|
Plagegeister aller Art und deren Bekämpfung: Google-Suchergebnisse: Falsche WeiterleitungWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
28.05.2013, 09:39 | #1 |
| Google-Suchergebnisse: Falsche Weiterleitung Guten Tag an alle, nachdem nun auch bei mir das Verhalten auftritt, dass (sowohl im IE als auch im Firefox) der Klick auf manche Google-Suchergebnisse an falsche Adressen weiterleitet, ist das Forum meine Anlaufstelle. Als Virenscanner ist Avira Professional im Einsatz, der jedoch keine Meldung oder Warnung gebracht hat. OS ist WIndows 7 64bit. Bisher habe ich folgendes gemacht: - Scan mit TrendMicro Housecall: ohne Ergebnisse - Systemscan laut Anleitung in diesem Thread: http://www.trojaner-board.de/69886-a...-beachten.html - Upload der Logfiles OTL.txt, Extras.txt und gmer.txt als ZIP-Datei hier als Anhang (Während des Scans durch GMER kam keine Warnmeldung) Vielleicht klappt es mit eurer Hilfe, der Sache auf den Grund zu gehen, vielen Dank! Matthias |
28.05.2013, 09:45 | #2 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung Hi,
__________________frage, Avira Prof kommt eher in Firmen zum Einsatz, ist das n Firmen PC? Wenn ja, habt ihr keine IT-Abteilung, denn die ist dafür verantwortlich den Rechner zu untersuchen.
__________________ |
28.05.2013, 09:59 | #3 |
| Google-Suchergebnisse: Falsche Weiterleitung Hallo,
__________________ja, es handelt sich um einen PC, der geschäftlich in einem 5-Mann Architekturbüro genutzt wird. Eine eigene IT-Abteilung ist leider nicht vorhanden. Gruß, Matthias |
28.05.2013, 10:06 | #4 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung Hi, otl fix Fixen mit OTL
Code:
ATTFilter :OTL [2013/02/24 12:20:02 | 000,155,648 | RHS- | C] () -- C:\Windows\SysWow64\AUDIOKSEY.dll [2013/05/06 09:06:20 | 000,000,312 | ---- | M] () -- C:\Windows\tasks\NBEC.job :files :Commands [emptytemp]
Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang in den Thread posten! Drücke bitte die + E Taste.
downloade get info: http://markusg.trojaner-board.de/GetInfo.exe doppelklicke die .exe im selben ordner wird nun eine .txt erstellt: summary-info.txt diese doppelklicken und deren inhalt posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
28.05.2013, 10:37 | #5 |
| Google-Suchergebnisse: Falsche Weiterleitung Hallo Markus, die movedfiles.zip wurde erfolgreich über den uploadchannel hochgeladen. Hier noch der Inhalt der summary-info: Code:
ATTFilter System volume information: dwHighDateTime = 0x1cbfae0,dwLowDateTime = 0xcc468ee0 System32: dwHighDateTime = 0x1ca0431,dwLowDateTime = 0xfec9a6f8 dwSerialNumber = 0x5c957121 Matthias |
28.05.2013, 10:37 | #6 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung Sehr gut. Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ --> Google-Suchergebnisse: Falsche Weiterleitung |
28.05.2013, 10:43 | #7 |
| Google-Suchergebnisse: Falsche Weiterleitung Hallo Markus, Scan mit TDSSKiller wurde durchgeführt, hier folgt die Log-Ausgabe: Code:
ATTFilter 11:40:55.0641 5600 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 11:40:55.0771 5600 ============================================================ 11:40:55.0781 5600 Current date / time: 2013/05/28 11:40:55.0771 11:40:55.0781 5600 SystemInfo: 11:40:55.0781 5600 11:40:55.0781 5600 OS Version: 6.1.7601 ServicePack: 1.0 11:40:55.0781 5600 Product type: Workstation 11:40:55.0781 5600 ComputerName: CLIENT4 11:40:55.0781 5600 UserName: cph 11:40:55.0781 5600 Windows directory: C:\Windows 11:40:55.0781 5600 System windows directory: C:\Windows 11:40:55.0781 5600 Running under WOW64 11:40:55.0781 5600 Processor architecture: Intel x64 11:40:55.0781 5600 Number of processors: 4 11:40:55.0781 5600 Page size: 0x1000 11:40:55.0781 5600 Boot type: Normal boot 11:40:55.0781 5600 ============================================================ 11:40:56.0261 5600 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 11:40:56.0261 5600 ============================================================ 11:40:56.0261 5600 \Device\Harddisk0\DR0: 11:40:56.0261 5600 MBR partitions: 11:40:56.0271 5600 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x402000, BlocksNum 0x3802B000 11:40:56.0311 5600 ============================================================ 11:40:56.0351 5600 C: <-> \Device\Harddisk0\DR0\Partition1 11:40:56.0351 5600 ============================================================ 11:40:56.0351 5600 Initialize success 11:40:56.0351 5600 ============================================================ 11:41:05.0342 3116 ============================================================ 11:41:05.0342 3116 Scan started 11:41:05.0342 3116 Mode: Manual; SigCheck; TDLFS; 11:41:05.0342 3116 ============================================================ 11:41:05.0462 3116 ================ Scan system memory ======================== 11:41:05.0462 3116 System memory - ok 11:41:05.0462 3116 ================ Scan services ============================= 11:41:05.0572 3116 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 11:41:05.0682 3116 1394ohci - ok 11:41:05.0712 3116 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 11:41:05.0742 3116 ACPI - ok 11:41:05.0762 3116 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 11:41:05.0822 3116 AcpiPmi - ok 11:41:05.0922 3116 [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe 11:41:05.0962 3116 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning 11:41:05.0962 3116 Adobe LM Service - detected UnsignedFile.Multi.Generic (1) 11:41:06.0042 3116 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 11:41:06.0062 3116 AdobeARMservice - ok 11:41:06.0162 3116 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 11:41:06.0192 3116 AdobeFlashPlayerUpdateSvc - ok 11:41:06.0242 3116 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 11:41:06.0272 3116 adp94xx - ok 11:41:06.0302 3116 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys 11:41:06.0332 3116 adpahci - ok 11:41:06.0352 3116 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 11:41:06.0362 3116 adpu320 - ok 11:41:06.0402 3116 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 11:41:06.0542 3116 AeLookupSvc - ok 11:41:06.0592 3116 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 11:41:06.0662 3116 AFD - ok 11:41:06.0702 3116 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 11:41:06.0722 3116 agp440 - ok 11:41:06.0752 3116 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 11:41:06.0812 3116 ALG - ok 11:41:06.0842 3116 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 11:41:06.0862 3116 aliide - ok 11:41:06.0872 3116 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 11:41:06.0882 3116 amdide - ok 11:41:06.0902 3116 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 11:41:06.0932 3116 AmdK8 - ok 11:41:06.0952 3116 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys 11:41:06.0982 3116 AmdPPM - ok 11:41:07.0002 3116 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 11:41:07.0022 3116 amdsata - ok 11:41:07.0052 3116 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 11:41:07.0072 3116 amdsbs - ok 11:41:07.0092 3116 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 11:41:07.0102 3116 amdxata - ok 11:41:07.0172 3116 [ 81774D8ACA1601A6B706D7E527B2DA06 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe 11:41:07.0202 3116 AntiVirMailService - ok 11:41:07.0232 3116 [ F37A5BE1A6BF11A5B45E8ADE3A61BD9D ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 11:41:07.0252 3116 AntiVirSchedulerService - ok 11:41:07.0282 3116 [ 64A0C1EA19D96B5678D3D559F8F2153B ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 11:41:07.0302 3116 AntiVirService - ok 11:41:07.0322 3116 [ 74241B6FEF367632C9479990A6AEE0D9 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE 11:41:07.0352 3116 AntiVirWebService - ok 11:41:07.0382 3116 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 11:41:07.0513 3116 AppID - ok 11:41:07.0543 3116 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 11:41:07.0603 3116 AppIDSvc - ok 11:41:07.0653 3116 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll 11:41:07.0693 3116 Appinfo - ok 11:41:07.0773 3116 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 11:41:07.0793 3116 Apple Mobile Device - ok 11:41:07.0843 3116 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll 11:41:07.0883 3116 AppMgmt - ok 11:41:07.0913 3116 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys 11:41:07.0933 3116 arc - ok 11:41:07.0953 3116 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys 11:41:07.0973 3116 arcsas - ok 11:41:08.0073 3116 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 11:41:08.0093 3116 aspnet_state - ok 11:41:08.0113 3116 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 11:41:08.0183 3116 AsyncMac - ok 11:41:08.0203 3116 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 11:41:08.0223 3116 atapi - ok 11:41:08.0253 3116 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 11:41:08.0353 3116 AudioEndpointBuilder - ok 11:41:08.0373 3116 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 11:41:08.0403 3116 AudioSrv - ok 11:41:08.0423 3116 [ 09E6069EF94B345061B4BD3CEBD974C8 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 11:41:08.0433 3116 avgntflt - ok 11:41:08.0483 3116 [ 488486DAD09A5B6C6DBB8B990A8B2307 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 11:41:08.0503 3116 avipbb - ok 11:41:08.0513 3116 [ 490FA25161BF3E51993EB724ECF0ACEB ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 11:41:08.0523 3116 avkmgr - ok 11:41:08.0563 3116 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 11:41:08.0633 3116 AxInstSV - ok 11:41:08.0683 3116 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 11:41:08.0723 3116 b06bdrv - ok 11:41:08.0763 3116 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 11:41:08.0803 3116 b57nd60a - ok 11:41:08.0833 3116 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 11:41:08.0873 3116 BDESVC - ok 11:41:08.0883 3116 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 11:41:08.0933 3116 Beep - ok 11:41:08.0973 3116 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 11:41:09.0033 3116 BFE - ok 11:41:09.0103 3116 [ 85D5E6AC46A2AE4672C1AC813AE45B95 ] BingDesktopUpdate C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe 11:41:09.0123 3116 BingDesktopUpdate - ok 11:41:09.0153 3116 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 11:41:09.0213 3116 BITS - ok 11:41:09.0253 3116 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 11:41:09.0293 3116 blbdrive - ok 11:41:09.0353 3116 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 11:41:09.0383 3116 Bonjour Service - ok 11:41:09.0423 3116 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 11:41:09.0453 3116 bowser - ok 11:41:09.0503 3116 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 11:41:09.0523 3116 BrFiltLo - ok 11:41:09.0543 3116 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 11:41:09.0563 3116 BrFiltUp - ok 11:41:09.0603 3116 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 11:41:09.0643 3116 Browser - ok 11:41:09.0663 3116 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 11:41:09.0703 3116 Brserid - ok 11:41:09.0713 3116 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 11:41:09.0743 3116 BrSerWdm - ok 11:41:09.0763 3116 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 11:41:09.0783 3116 BrUsbMdm - ok 11:41:09.0793 3116 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 11:41:09.0823 3116 BrUsbSer - ok 11:41:09.0843 3116 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 11:41:09.0863 3116 BTHMODEM - ok 11:41:09.0893 3116 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 11:41:09.0933 3116 bthserv - ok 11:41:10.0003 3116 [ 555FA105C22B1616094EDAD1CBFB0551 ] cbfs3 C:\Windows\system32\drivers\cbfs3.sys 11:41:10.0033 3116 cbfs3 - ok 11:41:10.0043 3116 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 11:41:10.0083 3116 cdfs - ok 11:41:10.0103 3116 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 11:41:10.0133 3116 cdrom - ok 11:41:10.0153 3116 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 11:41:10.0203 3116 CertPropSvc - ok 11:41:10.0233 3116 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys 11:41:10.0273 3116 circlass - ok 11:41:10.0293 3116 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 11:41:10.0333 3116 CLFS - ok 11:41:10.0373 3116 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 11:41:10.0393 3116 clr_optimization_v2.0.50727_32 - ok 11:41:10.0413 3116 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 11:41:10.0433 3116 clr_optimization_v2.0.50727_64 - ok 11:41:10.0493 3116 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 11:41:10.0513 3116 clr_optimization_v4.0.30319_32 - ok 11:41:10.0523 3116 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 11:41:10.0543 3116 clr_optimization_v4.0.30319_64 - ok 11:41:10.0583 3116 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 11:41:10.0603 3116 CmBatt - ok 11:41:10.0623 3116 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 11:41:10.0643 3116 cmdide - ok 11:41:10.0683 3116 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys 11:41:10.0723 3116 CNG - ok 11:41:10.0743 3116 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 11:41:10.0753 3116 Compbatt - ok 11:41:10.0803 3116 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys 11:41:10.0843 3116 CompositeBus - ok 11:41:10.0853 3116 COMSysApp - ok 11:41:10.0873 3116 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 11:41:10.0893 3116 crcdisk - ok 11:41:10.0923 3116 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 11:41:10.0963 3116 CryptSvc - ok 11:41:10.0983 3116 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys 11:41:11.0043 3116 CSC - ok 11:41:11.0083 3116 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll 11:41:11.0133 3116 CscService - ok 11:41:11.0173 3116 [ BA25D4B9B067248F7CAC416E855D706B ] dc3d C:\Windows\system32\DRIVERS\dc3d.sys 11:41:11.0183 3116 dc3d - ok 11:41:11.0233 3116 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 11:41:11.0293 3116 DcomLaunch - ok 11:41:11.0313 3116 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 11:41:11.0353 3116 defragsvc - ok 11:41:11.0373 3116 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 11:41:11.0413 3116 DfsC - ok 11:41:11.0433 3116 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 11:41:11.0463 3116 Dhcp - ok 11:41:11.0473 3116 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 11:41:11.0503 3116 discache - ok 11:41:11.0533 3116 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys 11:41:11.0553 3116 Disk - ok 11:41:11.0563 3116 [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys 11:41:11.0603 3116 dmvsc - ok 11:41:11.0623 3116 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 11:41:11.0683 3116 Dnscache - ok 11:41:11.0703 3116 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 11:41:11.0753 3116 dot3svc - ok 11:41:11.0773 3116 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 11:41:11.0833 3116 DPS - ok 11:41:11.0863 3116 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 11:41:11.0893 3116 drmkaud - ok 11:41:11.0943 3116 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 11:41:11.0963 3116 DXGKrnl - ok 11:41:11.0983 3116 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 11:41:12.0033 3116 EapHost - ok 11:41:12.0093 3116 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys 11:41:12.0193 3116 ebdrv - ok 11:41:12.0213 3116 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 11:41:12.0253 3116 EFS - ok 11:41:12.0323 3116 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 11:41:12.0403 3116 ehRecvr - ok 11:41:12.0423 3116 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 11:41:12.0463 3116 ehSched - ok 11:41:12.0493 3116 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys 11:41:12.0533 3116 elxstor - ok 11:41:12.0553 3116 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 11:41:12.0583 3116 ErrDev - ok 11:41:12.0613 3116 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 11:41:12.0693 3116 EventSystem - ok 11:41:12.0723 3116 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 11:41:12.0793 3116 exfat - ok 11:41:12.0803 3116 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 11:41:12.0843 3116 fastfat - ok 11:41:12.0863 3116 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 11:41:12.0913 3116 Fax - ok 11:41:12.0933 3116 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys 11:41:12.0973 3116 fdc - ok 11:41:12.0993 3116 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 11:41:13.0043 3116 fdPHost - ok 11:41:13.0063 3116 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 11:41:13.0093 3116 FDResPub - ok 11:41:13.0123 3116 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 11:41:13.0133 3116 FileInfo - ok 11:41:13.0193 3116 [ A779ACEA28277D480F46799C29D13FFA ] FileOpenManagerService C:\Program Files\FileOpen\Services\FileOpenManagerService64.exe 11:41:13.0213 3116 FileOpenManagerService - ok 11:41:13.0223 3116 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 11:41:13.0293 3116 Filetrace - ok 11:41:13.0303 3116 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 11:41:13.0313 3116 flpydisk - ok 11:41:13.0333 3116 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 11:41:13.0353 3116 FltMgr - ok 11:41:13.0383 3116 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll 11:41:13.0423 3116 FontCache - ok 11:41:13.0473 3116 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 11:41:13.0483 3116 FontCache3.0.0.0 - ok 11:41:13.0493 3116 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 11:41:13.0503 3116 FsDepends - ok 11:41:13.0543 3116 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 11:41:13.0563 3116 Fs_Rec - ok 11:41:13.0603 3116 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 11:41:13.0643 3116 fvevol - ok 11:41:13.0683 3116 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 11:41:13.0703 3116 gagp30kx - ok 11:41:13.0723 3116 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 11:41:13.0743 3116 GEARAspiWDM - ok 11:41:13.0773 3116 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 11:41:13.0843 3116 gpsvc - ok 11:41:13.0913 3116 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:41:13.0933 3116 gupdate - ok 11:41:13.0963 3116 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:41:13.0973 3116 gupdatem - ok 11:41:13.0993 3116 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 11:41:14.0013 3116 gusvc - ok 11:41:14.0053 3116 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 11:41:14.0083 3116 hcw85cir - ok 11:41:14.0113 3116 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 11:41:14.0153 3116 HdAudAddService - ok 11:41:14.0183 3116 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 11:41:14.0203 3116 HDAudBus - ok 11:41:14.0223 3116 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 11:41:14.0243 3116 HidBatt - ok 11:41:14.0253 3116 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys 11:41:14.0293 3116 HidBth - ok 11:41:14.0313 3116 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys 11:41:14.0333 3116 HidIr - ok 11:41:14.0363 3116 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 11:41:14.0413 3116 hidserv - ok 11:41:14.0433 3116 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 11:41:14.0443 3116 HidUsb - ok 11:41:14.0463 3116 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 11:41:14.0493 3116 hkmsvc - ok 11:41:14.0503 3116 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 11:41:14.0543 3116 HomeGroupListener - ok 11:41:14.0553 3116 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 11:41:14.0573 3116 HomeGroupProvider - ok 11:41:14.0633 3116 [ F5F4818A15AF6128A2BADD1B1F102413 ] HP DS Service C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe 11:41:14.0653 3116 HP DS Service ( UnsignedFile.Multi.Generic ) - warning 11:41:14.0653 3116 HP DS Service - detected UnsignedFile.Multi.Generic (1) 11:41:14.0683 3116 [ 3755C0F9D2A0CBE1CC0C37410725533A ] HP LaserJet Service C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe 11:41:14.0703 3116 HP LaserJet Service ( UnsignedFile.Multi.Generic ) - warning 11:41:14.0703 3116 HP LaserJet Service - detected UnsignedFile.Multi.Generic (1) 11:41:14.0743 3116 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 11:41:14.0763 3116 HpSAMD - ok 11:41:14.0793 3116 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 11:41:14.0863 3116 HTTP - ok 11:41:14.0863 3116 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 11:41:14.0873 3116 hwpolicy - ok 11:41:14.0913 3116 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 11:41:14.0933 3116 i8042prt - ok 11:41:14.0953 3116 [ 26CF4275034214ECEDD8EC17B0A18A99 ] iaStor C:\Windows\system32\drivers\iaStor.sys 11:41:14.0973 3116 iaStor - ok 11:41:14.0993 3116 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 11:41:15.0013 3116 iaStorV - ok 11:41:15.0053 3116 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 11:41:15.0113 3116 idsvc - ok 11:41:15.0303 3116 [ 795C99DC4F574C97C03D0BB39CF099EE ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 11:41:15.0593 3116 igfx - ok 11:41:15.0623 3116 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys 11:41:15.0643 3116 iirsp - ok 11:41:15.0683 3116 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 11:41:15.0763 3116 IKEEXT - ok 11:41:15.0783 3116 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\drivers\Impcd.sys 11:41:15.0823 3116 Impcd - ok 11:41:15.0903 3116 [ 5205DE9BD47F633E06EF3EF3DE11EF99 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 11:41:15.0953 3116 IntcAzAudAddService - ok 11:41:15.0963 3116 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys 11:41:15.0993 3116 IntcDAud - ok 11:41:16.0033 3116 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 11:41:16.0043 3116 intelide - ok 11:41:16.0063 3116 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 11:41:16.0093 3116 intelppm - ok 11:41:16.0113 3116 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 11:41:16.0173 3116 IPBusEnum - ok 11:41:16.0193 3116 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 11:41:16.0243 3116 IpFilterDriver - ok 11:41:16.0283 3116 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 11:41:16.0323 3116 iphlpsvc - ok 11:41:16.0353 3116 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 11:41:16.0373 3116 IPMIDRV - ok 11:41:16.0383 3116 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 11:41:16.0443 3116 IPNAT - ok 11:41:16.0493 3116 [ 2872B90D57C8310194A78A9787406467 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 11:41:16.0523 3116 iPod Service - ok 11:41:16.0543 3116 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 11:41:16.0563 3116 IRENUM - ok 11:41:16.0583 3116 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 11:41:16.0593 3116 isapnp - ok 11:41:16.0613 3116 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 11:41:16.0623 3116 iScsiPrt - ok 11:41:16.0653 3116 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 11:41:16.0663 3116 kbdclass - ok 11:41:16.0683 3116 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 11:41:16.0693 3116 kbdhid - ok 11:41:16.0713 3116 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 11:41:16.0723 3116 KeyIso - ok 11:41:16.0753 3116 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 11:41:16.0763 3116 KSecDD - ok 11:41:16.0783 3116 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 11:41:16.0803 3116 KSecPkg - ok 11:41:16.0813 3116 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 11:41:16.0853 3116 ksthunk - ok 11:41:16.0883 3116 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 11:41:16.0923 3116 KtmRm - ok 11:41:16.0953 3116 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 11:41:17.0023 3116 LanmanServer - ok 11:41:17.0063 3116 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 11:41:17.0093 3116 LanmanWorkstation - ok 11:41:17.0123 3116 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 11:41:17.0153 3116 lltdio - ok 11:41:17.0183 3116 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 11:41:17.0233 3116 lltdsvc - ok 11:41:17.0243 3116 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 11:41:17.0273 3116 lmhosts - ok 11:41:17.0313 3116 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 11:41:17.0323 3116 LSI_FC - ok 11:41:17.0333 3116 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 11:41:17.0343 3116 LSI_SAS - ok 11:41:17.0373 3116 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 11:41:17.0383 3116 LSI_SAS2 - ok 11:41:17.0403 3116 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 11:41:17.0413 3116 LSI_SCSI - ok 11:41:17.0433 3116 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 11:41:17.0463 3116 luafv - ok 11:41:17.0483 3116 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 11:41:17.0493 3116 Mcx2Svc - ok 11:41:17.0513 3116 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys 11:41:17.0523 3116 megasas - ok 11:41:17.0543 3116 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 11:41:17.0553 3116 MegaSR - ok 11:41:17.0573 3116 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 11:41:17.0603 3116 MMCSS - ok 11:41:17.0613 3116 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 11:41:17.0653 3116 Modem - ok 11:41:17.0663 3116 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 11:41:17.0683 3116 monitor - ok 11:41:17.0713 3116 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 11:41:17.0723 3116 mouclass - ok 11:41:17.0743 3116 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 11:41:17.0763 3116 mouhid - ok 11:41:17.0783 3116 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 11:41:17.0793 3116 mountmgr - ok 11:41:17.0863 3116 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 11:41:17.0883 3116 MozillaMaintenance - ok 11:41:17.0903 3116 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 11:41:17.0923 3116 mpio - ok 11:41:17.0933 3116 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 11:41:17.0993 3116 mpsdrv - ok 11:41:18.0023 3116 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 11:41:18.0113 3116 MpsSvc - ok 11:41:18.0123 3116 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 11:41:18.0153 3116 MRxDAV - ok 11:41:18.0183 3116 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 11:41:18.0203 3116 mrxsmb - ok 11:41:18.0223 3116 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 11:41:18.0263 3116 mrxsmb10 - ok 11:41:18.0273 3116 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 11:41:18.0313 3116 mrxsmb20 - ok 11:41:18.0333 3116 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 11:41:18.0343 3116 msahci - ok 11:41:18.0363 3116 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 11:41:18.0383 3116 msdsm - ok 11:41:18.0403 3116 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 11:41:18.0433 3116 MSDTC - ok 11:41:18.0473 3116 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 11:41:18.0523 3116 Msfs - ok 11:41:18.0543 3116 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 11:41:18.0573 3116 mshidkmdf - ok 11:41:18.0603 3116 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 11:41:18.0613 3116 msisadrv - ok 11:41:18.0623 3116 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 11:41:18.0663 3116 MSiSCSI - ok 11:41:18.0663 3116 msiserver - ok 11:41:18.0673 3116 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 11:41:18.0703 3116 MSKSSRV - ok 11:41:18.0703 3116 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 11:41:18.0733 3116 MSPCLOCK - ok 11:41:18.0733 3116 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 11:41:18.0763 3116 MSPQM - ok 11:41:18.0773 3116 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 11:41:18.0793 3116 MsRPC - ok 11:41:18.0803 3116 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 11:41:18.0813 3116 mssmbios - ok 11:41:18.0873 3116 MSSQL$WEKAHONCALCDEMO - ok 11:41:18.0923 3116 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe 11:41:18.0943 3116 MSSQLServerADHelper - ok 11:41:18.0963 3116 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 11:41:19.0013 3116 MSTEE - ok 11:41:19.0023 3116 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 11:41:19.0043 3116 MTConfig - ok 11:41:19.0053 3116 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 11:41:19.0063 3116 Mup - ok 11:41:19.0093 3116 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 11:41:19.0143 3116 napagent - ok 11:41:19.0163 3116 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 11:41:19.0193 3116 NativeWifiP - ok 11:41:19.0233 3116 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 11:41:19.0263 3116 NDIS - ok 11:41:19.0273 3116 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 11:41:19.0313 3116 NdisCap - ok 11:41:19.0333 3116 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 11:41:19.0353 3116 NdisTapi - ok 11:41:19.0373 3116 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 11:41:19.0403 3116 Ndisuio - ok 11:41:19.0423 3116 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 11:41:19.0454 3116 NdisWan - ok 11:41:19.0464 3116 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 11:41:19.0504 3116 NDProxy - ok 11:41:19.0534 3116 [ 2C723E42FC8D7B0209492828F921FB50 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll 11:41:19.0554 3116 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 11:41:19.0554 3116 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 11:41:19.0604 3116 [ 6F4607E2333FE21E9E3FF8133A88B35B ] Netaapl C:\Windows\system32\DRIVERS\netaapl64.sys 11:41:19.0634 3116 Netaapl - ok 11:41:19.0664 3116 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 11:41:19.0714 3116 NetBIOS - ok 11:41:19.0734 3116 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 11:41:19.0764 3116 NetBT - ok 11:41:19.0794 3116 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 11:41:19.0804 3116 Netlogon - ok 11:41:19.0824 3116 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 11:41:19.0884 3116 Netman - ok 11:41:19.0924 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 11:41:19.0944 3116 NetMsmqActivator - ok 11:41:19.0944 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 11:41:19.0954 3116 NetPipeActivator - ok 11:41:19.0974 3116 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 11:41:20.0024 3116 netprofm - ok 11:41:20.0024 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 11:41:20.0034 3116 NetTcpActivator - ok 11:41:20.0034 3116 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 11:41:20.0044 3116 NetTcpPortSharing - ok 11:41:20.0064 3116 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 11:41:20.0074 3116 nfrd960 - ok 11:41:20.0094 3116 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 11:41:20.0124 3116 NlaSvc - ok 11:41:20.0144 3116 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 11:41:20.0184 3116 Npfs - ok 11:41:20.0194 3116 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 11:41:20.0224 3116 nsi - ok 11:41:20.0234 3116 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 11:41:20.0274 3116 nsiproxy - ok 11:41:20.0324 3116 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 11:41:20.0394 3116 Ntfs - ok 11:41:20.0404 3116 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 11:41:20.0444 3116 Null - ok 11:41:20.0644 3116 [ 8E6247F418B4C8AE9EEB0B532CABCC21 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys 11:41:20.0814 3116 nvlddmkm - ok 11:41:20.0844 3116 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 11:41:20.0864 3116 nvraid - ok 11:41:20.0884 3116 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 11:41:20.0904 3116 nvstor - ok 11:41:20.0944 3116 [ 41B97DCE2B2D113B831EB197F02A7398 ] nvsvc C:\Windows\system32\nvvsvc.exe 11:41:20.0974 3116 nvsvc - ok 11:41:21.0034 3116 [ A3A25E0509F67473B960DAF214828BE3 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe 11:41:21.0094 3116 nvUpdatusService - ok 11:41:21.0104 3116 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 11:41:21.0114 3116 nv_agp - ok 11:41:21.0184 3116 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 11:41:21.0224 3116 odserv - ok 11:41:21.0254 3116 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 11:41:21.0284 3116 ohci1394 - ok 11:41:21.0314 3116 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 11:41:21.0334 3116 ose - ok 11:41:21.0454 3116 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 11:41:21.0614 3116 osppsvc - ok 11:41:21.0644 3116 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 11:41:21.0684 3116 p2pimsvc - ok 11:41:21.0694 3116 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 11:41:21.0724 3116 p2psvc - ok 11:41:21.0754 3116 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys 11:41:21.0764 3116 Parport - ok 11:41:21.0794 3116 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 11:41:21.0804 3116 partmgr - ok 11:41:21.0814 3116 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 11:41:21.0844 3116 PcaSvc - ok 11:41:21.0874 3116 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 11:41:21.0884 3116 pci - ok 11:41:21.0904 3116 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 11:41:21.0914 3116 pciide - ok 11:41:21.0934 3116 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 11:41:21.0954 3116 pcmcia - ok 11:41:21.0984 3116 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 11:41:21.0984 3116 pcw - ok 11:41:22.0004 3116 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 11:41:22.0064 3116 PEAUTH - ok 11:41:22.0104 3116 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll 11:41:22.0154 3116 PeerDistSvc - ok 11:41:22.0224 3116 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 11:41:22.0254 3116 PerfHost - ok 11:41:22.0294 3116 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 11:41:22.0374 3116 pla - ok 11:41:22.0434 3116 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 11:41:22.0484 3116 PlugPlay - ok 11:41:22.0514 3116 [ 171E6D91A20AAC8D02172A64E82CE90B ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll 11:41:22.0534 3116 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning 11:41:22.0534 3116 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1) 11:41:22.0544 3116 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 11:41:22.0574 3116 PNRPAutoReg - ok 11:41:22.0594 3116 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 11:41:22.0614 3116 PNRPsvc - ok 11:41:22.0654 3116 [ 34A8FAE065249F85A67A3215FF5ECB34 ] Point64 C:\Windows\system32\DRIVERS\point64.sys 11:41:22.0664 3116 Point64 - ok 11:41:22.0704 3116 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 11:41:22.0764 3116 PolicyAgent - ok 11:41:22.0784 3116 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 11:41:22.0834 3116 Power - ok 11:41:22.0874 3116 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 11:41:22.0924 3116 PptpMiniport - ok 11:41:22.0934 3116 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys 11:41:22.0964 3116 Processor - ok 11:41:22.0984 3116 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 11:41:23.0024 3116 ProfSvc - ok 11:41:23.0034 3116 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 11:41:23.0044 3116 ProtectedStorage - ok 11:41:23.0064 3116 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 11:41:23.0114 3116 Psched - ok 11:41:23.0144 3116 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 11:41:23.0194 3116 ql2300 - ok 11:41:23.0214 3116 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 11:41:23.0224 3116 ql40xx - ok 11:41:23.0254 3116 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 11:41:23.0274 3116 QWAVE - ok 11:41:23.0284 3116 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 11:41:23.0304 3116 QWAVEdrv - ok 11:41:23.0314 3116 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 11:41:23.0334 3116 RasAcd - ok 11:41:23.0354 3116 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 11:41:23.0384 3116 RasAgileVpn - ok 11:41:23.0394 3116 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 11:41:23.0434 3116 RasAuto - ok 11:41:23.0444 3116 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 11:41:23.0484 3116 Rasl2tp - ok 11:41:23.0514 3116 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 11:41:23.0554 3116 RasMan - ok 11:41:23.0564 3116 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 11:41:23.0614 3116 RasPppoe - ok 11:41:23.0624 3116 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 11:41:23.0664 3116 RasSstp - ok 11:41:23.0674 3116 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 11:41:23.0724 3116 rdbss - ok 11:41:23.0754 3116 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 11:41:23.0764 3116 rdpbus - ok 11:41:23.0794 3116 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 11:41:23.0834 3116 RDPCDD - ok 11:41:23.0844 3116 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys 11:41:23.0874 3116 RDPDR - ok 11:41:23.0884 3116 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 11:41:23.0924 3116 RDPENCDD - ok 11:41:23.0924 3116 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 11:41:23.0954 3116 RDPREFMP - ok 11:41:24.0004 3116 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 11:41:24.0044 3116 RdpVideoMiniport - ok 11:41:24.0074 3116 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 11:41:24.0114 3116 RDPWD - ok 11:41:24.0134 3116 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 11:41:24.0154 3116 rdyboost - ok 11:41:24.0174 3116 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 11:41:24.0234 3116 RemoteAccess - ok 11:41:24.0244 3116 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 11:41:24.0284 3116 RemoteRegistry - ok 11:41:24.0324 3116 [ 50B6C12529D4D6858C1492F1FB0B3056 ] RIB.License.Server C:\Program Files (x86)\RIB\License\RIB.License.Server.exe 11:41:24.0364 3116 RIB.License.Server - ok 11:41:24.0374 3116 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 11:41:24.0424 3116 RpcEptMapper - ok 11:41:24.0444 3116 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 11:41:24.0464 3116 RpcLocator - ok 11:41:24.0484 3116 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 11:41:24.0514 3116 RpcSs - ok 11:41:24.0554 3116 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 11:41:24.0584 3116 rspndr - ok 11:41:24.0634 3116 [ E50CFB92986DCAB49DE93788FD695813 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 11:41:24.0654 3116 RTL8167 - ok 11:41:24.0674 3116 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys 11:41:24.0684 3116 s3cap - ok 11:41:24.0694 3116 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 11:41:24.0704 3116 SamSs - ok 11:41:24.0714 3116 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 11:41:24.0724 3116 sbp2port - ok 11:41:24.0734 3116 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 11:41:24.0784 3116 SCardSvr - ok 11:41:24.0804 3116 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 11:41:24.0854 3116 scfilter - ok 11:41:24.0884 3116 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 11:41:24.0944 3116 Schedule - ok 11:41:24.0974 3116 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 11:41:24.0994 3116 SCPolicySvc - ok 11:41:25.0004 3116 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 11:41:25.0024 3116 SDRSVC - ok 11:41:25.0054 3116 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 11:41:25.0084 3116 secdrv - ok 11:41:25.0104 3116 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 11:41:25.0124 3116 seclogon - ok 11:41:25.0144 3116 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 11:41:25.0184 3116 SENS - ok 11:41:25.0184 3116 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 11:41:25.0214 3116 SensrSvc - ok 11:41:25.0234 3116 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys 11:41:25.0254 3116 Serenum - ok 11:41:25.0264 3116 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys 11:41:25.0274 3116 Serial - ok 11:41:25.0314 3116 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys 11:41:25.0344 3116 sermouse - ok 11:41:25.0354 3116 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 11:41:25.0404 3116 SessionEnv - ok 11:41:25.0424 3116 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 11:41:25.0444 3116 sffdisk - ok 11:41:25.0454 3116 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 11:41:25.0484 3116 sffp_mmc - ok 11:41:25.0494 3116 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 11:41:25.0504 3116 sffp_sd - ok 11:41:25.0534 3116 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 11:41:25.0554 3116 sfloppy - ok 11:41:25.0584 3116 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 11:41:25.0644 3116 SharedAccess - ok 11:41:25.0674 3116 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 11:41:25.0734 3116 ShellHWDetection - ok 11:41:25.0754 3116 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 11:41:25.0764 3116 SiSRaid2 - ok 11:41:25.0774 3116 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 11:41:25.0784 3116 SiSRaid4 - ok 11:41:25.0814 3116 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 11:41:25.0864 3116 Smb - ok 11:41:25.0884 3116 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 11:41:25.0904 3116 SNMPTRAP - ok 11:41:25.0914 3116 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 11:41:25.0934 3116 spldr - ok 11:41:25.0954 3116 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 11:41:25.0994 3116 Spooler - ok 11:41:26.0054 3116 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 11:41:26.0164 3116 sppsvc - ok 11:41:26.0174 3116 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 11:41:26.0204 3116 sppuinotify - ok 11:41:26.0224 3116 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe 11:41:26.0234 3116 SQLBrowser - ok 11:41:26.0284 3116 [ 3C432A96363097870995E2A3C8B66ABD ] SQLWriter C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 11:41:26.0304 3116 SQLWriter - ok 11:41:26.0334 3116 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 11:41:26.0374 3116 srv - ok 11:41:26.0394 3116 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 11:41:26.0434 3116 srv2 - ok 11:41:26.0444 3116 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 11:41:26.0464 3116 srvnet - ok 11:41:26.0504 3116 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 11:41:26.0554 3116 SSDPSRV - ok 11:41:26.0574 3116 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 11:41:26.0614 3116 SstpSvc - ok 11:41:26.0614 3116 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys 11:41:26.0624 3116 stexstor - ok 11:41:26.0654 3116 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 11:41:26.0694 3116 stisvc - ok 11:41:26.0714 3116 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys 11:41:26.0724 3116 storflt - ok 11:41:26.0724 3116 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll 11:41:26.0754 3116 StorSvc - ok 11:41:26.0774 3116 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys 11:41:26.0784 3116 storvsc - ok 11:41:26.0804 3116 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys 11:41:26.0804 3116 swenum - ok 11:41:26.0824 3116 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 11:41:26.0864 3116 swprv - ok 11:41:26.0894 3116 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 11:41:26.0944 3116 SysMain - ok 11:41:26.0964 3116 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 11:41:26.0984 3116 TabletInputService - ok 11:41:27.0004 3116 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 11:41:27.0044 3116 TapiSrv - ok 11:41:27.0064 3116 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 11:41:27.0084 3116 TBS - ok 11:41:27.0154 3116 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 11:41:27.0224 3116 Tcpip - ok 11:41:27.0264 3116 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 11:41:27.0294 3116 TCPIP6 - ok 11:41:27.0324 3116 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 11:41:27.0344 3116 tcpipreg - ok 11:41:27.0374 3116 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 11:41:27.0404 3116 TDPIPE - ok 11:41:27.0434 3116 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 11:41:27.0454 3116 TDTCP - ok 11:41:27.0484 3116 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 11:41:27.0534 3116 tdx - ok 11:41:27.0554 3116 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 11:41:27.0564 3116 TermDD - ok 11:41:27.0584 3116 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 11:41:27.0634 3116 TermService - ok 11:41:27.0644 3116 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 11:41:27.0674 3116 Themes - ok 11:41:27.0694 3116 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 11:41:27.0714 3116 THREADORDER - ok 11:41:27.0744 3116 [ DBCC20C02E8A3E43B03C304A4E40A84F ] TPM C:\Windows\system32\drivers\tpm.sys 11:41:27.0764 3116 TPM - ok 11:41:27.0784 3116 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 11:41:27.0824 3116 TrkWks - ok 11:41:27.0864 3116 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 11:41:27.0904 3116 TrustedInstaller - ok 11:41:27.0914 3116 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 11:41:27.0954 3116 tssecsrv - ok 11:41:27.0994 3116 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 11:41:28.0024 3116 TsUsbFlt - ok 11:41:28.0044 3116 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 11:41:28.0074 3116 TsUsbGD - ok 11:41:28.0104 3116 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 11:41:28.0144 3116 tunnel - ok 11:41:28.0164 3116 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 11:41:28.0174 3116 uagp35 - ok 11:41:28.0194 3116 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 11:41:28.0234 3116 udfs - ok 11:41:28.0264 3116 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 11:41:28.0294 3116 UI0Detect - ok 11:41:28.0324 3116 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 11:41:28.0344 3116 uliagpkx - ok 11:41:28.0354 3116 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 11:41:28.0384 3116 umbus - ok 11:41:28.0394 3116 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys 11:41:28.0424 3116 UmPass - ok 11:41:28.0444 3116 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll 11:41:28.0474 3116 UmRdpService - ok 11:41:28.0494 3116 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 11:41:28.0544 3116 upnphost - ok 11:41:28.0564 3116 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 11:41:28.0584 3116 USBAAPL64 - ok 11:41:28.0624 3116 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 11:41:28.0664 3116 usbccgp - ok 11:41:28.0704 3116 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 11:41:28.0734 3116 usbcir - ok 11:41:28.0774 3116 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 11:41:28.0814 3116 usbehci - ok 11:41:28.0844 3116 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 11:41:28.0884 3116 usbhub - ok 11:41:28.0904 3116 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 11:41:28.0924 3116 usbohci - ok 11:41:28.0954 3116 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys 11:41:28.0974 3116 usbprint - ok 11:41:29.0004 3116 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 11:41:29.0044 3116 USBSTOR - ok 11:41:29.0074 3116 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 11:41:29.0094 3116 usbuhci - ok 11:41:29.0114 3116 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 11:41:29.0174 3116 UxSms - ok 11:41:29.0194 3116 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 11:41:29.0204 3116 VaultSvc - ok 11:41:29.0214 3116 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 11:41:29.0234 3116 vdrvroot - ok 11:41:29.0244 3116 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 11:41:29.0304 3116 vds - ok 11:41:29.0344 3116 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 11:41:29.0364 3116 vga - ok 11:41:29.0374 3116 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 11:41:29.0404 3116 VgaSave - ok 11:41:29.0424 3116 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 11:41:29.0444 3116 vhdmp - ok 11:41:29.0454 3116 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 11:41:29.0464 3116 viaide - ok 11:41:29.0474 3116 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys 11:41:29.0494 3116 vmbus - ok 11:41:29.0494 3116 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys 11:41:29.0514 3116 VMBusHID - ok 11:41:29.0544 3116 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 11:41:29.0554 3116 volmgr - ok 11:41:29.0564 3116 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 11:41:29.0584 3116 volmgrx - ok 11:41:29.0604 3116 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 11:41:29.0634 3116 volsnap - ok 11:41:29.0664 3116 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 11:41:29.0684 3116 vsmraid - ok 11:41:29.0714 3116 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 11:41:29.0804 3116 VSS - ok 11:41:29.0814 3116 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys 11:41:29.0844 3116 vwifibus - ok 11:41:29.0874 3116 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 11:41:29.0944 3116 W32Time - ok 11:41:29.0954 3116 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys 11:41:29.0964 3116 WacomPen - ok 11:41:29.0984 3116 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 11:41:30.0014 3116 WANARP - ok 11:41:30.0024 3116 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 11:41:30.0054 3116 Wanarpv6 - ok 11:41:30.0084 3116 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 11:41:30.0164 3116 wbengine - ok 11:41:30.0174 3116 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 11:41:30.0194 3116 WbioSrvc - ok 11:41:30.0204 3116 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 11:41:30.0234 3116 wcncsvc - ok 11:41:30.0244 3116 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 11:41:30.0284 3116 WcsPlugInService - ok 11:41:30.0304 3116 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys 11:41:30.0324 3116 Wd - ok 11:41:30.0344 3116 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 11:41:30.0404 3116 Wdf01000 - ok 11:41:30.0414 3116 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 11:41:30.0495 3116 WdiServiceHost - ok 11:41:30.0495 3116 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 11:41:30.0515 3116 WdiSystemHost - ok 11:41:30.0535 3116 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 11:41:30.0555 3116 WebClient - ok 11:41:30.0565 3116 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 11:41:30.0605 3116 Wecsvc - ok 11:41:30.0615 3116 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 11:41:30.0655 3116 wercplsupport - ok 11:41:30.0675 3116 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 11:41:30.0715 3116 WerSvc - ok 11:41:30.0745 3116 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 11:41:30.0765 3116 WfpLwf - ok 11:41:30.0785 3116 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 11:41:30.0795 3116 WIMMount - ok 11:41:30.0825 3116 WinDefend - ok 11:41:30.0825 3116 WinHttpAutoProxySvc - ok 11:41:30.0875 3116 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 11:41:30.0935 3116 Winmgmt - ok 11:41:30.0985 3116 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 11:41:31.0075 3116 WinRM - ok 11:41:31.0125 3116 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 11:41:31.0155 3116 WinUsb - ok 11:41:31.0185 3116 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 11:41:31.0245 3116 Wlansvc - ok 11:41:31.0315 3116 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 11:41:31.0325 3116 wlcrasvc - ok 11:41:31.0395 3116 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 11:41:31.0475 3116 wlidsvc - ok 11:41:31.0495 3116 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 11:41:31.0515 3116 WmiAcpi - ok 11:41:31.0525 3116 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 11:41:31.0555 3116 wmiApSrv - ok 11:41:31.0575 3116 WMPNetworkSvc - ok 11:41:31.0615 3116 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 11:41:31.0645 3116 WPCSvc - ok 11:41:31.0655 3116 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 11:41:31.0675 3116 WPDBusEnum - ok 11:41:31.0695 3116 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 11:41:31.0735 3116 ws2ifsl - ok 11:41:31.0745 3116 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 11:41:31.0775 3116 wscsvc - ok 11:41:31.0775 3116 WSearch - ok 11:41:31.0835 3116 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 11:41:31.0895 3116 wuauserv - ok 11:41:31.0925 3116 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 11:41:31.0945 3116 WudfPf - ok 11:41:31.0975 3116 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 11:41:31.0995 3116 WUDFRd - ok 11:41:32.0025 3116 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 11:41:32.0055 3116 wudfsvc - ok 11:41:32.0085 3116 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll 11:41:32.0115 3116 WwanSvc - ok 11:41:32.0125 3116 ================ Scan global =============================== 11:41:32.0135 3116 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 11:41:32.0175 3116 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 11:41:32.0205 3116 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 11:41:32.0225 3116 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 11:41:32.0265 3116 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 11:41:32.0275 3116 [Global] - ok 11:41:32.0275 3116 ================ Scan MBR ================================== 11:41:32.0285 3116 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 11:41:32.0595 3116 \Device\Harddisk0\DR0 - ok 11:41:32.0595 3116 ================ Scan VBR ================================== 11:41:32.0625 3116 [ 135CE267654E83DB554A9A1B052C061B ] \Device\Harddisk0\DR0\Partition1 11:41:32.0625 3116 \Device\Harddisk0\DR0\Partition1 - ok 11:41:32.0625 3116 ============================================================ 11:41:32.0625 3116 Scan finished 11:41:32.0625 3116 ============================================================ 11:41:32.0635 5224 Detected object count: 5 11:41:32.0635 5224 Actual detected object count: 5 11:41:41.0566 5224 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user 11:41:41.0566 5224 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 11:41:41.0566 5224 HP DS Service ( UnsignedFile.Multi.Generic ) - skipped by user 11:41:41.0566 5224 HP DS Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 11:41:41.0566 5224 HP LaserJet Service ( UnsignedFile.Multi.Generic ) - skipped by user 11:41:41.0566 5224 HP LaserJet Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 11:41:41.0566 5224 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user 11:41:41.0566 5224 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip 11:41:41.0566 5224 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user 11:41:41.0566 5224 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip Matthias |
28.05.2013, 10:46 | #8 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung Passt. Scan mit Combofix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
28.05.2013, 11:09 | #9 |
| Google-Suchergebnisse: Falsche Weiterleitung Hallo Markus, hier die Ergebnisse von Combofix: Code:
ATTFilter ComboFix 13-05-28.01 - cph 28.05.2013 11:59:25.1.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.4070.2421 [GMT 2:00] ausgeführt von:: c:\users\cph\Desktop\ComboFix.exe AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\IsUn0407.exe . . ((((((((((((((((((((((( Dateien erstellt von 2013-04-28 bis 2013-05-28 )))))))))))))))))))))))))))))) . . 2013-05-28 09:20 . 2013-05-28 09:32 -------- d-----w- C:\_OTL 2013-05-25 10:09 . 2013-05-25 10:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll 2013-05-25 10:09 . 2013-05-25 10:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll 2013-05-25 10:09 . 2013-05-25 10:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll 2013-05-25 10:09 . 2013-05-25 10:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll 2013-05-25 10:09 . 2013-05-25 10:09 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll 2013-05-25 10:09 . 2013-05-25 10:09 -------- d-----w- c:\program files (x86)\QuickTime 2013-05-21 07:09 . 2013-05-21 07:09 -------- d-----w- c:\program files\iPod 2013-05-21 07:09 . 2013-05-21 07:09 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-05-21 07:09 . 2013-05-21 07:09 -------- d-----w- c:\program files\iTunes 2013-05-21 07:09 . 2013-05-21 07:09 -------- d-----w- c:\program files (x86)\iTunes 2013-05-16 06:10 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys 2013-05-16 06:10 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-05-16 06:10 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll 2013-05-16 06:10 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll 2013-05-16 06:10 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll 2013-05-16 06:10 . 2013-02-27 05:52 14172672 ----a-w- c:\windows\system32\shell32.dll 2013-05-16 06:10 . 2013-02-27 06:02 111448 ----a-w- c:\windows\system32\consent.exe 2013-05-16 06:10 . 2013-02-27 05:52 197120 ----a-w- c:\windows\system32\shdocvw.dll 2013-05-16 06:10 . 2013-02-27 05:48 1930752 ----a-w- c:\windows\system32\authui.dll 2013-05-16 06:10 . 2013-02-27 05:47 70144 ----a-w- c:\windows\system32\appinfo.dll 2013-05-16 06:10 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\SysWow64\authui.dll 2013-05-16 06:09 . 2013-04-10 03:30 3153920 ----a-w- c:\windows\system32\win32k.sys 2013-05-10 07:57 . 2013-05-10 07:57 27208 ----a-w- c:\windows\system32\AdobePDFUI.dll 2013-05-10 07:57 . 2013-05-10 07:57 55872 ----a-w- c:\windows\system32\AdobePDF.dll 2013-05-07 09:43 . 2013-05-07 09:43 83160 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2013-05-06 07:33 . 2013-03-26 15:59 92256 ----a-w- c:\programdata\Microsoft\BingDesktop\Updater\BingDesktopRestarter.exe 2013-05-06 07:19 . 2013-05-06 07:19 -------- d-----w- c:\program files\Microsoft Mouse and Keyboard Center 2013-05-06 07:17 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2013-05-06 07:17 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys 2013-05-06 07:17 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll 2013-05-06 07:17 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll 2013-05-06 07:17 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll 2013-05-06 07:17 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2013-05-06 07:17 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2013-05-06 07:17 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll 2013-05-06 07:17 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll 2013-05-01 01:59 . 2013-05-01 01:59 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx 2013-05-01 01:59 . 2013-05-01 01:59 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts 2013-04-29 14:17 . 2013-04-29 14:17 -------- d-----w- c:\users\cph\AppData\Roaming\Weka 2013-04-29 14:17 . 2013-04-29 14:17 -------- d-----w- c:\users\cph\AppData\Roaming\Lexware 2013-04-29 14:17 . 2013-04-29 14:17 -------- d-----w- c:\users\cph\AppData\Local\Lexware 2013-04-29 14:17 . 2013-04-29 14:17 -------- d-----w- c:\program files (x86)\Common Files\Weka 2013-04-29 14:17 . 2013-04-29 14:17 -------- d-----w- c:\program files (x86)\Common Files\Lexware 2013-04-29 14:14 . 2013-04-29 14:14 -------- d-----w- c:\program files (x86)\sirAdos . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-05-16 15:24 . 2012-01-09 06:44 75016696 ----a-w- c:\windows\system32\MRT.exe 2013-05-16 06:56 . 2012-04-10 05:42 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-05-16 06:56 . 2012-01-03 09:55 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-13 06:28 . 2010-06-24 10:33 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-04-13 05:49 . 2013-05-16 06:10 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll 2013-04-13 05:49 . 2013-05-16 06:10 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll 2013-04-13 05:49 . 2013-05-16 06:10 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll 2013-04-13 05:49 . 2013-05-16 06:10 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll 2013-04-13 04:45 . 2013-05-16 06:10 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2013-04-13 04:45 . 2013-05-16 06:10 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll 2013-04-12 14:45 . 2013-04-24 15:07 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-04 03:35 . 2013-03-05 14:10 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-03-25 12:42 . 2013-03-25 12:42 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2013-03-25 12:42 . 2013-03-25 12:42 130016 ----a-w- c:\windows\system32\drivers\avipbb.sys 2013-03-25 12:42 . 2013-03-25 12:42 100712 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2013-03-22 15:07 . 2013-03-22 15:07 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-03-22 15:07 . 2013-03-22 15:07 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-03-22 15:07 . 2013-03-22 15:07 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-03-22 15:07 . 2013-03-22 15:07 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-03-22 15:07 . 2013-03-22 15:07 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-03-22 15:07 . 2013-03-22 15:07 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-03-22 15:07 . 2013-03-22 15:07 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-03-22 15:07 . 2013-03-22 15:07 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-03-22 15:07 . 2013-03-22 15:07 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-03-22 15:07 . 2013-03-22 15:07 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-03-22 15:07 . 2013-03-22 15:07 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-03-22 15:07 . 2013-03-22 15:07 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-03-22 15:07 . 2013-03-22 15:07 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-03-22 15:07 . 2013-03-22 15:07 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-03-22 15:07 . 2013-03-22 15:07 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-03-22 15:07 . 2013-03-22 15:07 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-03-22 15:07 . 2013-03-22 15:07 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-03-22 15:07 . 2013-03-22 15:07 81408 ----a-w- c:\windows\system32\icardie.dll 2013-03-22 15:07 . 2013-03-22 15:07 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-03-22 15:07 . 2013-03-22 15:07 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-03-22 15:07 . 2013-03-22 15:07 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-03-22 15:07 . 2013-03-22 15:07 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-03-22 15:07 . 2013-03-22 15:07 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-03-22 15:07 . 2013-03-22 15:07 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-03-22 15:07 . 2013-03-22 15:07 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-03-22 15:07 . 2013-03-22 15:07 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-03-22 15:07 . 2013-03-22 15:07 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-03-22 15:07 . 2013-03-22 15:07 441856 ----a-w- c:\windows\system32\html.iec 2013-03-22 15:07 . 2013-03-22 15:07 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-03-22 15:07 . 2013-03-22 15:07 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-03-22 15:07 . 2013-03-22 15:07 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-03-22 15:07 . 2013-03-22 15:07 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-03-22 15:07 . 2013-03-22 15:07 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-03-22 15:07 . 2013-03-22 15:07 235008 ----a-w- c:\windows\system32\url.dll 2013-03-22 15:07 . 2013-03-22 15:07 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-03-22 15:07 . 2013-03-22 15:07 216064 ----a-w- c:\windows\system32\msls31.dll 2013-03-22 15:07 . 2013-03-22 15:07 197120 ----a-w- c:\windows\system32\msrating.dll 2013-03-22 15:07 . 2013-03-22 15:07 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-03-22 15:07 . 2013-03-22 15:07 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-03-22 15:07 . 2013-03-22 15:07 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-03-22 15:07 . 2013-03-22 15:07 149504 ----a-w- c:\windows\system32\occache.dll 2013-03-22 15:07 . 2013-03-22 15:07 144896 ----a-w- c:\windows\system32\wextract.exe 2013-03-22 15:07 . 2013-03-22 15:07 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-03-22 15:07 . 2013-03-22 15:07 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-03-22 15:07 . 2013-03-22 15:07 13824 ----a-w- c:\windows\system32\mshta.exe 2013-03-22 15:07 . 2013-03-22 15:07 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-03-22 15:07 . 2013-03-22 15:07 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-03-22 15:07 . 2013-03-22 15:07 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-03-22 15:07 . 2013-03-22 15:07 102912 ----a-w- c:\windows\system32\inseng.dll 2013-03-22 15:06 . 2013-03-22 15:06 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2013-03-22 15:06 . 2013-03-22 15:06 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-03-22 15:06 . 2013-03-22 15:06 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-03-22 15:06 . 2013-03-22 15:06 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-03-22 15:06 . 2013-03-22 15:06 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-03-22 15:06 . 2013-03-22 15:06 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-03-22 15:06 . 2013-03-22 15:06 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-03-22 15:06 . 2013-03-22 15:06 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-03-22 15:06 . 2013-03-22 15:06 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-03-22 15:06 . 2013-03-22 15:06 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2013-03-22 15:06 . 2013-03-22 15:06 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-03-22 15:06 . 2013-03-22 15:06 293376 ----a-w- c:\windows\SysWow64\dxgi.dll 2013-03-22 15:06 . 2013-03-22 15:06 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-03-22 15:06 . 2013-03-22 15:06 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-03-22 15:06 . 2013-03-22 15:06 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-03-22 15:06 . 2013-03-22 15:06 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2013-03-22 15:06 . 2013-03-22 15:06 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2013-03-22 15:06 . 2013-03-22 15:06 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2013-03-22 15:06 . 2013-03-22 15:06 221184 ----a-w- c:\windows\system32\UIAnimation.dll 2013-03-22 15:06 . 2013-03-22 15:06 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll 2013-03-22 15:06 . 2013-03-22 15:06 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-03-31 1520776] . [HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2013-03-31 12:57 1520776 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-03-31 1520776] . [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{597EBBE7-A99D-4165-9931-771404A0DC7A}" [HKEY_CLASSES_ROOT\CLSID\{597EBBE7-A99D-4165-9931-771404A0DC7A}] 2012-04-09 14:27 158224 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-04-09 14:27 158224 ----a-w- c:\windows\SysWOW64\CbFsMntNtf3.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-04-05 59720] "Akamai NetSession Interface"="c:\users\cph\AppData\Local\Akamai\netsession_win.exe" [2013-01-26 4480768] "ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-04-05 59720] "com.apple.dav.bookmarks.daemon"="c:\program files (x86)\Common Files\Apple\Internet Services\BookmarkDAV_client.exe" [2013-04-05 59720] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-01-18 39408] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-05-10 38984] "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-05-10 840768] "SHIWebOnDiskManager"="c:\program files (x86)\SHIWebOnDiskManager\SHIWebOnDiskManager.exe" [2012-02-10 233472] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "StatusAlerts"="c:\program files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe" [2011-07-19 136760] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208] "ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-03-31 1646216] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-05-07 345312] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816] "WekaUpdateCenter"="c:\program files (x86)\Common Files\Weka\Update Manager\WekaUpdateManager.exe" [2012-03-01 198000] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] . c:\users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\ LaunchCenter.lnk - c:\program files\Fujitsu\LaunchCenter\LaunchCenter.exe [2012-1-3 375296] . c:\users\cph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup\ Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ LaunchCenter.lnk - c:\program files\Fujitsu\LaunchCenter\LaunchCenter.exe [2012-1-3 375296] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . SafeBoot Registrierungsschlüssel muss repariert werden. Dieser PC kann nicht im abgesicherten Modus starten. . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] @="Driver Group" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] @="Driver" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168] R3 HP DS Service;HP DS Service;c:\program files (x86)\HP\HPBDSService\HPBDSService.exe [2010-10-27 13824] R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2011-04-13 158976] R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-04-13 317440] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [2011-08-02 22528] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-25 28600] S1 cbfs3;cbfs3;c:\windows\system32\drivers\cbfs3.sys [2012-04-09 352144] S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [2013-05-07 371768] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2013-03-25 86752] S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-05-07 562744] S2 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [2013-04-10 168592] S2 FileOpenManagerService;FileOpen Manager Service;c:\program files\FileOpen\Services\FileOpenManagerService64.exe [2012-10-17 335288] S2 HP LaserJet Service;HP LaserJet Service;c:\program files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2011-07-08 162816] S2 MSSQL$WEKAHONCALCDEMO;SQL Server (WEKAHONCALCDEMO);c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408] S2 RIB.License.Server;RIB License Server;c:\program files (x86)\RIB\License\RIB.License.Server.exe [2011-03-25 702280] S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2012-11-26 75904] S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2013-01-29 50800] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-07-29 533096] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - 62077254 *Deregistered* - 62077254 *Deregistered* - FileOpenWebPublisherScreenHookDriver . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-04-10 11:50 1642448 ----a-w- c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-05-28 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-10 06:56] . 2013-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-18 16:15] . 2013-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-01-18 16:15] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon1] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon2] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon3] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\0WualaOverlayIcon4] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2012-05-02 12:10 1721856 ----a-w- c:\program files (x86)\Wuala OverlayIcons\OverlayIcon.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1EldosIconOverlay] @="{597EBBE7-A99D-4165-9931-771404A0DC7A}" [HKEY_CLASSES_ROOT\CLSID\{597EBBE7-A99D-4165-9931-771404A0DC7A}] 2012-04-09 14:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EldosIconOverlay] @="{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}" [HKEY_CLASSES_ROOT\CLSID\{5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC}] 2012-04-09 14:27 190480 ----a-w- c:\windows\System32\CbFsMntNtf3.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-01 12661352] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-13 167960] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-13 391704] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-13 418840] "FileOpenBroker"="c:\program files\FileOpen\Services\FileOpenBroker64.exe" [2012-10-17 1092528] . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService FontCache . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.de/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local;<local> IE: An OneNote s&enden - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105 IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000 LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll TCP: Interfaces\{5F5FEA87-90C4-4125-ACF3-782BAAFBE9C7}: NameServer = 192.168.10.5,8.8.8.8 FF - ProfilePath - c:\users\cph\AppData\Roaming\Mozilla\Firefox\Profiles\srzsv60m.default\ FF - prefs.js: browser.search.selectedEngine - Google . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) AddRemove-BG-BAU-Wegweiser 11.0 - c:\windows\IsUn0407.exe AddRemove-TBG_DOK1 20090701 - c:\windows\IsUn0407.exe AddRemove-TBG_DOK5 20080101 - c:\windows\IsUn0407.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.bmp.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DIB\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.bmp.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICO\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.ico.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JFIF\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.jpg.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPE\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.jpg.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPEG\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.jpg.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPG\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.jpg.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PNG\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.png.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIF\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.tif.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIFF\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.tif.15.4" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WDP\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLive.PhotoGallery.wdp.15.4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2013-05-28 12:06:38 ComboFix-quarantined-files.txt 2013-05-28 10:06 . Vor Suchlauf: 20 Verzeichnis(se), 354.915.487.744 Bytes frei Nach Suchlauf: 25 Verzeichnis(se), 354.754.793.472 Bytes frei . - - End Of File - - C03891A34AE5BC6BDBC36FF3194AEBC7 Gruß, Matthias |
28.05.2013, 11:22 | #10 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung Hi, malwarebytes: Downloade Dir bitte Malwarebytes
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
28.05.2013, 12:18 | #11 |
| Google-Suchergebnisse: Falsche Weiterleitung Hallo Markus, Malwarebytes hat nicht Auffälliges gefunden: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.05.28.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16576 cph :: CLIENT4 [Administrator] 28.05.2013 12:25:18 mbam-log-2013-05-28 (12-25-18).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 412819 Laufzeit: 50 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Wenn ja, dann vielen Dank für die Unterstützung!! Gruß, Matthias |
28.05.2013, 13:51 | #12 |
/// Malware-holic | Google-Suchergebnisse: Falsche Weiterleitung fast. lade den CCleaner standard: CCleaner - Download - Filepony falls der CCleaner bereits instaliert, überspringen. öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen. hinter, jedes von dir benötigte programm, schreibe notwendig. hinter, jedes, von dir nicht benötigte, unnötig. hinter, dir unbekannte, unbekannt. liste posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
Themen zu Google-Suchergebnisse: Falsche Weiterleitung |
adresse, anleitung, avira, falsche, firefox, folge, folgendes, forum, guten, klick, logfiles, meldung, professional, scan, scanner, thread, upload, verhalten, virenscan, virenscanner, warnmeldung, warnung, weiterleitung, windows, windows 7 |