Hallo liebes Trojaner Board - Team,

wir haben uns auf unserem Rechner den GVU 2.07 eingefangen.

Ich konnte den Rechner, mittels OTLPE, starten und den Systemscan durchführen.




Könnt ihr mir weiterhelfen? Das wäre prima!

Ich freue mich über eine Nachricht von Euch.
Vielen herzlichen Dank im Voraus!

hi
auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

:OTL
O20 - HKU\sven.bukowski.VOSTRO1720_ON_C Winlogon: Shell - (cmd.exe) - C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
[2013/05/29 11:17:15 | 000,043,008 | ---- | C] (Adobe Systems Incorporated) -- C:\EigeneDateien\139d2e78.dll
[2013/05/27 14:33:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\188F1432-103A-4ffb-80F1-36B633C5C9E1
:Files
:Commands
[EMPTYFLASH] 
[emptytemp]
         

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.
falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!



Drücke bitte die + E Taste.

• Öffne dein Systemlaufwerk ( meistens C: )
• Suche nun
  folgenden Ordner: _OTL und öffne diesen.
• Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
• 
  Dies wird eine Movedfiles.zip Datei in _OTL erstellen
• Lade diese bitte in unseren Uploadchannel
  hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Vielen Dank,

wir sind gerade am ausführen

bitte solche zwischenposts weglassen, da weitere antworten an diesen angehangen werden, müsste ich dann immer hier reingucken.

Hallo,

der Upload wurde erfolgreich abgeschlossen.

ich danke.
Wenn du wieder imnormalen Modus bist und dort arbeiten kannst:
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Hallo,

da die Datei zu groß zum anhängen ist hier in Reinschrift.


01:18:24.0953 2480 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
01:18:25.0171 2480 ============================================================
01:18:25.0171 2480 Current date / time: 2013/05/30 01:18:25.0171
01:18:25.0171 2480 SystemInfo:
01:18:25.0171 2480
01:18:25.0171 2480 OS Version: 5.1.2600 ServicePack: 3.0
01:18:25.0171 2480 Product type: Workstation
01:18:25.0171 2480 ComputerName: VOSTRO1720
01:18:25.0171 2480 UserName: sven.bukowski
01:18:25.0171 2480 Windows directory: C:\WINDOWS
01:18:25.0171 2480 System windows directory: C:\WINDOWS
01:18:25.0171 2480 Processor architecture: Intel x86
01:18:25.0171 2480 Number of processors: 2
01:18:25.0171 2480 Page size: 0x1000
01:18:25.0171 2480 Boot type: Normal boot
01:18:25.0171 2480 ============================================================
01:18:26.0375 2480 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
01:18:26.0390 2480 ============================================================
01:18:26.0390 2480 \Device\Harddisk0\DR0:
01:18:26.0390 2480 MBR partitions:
01:18:26.0390 2480 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1D1B1170
01:18:26.0390 2480 ============================================================
01:18:26.0406 2480 C: <-> \Device\Harddisk0\DR0\Partition1
01:18:26.0453 2480 ============================================================
01:18:26.0453 2480 Initialize success
01:18:26.0453 2480 ============================================================
01:18:46.0484 1156 ============================================================
01:18:46.0484 1156 Scan started
01:18:46.0484 1156 Mode: Manual; SigCheck; TDLFS;
01:18:46.0484 1156 ============================================================
01:18:46.0593 1156 ================ Scan system memory ========================
01:18:46.0609 1156 System memory - ok
01:18:46.0609 1156 ================ Scan services =============================
01:18:46.0734 1156 Abiosdsk - ok
01:18:46.0781 1156 [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5 C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
01:18:47.0640 1156 abp480n5 - ok
01:18:47.0671 1156 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
01:18:47.0843 1156 ACPI - ok
01:18:47.0843 1156 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
01:18:47.0937 1156 ACPIEC - ok
01:18:47.0984 1156 [ 1B2918DBC6BCDC45D17A8A98DEBCAAEE ] AcrSch2Svc C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
01:18:48.0015 1156 AcrSch2Svc - ok
01:18:48.0062 1156 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
01:18:48.0078 1156 AdobeFlashPlayerUpdateSvc - ok
01:18:48.0125 1156 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
01:18:48.0234 1156 adpu160m - ok
01:18:48.0250 1156 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
01:18:48.0359 1156 aec - ok
01:18:48.0390 1156 [ F21D5E93A94514BE9F5B6EBF74A696B2 ] AESTAud C:\WINDOWS\system32\drivers\AESTAud.sys
01:18:48.0437 1156 AESTAud - ok
01:18:48.0484 1156 [ ACF98D6A61D0610015D490554A3EA97A ] afcdp C:\WINDOWS\system32\DRIVERS\afcdp.sys
01:18:48.0546 1156 afcdp - ok
01:18:48.0593 1156 [ 6900DE81D21CC3CC3C8A5F531CE2AA09 ] afcdpsrv C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe
01:18:48.0718 1156 afcdpsrv - ok
01:18:48.0750 1156 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
01:18:48.0859 1156 AFD - ok
01:18:48.0906 1156 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
01:18:49.0078 1156 agp440 - ok
01:18:49.0140 1156 [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
01:18:49.0265 1156 agpCPQ - ok
01:18:49.0281 1156 [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x C:\WINDOWS\system32\DRIVERS\aha154x.sys
01:18:49.0406 1156 Aha154x - ok
01:18:49.0406 1156 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
01:18:49.0546 1156 aic78u2 - ok
01:18:49.0562 1156 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
01:18:49.0640 1156 aic78xx - ok
01:18:49.0671 1156 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
01:18:49.0750 1156 Alerter - ok
01:18:49.0765 1156 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
01:18:49.0812 1156 ALG - ok
01:18:49.0843 1156 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
01:18:49.0921 1156 AliIde - ok
01:18:49.0921 1156 [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541 C:\WINDOWS\system32\DRIVERS\alim1541.sys
01:18:50.0000 1156 alim1541 - ok
01:18:50.0015 1156 [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp C:\WINDOWS\system32\DRIVERS\amdagp.sys
01:18:50.0109 1156 amdagp - ok
01:18:50.0125 1156 [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint C:\WINDOWS\system32\DRIVERS\amsint.sys
01:18:50.0156 1156 amsint - ok
01:18:50.0203 1156 [ FB7C669774FFCACD77B5969EE5D9A19B ] ApfiltrService C:\WINDOWS\system32\DRIVERS\Apfiltr.sys
01:18:50.0203 1156 ApfiltrService - ok
01:18:50.0390 1156 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
01:18:50.0406 1156 Apple Mobile Device - ok
01:18:50.0421 1156 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
01:18:50.0484 1156 AppMgmt - ok
01:18:50.0500 1156 [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys
01:18:50.0609 1156 Arp1394 - ok
01:18:50.0640 1156 [ 62D318E9A0C8FC9B780008E724283707 ] asc C:\WINDOWS\system32\DRIVERS\asc.sys
01:18:50.0718 1156 asc - ok
01:18:50.0718 1156 [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p C:\WINDOWS\system32\DRIVERS\asc3350p.sys
01:18:50.0828 1156 asc3350p - ok
01:18:50.0828 1156 [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550 C:\WINDOWS\system32\DRIVERS\asc3550.sys
01:18:50.0953 1156 asc3550 - ok
01:18:51.0093 1156 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
01:18:51.0140 1156 aspnet_state - ok
01:18:51.0140 1156 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
01:18:51.0218 1156 AsyncMac - ok
01:18:51.0234 1156 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
01:18:51.0312 1156 atapi - ok
01:18:51.0312 1156 Atdisk - ok
01:18:51.0328 1156 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
01:18:51.0437 1156 Atmarpc - ok
01:18:51.0468 1156 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
01:18:51.0562 1156 AudioSrv - ok
01:18:51.0578 1156 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
01:18:51.0656 1156 audstub - ok
01:18:51.0718 1156 [ FE4ED785396EAA554C561992106A35FA ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
01:18:51.0859 1156 BCM43XX - ok
01:18:51.0890 1156 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
01:18:51.0984 1156 Beep - ok
01:18:52.0031 1156 [ 70CD6D71FC48BBBD1385D7B35AEADECC ] BMLoad C:\WINDOWS\system32\drivers\BMLoad.sys
01:18:52.0062 1156 BMLoad ( UnsignedFile.Multi.Generic ) - warning
01:18:52.0062 1156 BMLoad - detected UnsignedFile.Multi.Generic (1)
01:18:52.0125 1156 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe
01:18:52.0140 1156 Bonjour Service - ok
01:18:52.0171 1156 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
01:18:52.0250 1156 Browser - ok
01:18:52.0250 1156 btaudio - ok
01:18:52.0250 1156 BTDriver - ok
01:18:52.0296 1156 [ B279426E3C0C344893ED78A613A73BDE ] BthEnum C:\WINDOWS\system32\DRIVERS\BthEnum.sys
01:18:52.0453 1156 BthEnum - ok
01:18:52.0453 1156 [ 80602B8746D3738F5886CE3D67EF06B6 ] BthPan C:\WINDOWS\system32\DRIVERS\bthpan.sys
01:18:52.0593 1156 BthPan - ok
01:18:52.0640 1156 [ 592E1CEDBE314D0EF184DC6F46141E76 ] BTHPORT C:\WINDOWS\system32\Drivers\BTHport.sys
01:18:52.0734 1156 BTHPORT - ok
01:18:52.0765 1156 [ 26C601EF7525E31379744ABFC6F35A1B ] BthServ C:\WINDOWS\System32\bthserv.dll
01:18:52.0843 1156 BthServ - ok
01:18:52.0843 1156 [ 61364CD71EF63B0F038B7E9DF00F1EFA ] BTHUSB C:\WINDOWS\system32\Drivers\BTHUSB.sys
01:18:52.0984 1156 BTHUSB - ok
01:18:52.0984 1156 BTWDNDIS - ok
01:18:53.0015 1156 [ 7D295223C172AB4D61DC256721B2F09E ] btwmodem C:\WINDOWS\system32\DRIVERS\btwmodem.sys
01:18:53.0078 1156 btwmodem ( UnsignedFile.Multi.Generic ) - warning
01:18:53.0078 1156 btwmodem - detected UnsignedFile.Multi.Generic (1)
01:18:53.0078 1156 BTWUSB - ok
01:18:53.0093 1156 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
01:18:53.0171 1156 cbidf - ok
01:18:53.0171 1156 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
01:18:53.0281 1156 cbidf2k - ok
01:18:53.0296 1156 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
01:18:53.0406 1156 CCDECODE - ok
01:18:53.0421 1156 [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
01:18:53.0484 1156 cd20xrnt - ok
01:18:53.0500 1156 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
01:18:53.0625 1156 Cdaudio - ok
01:18:53.0640 1156 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
01:18:53.0734 1156 Cdfs - ok
01:18:53.0781 1156 [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
01:18:53.0843 1156 Cdrom - ok
01:18:53.0843 1156 Changer - ok
01:18:53.0890 1156 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
01:18:54.0015 1156 CiSvc - ok
01:18:54.0046 1156 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
01:18:54.0187 1156 ClipSrv - ok
01:18:54.0203 1156 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:18:54.0218 1156 clr_optimization_v2.0.50727_32 - ok
01:18:54.0250 1156 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
01:18:54.0359 1156 CmBatt - ok
01:18:54.0390 1156 [ C687F81290303D90099B027A6474F99F ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
01:18:54.0484 1156 CmdIde - ok
01:18:54.0484 1156 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
01:18:54.0562 1156 Compbatt - ok
01:18:54.0578 1156 COMSysApp - ok
01:18:54.0593 1156 [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray C:\WINDOWS\system32\DRIVERS\cpqarray.sys
01:18:54.0687 1156 Cpqarray - ok
01:18:54.0703 1156 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
01:18:54.0796 1156 CryptSvc - ok
01:18:54.0828 1156 [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
01:18:54.0906 1156 dac2w2k - ok
01:18:54.0906 1156 [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt C:\WINDOWS\system32\DRIVERS\dac960nt.sys
01:18:54.0984 1156 dac960nt - ok
01:18:55.0015 1156 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
01:18:55.0093 1156 DcomLaunch - ok
01:18:55.0109 1156 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
01:18:55.0203 1156 Dhcp - ok
01:18:55.0218 1156 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
01:18:55.0312 1156 Disk - ok
01:18:55.0312 1156 dmadmin - ok
01:18:55.0343 1156 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
01:18:55.0453 1156 dmboot - ok
01:18:55.0453 1156 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
01:18:55.0562 1156 dmio - ok
01:18:55.0562 1156 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
01:18:55.0640 1156 dmload - ok
01:18:55.0656 1156 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
01:18:55.0750 1156 dmserver - ok
01:18:55.0796 1156 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
01:18:55.0890 1156 DMusic - ok
01:18:55.0906 1156 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
01:18:56.0000 1156 Dnscache - ok
01:18:56.0031 1156 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
01:18:56.0109 1156 Dot3svc - ok
01:18:56.0125 1156 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
01:18:56.0203 1156 dpti2o - ok
01:18:56.0203 1156 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
01:18:56.0296 1156 drmkaud - ok
01:18:56.0296 1156 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
01:18:56.0375 1156 EapHost - ok
01:18:56.0390 1156 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
01:18:56.0500 1156 ERSvc - ok
01:18:56.0531 1156 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
01:18:56.0546 1156 Eventlog - ok
01:18:56.0578 1156 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
01:18:56.0625 1156 EventSystem - ok
01:18:56.0656 1156 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
01:18:56.0734 1156 Fastfat - ok
01:18:56.0765 1156 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
01:18:56.0828 1156 FastUserSwitchingCompatibility - ok
01:18:56.0875 1156 [ 08B8B302AF0D1B3B8543429BBAC8F21F ] Fax C:\WINDOWS\system32\fxssvc.exe
01:18:56.0968 1156 Fax - ok
01:18:56.0984 1156 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
01:18:57.0093 1156 Fdc - ok
01:18:57.0125 1156 [ 16A797FE9DCD5EAC03E532CDC91B4100 ] filtertdidriver C:\WINDOWS\system32\drivers\ewfiltertdidriver.sys
01:18:57.0171 1156 filtertdidriver - ok
01:18:57.0187 1156 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
01:18:57.0296 1156 Fips - ok
01:18:57.0312 1156 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
01:18:57.0437 1156 Flpydisk - ok
01:18:57.0453 1156 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
01:18:57.0562 1156 FltMgr - ok
01:18:57.0625 1156 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
01:18:57.0640 1156 FontCache3.0.0.0 - ok
01:18:57.0656 1156 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
01:18:57.0765 1156 Fs_Rec - ok
01:18:57.0781 1156 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
01:18:57.0906 1156 Ftdisk - ok
01:18:57.0937 1156 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
01:18:57.0984 1156 GEARAspiWDM - ok
01:18:58.0000 1156 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
01:18:58.0125 1156 Gpc - ok
01:18:58.0156 1156 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
01:18:58.0281 1156 HDAudBus - ok
01:18:58.0328 1156 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
01:18:58.0421 1156 helpsvc - ok
01:18:58.0437 1156 [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ C:\WINDOWS\System32\hidserv.dll
01:18:58.0546 1156 HidServ - ok
01:18:58.0625 1156 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
01:18:58.0750 1156 hidusb - ok
01:18:58.0781 1156 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
01:18:58.0890 1156 hkmsvc - ok
01:18:58.0984 1156 [ C5A288E4CEEF5A26D105117BAA3763AB ] HP Status Server C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
01:18:59.0031 1156 HP Status Server - ok
01:18:59.0062 1156 [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn C:\WINDOWS\system32\DRIVERS\hpn.sys
01:18:59.0203 1156 hpn - ok
01:18:59.0218 1156 HTCAND32 - ok
01:18:59.0250 1156 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
01:18:59.0312 1156 HTTP - ok
01:18:59.0359 1156 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
01:18:59.0437 1156 HTTPFilter - ok
01:18:59.0468 1156 [ 42A64382A0607B80C99C37170911B346 ] huawei_cdcacm C:\WINDOWS\system32\DRIVERS\ew_jucdcacm.sys
01:18:59.0593 1156 huawei_cdcacm - ok
01:18:59.0609 1156 [ F44461E66F1B7DD267957FE9BAA63ED0 ] huawei_enumerator C:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys
01:18:59.0640 1156 huawei_enumerator - ok
01:18:59.0703 1156 HWDeviceService.exe - ok
01:18:59.0718 1156 [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt C:\WINDOWS\system32\drivers\i2omgmt.sys
01:18:59.0796 1156 i2omgmt - ok
01:18:59.0828 1156 [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp C:\WINDOWS\system32\DRIVERS\i2omp.sys
01:18:59.0937 1156 i2omp - ok
01:18:59.0953 1156 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
01:19:00.0062 1156 i8042prt - ok
01:19:00.0218 1156 [ 66A685B05066683621920BC14A45CFE8 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
01:19:00.0468 1156 ialm - ok
01:19:00.0515 1156 [ BAABB0301949774A66B955C65319635A ] iaStor C:\WINDOWS\system32\drivers\iaStor.sys
01:19:00.0531 1156 iaStor - ok
01:19:00.0625 1156 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
01:19:00.0687 1156 idsvc - ok
01:19:00.0734 1156 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
01:19:00.0906 1156 Imapi - ok
01:19:00.0937 1156 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
01:19:01.0109 1156 ImapiService - ok
01:19:01.0125 1156 [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u C:\WINDOWS\system32\DRIVERS\ini910u.sys
01:19:01.0218 1156 ini910u - ok
01:19:01.0234 1156 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
01:19:01.0312 1156 IntelIde - ok
01:19:01.0328 1156 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
01:19:01.0406 1156 intelppm - ok
01:19:01.0421 1156 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
01:19:01.0500 1156 Ip6Fw - ok
01:19:01.0500 1156 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
01:19:01.0593 1156 IpFilterDriver - ok
01:19:01.0593 1156 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
01:19:01.0671 1156 IpInIp - ok
01:19:01.0687 1156 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
01:19:01.0765 1156 IpNat - ok
01:19:01.0859 1156 [ E3E71649A926CB34FA4D7AB75DCE126C ] iPod Service C:\Programme\iPod\bin\iPodService.exe
01:19:01.0890 1156 iPod Service - ok
01:19:01.0906 1156 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
01:19:01.0984 1156 IPSec - ok
01:19:02.0000 1156 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
01:19:02.0046 1156 IRENUM - ok
01:19:02.0078 1156 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
01:19:02.0156 1156 isapnp - ok
01:19:02.0203 1156 [ 0E410EDC8D0527801B899CF29E60597C ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
01:19:02.0218 1156 JavaQuickStarterService - ok
01:19:02.0234 1156 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
01:19:02.0328 1156 Kbdclass - ok
01:19:02.0328 1156 [ B6D6C117D771C98130497265F26D1882 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
01:19:02.0421 1156 kbdhid - ok
01:19:02.0437 1156 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
01:19:02.0531 1156 kmixer - ok
01:19:02.0546 1156 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
01:19:02.0671 1156 KSecDD - ok
01:19:02.0703 1156 [ 2BBDCB79900990F0716DFCB714E72DE7 ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
01:19:02.0750 1156 LanmanServer - ok
01:19:02.0765 1156 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
01:19:02.0828 1156 lanmanworkstation - ok
01:19:02.0843 1156 lbrtfdc - ok
01:19:02.0890 1156 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
01:19:02.0984 1156 LmHosts - ok
01:19:03.0031 1156 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Programme\McAfee Security Scan\3.0.318\McCHSvc.exe
01:19:03.0062 1156 McComponentHostService - ok
01:19:03.0125 1156 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
01:19:03.0156 1156 MDM - ok
01:19:03.0171 1156 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
01:19:03.0328 1156 Messenger - ok
01:19:03.0359 1156 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
01:19:03.0500 1156 mnmdd - ok
01:19:03.0515 1156 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
01:19:03.0656 1156 mnmsrvc - ok
01:19:03.0718 1156 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
01:19:03.0875 1156 Modem - ok
01:19:03.0890 1156 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
01:19:04.0062 1156 Mouclass - ok
01:19:04.0125 1156 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
01:19:04.0218 1156 mouhid - ok
01:19:04.0218 1156 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
01:19:04.0296 1156 MountMgr - ok
01:19:04.0328 1156 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
01:19:04.0343 1156 MozillaMaintenance - ok
01:19:04.0359 1156 [ D993BEA500E7382DC4E760BF4F35EFCB ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys
01:19:04.0390 1156 MpFilter - ok
01:19:04.0468 1156 [ A69630D039C38018689190234F866D77 ] MpKsl10ed5cf7 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft\Microsoft Antimalware\Definition Updates\{3647D871-E412-4F0B-B002-8D890752746D}\MpKsl10ed5cf7.sys
01:19:04.0484 1156 MpKsl10ed5cf7 - ok
01:19:04.0515 1156 [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x C:\WINDOWS\system32\DRIVERS\mraid35x.sys
01:19:04.0609 1156 mraid35x - ok
01:19:04.0625 1156 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
01:19:04.0703 1156 MRxDAV - ok
01:19:04.0750 1156 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
01:19:04.0812 1156 MRxSmb - ok
01:19:04.0875 1156 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
01:19:04.0968 1156 MSDTC - ok
01:19:04.0984 1156 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
01:19:05.0078 1156 Msfs - ok
01:19:05.0093 1156 MSIServer - ok
01:19:05.0109 1156 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
01:19:05.0218 1156 MSKSSRV - ok
01:19:05.0234 1156 [ 64E8B7C65EB4796939C0F64F8170821B ] msloop C:\WINDOWS\system32\DRIVERS\loop.sys
01:19:05.0343 1156 msloop - ok
01:19:05.0390 1156 [ 24516BF4E12A46CB67302E2CDCB8CDDF ] MsMpSvc C:\Programme\Microsoft Security Client\MsMpEng.exe
01:19:05.0406 1156 MsMpSvc - ok
01:19:05.0437 1156 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
01:19:05.0546 1156 MSPCLOCK - ok
01:19:05.0562 1156 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
01:19:05.0687 1156 MSPQM - ok
01:19:05.0718 1156 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
01:19:05.0828 1156 mssmbios - ok
01:19:05.0843 1156 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
01:19:05.0968 1156 MSTEE - ok
01:19:06.0000 1156 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
01:19:06.0015 1156 Mup - ok
01:19:06.0031 1156 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
01:19:06.0156 1156 NABTSFEC - ok
01:19:06.0203 1156 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
01:19:06.0312 1156 napagent - ok
01:19:06.0328 1156 NAVENG - ok
01:19:06.0328 1156 NAVEX15 - ok
01:19:06.0375 1156 [ 60EA4D9D965194179820BC8B8CEBBFA2 ] ncpclcfg C:\Programme\Teldat Secure IPSec Client\ncpclcfg.exe
01:19:06.0390 1156 ncpclcfg - ok
01:19:06.0421 1156 [ AEB9BC97FE8B7DB452291205AAA21BAC ] NcpFilt C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys
01:19:06.0500 1156 NcpFilt - ok
01:19:06.0500 1156 [ AEB9BC97FE8B7DB452291205AAA21BAC ] NcpFiltMP C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys
01:19:06.0515 1156 NcpFiltMP - ok
01:19:06.0562 1156 [ BF36BE6FEED2EFCFB91C9BECE3274CE6 ] ncprwsnt C:\Programme\Teldat Secure IPSec Client\ncprwsnt.exe
01:19:06.0609 1156 ncprwsnt - ok
01:19:06.0640 1156 [ 2297DFFA323B0EF542F0EC623276E94C ] NcpSec C:\Programme\Teldat Secure IPSec Client\NCPSEC.EXE
01:19:06.0656 1156 NcpSec ( UnsignedFile.Multi.Generic ) - warning
01:19:06.0656 1156 NcpSec - detected UnsignedFile.Multi.Generic (1)
01:19:06.0671 1156 [ AEB9BC97FE8B7DB452291205AAA21BAC ] ncpvaxp C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys
01:19:06.0671 1156 ncpvaxp - ok
01:19:06.0703 1156 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
01:19:06.0781 1156 NDIS - ok
01:19:06.0812 1156 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
01:19:06.0906 1156 NdisIP - ok
01:19:06.0937 1156 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
01:19:07.0015 1156 NdisTapi - ok
01:19:07.0062 1156 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
01:19:07.0156 1156 Ndisuio - ok
01:19:07.0171 1156 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
01:19:07.0250 1156 NdisWan - ok
01:19:07.0281 1156 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
01:19:07.0312 1156 NDProxy - ok
01:19:07.0343 1156 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
01:19:07.0437 1156 NetBIOS - ok
01:19:07.0453 1156 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
01:19:07.0562 1156 NetBT - ok
01:19:07.0593 1156 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
01:19:07.0671 1156 NetDDE - ok
01:19:07.0671 1156 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
01:19:07.0750 1156 NetDDEdsdm - ok
01:19:07.0781 1156 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
01:19:07.0875 1156 Netlogon - ok
01:19:07.0890 1156 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
01:19:07.0984 1156 Netman - ok
01:19:08.0031 1156 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
01:19:08.0046 1156 NetTcpPortSharing - ok
01:19:08.0062 1156 [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394 C:\WINDOWS\system32\DRIVERS\nic1394.sys
01:19:08.0140 1156 NIC1394 - ok
01:19:08.0156 1156 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
01:19:08.0187 1156 Nla - ok
01:19:08.0218 1156 [ F6C40E0A565EE3CE5AEEB325E10054F2 ] nmwcd C:\WINDOWS\system32\drivers\ccdcmb.sys
01:19:08.0468 1156 nmwcd - ok
01:19:08.0484 1156 [ 2A394E9E1FA3565E4B2FEA470FFE4D6B ] nmwcdc C:\WINDOWS\system32\drivers\ccdcmbo.sys
01:19:08.0562 1156 nmwcdc - ok
01:19:08.0609 1156 [ 99B224F8026CB534724AA3C408561E45 ] nmwcdnsu C:\WINDOWS\system32\drivers\nmwcdnsu.sys
01:19:08.0765 1156 nmwcdnsu - ok
01:19:08.0796 1156 [ D23257682D349A5E2E4507ED33DECC16 ] nmwcdnsuc C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
01:19:08.0937 1156 nmwcdnsuc - ok
01:19:08.0937 1156 Norton Internet Security - ok
01:19:08.0968 1156 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
01:19:09.0125 1156 Npfs - ok
01:19:09.0156 1156 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
01:19:09.0250 1156 Ntfs - ok
01:19:09.0265 1156 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
01:19:09.0343 1156 NtLmSsp - ok
01:19:09.0390 1156 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
01:19:09.0484 1156 NtmsSvc - ok
01:19:09.0500 1156 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
01:19:09.0578 1156 Null - ok
01:19:09.0593 1156 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
01:19:09.0687 1156 NwlnkFlt - ok
01:19:09.0703 1156 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
01:19:09.0812 1156 NwlnkFwd - ok
01:19:09.0859 1156 [ F9BEED56D7FCDBD4924AC1E628261882 ] O2FLASH C:\WINDOWS\system32\DRIVERS\o2flash.exe
01:19:09.0859 1156 O2FLASH - ok
01:19:09.0875 1156 [ 4F8D4B1233AF48B30F4FDC76A8865CFA ] O2MDGRDR C:\WINDOWS\system32\DRIVERS\o2mdg.sys
01:19:09.0875 1156 O2MDGRDR - ok
01:19:09.0906 1156 [ 928B7612B65E82D68D489A1474C98B37 ] O2SDGRDR C:\WINDOWS\system32\DRIVERS\o2sdg.sys
01:19:09.0906 1156 O2SDGRDR - ok
01:19:09.0953 1156 [ 58F478FD0115012CEEC75FB73628901C ] OEM13Afx C:\WINDOWS\system32\Drivers\OEM13Afx.sys
01:19:10.0000 1156 OEM13Afx - ok
01:19:10.0031 1156 [ 86326062A90494BDD79CE383511D7D69 ] OEM13Vfx C:\WINDOWS\system32\DRIVERS\OEM13Vfx.sys
01:19:10.0062 1156 OEM13Vfx - ok
01:19:10.0109 1156 [ 12539B57ED05DE7552403A12B3E0161C ] OEM13Vid C:\WINDOWS\system32\DRIVERS\OEM13Vid.sys
01:19:10.0125 1156 OEM13Vid - ok
01:19:10.0140 1156 [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys
01:19:10.0218 1156 ohci1394 - ok
01:19:10.0250 1156 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
01:19:10.0265 1156 ose - ok
01:19:10.0312 1156 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\drivers\Parport.sys
01:19:10.0421 1156 Parport - ok
01:19:10.0421 1156 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
01:19:10.0531 1156 PartMgr - ok
01:19:10.0531 1156 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
01:19:10.0609 1156 ParVdm - ok
01:19:10.0640 1156 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
01:19:10.0687 1156 pccsmcfd - ok
01:19:10.0703 1156 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
01:19:10.0781 1156 PCI - ok
01:19:10.0781 1156 PCIDump - ok
01:19:10.0812 1156 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
01:19:10.0890 1156 PCIIde - ok
01:19:10.0890 1156 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
01:19:10.0968 1156 Pcmcia - ok
01:19:10.0968 1156 PDCOMP - ok
01:19:10.0984 1156 PDFRAME - ok
01:19:10.0984 1156 PDRELI - ok
01:19:10.0984 1156 PDRFRAME - ok
01:19:11.0000 1156 [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2 C:\WINDOWS\system32\DRIVERS\perc2.sys
01:19:11.0062 1156 perc2 - ok
01:19:11.0078 1156 [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib C:\WINDOWS\system32\DRIVERS\perc2hib.sys
01:19:11.0156 1156 perc2hib - ok
01:19:11.0203 1156 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
01:19:11.0203 1156 PlugPlay - ok
01:19:11.0234 1156 [ A38B3CE68E7F126190CDE4AA3FDF050F ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
01:19:11.0296 1156 Pml Driver HPZ12 - ok
01:19:11.0296 1156 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
01:19:11.0375 1156 PolicyAgent - ok
01:19:11.0406 1156 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
01:19:11.0484 1156 PptpMiniport - ok
01:19:11.0484 1156 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
01:19:11.0562 1156 ProtectedStorage - ok
01:19:11.0578 1156 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
01:19:11.0656 1156 PSched - ok
01:19:11.0656 1156 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
01:19:11.0750 1156 Ptilink - ok
01:19:11.0781 1156 [ 03E0FE281823BA64B3782F5B38950E73 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
01:19:11.0796 1156 PxHelp20 - ok
01:19:11.0812 1156 [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080 C:\WINDOWS\system32\DRIVERS\ql1080.sys
01:19:11.0890 1156 ql1080 - ok
01:19:11.0890 1156 [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
01:19:11.0984 1156 Ql10wnt - ok
01:19:11.0984 1156 [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160 C:\WINDOWS\system32\DRIVERS\ql12160.sys
01:19:12.0062 1156 ql12160 - ok
01:19:12.0078 1156 [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240 C:\WINDOWS\system32\DRIVERS\ql1240.sys
01:19:12.0156 1156 ql1240 - ok
01:19:12.0171 1156 [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280 C:\WINDOWS\system32\DRIVERS\ql1280.sys
01:19:12.0234 1156 ql1280 - ok
01:19:12.0265 1156 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
01:19:12.0328 1156 RasAcd - ok
01:19:12.0359 1156 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
01:19:12.0453 1156 RasAuto - ok
01:19:12.0484 1156 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
01:19:12.0562 1156 Rasl2tp - ok
01:19:12.0578 1156 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
01:19:12.0671 1156 RasMan - ok
01:19:12.0671 1156 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
01:19:12.0750 1156 RasPppoe - ok
01:19:12.0765 1156 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
01:19:12.0843 1156 Raspti - ok
01:19:12.0859 1156 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
01:19:12.0937 1156 Rdbss - ok
01:19:12.0953 1156 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
01:19:13.0046 1156 RDPCDD - ok
01:19:13.0062 1156 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
01:19:13.0140 1156 rdpdr - ok
01:19:13.0171 1156 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
01:19:13.0218 1156 RDPWD - ok
01:19:13.0281 1156 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
01:19:13.0359 1156 RDSessMgr - ok
01:19:13.0359 1156 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
01:19:13.0437 1156 redbook - ok
01:19:13.0500 1156 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
01:19:13.0578 1156 RemoteAccess - ok
01:19:13.0593 1156 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
01:19:13.0687 1156 RemoteRegistry - ok
01:19:13.0734 1156 [ 851C30DF2807FCFA21E4C681A7D6440E ] RFCOMM C:\WINDOWS\system32\DRIVERS\rfcomm.sys
01:19:13.0828 1156 RFCOMM - ok
01:19:13.0843 1156 RimUsb - ok
01:19:13.0875 1156 [ 2C4FB2E9F039287767C384E46EE91030 ] RimVSerPort C:\WINDOWS\system32\DRIVERS\RimSerial.sys
01:19:13.0921 1156 RimVSerPort - ok
01:19:13.0984 1156 [ D8B0B4ADE32574B2D9C5CC34DC0DBBE7 ] ROOTMODEM C:\WINDOWS\system32\Drivers\RootMdm.sys
01:19:14.0078 1156 ROOTMODEM - ok
01:19:14.0093 1156 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
01:19:14.0203 1156 RpcLocator - ok
01:19:14.0234 1156 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
01:19:14.0250 1156 RpcSs - ok
01:19:14.0250 1156 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
01:19:14.0343 1156 RSVP - ok
01:19:14.0390 1156 [ CB9310A5A910648D359C99A857E22A54 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
01:19:14.0421 1156 RTLE8023xp - ok
01:19:14.0453 1156 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
01:19:14.0531 1156 SamSs - ok
01:19:14.0546 1156 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
01:19:14.0656 1156 SCardSvr - ok
01:19:14.0687 1156 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
01:19:14.0781 1156 Schedule - ok
01:19:14.0828 1156 [ 8D04819A3CE51B9EB47E5689B44D43C4 ] sdbus C:\WINDOWS\system32\DRIVERS\sdbus.sys
01:19:14.0906 1156 sdbus - ok
01:19:14.0921 1156 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
01:19:14.0953 1156 Secdrv - ok
01:19:14.0968 1156 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
01:19:15.0062 1156 seclogon - ok
01:19:15.0062 1156 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
01:19:15.0171 1156 SENS - ok
01:19:15.0187 1156 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\drivers\Serial.sys
01:19:15.0281 1156 Serial - ok
01:19:15.0343 1156 [ E90CE237E99C5D26CB3872318A7799D0 ] ServiceLayer C:\Programme\PC Connectivity Solution\ServiceLayer.exe
01:19:15.0390 1156 ServiceLayer - ok
01:19:15.0421 1156 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
01:19:15.0515 1156 Sfloppy - ok
01:19:15.0546 1156 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
01:19:15.0578 1156 ShellHWDetection - ok
01:19:15.0578 1156 Simbad - ok
01:19:15.0593 1156 [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp C:\WINDOWS\system32\DRIVERS\sisagp.sys
01:19:15.0703 1156 sisagp - ok
01:19:15.0734 1156 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
01:19:15.0859 1156 SLIP - ok
01:19:15.0875 1156 [ DECA2315713EDE05E47E4A4122EEC3E0 ] snapman C:\WINDOWS\system32\DRIVERS\snapman.sys
01:19:15.0906 1156 snapman - ok
01:19:15.0921 1156 [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1 C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
01:19:16.0046 1156 SONYPVU1 - ok
01:19:16.0078 1156 [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow C:\WINDOWS\system32\DRIVERS\sparrow.sys
01:19:16.0140 1156 Sparrow - ok
01:19:16.0171 1156 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
01:19:16.0265 1156 splitter - ok
01:19:16.0296 1156 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
01:19:16.0359 1156 Spooler - ok
01:19:16.0406 1156 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
01:19:16.0453 1156 sr - ok
01:19:16.0484 1156 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
01:19:16.0562 1156 srservice - ok
01:19:16.0562 1156 SRTSP - ok
01:19:16.0578 1156 SRTSPX - ok
01:19:16.0609 1156 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
01:19:16.0671 1156 Srv - ok
01:19:16.0687 1156 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
01:19:16.0750 1156 SSDPSRV - ok
01:19:16.0781 1156 [ 66D1DA9E353E4E95ECBA28026FE13722 ] STacSV c:\drivers\audio\r211990\stacsv.exe
01:19:16.0828 1156 STacSV - ok
01:19:16.0890 1156 [ 5849F5D472A676ACE7224FC2C656F4B2 ] STHDA C:\WINDOWS\system32\drivers\sthda.sys
01:19:16.0953 1156 STHDA - ok
01:19:17.0015 1156 [ A2DBCC4C8860449DF1AB758EA28B4DE0 ] StillCam C:\WINDOWS\system32\DRIVERS\serscan.sys
01:19:17.0140 1156 StillCam - ok
01:19:17.0218 1156 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
01:19:17.0390 1156 stisvc - ok
01:19:17.0437 1156 [ E476C66713C842F58E61A95826ED1D57 ] stllssvr c:\Programme\Gemeinsame Dateien\SureThing Shared\stllssvr.exe
01:19:17.0546 1156 stllssvr - ok
01:19:17.0562 1156 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
01:19:17.0703 1156 streamip - ok
01:19:17.0718 1156 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
01:19:17.0796 1156 swenum - ok
01:19:17.0828 1156 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
01:19:17.0906 1156 swmidi - ok
01:19:17.0906 1156 SwPrv - ok
01:19:17.0937 1156 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
01:19:18.0015 1156 symc810 - ok
01:19:18.0046 1156 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
01:19:18.0140 1156 symc8xx - ok
01:19:18.0140 1156 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
01:19:18.0234 1156 sym_hi - ok
01:19:18.0234 1156 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
01:19:18.0312 1156 sym_u3 - ok
01:19:18.0312 1156 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
01:19:18.0390 1156 sysaudio - ok
01:19:18.0437 1156 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
01:19:18.0531 1156 SysmonLog - ok
01:19:18.0578 1156 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
01:19:18.0656 1156 TapiSrv - ok
01:19:18.0687 1156 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
01:19:18.0718 1156 Tcpip - ok
01:19:18.0750 1156 [ 74905EBCBB8CBDB1F3C0B1778BBCB4BC ] tcpipBM C:\WINDOWS\system32\drivers\tcpipBM.sys
01:19:18.0781 1156 tcpipBM ( UnsignedFile.Multi.Generic ) - warning
01:19:18.0781 1156 tcpipBM - detected UnsignedFile.Multi.Generic (1)
01:19:18.0812 1156 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
01:19:18.0906 1156 TDPIPE - ok
01:19:18.0953 1156 [ 3630F5B8181554DEECFE2E4252BC4C4C ] tdrpman251 C:\WINDOWS\system32\DRIVERS\tdrpm251.sys
01:19:19.0000 1156 tdrpman251 - ok
01:19:19.0015 1156 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
01:19:19.0156 1156 TDTCP - ok
01:19:19.0187 1156 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
01:19:19.0296 1156 TermDD - ok
01:19:19.0328 1156 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
01:19:19.0421 1156 TermService - ok
01:19:19.0453 1156 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
01:19:19.0468 1156 Themes - ok
01:19:19.0500 1156 [ C820BFC70FEB25EC877C49E81CD477C1 ] timounter C:\WINDOWS\system32\DRIVERS\timntr.sys
01:19:19.0531 1156 timounter - ok
01:19:19.0546 1156 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
01:19:19.0593 1156 TlntSvr - ok
01:19:19.0609 1156 [ D213A9247DC347F305A2D4CC9B951487 ] TosIde C:\WINDOWS\system32\DRIVERS\toside.sys
01:19:19.0687 1156 TosIde - ok
01:19:19.0703 1156 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
01:19:19.0796 1156 TrkWks - ok
01:19:19.0812 1156 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
01:19:19.0921 1156 Udfs - ok
01:19:19.0953 1156 [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra C:\WINDOWS\system32\DRIVERS\ultra.sys
01:19:20.0031 1156 ultra - ok
01:19:20.0062 1156 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
01:19:20.0156 1156 Update - ok
01:19:20.0187 1156 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
01:19:20.0234 1156 upnphost - ok
01:19:20.0265 1156 [ 47F5F9D837D80FFD5882A14DB9DA0A67 ] upperdev C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
01:19:20.0312 1156 upperdev - ok
01:19:20.0343 1156 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
01:19:20.0421 1156 UPS - ok
01:19:20.0453 1156 [ 6E421CCC57059B0186C6259CA3B6DFC9 ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys
01:19:20.0531 1156 USBAAPL - ok
01:19:20.0562 1156 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
01:19:20.0656 1156 usbccgp - ok
01:19:20.0703 1156 [ 4BAC8DF07F1D8434FC640E677A62204E ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
01:19:20.0734 1156 usbehci - ok
01:19:20.0765 1156 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
01:19:20.0859 1156 usbhub - ok
01:19:20.0890 1156 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
01:19:21.0015 1156 usbprint - ok
01:19:21.0046 1156 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
01:19:21.0156 1156 usbscan - ok
01:19:21.0187 1156 [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser C:\WINDOWS\system32\drivers\usbser.sys
01:19:21.0296 1156 usbser - ok
01:19:21.0328 1156 [ E44F0D17BE0908B58DCC99CCB99C6C32 ] UsbserFilt C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
01:19:21.0406 1156 UsbserFilt - ok
01:19:21.0437 1156 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
01:19:21.0531 1156 USBSTOR - ok
01:19:21.0546 1156 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
01:19:21.0640 1156 usbuhci - ok
01:19:21.0671 1156 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
01:19:21.0750 1156 usbvideo - ok
01:19:21.0781 1156 [ B6CC50279D6CD28E090A5D33244ADC9A ] usb_rndisx C:\WINDOWS\system32\DRIVERS\usb8023x.sys
01:19:21.0859 1156 usb_rndisx - ok
01:19:21.0890 1156 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
01:19:21.0984 1156 VgaSave - ok
01:19:22.0000 1156 [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp C:\WINDOWS\system32\DRIVERS\viaagp.sys
01:19:22.0078 1156 viaagp - ok
01:19:22.0078 1156 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
01:19:22.0156 1156 ViaIde - ok
01:19:22.0171 1156 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
01:19:22.0250 1156 VolSnap - ok
01:19:22.0296 1156 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
01:19:22.0343 1156 VSS - ok
01:19:22.0375 1156 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] w32time C:\WINDOWS\system32\w32time.dll
01:19:22.0468 1156 w32time - ok
01:19:22.0484 1156 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
01:19:22.0593 1156 Wanarp - ok
01:19:22.0625 1156 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
01:19:22.0656 1156 Wdf01000 - ok
01:19:22.0656 1156 WDICA - ok
01:19:22.0687 1156 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
01:19:22.0781 1156 wdmaud - ok
01:19:22.0828 1156 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
01:19:22.0937 1156 WebClient - ok
01:19:23.0000 1156 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
01:19:23.0125 1156 winmgmt - ok
01:19:23.0140 1156 wltrysvc - ok
01:19:23.0171 1156 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
01:19:23.0218 1156 WmdmPmSN - ok
01:19:23.0250 1156 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
01:19:23.0312 1156 Wmi - ok
01:19:23.0343 1156 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
01:19:23.0468 1156 WmiApSrv - ok
01:19:23.0531 1156 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
01:19:23.0593 1156 WMPNetworkSvc - ok
01:19:23.0625 1156 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
01:19:23.0656 1156 WpdUsb - ok
01:19:23.0687 1156 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
01:19:23.0812 1156 WSTCODEC - ok
01:19:23.0859 1156 [ EAA6324F51214D2F6718977EC9CE0DEF ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
01:19:23.0921 1156 WudfPf - ok
01:19:23.0953 1156 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
01:19:24.0015 1156 WudfRd - ok
01:19:24.0046 1156 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
01:19:24.0093 1156 WudfSvc - ok
01:19:24.0140 1156 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
01:19:24.0250 1156 WZCSVC - ok
01:19:24.0281 1156 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
01:19:24.0359 1156 xmlprov - ok
01:19:24.0375 1156 ================ Scan global ===============================
01:19:24.0390 1156 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
01:19:24.0406 1156 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
01:19:24.0421 1156 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
01:19:24.0437 1156 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
01:19:24.0437 1156 [Global] - ok
01:19:24.0437 1156 ================ Scan MBR ==================================
01:19:24.0453 1156 [ CDB4DE4BBD714F152979DA2DCBEF57EB ] \Device\Harddisk0\DR0
01:19:24.0765 1156 \Device\Harddisk0\DR0 - ok
01:19:24.0765 1156 ================ Scan VBR ==================================
01:19:24.0781 1156 [ 33827362310BE8572B71723A6A827708 ] \Device\Harddisk0\DR0\Partition1
01:19:24.0781 1156 \Device\Harddisk0\DR0\Partition1 - ok
01:19:24.0781 1156 ============================================================
01:19:24.0781 1156 Scan finished
01:19:24.0781 1156 ============================================================
01:19:24.0890 3908 Detected object count: 4
01:19:24.0890 3908 Actual detected object count: 4
01:19:31.0890 3908 BMLoad ( UnsignedFile.Multi.Generic ) - skipped by user
01:19:31.0890 3908 BMLoad ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:19:31.0890 3908 btwmodem ( UnsignedFile.Multi.Generic ) - skipped by user
01:19:31.0890 3908 btwmodem ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:19:31.0890 3908 NcpSec ( UnsignedFile.Multi.Generic ) - skipped by user
01:19:31.0890 3908 NcpSec ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:19:31.0890 3908 tcpipBM ( UnsignedFile.Multi.Generic ) - skipped by user
01:19:31.0890 3908 tcpipBM ( UnsignedFile.Multi.Generic ) - User select action: Skip
01:20:06.0593 2668 Deinitialize success

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo,

Combofix wird anscheinend nicht komplett ausgeführt. Der grüne Balken bleibt bei etwa 90 % stehen und als letzter Eintrag steht dort

Zielverzeichnis: C:\32788R22FWJFW

ok dann:
malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.