Hallo,

ich habe mir leider den GVU Trojaner eingefangen. Ich benutze Windows 7. Leider kann ich den PC im abgesicherten Modus nicht mehr hochfahren. Wie hier http://www.trojaner-board.de/135054-...-moeglich.html beschrieben, habe ich den OTLPENet.exe mit ISO burner auf eine CD gebrannt von meinem Laptop mit XP Betriebssystem. Den infizierten PC habe ich von der CD gebootet und dann wurde das REATOGO-X-PE Desktop angezeigt. Wenn ich nun Doppelklicke auf das OTLPE Icon, erscheint ein Fenster mit der Aufforderung choose Windows directory. EGal welches Verzeichnis ich wähle ich bekomme die Fehlermeldung "Target is not windows 2000 or later". Was mache ich falsch, was muss ich tun?

Gruß Ary

hi
öffne mal alle nacheinander, meistens aber bot, dort suche windows bzw wind, klicke drauf und ab gehts :-)

Hallo,

anbei die log-Dateien:OTL Logfile:

OTL logfile created on: 5/17/2013 1:27:41 AM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = J: | %SystemRoot% = J:\Windows | %ProgramFiles% = J:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 75.83 Mb Free Space | 75.83% Space Free | Partition Type: NTFS
Drive D: | 931.28 Gb Total Space | 557.21 Gb Free Space | 59.83% Space Free | Partition Type: FAT32
Drive J: | 458.45 Gb Total Space | 357.41 Gb Free Space | 77.96% Space Free | Partition Type: NTFS
Drive K: | 458.96 Gb Total Space | 454.50 Gb Free Space | 99.03% Space Free | Partition Type: NTFS
Drive L: | 959.09 Mb Total Space | 959.07 Mb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2013/02/19 08:56:14 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Windows\System32\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013/02/19 08:53:32 | 000,218,760 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe -- (mfefire)
SRV:64bit: - [2013/02/19 08:51:54 | 000,241,456 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe -- (McShield)
SRV:64bit: - [2012/11/16 16:10:22 | 000,383,608 | ---- | M] (McAfee, Inc.) [On_Demand] -- J:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McProxy)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McNASvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (mcmscsvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- J:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV:64bit: - [2011/02/18 12:41:20 | 001,120,368 | ---- | M] (VMware, Inc.) [Auto] -- J:\Program Files\VMware\VMware View\Client\bin\wsnm_usbctrl.exe -- (wsnm_usbctrl)
SRV:64bit: - [2011/02/18 12:37:56 | 000,494,192 | ---- | M] (VMware, Inc.) [Auto] -- J:\Program Files\VMware\VMware View\Client\bin\wsnm.exe -- (wsnm)
SRV:64bit: - [2010/11/11 08:09:44 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto] -- J:\Program Files\VMware\VMware View\Client\Local Mode\vmware-authd.exe -- (VMAuthdService)
SRV:64bit: - [2010/08/19 07:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand] -- J:\Program Files\VMware\VMware View\Client\Local Mode\vmware-ufad.exe -- (ufad-ws60)
SRV:64bit: - [2009/11/18 01:45:38 | 000,202,752 | ---- | M] (AMD) [Auto] -- J:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/08/06 09:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand] -- J:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009/07/03 22:47:12 | 000,240,160 | ---- | M] (Acer) [Auto] -- J:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2013/05/14 14:03:12 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- J:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/15 08:08:20 | 000,543,144 | ---- | M] (Valve Corporation) [On_Demand] -- J:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/04/06 06:56:34 | 000,397,312 | ---- | M] (VMware, Inc.) [Auto] -- J:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2010/11/11 08:11:00 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto] -- J:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2010/11/11 06:31:44 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto] -- J:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2010/10/21 21:00:00 | 000,376,832 | ---- | M] (AVM Berlin) [Auto] -- J:\Program Files (x86)\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2010/03/18 07:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- J:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/03 14:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2009/12/09 05:24:16 | 000,076,320 | ---- | M] () [Auto] -- J:\OEM\USBDECTION\USBS3S4Detection.exe -- (USBS3S4Detection)
SRV - [2009/09/30 14:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009/09/30 14:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto] -- J:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009/09/10 09:42:46 | 000,305,448 | ---- | M] () [On_Demand] -- J:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService)
SRV - [2009/08/28 05:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto] -- J:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
SRV - [2009/08/12 19:04:44 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) [Auto] -- J:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- J:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/04/17 05:09:46 | 000,935,208 | ---- | M] (Nero AG) [Auto] -- J:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008/10/24 10:35:44 | 000,128,296 | ---- | M] () [Auto] -- J:\Program Files (x86)\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013/02/19 08:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2013/02/19 08:56:26 | 000,340,216 | ---- | M] (McAfee, Inc.) [Kernel | Boot] -- J:\Windows\System32\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013/02/19 08:55:14 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2013/02/19 08:54:32 | 000,771,536 | ---- | M] (McAfee, Inc.) [Kernel | Boot] -- J:\Windows\System32\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013/02/19 08:53:42 | 000,515,968 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2013/02/19 08:53:02 | 000,309,840 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013/02/19 08:52:44 | 000,179,280 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2012/05/11 01:34:14 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- J:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.)
DRV:64bit: - [2012/05/11 01:34:12 | 000,099,384 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- J:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV:64bit: - [2012/04/20 10:40:58 | 000,196,440 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\HipShieldK.sys -- (HipShieldK)
DRV:64bit: - [2011/12/28 19:57:26 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand] -- J:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2011/02/18 12:41:20 | 000,047,664 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\vmwvusb.sys -- (vmwvusb)
DRV:64bit: - [2010/11/20 07:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/11 08:11:38 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\vmci.sys -- (vmci)
DRV:64bit: - [2010/11/11 08:11:26 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\vmx86.sys -- (vmx86)
DRV:64bit: - [2010/11/11 08:09:34 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\VMkbd.sys -- (vmkbd)
DRV:64bit: - [2010/11/11 08:09:24 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:64bit: - [2010/11/11 06:31:32 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\hcmon.sys -- (hcmon)
DRV:64bit: - [2010/11/11 04:04:52 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:64bit: - [2010/11/11 04:04:52 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:64bit: - [2010/10/21 21:00:00 | 000,714,368 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- J:\Windows\System32\drivers\fwlanusbn.sys -- (fwlanusbn)
DRV:64bit: - [2010/10/21 21:00:00 | 000,014,120 | R--- | M] (AVM Berlin) [Kernel | On_Demand] -- J:\Windows\System32\drivers\avmeject.sys -- (avmeject)
DRV:64bit: - [2010/08/19 07:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- J:\Program Files\VMware\VMware View\Client\Local Mode\vstor2-ws60.sys -- (vstor2-ws60)
DRV:64bit: - [2010/04/02 21:28:28 | 000,894,592 | ---- | M] (Line 6) [Kernel | On_Demand] -- J:\Windows\System32\drivers\GPWADrv64.sys -- (GPWADrv) Service for L6 GuitarPort Driver (WDM)
DRV:64bit: - [2009/11/18 02:21:18 | 006,171,136 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/10/29 04:14:38 | 000,115,824 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot] -- J:\Windows\System32\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009/10/20 14:19:54 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto] -- J:\Windows\System32\drivers\npf.sys -- (NPF)
DRV:64bit: - [2009/09/29 21:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand] -- J:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/09/23 05:11:04 | 000,283,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\e1k62x64.sys -- (e1kexpress) Intel(R)
DRV:64bit: - [2009/09/17 00:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009/08/06 09:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto] -- J:\Windows\System32\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009/07/13 20:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 20:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\WSDScan.sys -- (WSDScan)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- J:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\system32\DRIVERS\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\system32\DRIVERS\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- J:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/02 07:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- J:\Windows\System32\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:64bit: - [2009/06/02 07:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System] -- J:\Windows\System32\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:64bit: - [2009/06/02 07:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- J:\Windows\System32\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\Rainer_ON_J\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
IE - HKU\Rainer_ON_J\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
IE - HKU\Rainer_ON_J\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - J:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
IE - HKU\Rainer_ON_J\..\URLSearchHook: {f0381dbd-e018-4e07-ae40-d96ab15083f0} - Reg Error: Key error. File not found
IE - HKU\Rainer_ON_J\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Rainer_ON_J\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: J:\Program Files\McAfee\MSC\npMcSnFFPl64.dll ()
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: J:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@canon.com/EPPEX: J:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@canon.com/MycameraPlugin: J:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: J:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: J:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@logitech.com/HarmonyRemote,version=1.0.0: J:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10: J:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/SAFFPlugin: J:\Program Files (x86)\McAfee\SiteAdvisor\NPMcFFPlg32.dll (McAfee, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: J:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: J:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: J:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: J:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: J:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: J:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013/02/08 12:25:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2013/03/09 09:44:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013/05/14 11:48:45 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - J:\Windows\System32\drivers\etc\hosts
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - J:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120626202339.dll (McAfee, Inc.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - J:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - J:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - J:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - J:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - J:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120626202339.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - J:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - J:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - J:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - J:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - J:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - J:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKU\Rainer_ON_J\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - J:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\Rainer_ON_J\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - J:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] J:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonSolutionMenu] J:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [mwlDaemon] J:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Egis Technology Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] J:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [ArcadeDeluxeAgent] J:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [AVMWlanClient] J:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKLM..\Run: [BackupManagerTray] J:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [Hotkey Utility] J:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe ()
O4 - HKLM..\Run: [IAStorIcon] J:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [JMB36X IDE Setup] J:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [mcui_exe] J:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [PlayMovie] J:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
O4 - HKLM..\Run: [StartCCC] J:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\LocalService_ON_J..\Run: [Sidebar] J:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_J..\Run: [Sidebar] J:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\Rainer_ON_J..\Run: [NortonOnlineBackupReminder] J:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
O4 - HKU\Rainer_ON_J..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] J:\Users\Rainer\Documents\686c87d0.exe ()
O4 - HKU\LocalService_ON_J..\RunOnce: [mctadmin]  File not found
O4 - HKU\NetworkService_ON_J..\RunOnce: [mctadmin]  File not found
O4 - Startup: Error locating startup folders.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000011 - J:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000012 - J:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - J:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - J:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - Rainer_ON_J\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15:64bit: - Rainer_ON_J\..Trusted Domains: fritz.repeater ([]* in Lokales Intranet)
O15:64bit: - Rainer_ON_J\..Trusted Domains: line6.net ([]* in Vertrauenswürdige Sites)
O15:64bit: - Rainer_ON_J\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O15:64bit: - Rainer_ON_J\..Trusted Ranges: Range2 ([*] in Lokales Intranet)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (WRC Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - J:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - J:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - J:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - J:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - J:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - J:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKU\Rainer_ON_J Winlogon: Shell - (cmd.exe) - J:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (wsauth) - J:\Windows\System32\wsauth.dll (VMware, Inc.)
O30 - LSA: Security Packages - (wsauth) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - D:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2009/04/06 15:02:32 | 000,000,000 | ---D | M] - D:\autorun -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpReg: EgisTecLiveUpdate - hkey= - key= - J:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.)
MsConfig:64bit - StartUpReg: NortonOnlineBackupReminder - hkey= - key= - J:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - J:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
MsConfig:64bit - State: "startup" - 2
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/05/16 23:24:48 | 000,000,000 | -HSD | C] -- J:\RECYCLER
[2013/05/16 11:47:54 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/05/16 00:50:33 | 000,096,768 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\mshtmled.dll
[2013/05/16 00:50:33 | 000,073,216 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\mshtmled.dll
[2013/05/16 00:50:32 | 000,248,320 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\ieui.dll
[2013/05/16 00:50:32 | 000,237,056 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\url.dll
[2013/05/16 00:50:32 | 000,231,936 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\url.dll
[2013/05/16 00:50:32 | 000,176,640 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ieui.dll
[2013/05/16 00:50:32 | 000,173,056 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\ieUnatt.exe
[2013/05/16 00:50:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\ieUnatt.exe
[2013/05/16 00:50:31 | 002,312,704 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\jscript9.dll
[2013/05/16 00:50:31 | 001,494,528 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\inetcpl.cpl
[2013/05/16 00:50:31 | 001,427,968 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\inetcpl.cpl
[2013/05/16 00:50:31 | 000,729,088 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\msfeeds.dll
[2013/05/16 00:50:31 | 000,607,744 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\msfeeds.dll
[2013/05/16 00:50:30 | 001,800,704 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\jscript9.dll
[2013/05/16 00:50:30 | 000,816,640 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\jscript.dll
[2013/05/16 00:50:30 | 000,717,824 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\jscript.dll
[2013/05/16 00:50:30 | 000,599,040 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\vbscript.dll
[2013/05/15 21:41:35 | 000,265,064 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\drivers\dxgmms1.sys
[2013/05/15 21:41:35 | 000,144,384 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\cdd.dll
[2013/05/15 21:41:25 | 001,930,752 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\authui.dll
[2013/05/15 21:41:25 | 000,197,120 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\shdocvw.dll
[2013/05/15 21:41:24 | 001,796,096 | ---- | C] (Microsoft Corporation) -- J:\Windows\SysWow64\authui.dll
[2013/05/15 21:41:24 | 000,111,448 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\consent.exe
[2013/05/15 21:41:15 | 000,048,640 | ---- | C] (Microsoft Corporation) -- J:\Windows\System32\wwanprotdim.dll
[2013/05/15 17:28:27 | 000,000,000 | ---D | C] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebEx
[2013/05/15 17:28:27 | 000,000,000 | ---D | C] -- J:\Program Files (x86)\WebEx
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- J:\Users\Rainer\AppData\Roaming\Qofyzu
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- J:\Users\Rainer\AppData\Roaming\Itsim
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- J:\Users\Rainer\AppData\Roaming\Coce
[2009/11/18 17:40:11 | 000,036,136 | ---- | C] (Oberon Media) -- J:\ProgramData\FullRemove.exe
 
========== Files - Modified Within 30 Days ==========
 
[2013/05/16 18:13:04 | 000,067,584 | --S- | M] () -- J:\Windows\bootstat.dat
[2013/05/16 18:12:45 | 000,001,106 | ---- | M] () -- J:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/16 18:12:15 | 504,676,351 | -HS- | M] () -- J:\hiberfil.sys
[2013/05/16 12:17:37 | 000,656,872 | ---- | M] () -- J:\Windows\System32\perfh007.dat
[2013/05/16 12:17:37 | 000,618,754 | ---- | M] () -- J:\Windows\System32\perfh009.dat
[2013/05/16 12:17:37 | 000,131,270 | ---- | M] () -- J:\Windows\System32\perfc007.dat
[2013/05/16 12:17:37 | 000,107,660 | ---- | M] () -- J:\Windows\System32\perfc009.dat
[2013/05/16 12:05:08 | 000,009,696 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/05/16 12:05:08 | 000,009,696 | -H-- | M] () -- J:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/05/16 11:52:29 | 000,163,054 | ---- | M] () -- J:\Users\Rainer\AppData\Local\2433f433
[2013/05/16 11:52:29 | 000,163,044 | ---- | M] () -- J:\ProgramData\2433f433
[2013/05/16 11:52:29 | 000,163,017 | ---- | M] () -- J:\Users\Rainer\AppData\Roaming\2433f433
[2013/05/16 11:52:24 | 000,024,064 | ---- | M] () -- J:\Users\Rainer\Documents\686c87d0.exe
[2013/05/16 11:47:54 | 000,000,000 | ---D | M] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/05/16 11:43:00 | 000,427,160 | ---- | M] () -- J:\Windows\System32\FNTCACHE.DAT
[2013/05/16 00:06:00 | 000,001,110 | ---- | M] () -- J:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/16 00:03:00 | 000,000,884 | ---- | M] () -- J:\Windows\tasks\Adobe Flash Player Updater.job
[2013/05/15 17:48:43 | 000,002,052 | -H-- | M] () -- J:\Users\Rainer\Documents\Default.rdp
[2013/05/15 17:28:27 | 000,000,000 | ---D | M] -- J:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebEx
[2013/05/14 14:03:11 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- J:\Windows\SysWow64\FlashPlayerApp.exe
[2013/05/14 14:03:11 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- J:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/05/09 15:50:57 | 000,001,137 | ---- | M] () -- J:\Users\Rainer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
 
========== Files Created - No Company Name ==========
 
[2013/05/16 11:52:29 | 000,163,054 | ---- | C] () -- J:\Users\Rainer\AppData\Local\2433f433
[2013/05/16 11:52:29 | 000,163,044 | ---- | C] () -- J:\ProgramData\2433f433
[2013/05/16 11:52:29 | 000,163,017 | ---- | C] () -- J:\Users\Rainer\AppData\Roaming\2433f433
[2013/05/16 11:52:24 | 000,024,064 | ---- | C] () -- J:\Users\Rainer\Documents\686c87d0.exe
[2013/01/16 17:31:20 | 000,000,000 | ---- | C] () -- J:\Users\Rainer\AppData\Roaming\downloads.m3u
[2012/04/06 06:58:20 | 001,526,976 | ---- | C] () -- J:\Windows\SysWow64\PerfStringBackup.INI
[2012/02/09 19:50:17 | 001,688,064 | ---- | C] () -- J:\Windows\SysWow64\fxActivationmt4.exe
[2011/09/16 09:29:02 | 000,007,628 | ---- | C] () -- J:\Users\Rainer\AppData\Local\Resmon.ResmonCfg
[2011/07/08 13:12:22 | 000,252,928 | ---- | C] () -- J:\Windows\SysWow64\DShowRdpFilter.dll
[2011/04/09 12:55:28 | 000,179,261 | ---- | C] () -- J:\Windows\SysWow64\xlive.dll.cat
[2011/04/06 20:43:44 | 000,817,664 | ---- | C] () -- J:\Windows\SysWow64\fgbshownews.exe
[2011/03/13 12:34:51 | 000,000,076 | ---- | C] () -- J:\Windows\wiso.ini
[2010/12/11 15:55:20 | 000,000,197 | ---- | C] () -- J:\Users\Rainer\AppData\Roaming\default.rss
[2010/12/11 15:53:01 | 000,000,069 | ---- | C] () -- J:\Windows\NeroDigital.ini
[2010/12/11 15:18:55 | 000,004,767 | ---- | C] () -- J:\Windows\Irremote.ini
[2010/10/19 13:56:45 | 000,000,230 | ---- | C] () -- J:\Users\Rainer\AppData\Roaming\wklnhst.dat
[2010/07/05 15:38:25 | 000,000,170 | ---- | C] () -- J:\Windows\wininit.ini
[2010/06/19 15:21:16 | 000,000,360 | ---- | C] () -- J:\Windows\GearBox.ini
[2009/11/18 17:23:19 | 000,000,000 | ---- | C] () -- J:\Windows\ativpsrm.bin
[2009/10/20 14:19:30 | 000,053,299 | ---- | C] () -- J:\Windows\SysWow64\pthreadVC.dll
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- J:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- J:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- J:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- J:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- J:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- J:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- J:\Windows\SysWow64\msjetoledb40.dll
[2009/06/19 14:06:22 | 000,197,912 | ---- | C] () -- J:\Windows\SysWow64\physxcudart_20.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelSwedish.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelSpanish.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelPortugese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelKorean.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelJapanese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelGerman.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- J:\Windows\SysWow64\AgCPanelFrench.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- J:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011/07/11 14:50:13 | 000,000,000 | ---D | M] -- J:\ProgramData\AAV
[2009/11/18 17:54:27 | 000,000,000 | ---D | M] -- J:\ProgramData\Acer
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Application Data
[2010/10/03 13:15:04 | 000,000,000 | ---D | M] -- J:\ProgramData\ashampoo
[2009/11/18 17:47:15 | 000,000,000 | ---D | M] -- J:\ProgramData\BackupManager
[2010/06/29 08:18:47 | 000,000,000 | -H-D | M] -- J:\ProgramData\CanonBJ
[2010/11/22 14:26:57 | 000,000,000 | -H-D | M] -- J:\ProgramData\CanonIJEGV
[2010/09/12 11:41:26 | 000,000,000 | -H-D | M] -- J:\ProgramData\CanonIJScan
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Documents
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\ProgramData\Dokumente
[2009/11/18 18:10:55 | 000,000,000 | ---D | M] -- J:\ProgramData\EgisTec
[2010/06/21 13:50:28 | 000,000,000 | ---D | M] -- J:\ProgramData\Electronic Arts
[2009/11/18 18:08:38 | 000,000,000 | ---D | M] -- J:\ProgramData\eSobi
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Favorites
[2012/08/20 16:27:51 | 000,000,000 | ---D | M] -- J:\ProgramData\InstallMate
[2010/06/19 12:57:28 | 000,000,000 | ---D | M] -- J:\ProgramData\Line 6
[2010/06/19 07:47:00 | 000,000,000 | ---D | M] -- J:\ProgramData\McQcModifier-5c47-a7b0
[2011/09/03 09:39:47 | 000,000,000 | ---D | M] -- J:\ProgramData\MetaQuotes
[2010/11/18 16:57:45 | 000,000,000 | ---D | M] -- J:\ProgramData\Neuro-Programmer 2 Files
[2010/06/19 07:42:59 | 000,000,000 | ---D | M] -- J:\ProgramData\OEM
[2010/07/11 10:33:56 | 000,000,000 | ---D | M] -- J:\ProgramData\Partner
[2012/08/20 16:27:50 | 000,000,000 | ---D | M] -- J:\ProgramData\Premium
[2010/06/19 09:05:45 | 000,000,000 | ---D | M] -- J:\ProgramData\Sandlot Games
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Start Menu
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\ProgramData\Startmenü
[2011/03/15 15:33:33 | 000,000,000 | ---D | M] -- J:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\ProgramData\Templates
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\ProgramData\Vorlagen
[2013/03/06 17:40:25 | 000,032,640 | ---- | M] () -- J:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011/09/13 11:11:24 | 000,000,000 | -HSD | M] -- J:\$Recycle.Bin
[2012/09/24 10:21:53 | 000,000,000 | ---D | M] -- J:\book
[2013/05/16 00:57:53 | 000,000,000 | -HSD | M] -- J:\Config.Msi
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- J:\Documents and Settings
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\Dokumente und Einstellungen
[2009/11/18 17:30:39 | 000,000,000 | ---D | M] -- J:\Intel
[2010/11/06 19:52:47 | 000,000,000 | RH-D | M] -- J:\MSOCache
[2010/06/19 07:44:08 | 000,000,000 | -H-D | M] -- J:\OEM
[2009/07/13 23:20:08 | 000,000,000 | ---D | M] -- J:\PerfLogs
[2013/03/13 22:01:55 | 000,000,000 | R--D | M] -- J:\Program Files
[2013/05/15 17:28:27 | 000,000,000 | R--D | M] -- J:\Program Files (x86)
[2013/05/16 11:52:29 | 000,000,000 | -H-D | M] -- J:\ProgramData
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- J:\Programme
[2009/11/18 17:35:12 | 000,000,000 | ---D | M] -- J:\RaidTool
[2010/06/19 07:42:49 | 000,000,000 | -HSD | M] -- J:\Recovery
[2013/05/16 23:24:48 | 000,000,000 | -HSD | M] -- J:\RECYCLER
[2013/05/16 00:58:18 | 000,000,000 | -HSD | M] -- J:\System Volume Information
[2012/01/18 16:19:52 | 000,000,000 | ---D | M] -- J:\TEMP
[2012/12/30 10:03:48 | 000,000,000 | R--D | M] -- J:\Users
[2013/05/16 12:06:16 | 000,000,000 | ---D | M] -- J:\Windows
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- J:\Windows\System32\drivers\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- J:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- J:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- J:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- J:\Windows\System32\drivers\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- J:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- J:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- J:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- J:\Windows\SysWOW64\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- J:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- J:\Windows\System32\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- J:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 01:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- J:\Windows\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 02:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- J:\Windows\SysWOW64\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/31 02:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 01:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 09:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 02:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 01:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 21:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 02:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- J:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 02:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/03 02:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- J:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
 
< MD5 for: IASTOR.SYS  >
[2010/03/03 13:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- J:\Windows\System32\drivers\iaStor.sys
[2010/03/03 13:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- J:\Windows\System32\DriverStore\FileRepository\iastor.inf_amd64_neutral_d73865c94450cce1\iaStor.sys
[2009/10/13 06:16:40 | 000,409,624 | ---- | M] (Intel Corporation) MD5=BE7D72FCF442C26975942007E0831241 -- J:\Windows\System32\DriverStore\FileRepository\iastor.inf_amd64_neutral_b02a0635da01252b\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010/11/20 09:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- J:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 09:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 02:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- J:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- J:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011/03/11 02:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011/03/11 02:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009/07/13 21:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- J:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009/07/13 21:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- J:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010/11/20 09:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- J:\Windows\System32\netlogon.dll
[2010/11/20 09:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- J:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/20 08:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- J:\Windows\SysWOW64\netlogon.dll
[2010/11/20 08:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- J:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- J:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009/07/13 21:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011/03/11 02:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011/03/11 02:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011/03/11 02:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- J:\Windows\System32\drivers\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- J:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/20 09:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- J:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 09:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- J:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- J:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/13 21:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- J:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 08:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- J:\Windows\SysWOW64\scecli.dll
[2010/11/20 08:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- J:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 09:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- J:\Windows\System32\scecli.dll
[2010/11/20 09:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- J:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010/11/20 08:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- J:\Windows\SysWOW64\user32.dll
[2010/11/20 08:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- J:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009/07/13 21:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- J:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009/07/13 21:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- J:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010/11/20 09:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- J:\Windows\System32\user32.dll
[2010/11/20 09:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- J:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- J:\Windows\SysWOW64\userinit.exe
[2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- J:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- J:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- J:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- J:\Windows\System32\userinit.exe
[2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- J:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- J:\Windows\System32\winlogon.exe
[2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- J:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 21:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- J:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 03:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- J:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 02:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- J:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- J:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- J:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 153 bytes -> J:\ProgramData\Temp:4D066AD2
@Alternate Data Stream - 145 bytes -> J:\ProgramData\Temp:157E1AD3
@Alternate Data Stream - 133 bytes -> J:\ProgramData\Temp:93DE1838
@Alternate Data Stream - 100 bytes -> J:\ProgramData\Temp:F87C192A
< End of report >
         

--- --- ---

auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

:OTL
O4 - HKU\Rainer_ON_J..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx] J:\Users\Rainer\Documents\686c87d0.exe ()
O20 - HKU\Rainer_ON_J Winlogon: Shell - (cmd.exe) - J:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
:Files
J:\Users\Rainer\Documents\686c87d0.exe
:Commands
[EMPTYFLASH] 
[emptytemp]
         

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.


starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Hallo,

nach dem Neustart habe ich versucht im normalen Modus zu starten, bekomme dann aber ein cmd.exe fenster mit "der Befehl ""C:\Users\Rainer\documents\686c87d0.exe"" ist entweder falsch geschrieben oder konnte nicht gefunden werden.

Was soll ich tun?

Gruß

bsorry, meine Blödheit, das bekommen wir gleich hin.

noch mal otl ausführen, neues script.
:OTL
O20 - HKU\Rainer_ON_J Winlogon: Shell - (cmd.exe) - J:\Windows\SysWow64\cmd.exe (Mic
rosoft Corporation)
:Commands
[EMPTYFLASH]
[emptytemp]

Hallo,

bekomme beim Hochfahren in den normalen Modus wieder die gleiche Fehermeldung. Liegt das eventuell am Laufwerksbuchstaben?

Gruß

ich hab den buchstaben aus dem log genommen.. poste mal n neues otl log

Hallo,

hier das neue Log:OTL Logfile:

OTL logfile created on: 5/17/2013 10:34:55 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
64bit-Windows 7 Home Premium Service Pack 1 (Version = 6.1.7601) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = K: | %SystemRoot% = K:\Windows | %ProgramFiles% = K:\Program Files (x86)
Drive C: | 100.00 Mb Total Space | 75.83 Mb Free Space | 75.83% Space Free | Partition Type: NTFS
Drive D: | 931.28 Gb Total Space | 557.21 Gb Free Space | 59.83% Space Free | Partition Type: FAT32
Drive E: | 959.09 Mb Total Space | 958.93 Mb Free Space | 99.98% Space Free | Partition Type: FAT32
Drive K: | 458.45 Gb Total Space | 357.33 Gb Free Space | 77.94% Space Free | Partition Type: NTFS
Drive L: | 458.96 Gb Total Space | 454.50 Gb Free Space | 99.03% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet002
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2013/02/19 08:56:14 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Windows\System32\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013/02/19 08:53:32 | 000,218,760 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe -- (mfefire)
SRV:64bit: - [2013/02/19 08:51:54 | 000,241,456 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe -- (McShield)
SRV:64bit: - [2012/11/16 16:10:22 | 000,383,608 | ---- | M] (McAfee, Inc.) [On_Demand] -- K:\Program Files\McAfee\VirusScan\mcods.exe -- (McODS)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McProxy)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McNASvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (mcmscsvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:64bit: - [2012/08/31 07:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto] -- K:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV:64bit: - [2011/02/18 12:41:20 | 001,120,368 | ---- | M] (VMware, Inc.) [Auto] -- K:\Program Files\VMware\VMware View\Client\bin\wsnm_usbctrl.exe -- (wsnm_usbctrl)
SRV:64bit: - [2011/02/18 12:37:56 | 000,494,192 | ---- | M] (VMware, Inc.) [Auto] -- K:\Program Files\VMware\VMware View\Client\bin\wsnm.exe -- (wsnm)
SRV:64bit: - [2010/11/11 08:09:44 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto] -- K:\Program Files\VMware\VMware View\Client\Local Mode\vmware-authd.exe -- (VMAuthdService)
SRV:64bit: - [2010/08/19 07:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand] -- K:\Program Files\VMware\VMware View\Client\Local Mode\vmware-ufad.exe -- (ufad-ws60)
SRV:64bit: - [2009/11/18 01:45:38 | 000,202,752 | ---- | M] (AMD) [Auto] -- K:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/08/06 09:17:46 | 000,118,672 | ---- | M] (Intel(R) Corporation) [On_Demand] -- K:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2009/07/03 22:47:12 | 000,240,160 | ---- | M] (Acer) [Auto] -- K:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2013/05/14 14:03:12 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- K:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/15 08:08:20 | 000,543,144 | ---- | M] (Valve Corporation) [On_Demand] -- K:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/04/06 06:56:34 | 000,397,312 | ---- | M] (VMware, Inc.) [Auto] -- K:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2010/11/11 08:11:00 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto] -- K:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2010/11/11 06:31:44 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto] -- K:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2010/10/21 21:00:00 | 000,376,832 | ---- | M] (AVM Berlin) [Auto] -- K:\Program Files (x86)\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2010/03/18 07:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- K:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/03 14:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto] -- K:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2009/12/09 05:24:16 | 000,076,320 | ---- | M] () [Auto] -- K:\OEM\USBDECTION\USBS3S4Detection.exe -- (USBS3S4Detection)
SRV - [2009/09/30 14:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto] -- K:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2009/09/30 14:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto] -- K:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2009/09/10 09:42:46 | 000,305,448 | ---- | M] () [On_Demand] -- K:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService)
SRV - [2009/08/28 05:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto] -- K:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
SRV - [2009/08/12 19:04:44 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) [Auto] -- K:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled] -- K:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/04/17 05:09:46 | 000,935,208 | ---- | M] (Nero AG) [Auto] -- K:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008/10/24 10:35:44 | 000,128,296 | ---- | M] () [Auto] -- K:\Program Files (x86)\AAVUpdateManager\aavus.exe -- (AAV UpdateService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013/02/19 08:59:06 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2013/02/19 08:56:26 | 000,340,216 | ---- | M] (McAfee, Inc.) [Kernel | Boot] -- K:\Windows\System32\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013/02/19 08:55:14 | 000,106,552 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2013/02/19 08:54:32 | 000,771,536 | ---- | M] (McAfee, Inc.) [Kernel | Boot] -- K:\Windows\System32\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013/02/19 08:53:42 | 000,515,968 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2013/02/19 08:53:02 | 000,309,840 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013/02/19 08:52:44 | 000,179,280 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2012/05/11 01:34:14 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- K:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.)
DRV:64bit: - [2012/05/11 01:34:12 | 000,099,384 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- K:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV:64bit: - [2012/04/20 10:40:58 | 000,196,440 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\HipShieldK.sys -- (HipShieldK)
DRV:64bit: - [2011/12/28 19:57:26 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand] -- K:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2011/02/18 12:41:20 | 000,047,664 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\vmwvusb.sys -- (vmwvusb)
DRV:64bit: - [2010/11/20 07:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/11 08:11:38 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\vmci.sys -- (vmci)
DRV:64bit: - [2010/11/11 08:11:26 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\vmx86.sys -- (vmx86)
DRV:64bit: - [2010/11/11 08:09:34 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\VMkbd.sys -- (vmkbd)
DRV:64bit: - [2010/11/11 08:09:24 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:64bit: - [2010/11/11 06:31:32 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\hcmon.sys -- (hcmon)
DRV:64bit: - [2010/11/11 04:04:52 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:64bit: - [2010/11/11 04:04:52 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:64bit: - [2010/10/21 21:00:00 | 000,714,368 | ---- | M] (AVM GmbH) [Kernel | On_Demand] -- K:\Windows\System32\drivers\fwlanusbn.sys -- (fwlanusbn)
DRV:64bit: - [2010/10/21 21:00:00 | 000,014,120 | R--- | M] (AVM Berlin) [Kernel | On_Demand] -- K:\Windows\System32\drivers\avmeject.sys -- (avmeject)
DRV:64bit: - [2010/08/19 07:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto] -- K:\Program Files\VMware\VMware View\Client\Local Mode\vstor2-ws60.sys -- (vstor2-ws60)
DRV:64bit: - [2010/04/02 21:28:28 | 000,894,592 | ---- | M] (Line 6) [Kernel | On_Demand] -- K:\Windows\System32\drivers\GPWADrv64.sys -- (GPWADrv) Service for L6 GuitarPort Driver (WDM)
DRV:64bit: - [2009/11/18 02:21:18 | 006,171,136 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009/10/29 04:14:38 | 000,115,824 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot] -- K:\Windows\System32\drivers\jraid.sys -- (JRAID)
DRV:64bit: - [2009/10/20 14:19:54 | 000,047,632 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto] -- K:\Windows\System32\drivers\npf.sys -- (NPF)
DRV:64bit: - [2009/09/29 21:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand] -- K:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009/09/23 05:11:04 | 000,283,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\e1k62x64.sys -- (e1kexpress) Intel(R)
DRV:64bit: - [2009/09/17 00:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:64bit: - [2009/08/06 09:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto] -- K:\Windows\System32\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2009/07/13 20:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2009/07/13 20:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\WSDScan.sys -- (WSDScan)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- K:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- K:\Windows\system32\DRIVERS\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- K:\Windows\system32\DRIVERS\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- K:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/02 07:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- K:\Windows\System32\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:64bit: - [2009/06/02 07:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System] -- K:\Windows\System32\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:64bit: - [2009/06/02 07:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System] -- K:\Windows\System32\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\Rainer_ON_K\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5811&r=17360610m916pe475v1m5w55n1u342
IE - HKU\Rainer_ON_K\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig
IE - HKU\Rainer_ON_K\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - K:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
IE - HKU\Rainer_ON_K\..\URLSearchHook: {f0381dbd-e018-4e07-ae40-d96ab15083f0} - Reg Error: Key error. File not found
IE - HKU\Rainer_ON_K\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Rainer_ON_K\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = fritz.box
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: K:\Program Files\McAfee\MSC\npMcSnFFPl64.dll ()
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: K:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@canon.com/EPPEX: K:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@canon.com/MycameraPlugin: K:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: K:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: K:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@logitech.com/HarmonyRemote,version=1.0.0: K:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll (Logitech Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10: K:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll ()
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@mcafee.com/SAFFPlugin: K:\Program Files (x86)\McAfee\SiteAdvisor\NPMcFFPlg32.dll (McAfee, Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: K:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: K:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: K:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: K:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: K:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader: K:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013/02/08 12:25:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2013/03/09 09:44:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013/05/14 11:48:45 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - K:\Windows\System32\drivers\etc\hosts
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - K:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120626202339.dll (McAfee, Inc.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - K:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - K:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - K:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - K:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - K:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120626202339.dll (McAfee, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - K:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - K:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - K:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - K:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - K:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - K:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKU\Rainer_ON_K\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - K:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\Rainer_ON_K\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - K:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] K:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [CanonSolutionMenu] K:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [mwlDaemon] K:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Egis Technology Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] K:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [ArcadeDeluxeAgent] K:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [AVMWlanClient] K:\Program Files (x86)\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKLM..\Run: [BackupManagerTray] K:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [Hotkey Utility] K:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe ()
O4 - HKLM..\Run: [IAStorIcon] K:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [JMB36X IDE Setup] K:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [mcui_exe] K:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [PlayMovie] K:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
O4 - HKLM..\Run: [StartCCC] K:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\LocalService_ON_K..\Run: [Sidebar] K:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_K..\Run: [Sidebar] K:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\Rainer_ON_K..\Run: [NortonOnlineBackupReminder] K:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
O4 - HKU\Rainer_ON_K..\Run: [qcgce2mrvjq91kk1e7pnbb19m52fx]  File not found
O4 - HKU\LocalService_ON_K..\RunOnce: [mctadmin]  File not found
O4 - HKU\NetworkService_ON_K..\RunOnce: [mctadmin]  File not found
O4 - Startup: Error locating startup folders.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000011 - K:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000012 - K:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - K:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - K:\Program Files\VMware\VMware View\Client\Local Mode\vsocklib.dll (VMware, Inc.)
O13:64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - Rainer_ON_K\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15:64bit: - Rainer_ON_K\..Trusted Domains: fritz.repeater ([]* in Lokales Intranet)
O15:64bit: - Rainer_ON_K\..Trusted Domains: line6.net ([]* in Vertrauenswürdige Sites)
O15:64bit: - Rainer_ON_K\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O15:64bit: - Rainer_ON_K\..Trusted Ranges: Range2 ([*] in Lokales Intranet)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (WRC Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - K:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - K:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - K:\Program Files\McAfee\MSC\McSnIePl64.dll (McAfee, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - K:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - K:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - K:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKU\Rainer_ON_K Winlogon: Shell - (cmd.exe) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (wsauth) - K:\Windows\System32\wsauth.dll (VMware, Inc.)
O30 - LSA: Security Packages - (wsauth) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - D:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2009/04/06 15:02:32 | 000,000,000 | ---D | M] - D:\autorun -- [ FAT32 ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
64bit: O35 - HKLM\..comfile [open] -- "%1" %* File not found
64bit: O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpReg: EgisTecLiveUpdate - hkey= - key= - K:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.)
MsConfig:64bit - StartUpReg: NortonOnlineBackupReminder - hkey= - key= - K:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
MsConfig:64bit - StartUpReg: Steam - hkey= - key= - K:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
MsConfig:64bit - State: "startup" - 2
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013/05/17 19:07:40 | 000,000,000 | ---D | C] -- K:\_OTL
[2013/05/17 13:20:18 | 000,000,000 | ---D | C] -- K:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/05/16 23:24:48 | 000,000,000 | -HSD | C] -- K:\RECYCLER
[2013/05/16 00:50:33 | 000,096,768 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\mshtmled.dll
[2013/05/16 00:50:33 | 000,073,216 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\mshtmled.dll
[2013/05/16 00:50:32 | 000,248,320 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\ieui.dll
[2013/05/16 00:50:32 | 000,237,056 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\url.dll
[2013/05/16 00:50:32 | 000,231,936 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\url.dll
[2013/05/16 00:50:32 | 000,176,640 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\ieui.dll
[2013/05/16 00:50:32 | 000,173,056 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\ieUnatt.exe
[2013/05/16 00:50:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\ieUnatt.exe
[2013/05/16 00:50:31 | 002,312,704 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\jscript9.dll
[2013/05/16 00:50:31 | 001,494,528 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\inetcpl.cpl
[2013/05/16 00:50:31 | 001,427,968 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\inetcpl.cpl
[2013/05/16 00:50:31 | 000,729,088 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\msfeeds.dll
[2013/05/16 00:50:31 | 000,607,744 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\msfeeds.dll
[2013/05/16 00:50:30 | 001,800,704 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\jscript9.dll
[2013/05/16 00:50:30 | 000,816,640 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\jscript.dll
[2013/05/16 00:50:30 | 000,717,824 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\jscript.dll
[2013/05/16 00:50:30 | 000,599,040 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\vbscript.dll
[2013/05/15 21:41:35 | 000,265,064 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\drivers\dxgmms1.sys
[2013/05/15 21:41:35 | 000,144,384 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\cdd.dll
[2013/05/15 21:41:25 | 001,930,752 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\authui.dll
[2013/05/15 21:41:25 | 000,197,120 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\shdocvw.dll
[2013/05/15 21:41:24 | 001,796,096 | ---- | C] (Microsoft Corporation) -- K:\Windows\SysWow64\authui.dll
[2013/05/15 21:41:24 | 000,111,448 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\consent.exe
[2013/05/15 21:41:15 | 000,048,640 | ---- | C] (Microsoft Corporation) -- K:\Windows\System32\wwanprotdim.dll
[2013/05/15 17:28:27 | 000,000,000 | ---D | C] -- K:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebEx
[2013/05/15 17:28:27 | 000,000,000 | ---D | C] -- K:\Program Files (x86)\WebEx
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- K:\Users\Rainer\AppData\Roaming\Qofyzu
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- K:\Users\Rainer\AppData\Roaming\Itsim
[2013/04/30 16:51:00 | 000,000,000 | ---D | C] -- K:\Users\Rainer\AppData\Roaming\Coce
[2009/11/18 17:40:11 | 000,036,136 | ---- | C] (Oberon Media) -- K:\ProgramData\FullRemove.exe
 
========== Files - Modified Within 30 Days ==========
 
[2013/05/17 15:23:09 | 000,067,584 | --S- | M] () -- K:\Windows\bootstat.dat
[2013/05/17 15:23:04 | 000,009,696 | -H-- | M] () -- K:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/05/17 15:23:04 | 000,009,696 | -H-- | M] () -- K:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/05/17 15:19:52 | 000,001,106 | ---- | M] () -- K:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/17 15:19:33 | 504,676,351 | -HS- | M] () -- K:\hiberfil.sys
[2013/05/17 13:20:18 | 000,000,000 | ---D | M] -- K:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013/05/17 13:17:49 | 000,656,872 | ---- | M] () -- K:\Windows\System32\perfh007.dat
[2013/05/17 13:17:49 | 000,618,754 | ---- | M] () -- K:\Windows\System32\perfh009.dat
[2013/05/17 13:17:49 | 000,131,270 | ---- | M] () -- K:\Windows\System32\perfc007.dat
[2013/05/17 13:17:49 | 000,107,660 | ---- | M] () -- K:\Windows\System32\perfc009.dat
[2013/05/16 11:52:29 | 000,163,054 | ---- | M] () -- K:\Users\Rainer\AppData\Local\2433f433
[2013/05/16 11:52:29 | 000,163,044 | ---- | M] () -- K:\ProgramData\2433f433
[2013/05/16 11:52:29 | 000,163,017 | ---- | M] () -- K:\Users\Rainer\AppData\Roaming\2433f433
[2013/05/16 11:43:00 | 000,427,160 | ---- | M] () -- K:\Windows\System32\FNTCACHE.DAT
[2013/05/16 00:06:00 | 000,001,110 | ---- | M] () -- K:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/16 00:03:00 | 000,000,884 | ---- | M] () -- K:\Windows\tasks\Adobe Flash Player Updater.job
[2013/05/15 17:48:43 | 000,002,052 | -H-- | M] () -- K:\Users\Rainer\Documents\Default.rdp
[2013/05/15 17:28:27 | 000,000,000 | ---D | M] -- K:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebEx
[2013/05/14 14:03:11 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- K:\Windows\SysWow64\FlashPlayerApp.exe
[2013/05/14 14:03:11 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- K:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/05/09 15:50:57 | 000,001,137 | ---- | M] () -- K:\Users\Rainer\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
 
========== Files Created - No Company Name ==========
 
[2013/05/16 11:52:29 | 000,163,054 | ---- | C] () -- K:\Users\Rainer\AppData\Local\2433f433
[2013/05/16 11:52:29 | 000,163,044 | ---- | C] () -- K:\ProgramData\2433f433
[2013/05/16 11:52:29 | 000,163,017 | ---- | C] () -- K:\Users\Rainer\AppData\Roaming\2433f433
[2013/01/16 17:31:20 | 000,000,000 | ---- | C] () -- K:\Users\Rainer\AppData\Roaming\downloads.m3u
[2012/04/06 06:58:20 | 001,526,976 | ---- | C] () -- K:\Windows\SysWow64\PerfStringBackup.INI
[2012/02/09 19:50:17 | 001,688,064 | ---- | C] () -- K:\Windows\SysWow64\fxActivationmt4.exe
[2011/09/16 09:29:02 | 000,007,628 | ---- | C] () -- K:\Users\Rainer\AppData\Local\Resmon.ResmonCfg
[2011/07/08 13:12:22 | 000,252,928 | ---- | C] () -- K:\Windows\SysWow64\DShowRdpFilter.dll
[2011/04/09 12:55:28 | 000,179,261 | ---- | C] () -- K:\Windows\SysWow64\xlive.dll.cat
[2011/04/06 20:43:44 | 000,817,664 | ---- | C] () -- K:\Windows\SysWow64\fgbshownews.exe
[2011/03/13 12:34:51 | 000,000,076 | ---- | C] () -- K:\Windows\wiso.ini
[2010/12/11 15:55:20 | 000,000,197 | ---- | C] () -- K:\Users\Rainer\AppData\Roaming\default.rss
[2010/12/11 15:53:01 | 000,000,069 | ---- | C] () -- K:\Windows\NeroDigital.ini
[2010/12/11 15:18:55 | 000,004,767 | ---- | C] () -- K:\Windows\Irremote.ini
[2010/10/19 13:56:45 | 000,000,230 | ---- | C] () -- K:\Users\Rainer\AppData\Roaming\wklnhst.dat
[2010/07/05 15:38:25 | 000,000,170 | ---- | C] () -- K:\Windows\wininit.ini
[2010/06/19 15:21:16 | 000,000,360 | ---- | C] () -- K:\Windows\GearBox.ini
[2009/11/18 17:23:19 | 000,000,000 | ---- | C] () -- K:\Windows\ativpsrm.bin
[2009/10/20 14:19:30 | 000,053,299 | ---- | C] () -- K:\Windows\SysWow64\pthreadVC.dll
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- K:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- K:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- K:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- K:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- K:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- K:\Windows\SysWow64\ir32_32.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- K:\Windows\SysWow64\msjetoledb40.dll
[2009/06/19 14:06:22 | 000,197,912 | ---- | C] () -- K:\Windows\SysWow64\physxcudart_20.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelSwedish.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelSpanish.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelPortugese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelKorean.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelJapanese.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelGerman.dll
[2009/06/19 14:06:22 | 000,058,648 | ---- | C] () -- K:\Windows\SysWow64\AgCPanelFrench.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- K:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011/07/11 14:50:13 | 000,000,000 | ---D | M] -- K:\ProgramData\AAV
[2009/11/18 17:54:27 | 000,000,000 | ---D | M] -- K:\ProgramData\Acer
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\ProgramData\Anwendungsdaten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Application Data
[2010/10/03 13:15:04 | 000,000,000 | ---D | M] -- K:\ProgramData\ashampoo
[2009/11/18 17:47:15 | 000,000,000 | ---D | M] -- K:\ProgramData\BackupManager
[2010/06/29 08:18:47 | 000,000,000 | -H-D | M] -- K:\ProgramData\CanonBJ
[2010/11/22 14:26:57 | 000,000,000 | -H-D | M] -- K:\ProgramData\CanonIJEGV
[2010/09/12 11:41:26 | 000,000,000 | -H-D | M] -- K:\ProgramData\CanonIJScan
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Desktop
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Documents
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\ProgramData\Dokumente
[2009/11/18 18:10:55 | 000,000,000 | ---D | M] -- K:\ProgramData\EgisTec
[2010/06/21 13:50:28 | 000,000,000 | ---D | M] -- K:\ProgramData\Electronic Arts
[2009/11/18 18:08:38 | 000,000,000 | ---D | M] -- K:\ProgramData\eSobi
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\ProgramData\Favoriten
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Favorites
[2012/08/20 16:27:51 | 000,000,000 | ---D | M] -- K:\ProgramData\InstallMate
[2010/06/19 12:57:28 | 000,000,000 | ---D | M] -- K:\ProgramData\Line 6
[2010/06/19 07:47:00 | 000,000,000 | ---D | M] -- K:\ProgramData\McQcModifier-5c47-a7b0
[2011/09/03 09:39:47 | 000,000,000 | ---D | M] -- K:\ProgramData\MetaQuotes
[2010/11/18 16:57:45 | 000,000,000 | ---D | M] -- K:\ProgramData\Neuro-Programmer 2 Files
[2010/06/19 07:42:59 | 000,000,000 | ---D | M] -- K:\ProgramData\OEM
[2010/07/11 10:33:56 | 000,000,000 | ---D | M] -- K:\ProgramData\Partner
[2012/08/20 16:27:50 | 000,000,000 | ---D | M] -- K:\ProgramData\Premium
[2010/06/19 09:05:45 | 000,000,000 | ---D | M] -- K:\ProgramData\Sandlot Games
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Start Menu
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\ProgramData\Startmenü
[2011/03/15 15:33:33 | 000,000,000 | ---D | M] -- K:\ProgramData\Temp
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\ProgramData\Templates
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\ProgramData\Vorlagen
[2013/03/06 17:40:25 | 000,032,640 | ---- | M] () -- K:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011/09/13 11:11:24 | 000,000,000 | -HSD | M] -- K:\$Recycle.Bin
[2012/09/24 10:21:53 | 000,000,000 | ---D | M] -- K:\book
[2013/05/16 00:57:53 | 000,000,000 | -HSD | M] -- K:\Config.Msi
[2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- K:\Documents and Settings
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\Dokumente und Einstellungen
[2009/11/18 17:30:39 | 000,000,000 | ---D | M] -- K:\Intel
[2010/11/06 19:52:47 | 000,000,000 | RH-D | M] -- K:\MSOCache
[2010/06/19 07:44:08 | 000,000,000 | -H-D | M] -- K:\OEM
[2009/07/13 23:20:08 | 000,000,000 | ---D | M] -- K:\PerfLogs
[2013/03/13 22:01:55 | 000,000,000 | R--D | M] -- K:\Program Files
[2013/05/15 17:28:27 | 000,000,000 | R--D | M] -- K:\Program Files (x86)
[2013/05/16 11:52:29 | 000,000,000 | -H-D | M] -- K:\ProgramData
[2010/06/19 07:42:48 | 000,000,000 | -HSD | M] -- K:\Programme
[2009/11/18 17:35:12 | 000,000,000 | ---D | M] -- K:\RaidTool
[2010/06/19 07:42:49 | 000,000,000 | -HSD | M] -- K:\Recovery
[2013/05/16 23:24:48 | 000,000,000 | -HSD | M] -- K:\RECYCLER
[2013/05/16 00:58:18 | 000,000,000 | -HSD | M] -- K:\System Volume Information
[2012/01/18 16:19:52 | 000,000,000 | ---D | M] -- K:\TEMP
[2012/12/30 10:03:48 | 000,000,000 | R--D | M] -- K:\Users
[2013/05/16 12:06:16 | 000,000,000 | ---D | M] -- K:\Windows
[2013/05/17 19:07:41 | 000,000,000 | ---D | M] -- K:\_OTL
 
< %PROGRAMFILES%\*.exe >
 
Invalid Environment Variable: %LOCALAPPDATA%\*.exe
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- K:\Windows\System32\drivers\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- K:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- K:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- K:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- K:\Windows\System32\drivers\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- K:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- K:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- K:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- K:\Windows\SysWOW64\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- K:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- K:\Windows\System32\cngaudit.dll
[2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- K:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011/02/26 02:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 01:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- K:\Windows\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 02:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/03 02:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- K:\Windows\SysWOW64\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/31 02:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/03 01:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 09:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/31 02:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/03 01:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 21:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/31 02:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- K:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/26 02:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/03 02:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- K:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
 
< MD5 for: IASTOR.SYS  >
[2010/03/03 13:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- K:\Windows\System32\drivers\iaStor.sys
[2010/03/03 13:51:40 | 000,540,696 | ---- | M] (Intel Corporation) MD5=ABBF174CB394F5C437410A788B7E404A -- K:\Windows\System32\DriverStore\FileRepository\iastor.inf_amd64_neutral_d73865c94450cce1\iaStor.sys
[2009/10/13 06:16:40 | 000,409,624 | ---- | M] (Intel Corporation) MD5=BE7D72FCF442C26975942007E0831241 -- K:\Windows\System32\DriverStore\FileRepository\iastor.inf_amd64_neutral_b02a0635da01252b\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010/11/20 09:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- K:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 09:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011/03/11 02:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- K:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- K:\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 02:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011/03/11 02:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011/03/11 02:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009/07/13 21:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- K:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009/07/13 21:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- K:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010/11/20 09:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- K:\Windows\System32\netlogon.dll
[2010/11/20 09:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- K:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010/11/20 08:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- K:\Windows\SysWOW64\netlogon.dll
[2010/11/20 08:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- K:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- K:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2009/07/13 21:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011/03/11 02:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011/03/11 02:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011/03/11 02:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- K:\Windows\System32\drivers\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- K:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 02:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010/11/20 09:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- K:\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 09:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- K:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- K:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009/07/13 21:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- K:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010/11/20 08:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- K:\Windows\SysWOW64\scecli.dll
[2010/11/20 08:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- K:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010/11/20 09:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- K:\Windows\System32\scecli.dll
[2010/11/20 09:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- K:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010/11/20 08:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- K:\Windows\SysWOW64\user32.dll
[2010/11/20 08:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- K:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009/07/13 21:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- K:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009/07/13 21:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- K:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010/11/20 09:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- K:\Windows\System32\user32.dll
[2010/11/20 09:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- K:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- K:\Windows\SysWOW64\userinit.exe
[2010/11/20 08:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- K:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- K:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/13 21:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- K:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- K:\Windows\System32\userinit.exe
[2010/11/20 09:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- K:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- K:\Windows\System32\winlogon.exe
[2010/11/20 09:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- K:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 21:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- K:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009/10/28 03:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- K:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/28 02:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- K:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- K:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 20:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- K:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
Invalid Environment Variable: %USERPROFILE%\*.*
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.exe
 
Invalid Environment Variable: %USERPROFILE%\Local Settings\Temp\*.dll
 
Invalid Environment Variable: %USERPROFILE%\Application Data\*.exe
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 153 bytes -> K:\ProgramData\Temp:4D066AD2
@Alternate Data Stream - 145 bytes -> K:\ProgramData\Temp:157E1AD3
@Alternate Data Stream - 133 bytes -> K:\ProgramData\Temp:93DE1838
@Alternate Data Stream - 100 bytes -> K:\ProgramData\Temp:F87C192A
< End of report >
         

--- --- ---

kann es sein, dass sich die Laufwerksbuchstaben auf einmal geändert haben?

Gruß

bauf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

:OTL
O20 - HKU\Rainer_ON_K Winlogon: Shell - (cmd.exe) -  File not found
:Files
:Commands
[EMPTYFLASH] 
[emptytemp]
         

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.

Hallo,

jetzt hat es geklappt-super. Movedfiles.zip habe ich hochgeladen.

Gruß

danke.
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Hier der log von TDSSKiller:

23:42:37.0527 3680 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
23:42:38.0227 3680 ============================================================
23:42:38.0227 3680 Current date / time: 2013/05/17 23:42:38.0227
23:42:38.0227 3680 SystemInfo:
23:42:38.0227 3680
23:42:38.0227 3680 OS Version: 6.1.7601 ServicePack: 1.0
23:42:38.0227 3680 Product type: Workstation
23:42:38.0227 3680 ComputerName: RAINER-PC
23:42:38.0227 3680 UserName: Rainer
23:42:38.0227 3680 Windows directory: C:\Windows
23:42:38.0227 3680 System windows directory: C:\Windows
23:42:38.0227 3680 Running under WOW64
23:42:38.0227 3680 Processor architecture: Intel x64
23:42:38.0227 3680 Number of processors: 8
23:42:38.0227 3680 Page size: 0x1000
23:42:38.0227 3680 Boot type: Normal boot
23:42:38.0227 3680 ============================================================
23:42:38.0827 3680 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:42:38.0857 3680 Drive \Device\Harddisk6\DR6 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
23:42:39.0317 3680 ============================================================
23:42:39.0317 3680 \Device\Harddisk0\DR0:
23:42:39.0317 3680 MBR partitions:
23:42:39.0317 3680 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
23:42:39.0317 3680 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x394E7000
23:42:39.0317 3680 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B119800, BlocksNum 0x395EC800
23:42:39.0317 3680 \Device\Harddisk6\DR6:
23:42:39.0317 3680 MBR partitions:
23:42:39.0317 3680 \Device\Harddisk6\DR6\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982
23:42:39.0317 3680 ============================================================
23:42:39.0347 3680 C: <-> \Device\Harddisk0\DR0\Partition2
23:42:39.0377 3680 D: <-> \Device\Harddisk0\DR0\Partition3
23:42:39.0377 3680 K: <-> \Device\Harddisk6\DR6\Partition1
23:42:39.0377 3680 ============================================================
23:42:39.0377 3680 Initialize success
23:42:39.0377 3680 ============================================================
23:43:48.0298 6064 ============================================================
23:43:48.0298 6064 Scan started
23:43:48.0298 6064 Mode: Manual; SigCheck; TDLFS;
23:43:48.0298 6064 ============================================================
23:43:48.0858 6064 ================ Scan system memory ========================
23:43:48.0858 6064 System memory - ok
23:43:48.0858 6064 ================ Scan services =============================
23:43:48.0998 6064 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
23:43:49.0118 6064 1394ohci - ok
23:43:49.0208 6064 [ 7EEB488346FBFA3731276C3EE8A8FD9E ] AAV UpdateService C:\Program Files (x86)\AAVUpdateManager\aavus.exe
23:43:49.0288 6064 AAV UpdateService - ok
23:43:49.0338 6064 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
23:43:49.0358 6064 ACPI - ok
23:43:49.0378 6064 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
23:43:49.0518 6064 AcpiPmi - ok
23:43:49.0708 6064 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:43:49.0788 6064 AdobeFlashPlayerUpdateSvc - ok
23:43:49.0808 6064 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
23:43:49.0828 6064 adp94xx - ok
23:43:49.0848 6064 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
23:43:49.0868 6064 adpahci - ok
23:43:49.0898 6064 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
23:43:49.0908 6064 adpu320 - ok
23:43:49.0928 6064 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
23:43:50.0038 6064 AeLookupSvc - ok
23:43:50.0098 6064 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
23:43:50.0228 6064 AFD - ok
23:43:50.0258 6064 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
23:43:50.0278 6064 agp440 - ok
23:43:50.0308 6064 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
23:43:50.0378 6064 ALG - ok
23:43:50.0398 6064 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
23:43:50.0418 6064 aliide - ok
23:43:50.0448 6064 [ 5989D711769200F0F3E145319250472B ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe
23:43:50.0568 6064 AMD External Events Utility - ok
23:43:50.0608 6064 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
23:43:50.0628 6064 amdide - ok
23:43:50.0648 6064 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
23:43:50.0708 6064 AmdK8 - ok
23:43:50.0718 6064 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
23:43:50.0768 6064 AmdPPM - ok
23:43:50.0788 6064 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
23:43:50.0858 6064 amdsata - ok
23:43:50.0868 6064 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
23:43:50.0878 6064 amdsbs - ok
23:43:50.0888 6064 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
23:43:50.0938 6064 amdxata - ok
23:43:50.0948 6064 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
23:43:51.0108 6064 AppID - ok
23:43:51.0128 6064 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
23:43:51.0188 6064 AppIDSvc - ok
23:43:51.0208 6064 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
23:43:51.0268 6064 Appinfo - ok
23:43:51.0288 6064 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
23:43:51.0318 6064 arc - ok
23:43:51.0328 6064 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
23:43:51.0358 6064 arcsas - ok
23:43:51.0388 6064 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
23:43:51.0458 6064 AsyncMac - ok
23:43:51.0478 6064 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
23:43:51.0488 6064 atapi - ok
23:43:51.0528 6064 [ FB7602C5C508BE281368AAE0B61B51C6 ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys
23:43:51.0578 6064 AtiHdmiService - ok
23:43:51.0708 6064 [ B5FB227A09A9EC28163FA4B45487C3C7 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
23:43:51.0828 6064 atikmdag - ok
23:43:51.0858 6064 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
23:43:51.0938 6064 AudioEndpointBuilder - ok
23:43:51.0948 6064 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
23:43:51.0978 6064 AudioSrv - ok
23:43:52.0048 6064 [ C6F4C466B654C1BE98AF31418BB5AC30 ] AVM WLAN Connection Service C:\Program Files (x86)\avmwlanstick\WlanNetService.exe
23:43:52.0178 6064 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - warning
23:43:52.0178 6064 AVM WLAN Connection Service - detected UnsignedFile.Multi.Generic (1)
23:43:52.0218 6064 [ 1DC2F715792CF33428AD7993ACBD224D ] avmeject C:\Windows\system32\drivers\avmeject.sys
23:43:52.0278 6064 avmeject - ok
23:43:52.0318 6064 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
23:43:52.0388 6064 AxInstSV - ok
23:43:52.0428 6064 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
23:43:52.0448 6064 b06bdrv - ok
23:43:52.0488 6064 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
23:43:52.0518 6064 b57nd60a - ok
23:43:52.0538 6064 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
23:43:52.0568 6064 BDESVC - ok
23:43:52.0618 6064 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
23:43:52.0688 6064 Beep - ok
23:43:52.0728 6064 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
23:43:52.0798 6064 BFE - ok
23:43:52.0858 6064 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
23:43:52.0978 6064 BITS - ok
23:43:53.0018 6064 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
23:43:53.0058 6064 blbdrive - ok
23:43:53.0108 6064 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
23:43:53.0208 6064 bowser - ok
23:43:53.0218 6064 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
23:43:53.0278 6064 BrFiltLo - ok
23:43:53.0288 6064 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
23:43:53.0308 6064 BrFiltUp - ok
23:43:53.0338 6064 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
23:43:53.0398 6064 Browser - ok
23:43:53.0408 6064 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
23:43:53.0458 6064 Brserid - ok
23:43:53.0468 6064 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
23:43:53.0488 6064 BrSerWdm - ok
23:43:53.0508 6064 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
23:43:53.0558 6064 BrUsbMdm - ok
23:43:53.0578 6064 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
23:43:53.0608 6064 BrUsbSer - ok
23:43:53.0618 6064 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
23:43:53.0658 6064 BTHMODEM - ok
23:43:53.0688 6064 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
23:43:53.0748 6064 bthserv - ok
23:43:53.0808 6064 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
23:43:53.0868 6064 cdfs - ok
23:43:53.0888 6064 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
23:43:53.0938 6064 cdrom - ok
23:43:53.0968 6064 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
23:43:54.0048 6064 CertPropSvc - ok
23:43:54.0088 6064 [ D2B3252AD4EB499C935A56467997AA3C ] cfwids C:\Windows\system32\drivers\cfwids.sys
23:43:54.0158 6064 cfwids - ok
23:43:54.0168 6064 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
23:43:54.0178 6064 circlass - ok
23:43:54.0228 6064 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
23:43:54.0268 6064 CLFS - ok
23:43:54.0328 6064 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:43:54.0348 6064 clr_optimization_v2.0.50727_32 - ok
23:43:54.0388 6064 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
23:43:54.0418 6064 clr_optimization_v2.0.50727_64 - ok
23:43:54.0508 6064 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:43:54.0528 6064 clr_optimization_v4.0.30319_32 - ok
23:43:54.0578 6064 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
23:43:54.0598 6064 clr_optimization_v4.0.30319_64 - ok
23:43:54.0608 6064 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
23:43:54.0638 6064 CmBatt - ok
23:43:54.0648 6064 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
23:43:54.0668 6064 cmdide - ok
23:43:54.0688 6064 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
23:43:54.0738 6064 CNG - ok
23:43:54.0738 6064 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
23:43:54.0748 6064 Compbatt - ok
23:43:54.0758 6064 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
23:43:54.0828 6064 CompositeBus - ok
23:43:54.0828 6064 COMSysApp - ok
23:43:54.0848 6064 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
23:43:54.0858 6064 crcdisk - ok
23:43:54.0888 6064 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
23:43:54.0938 6064 CryptSvc - ok
23:43:54.0968 6064 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
23:43:55.0028 6064 DcomLaunch - ok
23:43:55.0048 6064 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
23:43:55.0108 6064 defragsvc - ok
23:43:55.0138 6064 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
23:43:55.0218 6064 DfsC - ok
23:43:55.0268 6064 [ 6060106CE00F32F63F1A73160E46E9D2 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
23:43:55.0338 6064 dg_ssudbus - ok
23:43:55.0358 6064 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
23:43:55.0418 6064 Dhcp - ok
23:43:55.0438 6064 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
23:43:55.0458 6064 discache - ok
23:43:55.0478 6064 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
23:43:55.0488 6064 Disk - ok
23:43:55.0528 6064 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
23:43:55.0618 6064 Dnscache - ok
23:43:55.0648 6064 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
23:43:55.0718 6064 dot3svc - ok
23:43:55.0738 6064 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
23:43:55.0798 6064 DPS - ok
23:43:55.0808 6064 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
23:43:55.0838 6064 drmkaud - ok
23:43:55.0888 6064 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
23:43:55.0988 6064 DXGKrnl - ok
23:43:55.0998 6064 [ 52A482DC61F24B498C8268866B90BB44 ] e1kexpress C:\Windows\system32\DRIVERS\e1k62x64.sys
23:43:56.0048 6064 e1kexpress - ok
23:43:56.0058 6064 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
23:43:56.0098 6064 EapHost - ok
23:43:56.0158 6064 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
23:43:56.0278 6064 ebdrv - ok
23:43:56.0318 6064 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
23:43:56.0408 6064 EFS - ok
23:43:56.0458 6064 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
23:43:56.0588 6064 ehRecvr - ok
23:43:56.0588 6064 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
23:43:56.0638 6064 ehSched - ok
23:43:56.0658 6064 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
23:43:56.0688 6064 elxstor - ok
23:43:56.0708 6064 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
23:43:56.0738 6064 ErrDev - ok
23:43:56.0808 6064 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
23:43:56.0868 6064 EventSystem - ok
23:43:56.0878 6064 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
23:43:56.0908 6064 exfat - ok
23:43:56.0938 6064 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
23:43:57.0008 6064 fastfat - ok
23:43:57.0038 6064 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
23:43:57.0128 6064 Fax - ok
23:43:57.0148 6064 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
23:43:57.0178 6064 fdc - ok
23:43:57.0208 6064 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
23:43:57.0278 6064 fdPHost - ok
23:43:57.0298 6064 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
23:43:57.0338 6064 FDResPub - ok
23:43:57.0358 6064 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
23:43:57.0368 6064 FileInfo - ok
23:43:57.0388 6064 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
23:43:57.0408 6064 Filetrace - ok
23:43:57.0428 6064 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
23:43:57.0438 6064 flpydisk - ok
23:43:57.0448 6064 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
23:43:57.0488 6064 FltMgr - ok
23:43:57.0528 6064 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
23:43:57.0618 6064 FontCache - ok
23:43:57.0668 6064 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:43:57.0738 6064 FontCache3.0.0.0 - ok
23:43:57.0738 6064 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
23:43:57.0758 6064 FsDepends - ok
23:43:57.0778 6064 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
23:43:57.0858 6064 Fs_Rec - ok
23:43:57.0898 6064 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
23:43:57.0988 6064 fvevol - ok
23:43:58.0028 6064 [ 15585492E45E2F30768B2D5B57929D99 ] fwlanusbn C:\Windows\system32\DRIVERS\fwlanusbn.sys
23:43:58.0148 6064 fwlanusbn - ok
23:43:58.0158 6064 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
23:43:58.0188 6064 gagp30kx - ok
23:43:58.0218 6064 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
23:43:58.0268 6064 gpsvc - ok
23:43:58.0298 6064 [ 0FFD454EFAC2882E366D598163CCA6E7 ] GPWADrv C:\Windows\system32\Drivers\GPWADrv64.sys
23:43:58.0348 6064 GPWADrv - ok
23:43:58.0418 6064 [ 816FD5A6F3C2F3D600900096632FC60E ] Greg_Service C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
23:43:58.0518 6064 Greg_Service - ok
23:43:58.0588 6064 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:43:58.0678 6064 gupdate - ok
23:43:58.0698 6064 [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:43:58.0708 6064 gupdatem - ok
23:43:58.0738 6064 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
23:43:58.0788 6064 gusvc - ok
23:43:58.0808 6064 [ BA207B48AA3D9D73FD4856400F852458 ] hcmon C:\Windows\system32\drivers\hcmon.sys
23:43:58.0848 6064 hcmon - ok
23:43:58.0858 6064 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
23:43:58.0898 6064 hcw85cir - ok
23:43:58.0918 6064 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
23:43:58.0988 6064 HdAudAddService - ok
23:43:59.0008 6064 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
23:43:59.0038 6064 HDAudBus - ok
23:43:59.0048 6064 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
23:43:59.0098 6064 HECIx64 - ok
23:43:59.0108 6064 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
23:43:59.0128 6064 HidBatt - ok
23:43:59.0148 6064 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
23:43:59.0188 6064 HidBth - ok
23:43:59.0198 6064 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
23:43:59.0248 6064 HidIr - ok
23:43:59.0268 6064 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
23:43:59.0328 6064 hidserv - ok
23:43:59.0338 6064 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
23:43:59.0398 6064 HidUsb - ok
23:43:59.0428 6064 [ A894FB2CAE6A29F5D9C8EDA47B074623 ] HipShieldK C:\Windows\system32\drivers\HipShieldK.sys
23:43:59.0498 6064 HipShieldK - ok
23:43:59.0518 6064 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
23:43:59.0588 6064 hkmsvc - ok
23:43:59.0608 6064 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
23:43:59.0668 6064 HomeGroupListener - ok
23:43:59.0688 6064 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
23:43:59.0728 6064 HomeGroupProvider - ok
23:43:59.0738 6064 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
23:43:59.0778 6064 HpSAMD - ok
23:43:59.0818 6064 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
23:43:59.0898 6064 HTTP - ok
23:43:59.0938 6064 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
23:43:59.0968 6064 hwpolicy - ok
23:43:59.0998 6064 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
23:44:00.0008 6064 i8042prt - ok
23:44:00.0028 6064 [ ABBF174CB394F5C437410A788B7E404A ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
23:44:00.0038 6064 iaStor - ok
23:44:00.0128 6064 [ 31A0E93CDF29007D6C6FFFB632F375ED ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
23:44:00.0138 6064 IAStorDataMgrSvc - ok
23:44:00.0168 6064 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
23:44:00.0248 6064 iaStorV - ok
23:44:00.0278 6064 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
23:44:00.0358 6064 idsvc - ok
23:44:00.0368 6064 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
23:44:00.0378 6064 iirsp - ok
23:44:00.0418 6064 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
23:44:00.0508 6064 IKEEXT - ok
23:44:00.0598 6064 [ 42943BB3AB7A405B30EFF7C8283CC129 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
23:44:00.0678 6064 IntcAzAudAddService - ok
23:44:00.0688 6064 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
23:44:00.0698 6064 intelide - ok
23:44:00.0708 6064 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
23:44:00.0738 6064 intelppm - ok
23:44:00.0778 6064 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
23:44:00.0828 6064 IPBusEnum - ok
23:44:00.0838 6064 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
23:44:00.0908 6064 IpFilterDriver - ok
23:44:00.0928 6064 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
23:44:00.0978 6064 iphlpsvc - ok
23:44:00.0988 6064 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
23:44:01.0038 6064 IPMIDRV - ok
23:44:01.0048 6064 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
23:44:01.0088 6064 IPNAT - ok
23:44:01.0108 6064 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
23:44:01.0158 6064 IRENUM - ok
23:44:01.0178 6064 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
23:44:01.0198 6064 isapnp - ok
23:44:01.0228 6064 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
23:44:01.0308 6064 iScsiPrt - ok
23:44:01.0338 6064 [ 75DDB94A2A24F9F7037D10A2DDA06D36 ] JRAID C:\Windows\system32\DRIVERS\jraid.sys
23:44:01.0388 6064 JRAID - ok
23:44:01.0398 6064 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
23:44:01.0408 6064 kbdclass - ok
23:44:01.0418 6064 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
23:44:01.0458 6064 kbdhid - ok
23:44:01.0468 6064 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
23:44:01.0478 6064 KeyIso - ok
23:44:01.0498 6064 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
23:44:01.0538 6064 KSecDD - ok
23:44:01.0558 6064 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
23:44:01.0608 6064 KSecPkg - ok
23:44:01.0618 6064 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
23:44:01.0648 6064 ksthunk - ok
23:44:01.0668 6064 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
23:44:01.0728 6064 KtmRm - ok
23:44:01.0768 6064 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
23:44:01.0818 6064 LanmanServer - ok
23:44:01.0848 6064 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
23:44:01.0908 6064 LanmanWorkstation - ok
23:44:01.0928 6064 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
23:44:01.0978 6064 lltdio - ok
23:44:01.0998 6064 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
23:44:02.0068 6064 lltdsvc - ok
23:44:02.0078 6064 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
23:44:02.0108 6064 lmhosts - ok
23:44:02.0178 6064 [ A1C148801B4AF64847AEB9F3AD9594EF ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
23:44:02.0298 6064 LMS ( UnsignedFile.Multi.Generic ) - warning
23:44:02.0298 6064 LMS - detected UnsignedFile.Multi.Generic (1)
23:44:02.0308 6064 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
23:44:02.0328 6064 LSI_FC - ok
23:44:02.0358 6064 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
23:44:02.0368 6064 LSI_SAS - ok
23:44:02.0378 6064 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
23:44:02.0388 6064 LSI_SAS2 - ok
23:44:02.0408 6064 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
23:44:02.0418 6064 LSI_SCSI - ok
23:44:02.0448 6064 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
23:44:02.0488 6064 luafv - ok
23:44:02.0578 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McAfee SiteAdvisor Service C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0648 6064 McAfee SiteAdvisor Service - ok
23:44:02.0668 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McMPFSvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0668 6064 McMPFSvc - ok
23:44:02.0678 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] mcmscsvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0688 6064 mcmscsvc - ok
23:44:02.0708 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McNaiAnn C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0718 6064 McNaiAnn - ok
23:44:02.0738 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McNASvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0748 6064 McNASvc - ok
23:44:02.0818 6064 [ 1814532DB0404C5FB65AA3EB051B2BE5 ] McODS C:\Program Files\McAfee\VirusScan\mcods.exe
23:44:02.0848 6064 McODS - ok
23:44:02.0848 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McProxy C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:02.0868 6064 McProxy - ok
23:44:02.0908 6064 [ 21F81090A00932C5E96700EDF2977582 ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
23:44:02.0968 6064 McShield - ok
23:44:02.0998 6064 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
23:44:03.0068 6064 Mcx2Svc - ok
23:44:03.0078 6064 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
23:44:03.0088 6064 megasas - ok
23:44:03.0108 6064 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
23:44:03.0128 6064 MegaSR - ok
23:44:03.0158 6064 [ B1720E97FABBDF7D30B36DAF19C3DEE8 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
23:44:03.0218 6064 mfeapfk - ok
23:44:03.0268 6064 [ 113F1534B80D65DFDCA660F19967A3B7 ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
23:44:03.0328 6064 mfeavfk - ok
23:44:03.0378 6064 mfeavfk01 - ok
23:44:03.0408 6064 [ C4F521310E40327BBC8E8E71DA344F48 ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
23:44:03.0478 6064 mfefire - ok
23:44:03.0518 6064 [ CECC9841D036EE008091825272D91331 ] mfefirek C:\Windows\system32\drivers\mfefirek.sys
23:44:03.0588 6064 mfefirek - ok
23:44:03.0638 6064 [ EF0F85EDBDF6C0AB467E88E0CEE2B346 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
23:44:03.0728 6064 mfehidk - ok
23:44:03.0768 6064 [ 6E3A46BF6CBB80450CC24F80FE03ED5A ] mferkdet C:\Windows\system32\drivers\mferkdet.sys
23:44:03.0838 6064 mferkdet - ok
23:44:03.0888 6064 [ 341BFCAA3A55C08E8C9ECB1654ACA905 ] mfevtp C:\Windows\system32\mfevtps.exe
23:44:03.0958 6064 mfevtp - ok
23:44:03.0988 6064 [ 2802D09F1B6ED502237539563F3C4992 ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
23:44:04.0038 6064 mfewfpk - ok
23:44:04.0128 6064 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
23:44:04.0198 6064 Microsoft Office Groove Audit Service - ok
23:44:04.0228 6064 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
23:44:04.0288 6064 MMCSS - ok
23:44:04.0318 6064 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
23:44:04.0338 6064 Modem - ok
23:44:04.0358 6064 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
23:44:04.0378 6064 monitor - ok
23:44:04.0398 6064 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
23:44:04.0408 6064 mouclass - ok
23:44:04.0418 6064 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
23:44:04.0428 6064 mouhid - ok
23:44:04.0438 6064 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
23:44:04.0488 6064 mountmgr - ok
23:44:04.0508 6064 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
23:44:04.0548 6064 mpio - ok
23:44:04.0558 6064 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
23:44:04.0588 6064 mpsdrv - ok
23:44:04.0608 6064 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
23:44:04.0688 6064 MpsSvc - ok
23:44:04.0708 6064 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
23:44:04.0768 6064 MRxDAV - ok
23:44:04.0778 6064 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
23:44:04.0828 6064 mrxsmb - ok
23:44:04.0848 6064 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
23:44:04.0888 6064 mrxsmb10 - ok
23:44:04.0898 6064 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
23:44:04.0948 6064 mrxsmb20 - ok
23:44:04.0968 6064 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
23:44:05.0018 6064 msahci - ok
23:44:05.0038 6064 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
23:44:05.0088 6064 msdsm - ok
23:44:05.0108 6064 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
23:44:05.0128 6064 MSDTC - ok
23:44:05.0148 6064 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
23:44:05.0178 6064 Msfs - ok
23:44:05.0188 6064 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
23:44:05.0218 6064 mshidkmdf - ok
23:44:05.0228 6064 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
23:44:05.0238 6064 msisadrv - ok
23:44:05.0258 6064 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
23:44:05.0288 6064 MSiSCSI - ok
23:44:05.0288 6064 msiserver - ok
23:44:05.0328 6064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] MSK80Service C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
23:44:05.0338 6064 MSK80Service - ok
23:44:05.0368 6064 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
23:44:05.0418 6064 MSKSSRV - ok
23:44:05.0438 6064 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
23:44:05.0478 6064 MSPCLOCK - ok
23:44:05.0498 6064 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
23:44:05.0538 6064 MSPQM - ok
23:44:05.0558 6064 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
23:44:05.0598 6064 MsRPC - ok
23:44:05.0628 6064 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
23:44:05.0638 6064 mssmbios - ok
23:44:05.0668 6064 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
23:44:05.0738 6064 MSTEE - ok
23:44:05.0748 6064 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
23:44:05.0758 6064 MTConfig - ok
23:44:05.0778 6064 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
23:44:05.0788 6064 Mup - ok
23:44:05.0818 6064 [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
23:44:05.0858 6064 mwlPSDFilter - ok
23:44:05.0868 6064 [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
23:44:05.0908 6064 mwlPSDNServ - ok
23:44:05.0918 6064 [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
23:44:05.0958 6064 mwlPSDVDisk - ok
23:44:06.0038 6064 [ 2F139207F618EC2933830227EEFFDDB4 ] MWLService C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
23:44:06.0108 6064 MWLService - ok
23:44:06.0128 6064 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
23:44:06.0188 6064 napagent - ok
23:44:06.0238 6064 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
23:44:06.0288 6064 NativeWifiP - ok
23:44:06.0328 6064 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
23:44:06.0348 6064 NDIS - ok
23:44:06.0368 6064 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
23:44:06.0398 6064 NdisCap - ok
23:44:06.0408 6064 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
23:44:06.0438 6064 NdisTapi - ok
23:44:06.0438 6064 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
23:44:06.0498 6064 Ndisuio - ok
23:44:06.0528 6064 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
23:44:06.0598 6064 NdisWan - ok
23:44:06.0618 6064 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
23:44:06.0698 6064 NDProxy - ok
23:44:06.0808 6064 [ B90E093E7A7250906F1054418B5339C0 ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
23:44:06.0898 6064 Nero BackItUp Scheduler 4.0 - ok
23:44:06.0908 6064 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
23:44:06.0948 6064 NetBIOS - ok
23:44:06.0968 6064 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
23:44:07.0028 6064 NetBT - ok
23:44:07.0048 6064 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
23:44:07.0058 6064 Netlogon - ok
23:44:07.0098 6064 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
23:44:07.0138 6064 Netman - ok
23:44:07.0188 6064 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
23:44:07.0248 6064 netprofm - ok
23:44:07.0298 6064 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:44:07.0318 6064 NetTcpPortSharing - ok
23:44:07.0348 6064 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
23:44:07.0368 6064 nfrd960 - ok
23:44:07.0398 6064 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
23:44:07.0458 6064 NlaSvc - ok
23:44:07.0488 6064 [ C31FA031335EFF434B2D94278E74BCCE ] NPF C:\Windows\system32\drivers\npf.sys
23:44:07.0538 6064 NPF - ok
23:44:07.0578 6064 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
23:44:07.0608 6064 Npfs - ok
23:44:07.0628 6064 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
23:44:07.0668 6064 nsi - ok
23:44:07.0678 6064 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
23:44:07.0728 6064 nsiproxy - ok
23:44:07.0788 6064 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
23:44:07.0878 6064 Ntfs - ok
23:44:07.0918 6064 [ BD691091AC7D9713D8F0B07C6B099E6C ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
23:44:07.0988 6064 NTI IScheduleSvc - ok
23:44:08.0028 6064 [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
23:44:08.0068 6064 NTIDrvr - ok
23:44:08.0088 6064 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
23:44:08.0118 6064 Null - ok
23:44:08.0128 6064 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
23:44:08.0178 6064 nvraid - ok
23:44:08.0188 6064 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
23:44:08.0238 6064 nvstor - ok
23:44:08.0248 6064 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
23:44:08.0258 6064 nv_agp - ok
23:44:08.0318 6064 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
23:44:08.0388 6064 odserv - ok
23:44:08.0398 6064 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
23:44:08.0408 6064 ohci1394 - ok
23:44:08.0448 6064 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:44:08.0488 6064 ose - ok
23:44:08.0528 6064 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
23:44:08.0588 6064 p2pimsvc - ok
23:44:08.0618 6064 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
23:44:08.0648 6064 p2psvc - ok
23:44:08.0658 6064 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
23:44:08.0668 6064 Parport - ok
23:44:08.0678 6064 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
23:44:08.0728 6064 partmgr - ok
23:44:08.0758 6064 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
23:44:08.0808 6064 PcaSvc - ok
23:44:08.0848 6064 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
23:44:08.0928 6064 pci - ok
23:44:08.0938 6064 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
23:44:08.0948 6064 pciide - ok
23:44:08.0958 6064 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
23:44:08.0978 6064 pcmcia - ok
23:44:09.0008 6064 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
23:44:09.0028 6064 pcw - ok
23:44:09.0058 6064 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
23:44:09.0108 6064 PEAUTH - ok
23:44:09.0188 6064 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
23:44:09.0218 6064 PerfHost - ok
23:44:09.0268 6064 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
23:44:09.0348 6064 pla - ok
23:44:09.0378 6064 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
23:44:09.0438 6064 PlugPlay - ok
23:44:09.0458 6064 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
23:44:09.0478 6064 PNRPAutoReg - ok
23:44:09.0498 6064 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
23:44:09.0508 6064 PNRPsvc - ok
23:44:09.0558 6064 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
23:44:09.0648 6064 PolicyAgent - ok
23:44:09.0668 6064 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
23:44:09.0708 6064 Power - ok
23:44:09.0738 6064 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
23:44:09.0808 6064 PptpMiniport - ok
23:44:09.0818 6064 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
23:44:09.0858 6064 Processor - ok
23:44:09.0888 6064 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
23:44:09.0928 6064 ProfSvc - ok
23:44:09.0948 6064 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
23:44:09.0958 6064 ProtectedStorage - ok
23:44:09.0988 6064 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
23:44:10.0068 6064 Psched - ok
23:44:10.0098 6064 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
23:44:10.0138 6064 ql2300 - ok
23:44:10.0158 6064 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
23:44:10.0168 6064 ql40xx - ok
23:44:10.0188 6064 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
23:44:10.0208 6064 QWAVE - ok
23:44:10.0238 6064 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
23:44:10.0258 6064 QWAVEdrv - ok
23:44:10.0278 6064 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
23:44:10.0338 6064 RasAcd - ok
23:44:10.0368 6064 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
23:44:10.0398 6064 RasAgileVpn - ok
23:44:10.0408 6064 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
23:44:10.0448 6064 RasAuto - ok
23:44:10.0468 6064 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
23:44:10.0538 6064 Rasl2tp - ok
23:44:10.0568 6064 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
23:44:10.0648 6064 RasMan - ok
23:44:10.0658 6064 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
23:44:10.0688 6064 RasPppoe - ok
23:44:10.0698 6064 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
23:44:10.0738 6064 RasSstp - ok
23:44:10.0768 6064 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
23:44:10.0848 6064 rdbss - ok
23:44:10.0868 6064 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
23:44:10.0878 6064 rdpbus - ok
23:44:10.0888 6064 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
23:44:10.0918 6064 RDPCDD - ok
23:44:10.0918 6064 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
23:44:10.0958 6064 RDPENCDD - ok
23:44:10.0968 6064 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
23:44:10.0998 6064 RDPREFMP - ok
23:44:11.0008 6064 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
23:44:11.0068 6064 RDPWD - ok
23:44:11.0078 6064 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
23:44:11.0128 6064 rdyboost - ok
23:44:11.0148 6064 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
23:44:11.0208 6064 RemoteAccess - ok
23:44:11.0228 6064 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
23:44:11.0268 6064 RemoteRegistry - ok
23:44:11.0308 6064 [ A780D3EAA74582EA1DEB6BD9C7A3D9C9 ] rpcapd C:\Program Files (x86)\WinPcap\rpcapd.exe
23:44:11.0368 6064 rpcapd - ok
23:44:11.0378 6064 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
23:44:11.0408 6064 RpcEptMapper - ok
23:44:11.0428 6064 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
23:44:11.0448 6064 RpcLocator - ok
23:44:11.0468 6064 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
23:44:11.0498 6064 RpcSs - ok
23:44:11.0518 6064 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
23:44:11.0558 6064 rspndr - ok
23:44:11.0568 6064 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
23:44:11.0578 6064 SamSs - ok
23:44:11.0588 6064 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
23:44:11.0638 6064 sbp2port - ok
23:44:11.0658 6064 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
23:44:11.0688 6064 SCardSvr - ok
23:44:11.0708 6064 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
23:44:11.0778 6064 scfilter - ok
23:44:11.0818 6064 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
23:44:11.0898 6064 Schedule - ok
23:44:11.0938 6064 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
23:44:11.0958 6064 SCPolicySvc - ok
23:44:11.0978 6064 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
23:44:12.0038 6064 SDRSVC - ok
23:44:12.0058 6064 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
23:44:12.0098 6064 secdrv - ok
23:44:12.0118 6064 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
23:44:12.0198 6064 seclogon - ok
23:44:12.0218 6064 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
23:44:12.0248 6064 SENS - ok
23:44:12.0268 6064 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
23:44:12.0318 6064 SensrSvc - ok
23:44:12.0338 6064 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
23:44:12.0368 6064 Serenum - ok
23:44:12.0388 6064 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
23:44:12.0418 6064 Serial - ok
23:44:12.0438 6064 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
23:44:12.0458 6064 sermouse - ok
23:44:12.0498 6064 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
23:44:12.0568 6064 SessionEnv - ok
23:44:12.0588 6064 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
23:44:12.0638 6064 sffdisk - ok
23:44:12.0648 6064 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
23:44:12.0668 6064 sffp_mmc - ok
23:44:12.0698 6064 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
23:44:12.0788 6064 sffp_sd - ok
23:44:12.0798 6064 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
23:44:12.0818 6064 sfloppy - ok
23:44:12.0838 6064 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
23:44:12.0878 6064 SharedAccess - ok
23:44:12.0928 6064 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
23:44:12.0998 6064 ShellHWDetection - ok
23:44:13.0018 6064 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
23:44:13.0028 6064 SiSRaid2 - ok
23:44:13.0038 6064 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
23:44:13.0048 6064 SiSRaid4 - ok
23:44:13.0058 6064 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
23:44:13.0128 6064 Smb - ok
23:44:13.0158 6064 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
23:44:13.0198 6064 SNMPTRAP - ok
23:44:13.0228 6064 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
23:44:13.0238 6064 spldr - ok
23:44:13.0278 6064 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
23:44:13.0348 6064 Spooler - ok
23:44:13.0428 6064 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
23:44:13.0498 6064 sppsvc - ok
23:44:13.0528 6064 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
23:44:13.0598 6064 sppuinotify - ok
23:44:13.0658 6064 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
23:44:13.0768 6064 srv - ok
23:44:13.0798 6064 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
23:44:13.0868 6064 srv2 - ok
23:44:13.0868 6064 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
23:44:13.0928 6064 srvnet - ok
23:44:13.0958 6064 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
23:44:13.0988 6064 SSDPSRV - ok
23:44:14.0018 6064 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
23:44:14.0078 6064 SstpSvc - ok
23:44:14.0108 6064 [ 855335BF5792E56164F98C012E3D92DD ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
23:44:14.0158 6064 ssudmdm - ok
23:44:14.0188 6064 Steam Client Service - ok
23:44:14.0208 6064 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
23:44:14.0228 6064 stexstor - ok
23:44:14.0268 6064 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
23:44:14.0348 6064 stisvc - ok
23:44:14.0368 6064 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
23:44:14.0378 6064 swenum - ok
23:44:14.0398 6064 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
23:44:14.0448 6064 swprv - ok
23:44:14.0498 6064 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
23:44:14.0598 6064 SysMain - ok
23:44:14.0628 6064 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
23:44:14.0668 6064 TabletInputService - ok
23:44:14.0698 6064 [ F33FDC72298DF4BF9813A55D21F4EB31 ] taphss C:\Windows\system32\DRIVERS\taphss.sys
23:44:14.0738 6064 taphss - ok
23:44:14.0758 6064 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
23:44:14.0808 6064 TapiSrv - ok
23:44:14.0828 6064 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
23:44:14.0858 6064 TBS - ok
23:44:14.0908 6064 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
23:44:14.0988 6064 Tcpip - ok
23:44:15.0008 6064 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
23:44:15.0028 6064 TCPIP6 - ok
23:44:15.0058 6064 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
23:44:15.0118 6064 tcpipreg - ok
23:44:15.0138 6064 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
23:44:15.0178 6064 TDPIPE - ok
23:44:15.0208 6064 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
23:44:15.0298 6064 TDTCP - ok
23:44:15.0318 6064 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
23:44:15.0408 6064 tdx - ok
23:44:15.0418 6064 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
23:44:15.0458 6064 TermDD - ok
23:44:15.0498 6064 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
23:44:15.0588 6064 TermService - ok
23:44:15.0608 6064 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
23:44:15.0638 6064 Themes - ok
23:44:15.0648 6064 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
23:44:15.0668 6064 THREADORDER - ok
23:44:15.0688 6064 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
23:44:15.0718 6064 TrkWks - ok
23:44:15.0778 6064 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
23:44:15.0848 6064 TrustedInstaller - ok
23:44:15.0858 6064 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
23:44:15.0918 6064 tssecsrv - ok
23:44:15.0958 6064 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
23:44:16.0008 6064 TsUsbFlt - ok
23:44:16.0038 6064 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
23:44:16.0098 6064 tunnel - ok
23:44:16.0118 6064 [ C45A3E051C65106A28982CAED125F855 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys
23:44:16.0158 6064 TurboB - ok
23:44:16.0208 6064 [ BAEF86EBEAECE76573FA822DEA256F6C ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
23:44:16.0268 6064 TurboBoost - ok
23:44:16.0288 6064 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
23:44:16.0298 6064 uagp35 - ok
23:44:16.0328 6064 [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
23:44:16.0368 6064 UBHelper - ok
23:44:16.0398 6064 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
23:44:16.0468 6064 udfs - ok
23:44:16.0558 6064 [ 215462AE7E6A897D675E84DD1E3B3B56 ] ufad-ws60 C:\Program Files\VMware\VMware View\Client\Local Mode\vmware-ufad.exe
23:44:16.0628 6064 ufad-ws60 - ok
23:44:16.0648 6064 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
23:44:16.0678 6064 UI0Detect - ok
23:44:16.0688 6064 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
23:44:16.0698 6064 uliagpkx - ok
23:44:16.0718 6064 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
23:44:16.0778 6064 umbus - ok
23:44:16.0788 6064 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
23:44:16.0818 6064 UmPass - ok
23:44:16.0948 6064 [ 41118D920B2B268C0ADC36421248CDCF ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
23:44:17.0098 6064 UNS ( UnsignedFile.Multi.Generic ) - warning
23:44:17.0098 6064 UNS - detected UnsignedFile.Multi.Generic (1)
23:44:17.0138 6064 [ 70DDE3A86DBEB1D6C3C30AD687B1877A ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
23:44:17.0208 6064 Updater Service - ok
23:44:17.0238 6064 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
23:44:17.0278 6064 upnphost - ok
23:44:17.0308 6064 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
23:44:17.0368 6064 usbaudio - ok
23:44:17.0398 6064 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
23:44:17.0458 6064 usbccgp - ok
23:44:17.0478 6064 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
23:44:17.0498 6064 usbcir - ok
23:44:17.0508 6064 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
23:44:17.0558 6064 usbehci - ok
23:44:17.0568 6064 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
23:44:17.0618 6064 usbhub - ok
23:44:17.0628 6064 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
23:44:17.0688 6064 usbohci - ok
23:44:17.0708 6064 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
23:44:17.0728 6064 usbprint - ok
23:44:17.0828 6064 [ B5E6C4F280EBF0B16F74A5B415F2E0DF ] USBS3S4Detection C:\OEM\USBDECTION\USBS3S4Detection.exe
23:44:17.0898 6064 USBS3S4Detection - ok
23:44:17.0918 6064 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
23:44:17.0928 6064 usbscan - ok
23:44:17.0938 6064 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
23:44:18.0018 6064 USBSTOR - ok
23:44:18.0028 6064 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
23:44:18.0108 6064 usbuhci - ok
23:44:18.0148 6064 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
23:44:18.0198 6064 UxSms - ok
23:44:18.0218 6064 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
23:44:18.0228 6064 VaultSvc - ok
23:44:18.0238 6064 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
23:44:18.0258 6064 vdrvroot - ok
23:44:18.0288 6064 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
23:44:18.0378 6064 vds - ok
23:44:18.0398 6064 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
23:44:18.0408 6064 vga - ok
23:44:18.0438 6064 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
23:44:18.0498 6064 VgaSave - ok
23:44:18.0508 6064 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
23:44:18.0568 6064 vhdmp - ok
23:44:18.0578 6064 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
23:44:18.0588 6064 viaide - ok
23:44:18.0628 6064 [ B42E66036C79F61D3A6F9812239E8B85 ] VMAuthdService C:\Program Files\VMware\VMware View\Client\Local Mode\vmware-authd.exe
23:44:18.0698 6064 VMAuthdService - ok
23:44:18.0718 6064 [ 39B32126D2BB21004D360F2943A96152 ] vmci C:\Windows\system32\drivers\vmci.sys
23:44:18.0768 6064 vmci - ok
23:44:18.0778 6064 [ 1AF6462718E5AB0ED55014A6EF3790EF ] vmkbd C:\Windows\system32\drivers\VMkbd.sys
23:44:18.0818 6064 vmkbd - ok
23:44:18.0828 6064 [ 9D54F1339E78C95BF3D9939EBCB66378 ] VMnetAdapter C:\Windows\system32\DRIVERS\vmnetadapter.sys
23:44:18.0868 6064 VMnetAdapter - ok
23:44:18.0878 6064 [ FB54EF3AA613D2832FD3812E7CB2FC75 ] VMnetBridge C:\Windows\system32\DRIVERS\vmnetbridge.sys
23:44:18.0918 6064 VMnetBridge - ok
23:44:18.0918 6064 VMnetDHCP - ok
23:44:18.0938 6064 [ 38D7EBFC35C9D59DB777211946047343 ] VMnetuserif C:\Windows\system32\drivers\vmnetuserif.sys
23:44:18.0988 6064 VMnetuserif - ok
23:44:19.0018 6064 [ F22098DBDD13C1221C274496B3E18DA7 ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe
23:44:19.0118 6064 VMUSBArbService - ok
23:44:19.0118 6064 VMware NAT Service - ok
23:44:19.0128 6064 [ 1C1111810F0FCD958A6DFE3F869AD80D ] vmwvusb C:\Windows\system32\Drivers\vmwvusb.sys
23:44:19.0168 6064 vmwvusb - ok
23:44:19.0188 6064 [ 31854DC0A3B69CB145835EFBCA24E50C ] vmx86 C:\Windows\system32\drivers\vmx86.sys
23:44:19.0228 6064 vmx86 - ok
23:44:19.0228 6064 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
23:44:19.0278 6064 volmgr - ok
23:44:19.0298 6064 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
23:44:19.0348 6064 volmgrx - ok
23:44:19.0368 6064 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
23:44:19.0418 6064 volsnap - ok
23:44:19.0428 6064 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
23:44:19.0448 6064 vsmraid - ok
23:44:19.0498 6064 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
23:44:19.0578 6064 VSS - ok
23:44:19.0628 6064 [ E61C910E2DDF4797C1B1F9239636E894 ] vstor2-ws60 C:\Program Files\VMware\VMware View\Client\Local Mode\vstor2-ws60.sys
23:44:19.0698 6064 vstor2-ws60 - ok
23:44:19.0708 6064 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
23:44:19.0728 6064 vwifibus - ok
23:44:19.0758 6064 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
23:44:19.0788 6064 W32Time - ok
23:44:19.0798 6064 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
23:44:19.0828 6064 WacomPen - ok
23:44:19.0848 6064 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
23:44:19.0918 6064 WANARP - ok
23:44:19.0918 6064 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
23:44:19.0948 6064 Wanarpv6 - ok
23:44:19.0978 6064 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
23:44:20.0048 6064 wbengine - ok
23:44:20.0068 6064 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
23:44:20.0088 6064 WbioSrvc - ok
23:44:20.0108 6064 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
23:44:20.0158 6064 wcncsvc - ok
23:44:20.0168 6064 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
23:44:20.0188 6064 WcsPlugInService - ok
23:44:20.0208 6064 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
23:44:20.0218 6064 Wd - ok
23:44:20.0238 6064 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
23:44:20.0298 6064 Wdf01000 - ok
23:44:20.0298 6064 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
23:44:20.0368 6064 WdiServiceHost - ok
23:44:20.0378 6064 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
23:44:20.0398 6064 WdiSystemHost - ok
23:44:20.0438 6064 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
23:44:20.0508 6064 WebClient - ok
23:44:20.0528 6064 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
23:44:20.0578 6064 Wecsvc - ok
23:44:20.0598 6064 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
23:44:20.0638 6064 wercplsupport - ok
23:44:20.0648 6064 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
23:44:20.0688 6064 WerSvc - ok
23:44:20.0718 6064 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
23:44:20.0748 6064 WfpLwf - ok
23:44:20.0768 6064 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
23:44:20.0778 6064 WIMMount - ok
23:44:20.0778 6064 WinHttpAutoProxySvc - ok
23:44:20.0848 6064 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
23:44:20.0908 6064 Winmgmt - ok
23:44:20.0968 6064 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
23:44:21.0128 6064 WinRM - ok
23:44:21.0148 6064 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
23:44:21.0198 6064 WinUsb - ok
23:44:21.0248 6064 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
23:44:21.0308 6064 Wlansvc - ok
23:44:21.0418 6064 [ 98F138897EF4246381D197CB81846D62 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
23:44:21.0518 6064 wlidsvc - ok
23:44:21.0538 6064 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
23:44:21.0548 6064 WmiAcpi - ok
23:44:21.0578 6064 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
23:44:21.0628 6064 wmiApSrv - ok
23:44:21.0668 6064 WMPNetworkSvc - ok
23:44:21.0688 6064 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
23:44:21.0728 6064 WPCSvc - ok
23:44:21.0748 6064 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
23:44:21.0818 6064 WPDBusEnum - ok
23:44:21.0848 6064 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
23:44:21.0888 6064 ws2ifsl - ok
23:44:21.0918 6064 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys
23:44:21.0958 6064 WSDPrintDevice - ok
23:44:21.0988 6064 [ 4A2A5C50DD1A63577D3ACA94269FBC7F ] WSDScan C:\Windows\system32\DRIVERS\WSDScan.sys
23:44:22.0018 6064 WSDScan - ok
23:44:22.0028 6064 WSearch - ok
23:44:22.0108 6064 [ 3CF81F104137457A7F32C274709635BE ] wsnm C:\Program Files\VMware\VMware View\Client\bin\wsnm.exe
23:44:22.0188 6064 wsnm - ok
23:44:22.0218 6064 [ AFD194F6C3FAF4D29493AD2DF28B46BF ] wsnm_usbctrl C:\Program Files\VMware\VMware View\Client\bin\wsnm_usbctrl.exe
23:44:22.0268 6064 wsnm_usbctrl - ok
23:44:22.0308 6064 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
23:44:22.0348 6064 wuauserv - ok
23:44:22.0358 6064 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
23:44:22.0428 6064 WudfPf - ok
23:44:22.0438 6064 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
23:44:22.0508 6064 WUDFRd - ok
23:44:22.0538 6064 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
23:44:22.0608 6064 wudfsvc - ok
23:44:22.0638 6064 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
23:44:22.0698 6064 WwanSvc - ok
23:44:22.0708 6064 ================ Scan global ===============================
23:44:22.0728 6064 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
23:44:22.0758 6064 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
23:44:22.0768 6064 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
23:44:22.0798 6064 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
23:44:22.0848 6064 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
23:44:22.0848 6064 [Global] - ok
23:44:22.0848 6064 ================ Scan MBR ==================================
23:44:22.0858 6064 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:44:23.0098 6064 \Device\Harddisk0\DR0 - ok
23:44:23.0568 6064 [ 671B81004FDD1588FA9ED1331C9CECA9 ] \Device\Harddisk6\DR6
23:44:23.0678 6064 \Device\Harddisk6\DR6 - ok
23:44:23.0678 6064 ================ Scan VBR ==================================
23:44:23.0748 6064 [ B6D405095F0E787F7531A08A2EB188EB ] \Device\Harddisk0\DR0\Partition1
23:44:23.0748 6064 \Device\Harddisk0\DR0\Partition1 - ok
23:44:23.0768 6064 [ 4C78FCB5B9E001540553FAC35AF2D30A ] \Device\Harddisk0\DR0\Partition2
23:44:23.0768 6064 \Device\Harddisk0\DR0\Partition2 - ok
23:44:23.0788 6064 [ A870D206572C41A19897491385315D92 ] \Device\Harddisk0\DR0\Partition3
23:44:23.0788 6064 \Device\Harddisk0\DR0\Partition3 - ok
23:44:23.0788 6064 [ 6AA386C7B388D7115933810C39BBBA87 ] \Device\Harddisk6\DR6\Partition1
23:44:23.0808 6064 \Device\Harddisk6\DR6\Partition1 - ok
23:44:23.0808 6064 ============================================================
23:44:23.0808 6064 Scan finished
23:44:23.0808 6064 ============================================================
23:44:23.0818 5288 Detected object count: 3
23:44:23.0818 5288 Actual detected object count: 3
23:45:49.0598 5288 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - skipped by user
23:45:49.0598 5288 AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:45:49.0598 5288 LMS ( UnsignedFile.Multi.Generic ) - skipped by user
23:45:49.0598 5288 LMS ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:45:49.0598 5288 UNS ( UnsignedFile.Multi.Generic ) - skipped by user
23:45:49.0598 5288 UNS ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:46:26.0718 3692 Deinitialize success

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,

leider sieht es so aus, als ob der Combofix Scan hängen bleibt, trotz ausgeschaltetem Virenscanner. Gibt es dafür eine Lösung?

Gruß Ary