	----a-w-	c:\windows\system32\usk.rs
2012-12-07 11:20 . 2013-01-09 01:49	43520	----a-w-	c:\windows\system32\csrr.rs
2012-12-07 11:20 . 2013-01-09 01:49	23552	----a-w-	c:\windows\system32\oflc.rs
2012-12-07 11:20 . 2013-01-09 01:49	45568	----a-w-	c:\windows\system32\oflc-nz.rs
2012-12-07 11:20 . 2013-01-09 01:49	44544	----a-w-	c:\windows\system32\pegibbfc.rs
2012-12-07 11:20 . 2013-01-09 01:49	20480	----a-w-	c:\windows\system32\pegi-fi.rs
2012-12-07 11:20 . 2013-01-09 01:49	20480	----a-w-	c:\windows\system32\pegi-pt.rs
2012-12-07 11:19 . 2013-01-09 01:49	20480	----a-w-	c:\windows\system32\pegi.rs
2012-12-07 11:19 . 2013-01-09 01:49	46592	----a-w-	c:\windows\system32\fpb.rs
2012-12-07 11:19 . 2013-01-09 01:49	40960	----a-w-	c:\windows\system32\cob-au.rs
2012-12-07 11:19 . 2013-01-09 01:49	21504	----a-w-	c:\windows\system32\grb.rs
2012-12-07 11:19 . 2013-01-09 01:49	15360	----a-w-	c:\windows\system32\djctq.rs
2012-12-07 11:19 . 2013-01-09 01:49	55296	----a-w-	c:\windows\system32\cero.rs
2012-12-07 11:19 . 2013-01-09 01:49	51712	----a-w-	c:\windows\system32\esrb.rs
2012-12-07 10:46 . 2013-01-09 01:49	43520	----a-w-	c:\windows\SysWow64\csrr.rs
2012-12-07 10:46 . 2013-01-09 01:49	30720	----a-w-	c:\windows\SysWow64\usk.rs
2012-12-07 10:46 . 2013-01-09 01:49	45568	----a-w-	c:\windows\SysWow64\oflc-nz.rs
2012-12-07 10:46 . 2013-01-09 01:49	44544	----a-w-	c:\windows\SysWow64\pegibbfc.rs
2012-12-07 10:46 . 2013-01-09 01:49	20480	----a-w-	c:\windows\SysWow64\pegi-pt.rs
2012-12-07 10:46 . 2013-01-09 01:49	23552	----a-w-	c:\windows\SysWow64\oflc.rs
2012-12-07 10:46 . 2013-01-09 01:49	20480	----a-w-	c:\windows\SysWow64\pegi-fi.rs
2012-12-07 10:46 . 2013-01-09 01:49	46592	----a-w-	c:\windows\SysWow64\fpb.rs
2012-12-07 10:46 . 2013-01-09 01:49	20480	----a-w-	c:\windows\SysWow64\pegi.rs
2012-12-07 10:46 . 2013-01-09 01:49	21504	----a-w-	c:\windows\SysWow64\grb.rs
2012-12-07 10:46 . 2013-01-09 01:49	40960	----a-w-	c:\windows\SysWow64\cob-au.rs
2012-12-07 10:46 . 2013-01-09 01:49	15360	----a-w-	c:\windows\SysWow64\djctq.rs
2012-12-07 10:46 . 2013-01-09 01:49	55296	----a-w-	c:\windows\SysWow64\cero.rs
2012-12-07 10:46 . 2013-01-09 01:49	51712	----a-w-	c:\windows\SysWow64\esrb.rs
2012-11-30 05:45 . 2013-01-09 01:49	362496	----a-w-	c:\windows\system32\wow64win.dll
2012-11-30 05:45 . 2013-01-09 01:49	243200	----a-w-	c:\windows\system32\wow64.dll
2012-11-30 05:45 . 2013-01-09 01:49	13312	----a-w-	c:\windows\system32\wow64cpu.dll
2012-11-30 05:43 . 2013-01-09 01:49	16384	----a-w-	c:\windows\system32\ntvdm64.dll
2012-11-30 05:41 . 2013-01-09 01:49	424448	----a-w-	c:\windows\system32\KernelBase.dll
2012-11-30 05:41 . 2013-01-09 01:49	1161216	----a-w-	c:\windows\system32\kernel32.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	6144	---ha-w-	c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4608	---ha-w-	c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4608	---ha-w-	c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	5120	---ha-w-	c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-11-30 05:38 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-11-30 04:53 . 2013-01-09 01:49	274944	----a-w-	c:\windows\SysWow64\KernelBase.dll
2012-11-30 04:45 . 2013-01-09 01:49	4608	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-11-30 04:45 . 2013-01-09 01:49	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	129272	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	129272	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	129272	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2011-08-19 21:13	505344	----a-w-	c:\program files\Classic Shell\ClassicExplorer32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DVDFab VDrive"="c:\program files\DVDFab Virtual Drive\vdrive.exe" [2011-07-06 309120]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2011-08-12 3820032]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2013-02-15 1597864]
"PureSync"="c:\program files (x86)\PureSync\PureSyncTray.exe" [2012-08-22 841824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Lycosa"="c:\program files (x86)\Razer\Razer Lycosa\razerhid.exe" [2011-03-21 233984]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\wlangui.exe" [2010-10-22 2105344]
"VolPanel"="c:\program files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-07-07 241789]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2012-05-12 1310720]
"DeathAdder"="c:\program files (x86)\Razer\DeathAdder\razerhid.exe" [2012-01-14 248832]
"ZoneAlarm"="c:\program files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [2013-01-02 73984]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
.
c:\users\Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Mustermann\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-1-20 28539272]
opera.exe - Verknüpfung.lnk - c:\program files (x86)\Opera\opera.exe [2011-5-22 879456]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
aquasuite.lnk - c:\program files (x86)\Aqua Computer\aquasuite\aquasuite.exe [2011-4-12 235008]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 CLKMSVC10_38F51D56;CyberLink Product - 2012/09/29 22:44;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-04-20 241648]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 ALSysIO;ALSysIO;c:\users\MICHAE~1\AppData\Local\Temp\ALSysIO64.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2010-10-22 14120]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-05-12 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-05-12 79360]
R3 CYUSB;Cypress Generic USB Driver;c:\windows\system32\Drivers\CYUSB.sys [2009-08-10 47104]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2010-10-22 460800]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\RpcAgentSrv.exe [2009-07-13 93848]
R3 SynasUSB;SynasUSB;sysWOW64\drivers\SynUSB64.sys [x]
R3 synusb64;eLicenser;c:\windows\system32\DRIVERS\synusb64.sys [2010-09-17 30352]
R3 tmbulk;Thrustmaster HOTAS WARTHOG Bulk (tmbulk);c:\windows\system32\Drivers\tmbulk.sys [2011-01-12 77312]
R3 TmBusEn;Thrustmaster Bus Enumerator;c:\windows\system32\DRIVERS\TmBusEn.sys [2011-01-26 30208]
R3 TmFilter;Thrustmaster HID Filter Driver;c:\windows\system32\DRIVERS\TmFilter.sys [2011-01-26 24576]
R3 TmHid;Thrustmaster Virtual Keyboard (root);c:\windows\system32\DRIVERS\TmHid.sys [2011-01-26 24704]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S1 dvdfabio;dvdfabio;c:\windows\system32\drivers\dvdfabio.sys [2011-07-06 13184]
S1 Ext2Fsd;Linux ext2 file system driver; [x]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2012-01-09 11864]
S2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};Power Control [2011/06/08 22:17];c:\program files (x86)\CyberLink\PowerDVD8\000.fcl [2010-01-12 21:08 146928]
S2 avmike;AVM FRITZ!Fernzugang IKE Service;c:\program files\FRITZ!Fernzugang\avmike.exe [2012-02-02 336248]
S2 certsrv;AVM FRITZ!Fernzugang Cert Service;c:\program files\FRITZ!Fernzugang\certsrv.exe [2011-10-31 143736]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712]
S2 ISWKL;ZoneAlarm LTD Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [2012-11-22 33712]
S2 IswSvc;ZoneAlarm LTD Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\IswSvc.exe [2012-11-22 828072]
S2 nwtsrv;AVM FRITZ!Fernzugang Client;c:\program files\FRITZ!Fernzugang\nwtsrv.exe [2011-10-31 189304]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]
S3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2010-04-19 12032]
S3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys [2012-01-27 66728]
S3 Lycosa;Lycosa Keyboard;c:\windows\system32\drivers\Lycosa.sys [2010-09-08 28928]
S3 MCfilt;MCfilt;c:\windows\system32\drivers\MCfilt64.sys [2009-09-17 25600]
S3 NWIM;AVM VPN Miniport;c:\windows\system32\DRIVERS\avmnwim.sys [2011-07-05 412024]
S3 RTL8167;Realtek 8167 NT-Treiber;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM10664.sys [2009-10-20 1307648]
S3 vdrive;vdrive;c:\windows\system32\DRIVERS\vdrive.sys [2011-07-06 45952]
S3 VKbms;Virtual HID Minidriver;c:\windows\system32\DRIVERS\VKbms.sys [2010-09-30 13312]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
*Deregistered* - CLKMDRV10_38F51D56
.
Inhalt des "geplante Tasks" Ordners
.
2013-02-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 23:10]
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-05 19:30]
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-05 19:30]
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-319643608-851588273-602133020-1000Core.job
- c:\users\Mustermann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-11 09:06]
.
2013-01-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-319643608-851588273-602133020-1000UA.job
- c:\users\Mustermann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-11 09:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	162552	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	162552	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	162552	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32	162552	----a-w-	c:\users\Mustermann\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-12-17 18:50	755816	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-12-17 18:50	755816	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-12-17 18:50	755816	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-12-17 18:50	755816	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2011-08-19 21:14	629248	----a-w-	c:\program files\Classic Shell\ClassicExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 190536]
"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 17920]
"Cm106Sound"="c:\windows\Syswow64\cm106.dll" [2009-10-20 8151040]
"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2012-11-22 1127592]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=66cbbc75000000000000001a4f9d3c68
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\Mustermann\AppData\Roaming\Mozilla\Firefox\Profiles\kmujrw3i.default\
FF - prefs.js: browser.search.selectedEngine - Search By ZoneAlarm
FF - prefs.js: browser.startup.homepage - hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=66cbbc75000000000000001a4f9d3c68
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?barid={CB2AE4D1-3365-11E2-8D6F-001A4F9D3C68}&src=2&crg=3.1010006.10028&q=
FF - ExtSQL: 2013-01-25 22:27; {EEE6C361-6118-11DC-9C72-001320C79847}; c:\users\Mustermann\AppData\Roaming\Mozilla\Firefox\Profiles\kmujrw3i.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF - user.js: extensions.zonealarm.autoRvrt - false
FF - user.js: extensions.zonealarm_i.hmpg - true
FF - user.js: extensions.zonealarm.hmpgUrl - hxxp://search.zonealarm.com/?Source=Homepage&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=66cbbc75000000000000001a4f9d3c68
FF - user.js: extensions.zonealarm.dfltSrch - true
FF - user.js: extensions.zonealarm.srchPrvdr - Search By ZoneAlarm
FF - user.js: extensions.zonealarm.keyWordUrl - hxxp://search.zonealarm.com/search?Source=Browser&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=66cbbc75000000000000001a4f9d3c68&q={searchTerms}
FF - user.js: extensions.zonealarm_i.dnsErr - true
FF - user.js: extensions.zonealarm_i.newTab - true
FF - user.js: extensions.zonealarm.newTabUrl - hxxp://search.zonealarm.com/?Source=Newtab&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan=de&utid=66cbbc75000000000000001a4f9d3c68
FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?Source=ToolBar&oemCode=ZLN22161083410689-1001&toolbarId=base&affiliateId=1025&Lan={dfltLng}&utid=66cbbc75000000000000001a4f9d3c68&q=
FF - user.js: extensions.zonealarm.id - 66cbbc75000000000000001a4f9d3c68
FF - user.js: extensions.zonealarm.instlDay - 15544
FF - user.js: extensions.zonealarm.vrsn - 1.6.4.5
FF - user.js: extensions.zonealarm.vrsni - 1.6.4.5
FF - user.js: extensions.zonealarm_i.vrsnTs - 1.6.4.523:44
FF - user.js: extensions.zonealarm.prtnrId - checkpoint
FF - user.js: extensions.zonealarm.prdct - zonealarm
FF - user.js: extensions.zonealarm.aflt - 1025
FF - user.js: extensions.zonealarm_i.smplGrp - none
FF - user.js: extensions.zonealarm.tlbrId - base
FF - user.js: extensions.zonealarm.instlRef - ZLN22161083410689-1001
FF - user.js: extensions.zonealarm.dfltLng - de
FF - user.js: extensions.zonealarm.excTlbr - false
FF - user.js: extensions.zonealarm.admin - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - (no file)
AddRemove-Bridge Commander - c:\windows\IsUn0407.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD8\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-319643608-851588273-602133020-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:31,d8,c3,89,bd,21,ea,7e,29,2e,c3,65,7c,ba,33,00,3a,17,45,51,a4,96,fe,
   06,73,df,5b,cd,40,94,71,d3,7c,50,e0,cc,5e,6d,7a,94,87,9d,8a,2b,f6,4b,c9,8e,\
"??"=hex:cf,55,c7,95,2b,14,4d,f8,66,7b,0c,1b,19,52,fe,22
.
[HKEY_USERS\S-1-5-21-319643608-851588273-602133020-1000\Software\SecuROM\License information*]
"datasecu"=hex:b6,44,2b,8d,d1,c7,9b,ea,b1,4a,7a,df,92,92,4d,8d,f0,d9,cc,b2,60,
   34,71,bf,30,90,73,1e,2a,52,20,25,7a,a2,f0,1b,2b,d6,ec,88,1d,ac,d3,f7,41,c0,\
"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-02-19  22:05:33
ComboFix-quarantined-files.txt  2013-02-19 21:05
.
Vor Suchlauf: 18 Verzeichnis(se), 400.793.870.336 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 400.409.337.856 Bytes frei
.
- - End Of File - - D996018DE29C160D21FB13A442B7557D

--- --- ---

markusg · 19.02.2013, 23:46

Avira kannst du reinstalieren, läuft das inet wieder? wenn nein, gibts fehlermeldungen, wenn ja, welche?

horrn · 21.02.2013, 13:02

So, jetzt konnte ich endlich die i-net-Verbindung mit Lan testen. Windows hat das mit der Netzwerkproblembehandlung selber gemacht.
"DHCP nicht für Internetverbindung eingerichtet - beheben? - ja!" - ...inet über lan geht jetzt wieder.
Alles scheint wieder in Ordnung zu sein.

markusg · 21.02.2013, 15:01

Hi,
dann man weiter:
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

horrn · 25.02.2013, 07:07

So hallo,
jetzt wieder die log-Datei von Malwarebytes Anti-Malware:

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.02.24.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Mustermann :: WASSERKRAFT [Administrator]

25.02.2013 00:05:05
mbam-log-2013-02-25 (00-05-05).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 1151372
Laufzeit: 2 Stunde(n), 4 Minute(n), 43 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Mustermann\Lager Daten\star trek bridge commander\openal.exe (PUP.BundleInstaller.SOL) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

markusg · 25.02.2013, 13:39

hi,
lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

horrn · 27.02.2013, 22:09

Hallo,
ich hab jetzt die Installierten Programme durchforstet. Sorry, die Liste ist sehr lange. Viele Spiele, einige Demos, die ich wieder deinstallieren möchte und ein paar Fragezeichen.

nötig 7-Zip 9.20 (x64 edition) Igor Pavlov 22.05.2011 4,53MB 9.20.00.0
nötig Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 06.02.2013 6,00MB 11.5.502.149
nötig Adobe Flash Player 11 Plugin Adobe Systems Incorporated 07.02.2013 6,00MB 11.5.502.149
? K.Ahnung-hab Ipod für Hörbücher: Apple Application Support Apple Inc. 28.01.2013 65,1MB 2.3.2
? K.Ahnung-hab Ipod für Hörbücher:Apple Mobile Device Support Apple Inc. 28.01.2013 25,1MB 6.0.1.3
? K.Ahnung-hab Ipod für Hörbücher:Apple Software Update Apple Inc. 28.01.2013 2,38MB 2.1.3.127
nötig: aquasuite wasserkühlung 22.05.2011
nötig Audacity 1.3.13 (Unicode) Audacity Team 02.07.2011 40,2MB
nötig AudibleManager Audible, Inc. 16.09.2011 1999912142.48.56.9964778
nötig AVM FRITZ!WLAN AVM Berlin 22.05.2011
unötig Bandicam Bandisoft.com 29.07.2012
unnötig Bandisoft MPEG-1 Decoder 29.07.2012
unnötig Battlecruiser Millennium FREEWARE 3000AD, Inc 17.12.2012 381MB 1.09.03
unnötig Be.HexEditor Be 24.01.2012 0,48MB 1.4.7
nötig BioShock 2K Boston 22.07.2012
nötig BioShock 2K Games 29.06.2012 2.5.0000
nötig BioShock 2 2K Games 23.07.2012
? Keine Ahnung Bonjour Apple Inc. 28.01.2013 2,04MB 3.0.0.10
unnötig C-evo version 1.1.2 27.11.2012 7,53MB 1.1.2
nötig CCleaner Piriform 07.03.2012 3.16
nötig CDBurnerXP CDBurnerXP 27.10.2012 12,4MB 4.4.2.3442
nötig CDex - Open Source Digital Audio CD Extractor Georgy Berdyshev 02.07.2011 1.70.4.2009
nötig Celtx (2.9) Greyfirst 22.05.2011 2.9 (de)
nötig Ceville 1.0 Kalypso 26.01.2013 1.0
unnötig Classic Shell IvoSoft 12.11.2011 5,78MB 3.2.0
nötig Core Temp 1.0 RC3 Alcpu 12.05.2012 2,01MB 1.0
nötig Counter-Strike: Condition Zero Valve 02.01.2013
nötig Counter-Strike: Source Valve 26.11.2012
nötig Crysis Crytek 22.04.2012
nötig Crysis 2 Maximum Edition Electronic Arts 21.07.2012
unnötig Crysis® 2 Demo Electronic Arts 28.06.2012 1.760MB 1.0.0.0
? CyberLink Blu-ray Disc Suite CyberLink Corp. 07.06.2011 14,9MB 6.0.2806
nötig CyberLink PowerDVD 10 CyberLink Corp. 28.09.2012 246MB 10.0.3507.52
unnötig CyberLink PowerDVD 8 CyberLink Corp. 07.06.2011 142,7MB 8.0.3228f
unnötig D-Fend Reloaded 1.3.2 (deinstallieren) Alexander Herzog 09.12.2012 1.3.2
nötig Darksaber's Ultimate Craft Pack Darksaber's X-Wing Station 18.10.2012 1.921MB v2.1
nötig Darkstar One 05.03.2012
nötig Deus Ex: Human Revolution Eidos Montreal 23.07.2012
nötig Doom 3 Activision 20.11.2011 1.489MB 1.3
nötig Dropbox Dropbox, Inc. 28.01.2013 1.6.16
nötig DVDFab 8.2.2.4 (06/12/2012) Qt Fengtao Software Inc. 05.12.2012 53,1MB
nötig DVDFab Virtual Drive Version 1.3.2.0 Fengtao Software Inc. 07.12.2011 1,25MB 1.3.2.0
nötig Edna Bricht Aus - Sammler Edition Daedalic Entertainment 08.01.2013 1.1
nötig eLicenser Control Steinberg Media Technologies GmbH 06.07.2011
nötig Evochron Mercenary 26.04.2012
? Ext2Fsd 0.51 Matt Wu 25.06.2012 2,85MB 0.51
nötigv Fable III 02.01.2013
nötig Fallout 3 Bethesda Softworks 18.11.2011 1.00.0000
nötig Fallout: New Vegas Bethesda Softworks 01.05.2012
nötig Foxit Reader Foxit Corporation 22.05.2011 11,6MB 4.3.1.323
unnötig Freeciv 2.3.2 (GTK+ client) 27.11.2012
unnötig FreeFileSync 5.9 Zenju 25.11.2012 5.9
unnötig Freelancer 06.11.2012
nötig FRITZ!Box-Fernzugang einrichten AVM Berlin 25.11.2012 0,89MB 1.0.3
nötig FRITZ!Fernzugang AVM Berlin 25.11.2012 6,67MB 1.2.6
nötig FTL: Faster Than Light 08.12.2012
nötig Google Chrome Google Inc. 10.12.2011 24.0.1312.52
nötig Google Drive Google, Inc. 14.01.2013 16,3MB 1.7.4018.3496
nötig Grand Theft Auto IV Rockstar 22.04.2012
nötig Grand Theft Auto: Episodes from Liberty City Rockstar 30.05.2012
nötig Half-Life Valve 23.07.2012
nötig Half-Life 2 Valve 24.04.2012
nötig Half-Life 2: Episode One Valve 11.05.2012
nötig Half-Life 2: Episode Two Valve 06.07.2012
nötig Half-Life: Source Valve 06.07.2012
nötig HOTAS WARTHOG drivers Thrustmaster 25.01.2013 1.TMHW.2011
nötig Insanely Twisted Shadow Planet 14.07.2012
nötig IrfanView (remove only) 12.07.2011
nötig iTunes Apple Inc. 28.01.2013 189,1MB 11.0.1.12
? Java(TM) 6 Update 30 Oracle 01.01.2012 95,2MB 6.0.300
? Java(TM) 7 Update 2 (64-bit) Oracle 07.01.2013 93,6MB 7.0.20
unnötig Killerogs Mod Downloader Killerog 19.10.2011 6,63MB 0.01
unnötig Kjaerhus Audio - Golden Audio Channel | GAC-1 v1.03 Kjaerhus Audio 02.07.2011 1.03
nötig L.A. Noire Rockstar 11.05.2012
? LADSPA_plugins-win-0.4.15 Audacity Team 02.07.2011
nötig LAME v3.98.3 for Audacity 02.07.2011 1,17MB
nötig Last.fm 1.5.4.27091 Last.fm 11.09.2011
nötig Left 4 Dead Valve 30.06.2012
nötig Left 4 Dead 2 Valve 11.05.2012
unnötig LIMBO Demo 05.08.2012
nötig Logitech Gaming Software 5.10 Logitech 02.01.2012 15,3MB 5.10.127
nötig LogMeIn Hamachi LogMeIn, Inc. 04.01.2013 2.1.0.294
nötig Lunar Flight Shovsoft 14.07.2012
nötig Mafia II 2K Czech 23.07.2012
? hab ich mit Dir installiert: Malwarebytes Anti-Malware Version 1.70.0.1100 Malwarebytes Corporation 24.02.2013 18,5MB 1.70.0.1100
nötig Maniac Mansion Deluxe 20.12.2012
nötig Mass Effect BioWare 22.07.2012
? glaub aber nötig Microsoft .NET Framework 1.1 12.02.2012
? glaub aber nötig Microsoft .NET Framework 4 Client Profile Microsoft Corporation 22.05.2011 38,8MB 4.0.30319
? glaub aber nötig Microsoft .NET Framework 4 Extended Microsoft Corporation 22.05.2011 52,0MB 4.0.30319
nötig leider Microsoft Games for Windows - LIVE Redistributable Microsoft Corporation 21.07.2012 31,3MB 3.5.92.0
? Microsoft Games for Windows Marketplace Microsoft Corporation 14.07.2012 6,04MB 3.5.50.0
nötig Microsoft Silverlight Microsoft Corporation 06.10.2012 22,7MB 5.1.10411.0
nötig? Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 14.07.2012 0,29MB 8.0.59193
nötig? Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 02.01.2012 0,61MB 8.0.61000
nötig? Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Corporation 25.11.2012 0,24MB 9.0.30729.5570
nötig? Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022.218 Microsoft Corporation 25.11.2012 0,77MB 9.0.21022.218
nötig? Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Corporation 30.11.2012 0,23MB 9.0.30729.4148
nötig? Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 26.11.2012 0,77MB 9.0.30729.6161
... Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 22.07.2011 2,87MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 07.11.2012 0,23MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 23.05.2011 0,23MB 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 21.05.2011 0,58MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 14.07.2012 0,59MB 9.0.30729.6161
... Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 14.08.2012 13,8MB 10.0.40219
nötig? Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 14.07.2012 12,3MB 10.0.40219
nötig? Microsoft XNA Framework Redistributable 3.1 Microsoft Corporation 30.07.2012 7,48MB 3.1.10527.0
nötig? Microsoft XNA Framework Redistributable 4.0 Microsoft Corporation 05.07.2011 9,17MB 4.0.20823.0
nötig? Mozilla Firefox 4.0.1 (x86 de) Mozilla 21.05.2011 29,8MB 4.0.1
nötig Mozilla Firefox 8.0 (x86 de) Mozilla 12.11.2011 34,9MB 8.0
unnötig Mozilla Thunderbird (6.0) Mozilla 23.08.2011 6.0 (de)
nötig Mp3tag v2.50 Florian Heidenreich 27.03.2012 v2.50
nötig Nexus Mod Manager Black Tree Gaming 13.01.2012 7,18MB 0.13.1
nötig NVIDIA 3D Vision Controller-Treiber 306.97 NVIDIA Corporation 18.10.2012 306.97
alle? NVIDIA 3D Vision Treiber 306.97 NVIDIA Corporation 18.10.2012 306.97
...? NVIDIA Grafiktreiber 306.97 NVIDIA Corporation 18.10.2012 306.97
NVIDIA HD-Audiotreiber 1.3.18.0 NVIDIA Corporation 18.10.2012 1.3.18.0
NVIDIA PhysX-Systemsoftware 9.12.0604 NVIDIA Corporation 18.10.2012 9.12.0604
NVIDIA Update 1.10.8 NVIDIA Corporation 18.10.2012 1.10.8
unötig Oblivion Bethesda Softworks 16.07.2011 1.00.0000
? Keine Ahnung OpenAL 07.11.2012
nötig Opera 12.14 Opera Software ASA 06.02.2013 12.14.1738
? keine AhnungPando Media Booster Pando Networks Inc. 01.02.2012 5,47MB 2.6.0.2?
nötig Portal Valve 11.05.2012
nötig Portal 2 Valve 30.05.2012
? Project64 1.6 Project64 25.10.2012 3,47MB 1.6
nötig PureSync 3.6.2 Jumping Bytes 25.11.2012 3.6.2
unnötig Quantum Conundrum Demo 16.08.2012
nötig Rainlendar2 (remove only) 15.04.2012
nötig Razer DeathAdder(TM) Mouse Razer USA Ltd. 17.09.2012 3.05
nötig Razer Lycosa Razer USA Ltd. 22.05.2011 3.02
nötig Resonance 24.01.2013
nötig Restorer2000 Professional 14.09.2011
unnötig Risen Deep Silver 04.06.2011 1.00.0000
? vielleicht Rockstar Games Social Club Rockstar Games 05.01.2012 1.0.6.1
nötig Sandboxie 3.76 (64-bit) SANDBOXIE L.T.D 22.02.2013 3.76
? ScreenManager Pro for LCD EIZO NANAO CORPORATION 11.09.2011 8,68MB 3.2.0.1
nötig ScummVM 1.5.0 The ScummVM Team 10.11.2012 27,2MB
nötig Sid Meier's Civilization 4 Complete Firaxis Games 02.04.2012 1.74
nötig Sid Meier's Civilization V 2K Games, Inc. 02.01.2013
nötig Silent Hunter III Ubisoft 23.07.2012
? SiSoftware Sandra Lite 2011.SP4 SiSoftware 19.07.2011 103,9MB 17.70.2011.8
nötig Skype™ 6.1 Skype Technologies S.A. 14.02.2013 21,1MB 6.1.129
unnötig Solar 2 - Demo Murudai 10.01.2013
nötig Sony Sound Forge 8.0d Sony 12.02.2012 71,9MB 8.0.128
nötig Sound Blaster X-Fi MB Creative Technology Limited 12.05.2012 1.0
unnötig (demo-abgelaufen) Sound Forge Pro 10.0 Sony 02.07.2011 297MB 10.0.491
nötig SoundMAX Analog Devices 12.05.2012 6.10.2.6600
nötig Star Wars - Jedi Knight II: Jedi Outcast LucasArts 22.07.2012
? Star Wars JK II Jedi Outcast 28.11.2011
nötig Star Wars Starfighter LucasArts 21.07.2012
nötig Star Wars X-Wing Alliance DE LucasArts, Totally Games 18.10.2012 277MB 1.0.0.0
unnötig Star Wars: Rogue Squadron 3D LucasArts 27.10.2012 45,8MB 1.0.0.0
nötig Steam Valve Corporation 17.04.2012 35,5MB 1.0.0.0
nötig Steinberg Cubase SX 3 Steinberg Media Technologies GmbH 06.07.2011
nötig TeamViewer 7 TeamViewer 24.12.2011 7.0.12313
nötig Terraria 02.01.2013
nötig The Book of Unwritten Tales 07.11.2012
nötig The Elder Scrolls V: Skyrim Bethesda Game Studios 22.04.2012
nötig The Secret of Monkey Island: Special Edition LucasArts 21.07.2012
nötig Trine Frozenbyte 07.11.2012
nötig Trine 2 23.07.2012
nötig USB Multi-Channel Audio Device 19.09.2012
nötig Virtual Audio Cable 4.10 26.01.2012
nötig VLC media player 1.1.11 VideoLAN 22.09.2011 1.1.11
? Windows Live ID Sign-in Assistant Microsoft Corporation 14.07.2012 10,0MB 6.500.3165.0
? WinUAE 2.5.0 Arabuusimiehet 12.12.2012 2.5.0
nöig X-Universe Plugin Manager 1.47 Cycrow 12.08.2012 14,6MB 1.47
nötig X-Universe Plugin Manager V1.40 (Beta 16) by Cycrow 'Cycrow' 31.12.2011 1.40
nötig X-Wing Install System 2.71 24.01.2012
nötig X3 Editor 2 doubleshadow 24.03.2012
nötig X3TC Bonuspaket 4.1.01 Egosoft 31.08.2012 4.1.01
? XMedia Recode 3.0.2.5 Sebastian Dörfler 10.09.2011 3.0.2.5
? Zip Motion Block Video codec (Remove Only) DOSBox Team 09.12.2012
nötig ZoneAlarm Free Firewall Check Point 24.01.2013 67,0MB 11.0.000.038

Computer gesperrt und 100 Euro zahlen

Plagegeister aller Art und deren Bekämpfung: Computer gesperrt und 100 Euro zahlen