|
Log-Analyse und Auswertung: delta search eingefangenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
14.06.2013, 10:32 | #1 |
| delta search eingefangen Hallo zusammen, auch ich habe mir "delta search" eingefangen, beim downloaden eines Programms. In der Systemsteuerung habe ich das Programm delta search gelöscht, nur bei Mozilla taucht es immer auf, wenn ich einen weiteren Tab öffne. Ich bin dann auf diese Seite gestossen und hoffe auf Hilfe. Hier als Anhang die erforderlichen Textdateien. Ich freue mich auf Antworten, Danke schon mal. Grüße |
14.06.2013, 10:56 | #2 |
/// Malware-holic | delta search eingefangen hi, poste uns die bisherigen adwcleaner logs.
__________________Dann: Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ |
14.06.2013, 11:52 | #3 |
| delta search eingefangen Hier die Txt datei von TDSKiller:
__________________12:44:51.0076 1176 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 12:44:51.0389 1176 ============================================================ 12:44:51.0389 1176 Current date / time: 2013/06/14 12:44:51.0389 12:44:51.0389 1176 SystemInfo: 12:44:51.0389 1176 12:44:51.0389 1176 OS Version: 6.0.6002 ServicePack: 2.0 12:44:51.0389 1176 Product type: Workstation 12:44:51.0389 1176 ComputerName: MICHAEL-PC 12:44:51.0390 1176 UserName: Michael 12:44:51.0390 1176 Windows directory: C:\Windows 12:44:51.0390 1176 System windows directory: C:\Windows 12:44:51.0390 1176 Processor architecture: Intel x86 12:44:51.0390 1176 Number of processors: 2 12:44:51.0390 1176 Page size: 0x1000 12:44:51.0390 1176 Boot type: Normal boot 12:44:51.0390 1176 ============================================================ 12:44:52.0453 1176 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 12:44:52.0469 1176 ============================================================ 12:44:52.0469 1176 \Device\Harddisk0\DR0: 12:44:52.0469 1176 MBR partitions: 12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x117D07C1 12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x117D0800, BlocksNum 0xF2C800 12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x126FF000, BlocksNum 0x31A000 12:44:52.0470 1176 ============================================================ 12:44:52.0476 1176 C: <-> \Device\Harddisk0\DR0\Partition1 12:44:52.0530 1176 D: <-> \Device\Harddisk0\DR0\Partition2 12:44:52.0623 1176 E: <-> \Device\Harddisk0\DR0\Partition3 12:44:52.0623 1176 ============================================================ 12:44:52.0623 1176 Initialize success 12:44:52.0623 1176 ============================================================ 12:45:04.0507 4944 ============================================================ 12:45:04.0508 4944 Scan started 12:45:04.0508 4944 Mode: Manual; SigCheck; TDLFS; 12:45:04.0508 4944 ============================================================ 12:45:06.0619 4944 ================ Scan system memory ======================== 12:45:06.0619 4944 System memory - ok 12:45:06.0620 4944 ================ Scan services ============================= 12:45:06.0857 4944 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe 12:45:07.0069 4944 ACDaemon - ok 12:45:07.0206 4944 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys 12:45:07.0234 4944 ACPI - ok 12:45:07.0293 4944 [ B30EE77D621A08891089B7D9712D8CD4 ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys 12:45:07.0533 4944 ADIHdAudAddService - ok 12:45:07.0616 4944 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 12:45:07.0653 4944 AdobeARMservice - ok 12:45:07.0737 4944 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 12:45:07.0759 4944 AdobeFlashPlayerUpdateSvc - ok 12:45:07.0909 4944 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 12:45:08.0028 4944 adp94xx - ok 12:45:08.0069 4944 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys 12:45:08.0127 4944 adpahci - ok 12:45:08.0168 4944 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys 12:45:08.0220 4944 adpu160m - ok 12:45:08.0241 4944 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys 12:45:08.0296 4944 adpu320 - ok 12:45:08.0347 4944 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 12:45:08.0461 4944 AeLookupSvc - ok 12:45:08.0550 4944 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys 12:45:08.0633 4944 AFD - ok 12:45:08.0676 4944 [ 39E435C90C9C4F780FA0ED05CA3C3A1B ] AgereModemAudio C:\Windows\system32\agrsmsvc.exe 12:45:08.0771 4944 AgereModemAudio - ok 12:45:08.0890 4944 [ 2E3ABAACBF547ABBB5E73A504A56D05A ] AgereSoftModem C:\Windows\system32\DRIVERS\AGRSM.sys 12:45:09.0054 4944 AgereSoftModem - ok 12:45:09.0108 4944 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys 12:45:09.0150 4944 agp440 - ok 12:45:09.0193 4944 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys 12:45:09.0237 4944 aic78xx - ok 12:45:09.0289 4944 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe 12:45:09.0518 4944 ALG - ok 12:45:09.0594 4944 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys 12:45:09.0663 4944 aliide - ok 12:45:09.0713 4944 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys 12:45:09.0756 4944 amdagp - ok 12:45:09.0765 4944 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys 12:45:09.0796 4944 amdide - ok 12:45:09.0821 4944 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys 12:45:10.0105 4944 AmdK7 - ok 12:45:10.0140 4944 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 12:45:10.0192 4944 AmdK8 - ok 12:45:10.0243 4944 [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe 12:45:10.0261 4944 AntiVirSchedulerService - ok 12:45:10.0290 4944 [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe 12:45:10.0308 4944 AntiVirService - ok 12:45:10.0362 4944 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll 12:45:10.0431 4944 Appinfo - ok 12:45:10.0505 4944 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 12:45:10.0525 4944 Apple Mobile Device - ok 12:45:10.0592 4944 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys 12:45:10.0641 4944 arc - ok 12:45:10.0681 4944 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys 12:45:10.0729 4944 arcsas - ok 12:45:10.0775 4944 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 12:45:10.0864 4944 AsyncMac - ok 12:45:10.0906 4944 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys 12:45:10.0925 4944 atapi - ok 12:45:10.0960 4944 [ 3481D12334F065BBA19C16399C9CB171 ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe 12:45:11.0057 4944 Ati External Event Utility - ok 12:45:11.0147 4944 [ 4AA1EB65481C392955939E735D27118B ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys 12:45:11.0196 4944 AtiPcie - ok 12:45:11.0256 4944 [ 293E8CC3C246A89F4CCA75B024AD757F ] ATSWPDRV C:\Windows\system32\DRIVERS\ATSwpDrv.sys 12:45:11.0307 4944 ATSWPDRV - ok 12:45:11.0367 4944 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 12:45:11.0427 4944 AudioEndpointBuilder - ok 12:45:11.0467 4944 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll 12:45:11.0500 4944 Audiosrv - ok 12:45:11.0549 4944 [ 87425709A251386064C99B684BF96F72 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 12:45:11.0569 4944 avgntflt - ok 12:45:11.0604 4944 [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 12:45:11.0625 4944 avipbb - ok 12:45:11.0660 4944 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 12:45:11.0679 4944 avkmgr - ok 12:45:11.0759 4944 [ 32795E299C3ABA589A5E04C83D531CDF ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys 12:45:11.0859 4944 b57nd60x - ok 12:45:11.0936 4944 [ 509F672686AF40F95859FDE67108449B ] BCM43XV C:\Windows\system32\DRIVERS\bcmwl6.sys 12:45:12.0063 4944 BCM43XV - ok 12:45:12.0095 4944 [ 509F672686AF40F95859FDE67108449B ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl6.sys 12:45:12.0122 4944 BCM43XX - ok 12:45:12.0172 4944 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys 12:45:12.0209 4944 Beep - ok 12:45:12.0294 4944 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll 12:45:12.0363 4944 BFE - ok 12:45:12.0529 4944 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll 12:45:12.0637 4944 BITS - ok 12:45:12.0644 4944 blbdrive - ok 12:45:12.0759 4944 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 12:45:12.0791 4944 Bonjour Service - ok 12:45:12.0837 4944 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys 12:45:12.0885 4944 bowser - ok 12:45:12.0948 4944 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys 12:45:13.0004 4944 BrFiltLo - ok 12:45:13.0032 4944 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys 12:45:13.0116 4944 BrFiltUp - ok 12:45:13.0149 4944 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll 12:45:13.0187 4944 Browser - ok 12:45:13.0239 4944 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys 12:45:13.0354 4944 Brserid - ok 12:45:13.0376 4944 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys 12:45:13.0483 4944 BrSerWdm - ok 12:45:13.0509 4944 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys 12:45:13.0609 4944 BrUsbMdm - ok 12:45:13.0621 4944 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys 12:45:13.0726 4944 BrUsbSer - ok 12:45:13.0778 4944 [ 6D39C954799B63BA866910234CF7D726 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys 12:45:13.0856 4944 BthEnum - ok 12:45:13.0901 4944 [ 5FFA6988FF9597986FF2ADA736CC90C0 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 12:45:13.0988 4944 BTHMODEM - ok 12:45:14.0044 4944 [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 12:45:14.0139 4944 BthPan - ok 12:45:14.0201 4944 [ 611FF3F2F095C8D4A6D4CFD9DCC09793 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys 12:45:14.0373 4944 BTHPORT - ok 12:45:14.0420 4944 [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ C:\Windows\System32\bthserv.dll 12:45:14.0492 4944 BthServ - ok 12:45:14.0519 4944 [ D330803EAB2A15CAEC7F011F1D4CB30E ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys 12:45:14.0597 4944 BTHUSB - ok 12:45:14.0638 4944 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 12:45:14.0689 4944 cdfs - ok 12:45:14.0743 4944 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 12:45:14.0790 4944 cdrom - ok 12:45:14.0834 4944 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll 12:45:14.0879 4944 CertPropSvc - ok 12:45:14.0920 4944 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys 12:45:15.0041 4944 circlass - ok 12:45:15.0117 4944 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys 12:45:15.0143 4944 CLFS - ok 12:45:15.0220 4944 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 12:45:15.0274 4944 clr_optimization_v2.0.50727_32 - ok 12:45:15.0341 4944 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 12:45:15.0393 4944 clr_optimization_v4.0.30319_32 - ok 12:45:15.0460 4944 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 12:45:15.0535 4944 CmBatt - ok 12:45:15.0582 4944 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys 12:45:15.0644 4944 cmdide - ok 12:45:15.0735 4944 [ D8774ACE03B46C9B01A49818055F9AD4 ] Com4Qlb C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe 12:45:15.0812 4944 Com4Qlb ( UnsignedFile.Multi.Generic ) - warning 12:45:15.0812 4944 Com4Qlb - detected UnsignedFile.Multi.Generic (1) 12:45:15.0853 4944 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 12:45:15.0875 4944 Compbatt - ok 12:45:15.0884 4944 COMSysApp - ok 12:45:15.0926 4944 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 12:45:15.0943 4944 crcdisk - ok 12:45:15.0959 4944 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys 12:45:16.0072 4944 Crusoe - ok 12:45:16.0180 4944 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll 12:45:16.0255 4944 CryptSvc - ok 12:45:16.0333 4944 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll 12:45:16.0435 4944 DcomLaunch - ok 12:45:16.0475 4944 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys 12:45:16.0536 4944 DfsC - ok 12:45:17.0104 4944 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe 12:45:17.0449 4944 DFSR - ok 12:45:17.0510 4944 [ B575C523F537F24D66D31F8877E6BCAB ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys 12:45:17.0568 4944 dg_ssudbus - ok 12:45:17.0630 4944 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll 12:45:17.0694 4944 Dhcp - ok 12:45:17.0801 4944 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys 12:45:17.0854 4944 disk - ok 12:45:17.0920 4944 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll 12:45:18.0009 4944 Dnscache - ok 12:45:18.0064 4944 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll 12:45:18.0103 4944 dot3svc - ok 12:45:18.0147 4944 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll 12:45:18.0202 4944 DPS - ok 12:45:18.0245 4944 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 12:45:18.0296 4944 drmkaud - ok 12:45:18.0453 4944 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 12:45:18.0527 4944 DXGKrnl - ok 12:45:18.0564 4944 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys 12:45:18.0666 4944 E1G60 - ok 12:45:18.0707 4944 [ E88B0CFCECF745211BBA87F44F85D0DD ] eabfiltr C:\Windows\system32\DRIVERS\eabfiltr.sys 12:45:18.0783 4944 eabfiltr - ok 12:45:18.0827 4944 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll 12:45:18.0878 4944 EapHost - ok 12:45:18.0943 4944 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys 12:45:18.0967 4944 Ecache - ok 12:45:19.0092 4944 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys 12:45:19.0204 4944 elxstor - ok 12:45:19.0360 4944 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll 12:45:19.0483 4944 EMDMgmt - ok 12:45:19.0541 4944 [ 01CE484FF6D70A39479BC6D619DE7ED6 ] EsgScanner C:\Windows\system32\DRIVERS\EsgScanner.sys 12:45:19.0586 4944 EsgScanner - ok 12:45:19.0679 4944 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll 12:45:19.0761 4944 EventSystem - ok 12:45:19.0822 4944 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys 12:45:19.0927 4944 exfat - ok 12:45:20.0046 4944 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys 12:45:20.0138 4944 fastfat - ok 12:45:20.0157 4944 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys 12:45:20.0243 4944 fdc - ok 12:45:20.0284 4944 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll 12:45:20.0352 4944 fdPHost - ok 12:45:20.0382 4944 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll 12:45:20.0492 4944 FDResPub - ok 12:45:20.0538 4944 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 12:45:20.0568 4944 FileInfo - ok 12:45:20.0614 4944 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys 12:45:20.0703 4944 Filetrace - ok 12:45:20.0743 4944 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 12:45:20.0870 4944 flpydisk - ok 12:45:20.0982 4944 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 12:45:21.0053 4944 FltMgr - ok 12:45:21.0265 4944 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll 12:45:21.0429 4944 FontCache - ok 12:45:21.0556 4944 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 12:45:21.0640 4944 FontCache3.0.0.0 - ok 12:45:21.0698 4944 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 12:45:21.0760 4944 Fs_Rec - ok 12:45:21.0790 4944 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 12:45:21.0842 4944 gagp30kx - ok 12:45:21.0903 4944 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 12:45:21.0916 4944 GEARAspiWDM - ok 12:45:21.0989 4944 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll 12:45:22.0060 4944 gpsvc - ok 12:45:22.0176 4944 [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9cb2464c5f232 C:\Program Files\Google\Update\GoogleUpdate.exe 12:45:22.0192 4944 gupdate1c9cb2464c5f232 - ok 12:45:22.0217 4944 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 12:45:22.0233 4944 gupdatem - ok 12:45:22.0272 4944 [ DE15777902A5D9121857D155873A1D1B ] HBtnKey C:\Windows\system32\DRIVERS\cpqbttn.sys 12:45:22.0313 4944 HBtnKey - ok 12:45:22.0363 4944 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 12:45:22.0524 4944 HdAudAddService - ok 12:45:22.0646 4944 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 12:45:22.0718 4944 HDAudBus - ok 12:45:22.0756 4944 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys 12:45:22.0891 4944 HidBth - ok 12:45:22.0921 4944 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys 12:45:23.0001 4944 HidIr - ok 12:45:23.0062 4944 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll 12:45:23.0102 4944 hidserv - ok 12:45:23.0122 4944 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 12:45:23.0197 4944 HidUsb - ok 12:45:23.0232 4944 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll 12:45:23.0273 4944 hkmsvc - ok 12:45:23.0374 4944 [ 2CEEB349216FEBD91A907013D4ABCFF7 ] HP Health Check Service C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 12:45:23.0413 4944 HP Health Check Service - ok 12:45:23.0448 4944 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys 12:45:23.0506 4944 HpCISSs - ok 12:45:23.0613 4944 [ 04C1DCBB226C6AE647B794833CE3CEB6 ] hpqwmiex C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 12:45:23.0632 4944 hpqwmiex ( UnsignedFile.Multi.Generic ) - warning 12:45:23.0632 4944 hpqwmiex - detected UnsignedFile.Multi.Generic (1) 12:45:23.0774 4944 [ 46D67209550973257601A533E2AC5785 ] HSFHWAZL C:\Windows\system32\DRIVERS\VSTAZL3.SYS 12:45:23.0918 4944 HSFHWAZL - ok 12:45:24.0131 4944 [ EC36F1D542ED4252390D446BF6D4DFD0 ] HSF_DPV C:\Windows\system32\DRIVERS\VSTDPV3.SYS 12:45:24.0275 4944 HSF_DPV - ok 12:45:24.0377 4944 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys 12:45:24.0463 4944 HTTP - ok 12:45:24.0505 4944 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys 12:45:24.0556 4944 i2omp - ok 12:45:24.0636 4944 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 12:45:24.0677 4944 i8042prt - ok 12:45:24.0702 4944 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys 12:45:24.0766 4944 iaStorV - ok 12:45:24.0828 4944 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe 12:45:24.0874 4944 IDriverT ( UnsignedFile.Multi.Generic ) - warning 12:45:24.0874 4944 IDriverT - detected UnsignedFile.Multi.Generic (1) 12:45:25.0110 4944 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 12:45:25.0388 4944 idsvc - ok 12:45:25.0460 4944 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys 12:45:25.0499 4944 iirsp - ok 12:45:25.0563 4944 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll 12:45:25.0611 4944 IKEEXT - ok 12:45:25.0654 4944 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys 12:45:25.0748 4944 intelide - ok 12:45:25.0820 4944 [ CE44CC04262F28216DD4341E9E36A16F ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 12:45:25.0959 4944 intelppm - ok 12:45:26.0046 4944 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 12:45:26.0157 4944 IPBusEnum - ok 12:45:26.0219 4944 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 12:45:26.0260 4944 IpFilterDriver - ok 12:45:26.0288 4944 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 12:45:26.0346 4944 iphlpsvc - ok 12:45:26.0354 4944 IpInIp - ok 12:45:26.0373 4944 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys 12:45:26.0464 4944 IPMIDRV - ok 12:45:26.0502 4944 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys 12:45:26.0548 4944 IPNAT - ok 12:45:26.0655 4944 [ E3E71649A926CB34FA4D7AB75DCE126C ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 12:45:26.0690 4944 iPod Service - ok 12:45:26.0739 4944 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 12:45:26.0816 4944 IRENUM - ok 12:45:26.0861 4944 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys 12:45:26.0911 4944 isapnp - ok 12:45:26.0961 4944 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys 12:45:26.0983 4944 iScsiPrt - ok 12:45:27.0016 4944 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys 12:45:27.0052 4944 iteatapi - ok 12:45:27.0106 4944 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys 12:45:27.0141 4944 iteraid - ok 12:45:27.0205 4944 [ 213822072085B5BBAD9AF30AB577D817 ] IviRegMgr C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe 12:45:27.0234 4944 IviRegMgr - ok 12:45:27.0257 4944 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 12:45:27.0286 4944 kbdclass - ok 12:45:27.0330 4944 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 12:45:27.0382 4944 kbdhid - ok 12:45:27.0425 4944 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe 12:45:27.0486 4944 KeyIso - ok 12:45:27.0619 4944 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 12:45:27.0677 4944 KSecDD - ok 12:45:27.0730 4944 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll 12:45:27.0795 4944 KtmRm - ok 12:45:27.0845 4944 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll 12:45:27.0900 4944 LanmanServer - ok 12:45:27.0950 4944 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 12:45:28.0014 4944 LanmanWorkstation - ok 12:45:28.0078 4944 [ 31D8B705DCD5F2366186E731F87C7A71 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe 12:45:28.0095 4944 LightScribeService - ok 12:45:28.0159 4944 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 12:45:28.0221 4944 lltdio - ok 12:45:28.0262 4944 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll 12:45:28.0337 4944 lltdsvc - ok 12:45:28.0370 4944 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll 12:45:28.0441 4944 lmhosts - ok 12:45:28.0482 4944 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 12:45:28.0526 4944 LSI_FC - ok 12:45:28.0559 4944 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 12:45:28.0595 4944 LSI_SAS - ok 12:45:28.0616 4944 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 12:45:28.0652 4944 LSI_SCSI - ok 12:45:28.0705 4944 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys 12:45:28.0747 4944 luafv - ok 12:45:28.0780 4944 lxcg_device - ok 12:45:28.0868 4944 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe 12:45:28.0891 4944 McComponentHostService - ok 12:45:28.0934 4944 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys 12:45:28.0998 4944 megasas - ok 12:45:29.0053 4944 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll 12:45:29.0125 4944 MMCSS - ok 12:45:29.0167 4944 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys 12:45:29.0235 4944 Modem - ok 12:45:29.0292 4944 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 12:45:29.0342 4944 monitor - ok 12:45:29.0350 4944 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 12:45:29.0367 4944 mouclass - ok 12:45:29.0385 4944 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 12:45:29.0440 4944 mouhid - ok 12:45:29.0473 4944 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys 12:45:29.0491 4944 MountMgr - ok 12:45:29.0536 4944 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys 12:45:29.0613 4944 mpio - ok 12:45:29.0669 4944 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 12:45:29.0719 4944 mpsdrv - ok 12:45:29.0919 4944 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll 12:45:29.0973 4944 MpsSvc - ok 12:45:30.0014 4944 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys 12:45:30.0059 4944 Mraid35x - ok 12:45:30.0097 4944 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 12:45:30.0125 4944 MRxDAV - ok 12:45:30.0160 4944 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 12:45:30.0207 4944 mrxsmb - ok 12:45:30.0248 4944 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 12:45:30.0279 4944 mrxsmb10 - ok 12:45:30.0301 4944 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 12:45:30.0320 4944 mrxsmb20 - ok 12:45:30.0344 4944 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys 12:45:30.0388 4944 msahci - ok 12:45:30.0471 4944 [ 514CF97979C166A47B82128DC344D80E ] MSCamSvc C:\Program Files\Microsoft LifeCam\MSCamS32.exe 12:45:30.0493 4944 MSCamSvc - ok 12:45:30.0533 4944 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys 12:45:30.0578 4944 msdsm - ok 12:45:30.0654 4944 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe 12:45:30.0734 4944 MSDTC - ok 12:45:30.0768 4944 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys 12:45:30.0824 4944 Msfs - ok 12:45:30.0863 4944 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 12:45:30.0881 4944 msisadrv - ok 12:45:30.0933 4944 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 12:45:31.0018 4944 MSiSCSI - ok 12:45:31.0028 4944 msiserver - ok 12:45:31.0058 4944 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 12:45:31.0128 4944 MSKSSRV - ok 12:45:31.0179 4944 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 12:45:31.0237 4944 MSPCLOCK - ok 12:45:31.0268 4944 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 12:45:31.0356 4944 MSPQM - ok 12:45:31.0383 4944 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 12:45:31.0406 4944 MsRPC - ok 12:45:31.0434 4944 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys 12:45:31.0454 4944 mssmbios - ok 12:45:31.0472 4944 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 12:45:31.0535 4944 MSTEE - ok 12:45:31.0588 4944 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys 12:45:31.0609 4944 Mup - ok 12:45:31.0653 4944 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll 12:45:31.0688 4944 napagent - ok 12:45:31.0711 4944 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 12:45:31.0747 4944 NativeWifiP - ok 12:45:31.0802 4944 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys 12:45:31.0850 4944 NDIS - ok 12:45:31.0901 4944 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 12:45:31.0940 4944 NdisTapi - ok 12:45:31.0984 4944 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 12:45:32.0029 4944 Ndisuio - ok 12:45:32.0058 4944 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 12:45:32.0103 4944 NdisWan - ok 12:45:32.0130 4944 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 12:45:32.0156 4944 NDProxy - ok 12:45:32.0184 4944 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 12:45:32.0219 4944 NetBIOS - ok 12:45:32.0265 4944 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys 12:45:32.0303 4944 netbt - ok 12:45:32.0322 4944 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe 12:45:32.0342 4944 Netlogon - ok 12:45:32.0378 4944 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll 12:45:32.0444 4944 Netman - ok 12:45:32.0488 4944 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll 12:45:32.0549 4944 netprofm - ok 12:45:32.0631 4944 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 12:45:32.0664 4944 NetTcpPortSharing - ok 12:45:32.0710 4944 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 12:45:32.0756 4944 nfrd960 - ok 12:45:32.0843 4944 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll 12:45:32.0898 4944 NlaSvc - ok 12:45:32.0958 4944 [ B0A67DE1A128389AEA4D42C5A56215FD ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys 12:45:33.0043 4944 nmwcd - ok 12:45:33.0073 4944 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys 12:45:33.0122 4944 Npfs - ok 12:45:33.0162 4944 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll 12:45:33.0219 4944 nsi - ok 12:45:33.0251 4944 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 12:45:33.0300 4944 nsiproxy - ok 12:45:33.0379 4944 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 12:45:33.0464 4944 Ntfs - ok 12:45:33.0545 4944 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys 12:45:33.0631 4944 ntrigdigi - ok 12:45:33.0675 4944 [ CF7E041663119E09D2E118521ADA9300 ] NuidFltr C:\Windows\system32\DRIVERS\NuidFltr.sys 12:45:33.0713 4944 NuidFltr - ok 12:45:33.0745 4944 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys 12:45:33.0800 4944 Null - ok 12:45:33.0838 4944 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys 12:45:33.0869 4944 nvraid - ok 12:45:33.0882 4944 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys 12:45:33.0927 4944 nvstor - ok 12:45:33.0962 4944 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 12:45:34.0007 4944 nv_agp - ok 12:45:34.0016 4944 NwlnkFlt - ok 12:45:34.0025 4944 NwlnkFwd - ok 12:45:34.0066 4944 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys 12:45:34.0174 4944 ohci1394 - ok 12:45:34.0232 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll 12:45:34.0312 4944 p2pimsvc - ok 12:45:34.0354 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll 12:45:34.0403 4944 p2psvc - ok 12:45:34.0454 4944 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\DRIVERS\parport.sys 12:45:34.0530 4944 Parport - ok 12:45:34.0590 4944 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys 12:45:34.0608 4944 partmgr - ok 12:45:34.0616 4944 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys 12:45:34.0721 4944 Parvdm - ok 12:45:34.0765 4944 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll 12:45:34.0832 4944 PcaSvc - ok 12:45:34.0871 4944 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys 12:45:34.0892 4944 pci - ok 12:45:34.0926 4944 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys 12:45:34.0944 4944 pciide - ok 12:45:35.0008 4944 [ 3BB2244F343B610C29C98035504C9B75 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 12:45:35.0031 4944 pcmcia - ok 12:45:35.0082 4944 pdfcDispatcher - ok 12:45:35.0158 4944 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys 12:45:35.0340 4944 PEAUTH - ok 12:45:35.0426 4944 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll 12:45:35.0649 4944 pla - ok 12:45:35.0704 4944 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll 12:45:35.0786 4944 PlugPlay - ok 12:45:35.0886 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll 12:45:35.0966 4944 PNRPAutoReg - ok 12:45:36.0130 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll 12:45:36.0191 4944 PNRPsvc - ok 12:45:36.0229 4944 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 12:45:36.0326 4944 PolicyAgent - ok 12:45:36.0371 4944 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 12:45:36.0412 4944 PptpMiniport - ok 12:45:36.0448 4944 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys 12:45:36.0572 4944 Processor - ok 12:45:36.0647 4944 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll 12:45:36.0724 4944 ProfSvc - ok 12:45:36.0752 4944 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe 12:45:36.0771 4944 ProtectedStorage - ok 12:45:36.0808 4944 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys 12:45:36.0853 4944 PSched - ok 12:45:36.0912 4944 [ FEFFCFDC528764A04C8ED63D5FA6E711 ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys 12:45:36.0934 4944 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning 12:45:36.0934 4944 PxHelp20 - detected UnsignedFile.Multi.Generic (1) 12:45:36.0997 4944 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys 12:45:37.0095 4944 ql2300 - ok 12:45:37.0141 4944 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 12:45:37.0198 4944 ql40xx - ok 12:45:37.0338 4944 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll 12:45:37.0422 4944 QWAVE - ok 12:45:37.0450 4944 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 12:45:37.0470 4944 QWAVEdrv - ok 12:45:37.0674 4944 [ 252826C4BC88B01E945C2D3C6603F3B0 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys 12:45:37.0874 4944 R300 - ok 12:45:37.0909 4944 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 12:45:37.0986 4944 RasAcd - ok 12:45:38.0032 4944 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll 12:45:38.0094 4944 RasAuto - ok 12:45:38.0147 4944 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 12:45:38.0183 4944 Rasl2tp - ok 12:45:38.0263 4944 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll 12:45:38.0309 4944 RasMan - ok 12:45:38.0354 4944 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 12:45:38.0383 4944 RasPppoe - ok 12:45:38.0432 4944 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 12:45:38.0480 4944 RasSstp - ok 12:45:38.0545 4944 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 12:45:38.0596 4944 rdbss - ok 12:45:38.0622 4944 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 12:45:38.0701 4944 RDPCDD - ok 12:45:38.0737 4944 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys 12:45:38.0863 4944 rdpdr - ok 12:45:38.0881 4944 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 12:45:38.0946 4944 RDPENCDD - ok 12:45:39.0018 4944 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 12:45:39.0137 4944 RDPWD - ok 12:45:39.0238 4944 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe 12:45:39.0268 4944 RealNetworks Downloader Resolver Service - ok 12:45:39.0304 4944 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll 12:45:39.0362 4944 RemoteAccess - ok 12:45:39.0401 4944 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll 12:45:39.0457 4944 RemoteRegistry - ok 12:45:39.0536 4944 [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 12:45:39.0652 4944 RFCOMM - ok 12:45:40.0056 4944 [ AD1411A7EA50F2F97A73A3F51153066E ] RoxMediaDB9 c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe 12:45:40.0241 4944 RoxMediaDB9 - ok 12:45:40.0280 4944 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe 12:45:40.0340 4944 RpcLocator - ok 12:45:40.0381 4944 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll 12:45:40.0449 4944 RpcSs - ok 12:45:40.0484 4944 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 12:45:40.0530 4944 rspndr - ok 12:45:40.0541 4944 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe 12:45:40.0561 4944 SamSs - ok 12:45:40.0588 4944 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 12:45:40.0633 4944 sbp2port - ok 12:45:40.0685 4944 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll 12:45:40.0712 4944 SCardSvr - ok 12:45:40.0757 4944 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll 12:45:40.0850 4944 Schedule - ok 12:45:40.0871 4944 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll 12:45:40.0897 4944 SCPolicySvc - ok 12:45:40.0927 4944 [ 4339A2585708C7D9B0C0CE5AAD3DD6FF ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys 12:45:41.0012 4944 sdbus - ok 12:45:41.0041 4944 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll 12:45:41.0103 4944 SDRSVC - ok 12:45:41.0122 4944 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys 12:45:41.0251 4944 secdrv - ok 12:45:41.0305 4944 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll 12:45:41.0359 4944 seclogon - ok 12:45:41.0414 4944 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll 12:45:41.0466 4944 SENS - ok 12:45:41.0498 4944 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys 12:45:41.0592 4944 Serenum - ok 12:45:41.0636 4944 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys 12:45:41.0759 4944 Serial - ok 12:45:41.0812 4944 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys 12:45:41.0918 4944 sermouse - ok 12:45:41.0960 4944 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll 12:45:42.0002 4944 SessionEnv - ok 12:45:42.0038 4944 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 12:45:42.0142 4944 sffdisk - ok 12:45:42.0166 4944 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 12:45:42.0255 4944 sffp_mmc - ok 12:45:42.0279 4944 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 12:45:42.0376 4944 sffp_sd - ok 12:45:42.0393 4944 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 12:45:42.0452 4944 sfloppy - ok 12:45:42.0483 4944 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll 12:45:42.0548 4944 SharedAccess - ok 12:45:42.0616 4944 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 12:45:42.0689 4944 ShellHWDetection - ok 12:45:42.0724 4944 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys 12:45:42.0779 4944 sisagp - ok 12:45:42.0813 4944 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys 12:45:42.0862 4944 SiSRaid2 - ok 12:45:42.0898 4944 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 12:45:42.0956 4944 SiSRaid4 - ok 12:45:43.0000 4944 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 12:45:43.0020 4944 SkypeUpdate - ok 12:45:43.0163 4944 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe 12:45:43.0600 4944 slsvc - ok 12:45:43.0654 4944 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll 12:45:43.0701 4944 SLUINotify - ok 12:45:43.0732 4944 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys 12:45:43.0785 4944 Smb - ok 12:45:43.0823 4944 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 12:45:43.0855 4944 SNMPTRAP - ok 12:45:43.0875 4944 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys 12:45:43.0905 4944 spldr - ok 12:45:43.0950 4944 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe 12:45:44.0017 4944 Spooler - ok 12:45:44.0079 4944 [ 85CD5B92052C3D285CC91244C593A1AC ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE 12:45:44.0196 4944 SpyHunter 4 Service - ok 12:45:44.0243 4944 [ 54902536AAD0E9B99BC65F89C0CAF93F ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 12:45:44.0274 4944 SQLWriter - ok 12:45:44.0318 4944 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys 12:45:44.0376 4944 srv - ok 12:45:44.0418 4944 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 12:45:44.0483 4944 srv2 - ok 12:45:44.0505 4944 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 12:45:44.0538 4944 srvnet - ok 12:45:44.0564 4944 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 12:45:44.0637 4944 SSDPSRV - ok 12:45:44.0684 4944 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys 12:45:44.0713 4944 ssmdrv - ok 12:45:44.0761 4944 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll 12:45:44.0820 4944 SstpSvc - ok 12:45:44.0881 4944 [ CA22092117F4F8BA3700B4BF9962444A ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys 12:45:44.0913 4944 ssudmdm - ok 12:45:44.0963 4944 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll 12:45:45.0013 4944 stisvc - ok 12:45:45.0032 4944 stllssvr - ok 12:45:45.0069 4944 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys 12:45:45.0124 4944 swenum - ok 12:45:45.0163 4944 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll 12:45:45.0238 4944 swprv - ok 12:45:45.0269 4944 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys 12:45:45.0316 4944 Symc8xx - ok 12:45:45.0339 4944 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys 12:45:45.0398 4944 Sym_hi - ok 12:45:45.0425 4944 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys 12:45:45.0466 4944 Sym_u3 - ok 12:45:45.0513 4944 [ 8327106D1C93E9A7B98E63B9FCC24BB7 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 12:45:45.0536 4944 SynTP - ok 12:45:45.0599 4944 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll 12:45:45.0690 4944 SysMain - ok 12:45:45.0743 4944 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll 12:45:45.0783 4944 TabletInputService - ok 12:45:45.0839 4944 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll 12:45:45.0877 4944 TapiSrv - ok 12:45:45.0897 4944 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll 12:45:45.0953 4944 TBS - ok 12:45:46.0012 4944 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 12:45:46.0068 4944 Tcpip - ok 12:45:46.0145 4944 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys 12:45:46.0191 4944 Tcpip6 - ok 12:45:46.0213 4944 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 12:45:46.0293 4944 tcpipreg - ok 12:45:46.0383 4944 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 12:45:46.0456 4944 TDPIPE - ok 12:45:46.0502 4944 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 12:45:46.0577 4944 TDTCP - ok 12:45:46.0626 4944 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 12:45:46.0664 4944 tdx - ok 12:45:46.0683 4944 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys 12:45:46.0704 4944 TermDD - ok 12:45:46.0739 4944 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll 12:45:46.0811 4944 TermService - ok 12:45:46.0837 4944 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll 12:45:46.0899 4944 Themes - ok 12:45:46.0918 4944 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll 12:45:46.0959 4944 THREADORDER - ok 12:45:47.0006 4944 [ 6D9AD3534A9CF7E4B86C6EAE8BC335F6 ] TPM C:\Windows\system32\drivers\tpm.sys 12:45:47.0045 4944 TPM - ok 12:45:47.0078 4944 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll 12:45:47.0132 4944 TrkWks - ok 12:45:47.0198 4944 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 12:45:47.0225 4944 TrustedInstaller - ok 12:45:47.0273 4944 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 12:45:47.0350 4944 tssecsrv - ok 12:45:47.0402 4944 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys 12:45:47.0441 4944 tunmp - ok 12:45:47.0484 4944 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 12:45:47.0522 4944 tunnel - ok 12:45:47.0563 4944 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 12:45:47.0594 4944 uagp35 - ok 12:45:47.0637 4944 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 12:45:47.0672 4944 udfs - ok 12:45:47.0704 4944 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe 12:45:47.0745 4944 UI0Detect - ok 12:45:47.0779 4944 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 12:45:47.0820 4944 uliagpkx - ok 12:45:47.0853 4944 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys 12:45:47.0905 4944 uliahci - ok 12:45:47.0932 4944 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys 12:45:47.0971 4944 UlSata - ok 12:45:48.0000 4944 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys 12:45:48.0043 4944 ulsata2 - ok 12:45:48.0071 4944 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 12:45:48.0119 4944 umbus - ok 12:45:48.0171 4944 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll 12:45:48.0213 4944 upnphost - ok 12:45:48.0293 4944 [ 62E22A4FA518BAFEF35BDC17BC5B2819 ] USB28xxBGA C:\Windows\system32\DRIVERS\emBDA.sys 12:45:48.0399 4944 USB28xxBGA - ok 12:45:48.0441 4944 [ 9D055ED70E584DF1563B745A7B86DE59 ] USB28xxOEM C:\Windows\system32\DRIVERS\emOEM.sys 12:45:48.0562 4944 USB28xxOEM - ok 12:45:48.0618 4944 [ 6E421CCC57059B0186C6259CA3B6DFC9 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys 12:45:48.0702 4944 USBAAPL - ok 12:45:48.0783 4944 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 12:45:48.0841 4944 usbaudio - ok 12:45:48.0883 4944 [ 9419FAAC6552A51542DBBA02971C841C ] usbbus C:\Windows\system32\DRIVERS\lgusbbus.sys 12:45:48.0951 4944 usbbus - ok 12:45:49.0016 4944 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 12:45:49.0124 4944 usbccgp - ok 12:45:49.0174 4944 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys 12:45:49.0297 4944 usbcir - ok 12:45:49.0346 4944 [ C0A466FA4FFEC464320E159BC1BBDC0C ] UsbDiag C:\Windows\system32\DRIVERS\lgusbdiag.sys 12:45:49.0409 4944 UsbDiag - ok 12:45:49.0439 4944 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 12:45:49.0466 4944 usbehci - ok 12:45:49.0489 4944 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 12:45:49.0536 4944 usbhub - ok 12:45:49.0583 4944 [ F74A54774A9B0AFEB3C40ADEC68AA600 ] USBModem C:\Windows\system32\DRIVERS\lgusbmodem.sys 12:45:49.0657 4944 USBModem - ok 12:45:49.0676 4944 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 12:45:49.0726 4944 usbohci - ok 12:45:49.0764 4944 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 12:45:49.0850 4944 usbprint - ok 12:45:49.0889 4944 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 12:45:49.0956 4944 usbscan - ok 12:45:50.0001 4944 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 12:45:50.0044 4944 USBSTOR - ok 12:45:50.0071 4944 [ 325DBBACB8A36AF9988CCF40EAC228CC ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 12:45:50.0156 4944 usbuhci - ok 12:45:50.0201 4944 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll 12:45:50.0232 4944 UxSms - ok 12:45:50.0280 4944 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe 12:45:50.0349 4944 vds - ok 12:45:50.0400 4944 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 12:45:50.0527 4944 vga - ok 12:45:50.0555 4944 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys 12:45:50.0593 4944 VgaSave - ok 12:45:50.0624 4944 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys 12:45:50.0684 4944 viaagp - ok 12:45:50.0721 4944 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys 12:45:50.0806 4944 ViaC7 - ok 12:45:50.0830 4944 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys 12:45:50.0869 4944 viaide - ok 12:45:50.0905 4944 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys 12:45:50.0925 4944 volmgr - ok 12:45:50.0987 4944 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 12:45:51.0016 4944 volmgrx - ok 12:45:51.0070 4944 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys 12:45:51.0097 4944 volsnap - ok 12:45:51.0124 4944 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 12:45:51.0170 4944 vsmraid - ok 12:45:51.0240 4944 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe 12:45:51.0338 4944 VSS - ok 12:45:51.0533 4944 [ 3D96EF51524E99680E89929E953A5495 ] VX3000 C:\Windows\system32\DRIVERS\VX3000.sys 12:45:51.0774 4944 VX3000 - ok 12:45:51.0848 4944 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll 12:45:51.0905 4944 W32Time - ok 12:45:51.0954 4944 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 12:45:52.0059 4944 WacomPen - ok 12:45:52.0094 4944 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys 12:45:52.0123 4944 Wanarp - ok 12:45:52.0138 4944 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 12:45:52.0167 4944 Wanarpv6 - ok 12:45:52.0211 4944 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll 12:45:52.0278 4944 wcncsvc - ok 12:45:52.0313 4944 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 12:45:52.0349 4944 WcsPlugInService - ok 12:45:52.0385 4944 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys 12:45:52.0420 4944 Wd - ok 12:45:52.0472 4944 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 12:45:52.0522 4944 Wdf01000 - ok 12:45:52.0566 4944 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll 12:45:52.0620 4944 WdiServiceHost - ok 12:45:52.0626 4944 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll 12:45:52.0665 4944 WdiSystemHost - ok 12:45:52.0704 4944 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll 12:45:52.0743 4944 WebClient - ok 12:45:52.0784 4944 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll 12:45:52.0822 4944 Wecsvc - ok 12:45:52.0855 4944 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll 12:45:52.0884 4944 wercplsupport - ok 12:45:52.0916 4944 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll 12:45:52.0973 4944 WerSvc - ok 12:45:53.0011 4944 [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys 12:45:53.0063 4944 WimFltr - ok 12:45:53.0133 4944 [ 5C7BDCF5864DB00323FE2D90FA26A8A2 ] winachsf C:\Windows\system32\DRIVERS\VSTCNXT3.SYS 12:45:53.0245 4944 winachsf - ok 12:45:53.0425 4944 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll 12:45:53.0471 4944 WinDefend - ok 12:45:53.0481 4944 WinHttpAutoProxySvc - ok 12:45:53.0594 4944 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 12:45:53.0623 4944 Winmgmt - ok 12:45:53.0686 4944 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll 12:45:53.0775 4944 WinRM - ok 12:45:53.0898 4944 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll 12:45:53.0986 4944 Wlansvc - ok 12:45:54.0050 4944 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys 12:45:54.0145 4944 WmiAcpi - ok 12:45:54.0214 4944 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 12:45:54.0276 4944 wmiApSrv - ok 12:45:54.0464 4944 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe 12:45:54.0589 4944 WMPNetworkSvc - ok 12:45:54.0626 4944 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll 12:45:54.0682 4944 WPCSvc - ok 12:45:54.0730 4944 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 12:45:54.0757 4944 WPDBusEnum - ok 12:45:54.0815 4944 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys 12:45:54.0861 4944 WpdUsb - ok 12:45:54.0970 4944 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 12:45:55.0064 4944 WPFFontCache_v0400 - ok 12:45:55.0130 4944 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 12:45:55.0195 4944 ws2ifsl - ok 12:45:55.0248 4944 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll 12:45:55.0283 4944 wscsvc - ok 12:45:55.0291 4944 WSearch - ok 12:45:55.0436 4944 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll 12:45:55.0655 4944 wuauserv - ok 12:45:55.0698 4944 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 12:45:55.0752 4944 WudfPf - ok 12:45:55.0794 4944 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 12:45:55.0816 4944 WUDFRd - ok 12:45:55.0852 4944 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 12:45:55.0875 4944 wudfsvc - ok 12:45:55.0917 4944 ================ Scan global =============================== 12:45:55.0970 4944 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll 12:45:56.0034 4944 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll 12:45:56.0057 4944 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll 12:45:56.0107 4944 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe 12:45:56.0117 4944 [Global] - ok 12:45:56.0118 4944 ================ Scan MBR ================================== 12:45:56.0132 4944 [ 97B45F8522380F396E142A324FDCBB82 ] \Device\Harddisk0\DR0 12:45:57.0526 4944 \Device\Harddisk0\DR0 - ok 12:45:57.0527 4944 ================ Scan VBR ================================== 12:45:57.0564 4944 [ 43D6FE2D0345951F003C04F35F764CD4 ] \Device\Harddisk0\DR0\Partition1 12:45:57.0568 4944 \Device\Harddisk0\DR0\Partition1 - ok 12:45:57.0604 4944 [ 6ACC6690B95410367538C39DB70DD312 ] \Device\Harddisk0\DR0\Partition2 12:45:57.0606 4944 \Device\Harddisk0\DR0\Partition2 - ok 12:45:57.0637 4944 [ 8753FB840717A7823286B8FED1B4ECF3 ] \Device\Harddisk0\DR0\Partition3 12:45:57.0641 4944 \Device\Harddisk0\DR0\Partition3 - ok 12:45:57.0643 4944 ============================================================ 12:45:57.0643 4944 Scan finished 12:45:57.0643 4944 ============================================================ 12:45:57.0695 5980 Detected object count: 4 12:45:57.0695 5980 Actual detected object count: 4 12:47:02.0541 5980 Com4Qlb ( UnsignedFile.Multi.Generic ) - skipped by user 12:47:02.0542 5980 Com4Qlb ( UnsignedFile.Multi.Generic ) - User select action: Skip 12:47:02.0545 5980 hpqwmiex ( UnsignedFile.Multi.Generic ) - skipped by user 12:47:02.0545 5980 hpqwmiex ( UnsignedFile.Multi.Generic ) - User select action: Skip 12:47:02.0549 5980 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user 12:47:02.0549 5980 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 12:47:02.0553 5980 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user 12:47:02.0553 5980 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip Bin gespannt Grüße |
14.06.2013, 12:03 | #4 |
/// Malware-holic | delta search eingefangen Hi, Scan mit Combofix
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
14.06.2013, 12:40 | #5 |
| delta search eingefangen Combofix Logfile: Code:
ATTFilter ComboFix 13-06-13.01 - Michael 14.06.2013 13:18:30.1.2 - x86 Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.49.1031.18.1919.848 [GMT 2:00] ausgeführt von:: c:\users\Noknoi\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\Naver c:\program files\Naver\LINE\amp-dll.dll c:\program files\Naver\LINE\CommLib.dll c:\program files\Naver\LINE\CommModule.dll c:\program files\Naver\LINE\DataModule.dll c:\program files\Naver\LINE\dbghelp.dll c:\program files\Naver\LINE\Line.exe c:\program files\Naver\LINE\LineAppMgr.exe c:\program files\Naver\LINE\LineUnInst.exe c:\program files\Naver\LINE\LineUpgrader.exe c:\program files\Naver\LINE\MediaInfo.dll c:\program files\Naver\LINE\Microsoft.VC90.CRT.manifest c:\program files\Naver\LINE\msvcp90.dll c:\program files\Naver\LINE\msvcr90.dll c:\program files\Naver\LINE\NELO.dll c:\program files\Naver\LINE\NELO_CrashReporter.exe c:\program files\Naver\LINE\README.license c:\program files\Naver\LINE\res\locale\en-US\strings.xml c:\program files\Naver\LINE\res\locale\ja-JP\strings.xml c:\program files\Naver\LINE\res\locale\ko-KR\strings.xml c:\program files\Naver\LINE\res\locale\zh-CN\strings.xml c:\program files\Naver\LINE\res\locale\zh-TW\strings.xml c:\program files\Naver\LINE\res\skin\basic\about.nxul c:\program files\Naver\LINE\res\skin\basic\buddyInfo.nxul c:\program files\Naver\LINE\res\skin\basic\chatMember.nxul c:\program files\Naver\LINE\res\skin\basic\chatRoom.nxul c:\program files\Naver\LINE\res\skin\basic\css\buddyInfo.css c:\program files\Naver\LINE\res\skin\basic\css\chatMember.css c:\program files\Naver\LINE\res\skin\basic\css\chatRoom.css c:\program files\Naver\LINE\res\skin\basic\css\chatRoomMessage.css c:\program files\Naver\LINE\res\skin\basic\css\common.css c:\program files\Naver\LINE\res\skin\basic\css\emoji.css c:\program files\Naver\LINE\res\skin\basic\css\emojiIcon.css c:\program files\Naver\LINE\res\skin\basic\css\emojiLetter.css c:\program files\Naver\LINE\res\skin\basic\css\groupMake.css c:\program files\Naver\LINE\res\skin\basic\css\groupModify.css c:\program files\Naver\LINE\res\skin\basic\css\invite.css c:\program files\Naver\LINE\res\skin\basic\css\login.css c:\program files\Naver\LINE\res\skin\basic\css\loginHelp.css c:\program files\Naver\LINE\res\skin\basic\css\makeGroup.css c:\program files\Naver\LINE\res\skin\basic\css\myInfo.css c:\program files\Naver\LINE\res\skin\basic\css\needQRCodeLogin.css c:\program files\Naver\LINE\res\skin\basic\css\setting.css c:\program files\Naver\LINE\res\skin\basic\css\settingBasic.css c:\program files\Naver\LINE\res\skin\basic\css\settingPrivacy.css c:\program files\Naver\LINE\res\skin\basic\css\sticker.css c:\program files\Naver\LINE\res\skin\basic\css\talk.css c:\program files\Naver\LINE\res\skin\basic\css\talkAddBuddy.css c:\program files\Naver\LINE\res\skin\basic\css\talkBuddyList.css c:\program files\Naver\LINE\res\skin\basic\css\talkChatList.css c:\program files\Naver\LINE\res\skin\basic\css\toast.css c:\program files\Naver\LINE\res\skin\basic\css\voip.css c:\program files\Naver\LINE\res\skin\basic\emoji.nxul c:\program files\Naver\LINE\res\skin\basic\emojiIcon.nxul c:\program files\Naver\LINE\res\skin\basic\emojiLetter.nxul c:\program files\Naver\LINE\res\skin\basic\groupMake.nxul c:\program files\Naver\LINE\res\skin\basic\groupModify.nxul c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_audio.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_btn_box.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_bubble_gray.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_bubble_gray2.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_image_frame.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_video.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_call.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_date_bubble.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_img_err.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_layer.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_menu_line.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_more.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_green.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_green2.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_light_green.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_image_frame.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_video.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_new_buddy.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_sep.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_splitter.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_top.png c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_video.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_l.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_m.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_r.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_line.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_top_l.png c:\program files\Naver\LINE\res\skin\basic\images\chat\br_top_r.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_addblock.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_arrow_down.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_canel.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_chat_type1.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_close.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_emoji.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_file.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_max.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_menu.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_min.png c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_room_name.png c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style1.png c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style2.png c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3.png c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3_x.png c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3_xx.png c:\program files\Naver\LINE\res\skin\basic\images\chat\flag.png c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_alarm_off.png c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_error_sticker.png c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_fail.png c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_person.png c:\program files\Naver\LINE\res\skin\basic\images\chat\icon_voip.png c:\program files\Naver\LINE\res\skin\basic\images\chat\icon_voip_disable.png c:\program files\Naver\LINE\res\skin\basic\images\chat\loading.png c:\program files\Naver\LINE\res\skin\basic\images\chat\loading_small.png c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_l.png c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_m.png c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_r.png c:\program files\Naver\LINE\res\skin\basic\images\chat\slider_bar.png c:\program files\Naver\LINE\res\skin\basic\images\chat\slider_thumb.png c:\program files\Naver\LINE\res\skin\basic\images\chat\thumnail_box.png c:\program files\Naver\LINE\res\skin\basic\images\common\bar_01.png c:\program files\Naver\LINE\res\skin\basic\images\common\bar_02.png c:\program files\Naver\LINE\res\skin\basic\images\common\bg_dlg_title.png c:\program files\Naver\LINE\res\skin\basic\images\common\br_btm_l.png c:\program files\Naver\LINE\res\skin\basic\images\common\br_btm_r.png c:\program files\Naver\LINE\res\skin\basic\images\common\br_line.png c:\program files\Naver\LINE\res\skin\basic\images\common\br_top_l.png c:\program files\Naver\LINE\res\skin\basic\images\common\br_top_r.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_close_01.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_close_02.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_system.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type1.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type2.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type3.png c:\program files\Naver\LINE\res\skin\basic\images\common\btn_update.png c:\program files\Naver\LINE\res\skin\basic\images\common\check_type1.png c:\program files\Naver\LINE\res\skin\basic\images\common\checkbox_01.png c:\program files\Naver\LINE\res\skin\basic\images\common\ico_close.png c:\program files\Naver\LINE\res\skin\basic\images\common\ico_dot01.png c:\program files\Naver\LINE\res\skin\basic\images\common\ico_return.png c:\program files\Naver\LINE\res\skin\basic\images\common\icon_clear.png c:\program files\Naver\LINE\res\skin\basic\images\common\input_box.png c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close.png c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_all.png c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_click.png c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_over.png c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_search_1.png c:\program files\Naver\LINE\res\skin\basic\images\common\Line.ico c:\program files\Naver\LINE\res\skin\basic\images\common\line_about.png c:\program files\Naver\LINE\res\skin\basic\images\common\line_about_btn.png c:\program files\Naver\LINE\res\skin\basic\images\common\loading.png c:\program files\Naver\LINE\res\skin\basic\images\common\profile_frame.png c:\program files\Naver\LINE\res\skin\basic\images\common\spin_down.png c:\program files\Naver\LINE\res\skin\basic\images\common\spin_up.png c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_01.png c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_02.png c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_03.png c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_04.png c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_05.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\bg_tab.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_icon_bg.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_index.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_latest.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_left.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_letter.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_right.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_sticker_arrow1.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_sticker_arrow2.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_bottom.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_select.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_top_bg.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_emoticon.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_kaomoji.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_sticker.png c:\program files\Naver\LINE\res\skin\basic\images\emoji\stiker_btn_bg.png c:\program files\Naver\LINE\res\skin\basic\images\group\bg_add_profile_frame.png c:\program files\Naver\LINE\res\skin\basic\images\group\bg_teamlayer_top_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_plus_02.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_radio_off_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_radio_on_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_cancel_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_invite_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_make_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_member_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_no_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_save_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_talk_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_write_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_yes_01.png c:\program files\Naver\LINE\res\skin\basic\images\group\check_style1.png c:\program files\Naver\LINE\res\skin\basic\images\group\check_style3.png c:\program files\Naver\LINE\res\skin\basic\images\group\group_edit_select.png c:\program files\Naver\LINE\res\skin\basic\images\login\btn_close.png c:\program files\Naver\LINE\res\skin\basic\images\login\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\btn_max.png c:\program files\Naver\LINE\res\skin\basic\images\login\btn_min.png c:\program files\Naver\LINE\res\skin\basic\images\login\btn_qrcode_refresh.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\01_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\02_email.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\03_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\04_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\btn_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\login\ico_q.png c:\program files\Naver\LINE\res\skin\basic\images\login\ico_step01.png c:\program files\Naver\LINE\res\skin\basic\images\login\ico_step02.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\01_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\02_email.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\03_jp_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\04_jp_setting.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\05_app_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\06_app_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\07_wap_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\08_wap_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\btn_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\01_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\02_email.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\03_naver.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\04_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\05_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_international.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\login\line_logo.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_bg1.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_bg2.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_btm.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_bullet.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_bullet2.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_line.png c:\program files\Naver\LINE\res\skin\basic\images\login\login_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\login\popup_img_qrsorry.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\01_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\02_email.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\03_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\04_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\btn_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\01_main.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\02_email.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\03_qr01.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\04_qr02.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\btn_login.png c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\btn_qrcode.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_l.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_m.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_r.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_check.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_middle_l.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_middle_r.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_l.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_m.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_r.png c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_uncheck.png c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default.png c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_big.png c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_group.png c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_group_big.png c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_makegroup.png c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default.png c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default_group.png c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default_makegroup.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_btm.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_line.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_top.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_topleft.png c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_topright.png c:\program files\Naver\LINE\res\skin\basic\images\setting\btn_block_user.png c:\program files\Naver\LINE\res\skin\basic\images\setting\btn_select.png c:\program files\Naver\LINE\res\skin\basic\images\setting\ico_arrow.png c:\program files\Naver\LINE\res\skin\basic\images\setting\layer_btn_close_all.png c:\program files\Naver\LINE\res\skin\basic\images\setting\tab_bg.png c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_badge.png c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_subpanel.png c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_tab.png c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_top.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_add_friend.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_chat.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_close.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_list_option.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_max.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_menu.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_min.png c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_top_friendtalk_01.png c:\program files\Naver\LINE\res\skin\basic\images\talk\check_addbuddy.png c:\program files\Naver\LINE\res\skin\basic\images\talk\check_group_show.png c:\program files\Naver\LINE\res\skin\basic\images\talk\group_member_count_bg.png c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab01.png c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab02.png c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab03.png c:\program files\Naver\LINE\res\skin\basic\images\talk\icon_search.png c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_1.png c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_2.png c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_3.png c:\program files\Naver\LINE\res\skin\basic\images\talk\input_cursor.png c:\program files\Naver\LINE\res\skin\basic\images\talk\list_tab_bar.png c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_l.png c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_m.png c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_r.png c:\program files\Naver\LINE\res\skin\basic\images\talk\status_bg.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_bg.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_accept.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_bg.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_refuse.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_close.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_icon_call_accept.png c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_icon_call_refuse.png c:\program files\Naver\LINE\res\skin\basic\images\tray\line_off.ico c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_new.ico c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_offline.ico c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_online.ico c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_call_accept.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_call_refuse.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_mic.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_mic_dim.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_dim.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_gray.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_green.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_btn.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_thumnail_110.png c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_thumnail_bg.png c:\program files\Naver\LINE\res\skin\basic\invite.nxul c:\program files\Naver\LINE\res\skin\basic\login.nxul c:\program files\Naver\LINE\res\skin\basic\loginHelp.nxul c:\program files\Naver\LINE\res\skin\basic\loginKickout.nxul c:\program files\Naver\LINE\res\skin\basic\macUpgradeNotice.nxul c:\program files\Naver\LINE\res\skin\basic\myInfo.nxul c:\program files\Naver\LINE\res\skin\basic\needQRCodeLogin.nxul c:\program files\Naver\LINE\res\skin\basic\notice.nxul c:\program files\Naver\LINE\res\skin\basic\picturePopup.nxul c:\program files\Naver\LINE\res\skin\basic\QRCodeHelp.nxul c:\program files\Naver\LINE\res\skin\basic\setting.nxul c:\program files\Naver\LINE\res\skin\basic\settingBasic.nxul c:\program files\Naver\LINE\res\skin\basic\settingPrivacy.nxul c:\program files\Naver\LINE\res\skin\basic\skinMsgBox.nxul c:\program files\Naver\LINE\res\skin\basic\sticker.nxul c:\program files\Naver\LINE\res\skin\basic\talk.nxul c:\program files\Naver\LINE\res\skin\basic\talkAddBuddy.nxul c:\program files\Naver\LINE\res\skin\basic\talkBuddyList.nxul c:\program files\Naver\LINE\res\skin\basic\talkChatList.nxul c:\program files\Naver\LINE\res\skin\basic\test.nxul c:\program files\Naver\LINE\res\skin\basic\toast.nxul c:\program files\Naver\LINE\res\skin\basic\uploadPicture.nxul c:\program files\Naver\LINE\res\skin\basic\voip.nxul c:\program files\Naver\LINE\res\skin\basic\windowPositionHelperTester.nxul c:\program files\Naver\LINE\res\skin\emoji\emoji_facemark.csv c:\program files\Naver\LINE\res\skin\emoji\emoji_icon.csv c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_001.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_002.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_003.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_004.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_005.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_006.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_007.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_008.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_009.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_01s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_02s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_03s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_04s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_05s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_06s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_07s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_08s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_09s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_10s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_11s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_12s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_13s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_14s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_15s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_16s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_17s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_18s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_19s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_20s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_21s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_01s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_02s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_03s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_04s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_05s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_06s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_07s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_08s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_09s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_10s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_11s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_12s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_01s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_02s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_03s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_04s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_05s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_06s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_07s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_08s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_09s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_10s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_11s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_12s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_13s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_01s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_02s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_03s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_04s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_05s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_06s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_07s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_08s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_09s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_10s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_11s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_12s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_13s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_14s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_15s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_01s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_02s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_03s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_04s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_05s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_06s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_07s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_08s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_09s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_10s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_11s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_12s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_13s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_14s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_15s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_16s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_17s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_18s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_19s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_20s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_21s.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_01.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_02.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_03.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_04.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_05.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_06.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_07.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_08.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_09.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_10.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_11.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_12.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_13.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_14.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_15.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_16.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_17.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_18.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_19.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_20.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_21.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_01.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_02.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_03.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_04.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_05.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_06.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_07.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_08.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_09.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_10.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_11.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_12.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_13.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_14.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_15.png c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_16.png c:\program files\Naver\LINE\res\skin\sticker\gift\gift_1.png c:\program files\Naver\LINE\res\skin\sticker\gift\gift_2.png c:\program files\Naver\LINE\res\skin\sticker\gift\gift_3.png c:\program files\Naver\LINE\res\skin\sticker\gift\gift_4.png c:\program files\Naver\LINE\res\skin\sticker\tab\tab00_off.png c:\program files\Naver\LINE\res\skin\sticker\tab\tab00_on.png c:\program files\Naver\LINE\res\sounds\Bell.wav c:\program files\Naver\LINE\res\sounds\VoipEnd.wav c:\program files\Naver\LINE\res\sounds\VoipRing.wav c:\program files\Naver\LINE\res\sounds\VoipRingback.wav c:\program files\OpenOffice.org 2.4\program\spl680mi.dll c:\programdata\SPL1CEB.tmp c:\windows\IsUn0407.exe D:\Autorun.inf . . ((((((((((((((((((((((( Dateien erstellt von 2013-05-14 bis 2013-06-14 )))))))))))))))))))))))))))))) . . 2013-06-14 11:30 . 2013-06-14 11:30 -------- d-----w- c:\users\Noknoi\AppData\Local\temp 2013-06-14 11:30 . 2013-06-14 11:30 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-06-14 11:30 . 2013-06-14 11:31 -------- d-----w- c:\users\Michael\AppData\Local\temp 2013-06-13 04:32 . 2013-05-08 04:37 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-06-13 04:32 . 2013-05-02 04:04 443904 ----a-w- c:\windows\system32\win32spl.dll 2013-06-13 04:32 . 2013-05-02 04:03 37376 ----a-w- c:\windows\system32\printcom.dll 2013-06-13 04:32 . 2013-04-24 01:46 812544 ----a-w- c:\windows\system32\certutil.exe 2013-06-13 04:32 . 2013-04-24 04:00 985600 ----a-w- c:\windows\system32\crypt32.dll 2013-06-13 04:32 . 2013-04-24 04:00 98304 ----a-w- c:\windows\system32\cryptnet.dll 2013-06-13 04:32 . 2013-04-24 04:00 133120 ----a-w- c:\windows\system32\cryptsvc.dll 2013-06-13 04:32 . 2013-04-24 04:00 41984 ----a-w- c:\windows\system32\certenc.dll 2013-06-13 04:32 . 2013-05-02 22:03 3603832 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-06-13 04:32 . 2013-05-02 22:03 3551096 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-06-13 04:31 . 2013-04-17 12:30 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2013-06-11 18:09 . 2013-06-11 18:09 17617288 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe 2013-05-26 16:44 . 2013-05-26 16:44 -------- d-----w- c:\users\Noknoi\AppData\Local\Samsung 2013-05-26 16:43 . 2013-05-26 16:43 -------- d-----w- c:\users\Noknoi\AppData\Roaming\Samsung 2013-05-26 16:32 . 2013-04-03 07:58 83864 ----a-w- c:\windows\system32\drivers\ssudbus.sys 2013-05-26 16:32 . 2013-04-03 07:58 181912 ----a-w- c:\windows\system32\drivers\ssudmdm.sys 2013-05-26 16:29 . 2013-05-26 16:29 -------- d-----w- c:\program files\MyFree Codec 2013-05-26 15:35 . 2013-04-18 17:08 4659712 ----a-w- c:\windows\system32\Redemption.dll 2013-05-26 15:34 . 2013-04-18 17:06 821824 ----a-w- c:\windows\system32\dgderapi.dll 2013-05-26 15:34 . 2013-04-18 17:06 319456 ----a-w- c:\windows\system32\DIFxAPI.dll 2013-05-26 15:34 . 2013-04-18 17:06 20032 ----a-w- c:\windows\system32\drivers\dgderdrv.sys 2013-05-26 15:32 . 2013-05-26 16:31 -------- d-----w- c:\program files\Samsung 2013-05-26 15:32 . 2013-05-26 16:29 -------- d-----w- c:\programdata\Samsung 2013-05-26 15:18 . 2013-05-26 15:18 -------- d-----w- c:\users\Michael\AppData\Local\Downloaded Installations 2013-05-26 13:33 . 2013-05-26 13:33 -------- d-----w- c:\program files\iPod 2013-05-26 13:33 . 2013-05-26 13:34 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-05-26 13:33 . 2013-05-26 13:34 -------- d-----w- c:\program files\iTunes 2013-05-18 13:15 . 2013-05-18 13:15 110080 ----a-r- c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconCF33A0CE.exe 2013-05-18 13:15 . 2013-05-18 13:15 110080 ----a-r- c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconF7A21AF7.exe 2013-05-18 13:15 . 2013-05-18 13:15 110080 ----a-r- c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconD7F16134.exe 2013-05-18 13:15 . 2013-05-18 13:53 -------- d-----w- C:\sh4ldr 2013-05-18 13:15 . 2013-05-18 13:15 -------- d-----w- c:\program files\Enigma Software Group 2013-05-18 13:13 . 2013-05-18 13:15 -------- d-----w- c:\windows\4941BFEB62C047A2801E998FC469CC2C.TMP 2013-05-18 13:12 . 2013-05-18 13:13 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2013-05-18 09:41 . 2013-05-18 09:42 97 ----a-w- c:\windows\DeleteOnReboot.bat 2013-05-18 06:41 . 2013-05-18 06:41 -------- d-----w- c:\progra~2\C28F~1 2013-05-16 03:54 . 2013-05-16 03:54 -------- d-----w- c:\progra~2\C6FF~1 2013-05-15 15:42 . 2013-05-15 15:42 -------- d-----w- c:\progra~2\01C4~1 2013-05-15 15:15 . 2013-04-15 14:20 638328 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-05-15 15:15 . 2013-04-13 10:56 37376 ----a-w- c:\windows\system32\cdd.dll 2013-05-15 15:14 . 2013-04-09 01:36 2049024 ----a-w- c:\windows\system32\win32k.sys . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-06-11 18:09 . 2012-04-26 16:19 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-06-11 18:09 . 2011-08-26 16:47 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-04-18 17:07 . 2013-04-18 17:07 90112 ----a-w- c:\windows\MAMCityDownload.ocx 2013-04-18 17:07 . 2013-04-18 17:07 330240 ----a-w- c:\windows\MASetupCaller.dll 2013-04-18 17:07 . 2013-04-18 17:07 30568 ----a-w- c:\windows\MusiccityDownload.exe 2013-04-18 17:06 . 2013-04-18 17:06 974848 ----a-w- c:\windows\system32\cis-2.4.dll 2013-04-18 17:06 . 2013-04-18 17:06 81920 ----a-w- c:\windows\system32\issacapi_bs-2.3.dll 2013-04-18 17:06 . 2013-04-18 17:06 65536 ----a-w- c:\windows\system32\issacapi_pe-2.3.dll 2013-04-18 17:06 . 2013-04-18 17:06 57344 ----a-w- c:\windows\system32\MTXSYNCICON.dll 2013-04-18 17:06 . 2013-04-18 17:06 57344 ----a-w- c:\windows\system32\MK_Lyric.dll 2013-04-18 17:06 . 2013-04-18 17:06 57344 ----a-w- c:\windows\system32\issacapi_se-2.3.dll 2013-04-18 17:06 . 2013-04-18 17:06 569344 ----a-w- c:\windows\system32\muzdecode.ax 2013-04-18 17:06 . 2013-04-18 17:06 491520 ----a-w- c:\windows\system32\muzapp.dll 2013-04-18 17:06 . 2013-04-18 17:06 49152 ----a-w- c:\windows\system32\MaJGUILib.dll 2013-04-18 17:06 . 2013-04-18 17:06 45320 ----a-w- c:\windows\system32\MAMACExtract.dll 2013-04-18 17:06 . 2013-04-18 17:06 45056 ----a-w- c:\windows\system32\MaXMLProto.dll 2013-04-18 17:06 . 2013-04-18 17:06 45056 ----a-w- c:\windows\system32\MACXMLProto.dll 2013-04-18 17:06 . 2013-04-18 17:06 40960 ----a-w- c:\windows\system32\MTTELECHIP.dll 2013-04-18 17:06 . 2013-04-18 17:06 352256 ----a-w- c:\windows\system32\MSLUR71.dll 2013-04-18 17:06 . 2013-04-18 17:06 258048 ----a-w- c:\windows\system32\muzoggsp.ax 2013-04-18 17:06 . 2013-04-18 17:06 245760 ----a-w- c:\windows\system32\MSCLib.dll 2013-04-18 17:06 . 2013-04-18 17:06 24576 ----a-w- c:\windows\system32\MASetupCleaner.exe 2013-04-18 17:06 . 2013-04-18 17:06 200704 ----a-w- c:\windows\system32\muzwmts.dll 2013-04-18 17:06 . 2013-04-18 17:06 172032 ----a-w- c:\windows\system32\muzapp.exe 2013-04-18 17:06 . 2013-04-18 17:06 155648 ----a-w- c:\windows\system32\MSFLib.dll 2013-04-18 17:06 . 2013-04-18 17:06 143360 ----a-w- c:\windows\system32\3DAudio.ax 2013-04-18 17:06 . 2013-04-18 17:06 135168 ----a-w- c:\windows\system32\muzaf1.dll 2013-04-18 17:06 . 2013-04-18 17:06 131072 ----a-w- c:\windows\system32\muzmpgsp.ax 2013-04-18 17:06 . 2013-04-18 17:06 122880 ----a-w- c:\windows\system32\muzeffect.ax 2013-04-18 17:06 . 2013-04-18 17:06 118784 ----a-w- c:\windows\system32\MaDRM.dll 2013-04-18 17:06 . 2013-04-18 17:06 110592 ----a-w- c:\windows\system32\muzmp4sp.ax 2013-04-06 16:22 . 2013-04-06 16:22 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2013-04-06 16:22 . 2012-06-24 08:52 861088 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-04-06 16:22 . 2010-06-26 13:01 782240 ----a-w- c:\windows\system32\deployJava1.dll 2013-03-28 03:37 . 2012-11-03 16:00 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2013-03-28 03:37 . 2012-11-03 16:00 135136 ----a-w- c:\windows\system32\drivers\avipbb.sys 2013-03-28 03:37 . 2012-11-03 16:00 84744 ----a-w- c:\windows\system32\drivers\avgntflt.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-04-19 484904] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "GoogleChromeAutoLaunch_1D7305B07635F8E0A4CF4B02D1C53C4D"="c:\program files\Google\Chrome\Application\chrome.exe" [2013-05-29 825808] "KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2013-04-23 1561968] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-12 827392] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776] "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128] "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696] "QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-05-02 163840] "VX3000"="c:\windows\vVX3000.exe" [2008-08-04 721936] "LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2008-08-04 160800] "LXCGCATS"="c:\windows\system32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2007-02-22 73728] "lxcgmon.exe"="c:\program files\Lexmark 2300 Series\lxcgmon.exe" [2007-04-29 205744] "EzPrint"="c:\program files\Lexmark 2300 Series\ezprint.exe" [2007-04-29 103344] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-15 1097728] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-01-12 49208] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-05-08 345312] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888] "TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2013-01-25 295072] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-15 152392] "KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2013-04-23 311152] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "*WerKernelReporting"="c:\windows\SYSTEM32\WerFault.exe" [2009-04-11 217088] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] @="Service" . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - 81723331 *Deregistered* - 81723331 . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc bthsvcs REG_MULTI_SZ BthServ LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-04-19 11:23 452136 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-06-07 04:38 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-26 18:50] . 2013-06-13 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-02 13:38] . 2013-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-05-02 12:48] . 2013-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-05-02 12:48] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = https://www.google.de/ mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=none&bd=smb&pf=laptop uSearchURL,(Default) = hxxp://go.web.de/suchbox/webdesuche?su=%s IE: Free YouTube to Mp3 Converter - c:\users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 TCP: Interfaces\{FBDDC9ED-E58C-48F4-BD05-DFEB479848B1}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKCU-Run-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre7\bin\jusched.exe SafeBoot-WudfPf SafeBoot-WudfRd HKLM_ActiveSetup-ccc-core-static - msiexec AddRemove-ElsterFormular für Privatanwender und Unternehmer 12.0.0.5880k - c:\program files\ElsterFormular\uninstall.exe AddRemove-Free Audio CD Burner_is1 - c:\program files\DVDVideoSoft\Free Audio CD Burner\unins000.exe AddRemove-Free Studio_is1 - c:\program files\DVDVideoSoft\Free Studio\unins000.exe AddRemove-LINE - c:\program files\Naver\LINE\LineUnInst.exe AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net Rootkit scan 2013-06-14 13:31 Windows 6.0.6002 Service Pack 2 NTFS . Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . HKLM\Software\Microsoft\Windows\CurrentVersion\Run LXCGCATS = rundll32 c:\windows\system32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? . Scanne versteckte Dateien... . Scan erfolgreich abgeschlossen versteckte Dateien: 0 . ************************************************************************** . [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\pdfcDispatcher] "ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Zeit der Fertigstellung: 2013-06-14 13:35:12 ComboFix-quarantined-files.txt 2013-06-14 11:35 . Vor Suchlauf: 20 Verzeichnis(se), 20.770.516.992 Bytes frei Nach Suchlauf: 25 Verzeichnis(se), 22.568.890.368 Bytes frei . - - End Of File - - 31A407E8542A38FE1B3BBCE3A68D4B99 97B45F8522380F396E142A324FDCBB82 |
14.06.2013, 13:56 | #6 |
/// Malware-holic | delta search eingefangen Hi, malwarebytes: Downloade Dir bitte Malwarebytes
__________________ --> delta search eingefangen |
14.06.2013, 14:18 | #7 |
| delta search eingefangen Was hälst du von Spy Hunter 4 ? Grüße |
14.06.2013, 14:33 | #8 |
/// Malware-holic | delta search eingefangen nichts, sonst hätte ich das hier genannt. poste bitte das angeforderte Log
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
14.06.2013, 15:04 | #9 |
| delta search eingefangen alles klar Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.06.14.03 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Michael :: MICHAEL-PC [limitiert] Schutz: Aktiviert 14.06.2013 15:52:13 mbam-log-2013-06-14 (15-52-13).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 237980 Laufzeit: 9 Minute(n), 53 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) |
14.06.2013, 19:04 | #10 |
/// Malware-holic | delta search eingefangen Hi, lade den CCleaner standard: CCleaner - Download - Filepony falls der CCleaner bereits instaliert, überspringen. öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen. hinter, jedes von dir benötigte programm, schreibe notwendig. hinter, jedes, von dir nicht benötigte, unnötig. hinter, dir unbekannte, unbekannt. liste posten.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
15.06.2013, 00:50 | #11 |
| delta search eingefangenCode:
ATTFilter ABBYY FineReader 6.0 Sprint ABBYY Software House 14.07.2010 119MB 6.00.1395.4512 notwendig Adobe Flash Player 11 Plugin Adobe Systems Incorporated 11.06.2013 11.7.700.224 notwendig Adobe Reader X (10.1.6) - Deutsch Adobe Systems Incorporated 21.02.2013 167MB 10.1.6 notwendig Agere Systems HDA Modem Agere Systems 30.06.2007 unbekannt Alice Software 4.10.0 HanseNet Telekommunikation GmbH 23.04.2008 14,7MB 4.10.0 notwendig Apple Application Support Apple Inc. 26.05.2013 64,7MB 2.3.4 unbekannt Apple Mobile Device Support Apple Inc. 22.02.2013 24,6MB 6.1.0.13 unbekannt Apple Software Update Apple Inc. 18.06.2012 2,38MB 2.1.3.127 unbekannt Application Installer 4.00.B14 Hewlett-Packard Company 23.04.2008 916KB 4.00.B14 unbekannt ArcSoft ShowBiz ArcSoft 28.03.2011 309MB unnötig ATI Catalyst Install Manager ATI Technologies, Inc. 27.04.2008 13,8MB 3.0.641.0 unbekannt ATI Uninstaller ATI Technologies, Inc. 23.04.2008 13,8MB unbekannt Avira Free Antivirus Avira 08.05.2013 132MB 13.0.0.3640 notwendig Bonjour Apple Inc. 05.01.2013 1,14MB 3.0.0.10 unbekannt CCleaner Piriform 24.05.2013 5,62MB 4.02 notwendig DHTML Editing Component Microsoft Corporation 14.01.2010 462KB 6.02.0001 unbekannt DivX Web Player DivX,Inc. 18.12.2008 3,54MB 1.4.2 unnötig Druckerdeinstallation für EPSON Stylus SX400 Series SEIKO EPSON Corporation 03.04.2012 notwendig Druckerdeinstallation für EPSON Stylus TX400 Series SEIKO EPSON Corporation 03.05.2012 notwendig ElsterFormular Landesfinanzdirektion Thüringen 14.06.2013 280MB 13.1.1.8531u notwendig EPSON Scan 14.07.2010 15,6MB notwendig ESU for Microsoft Vista Hewlett-Packard 30.06.2007 3,78MB 1.0.10.1 unbekannt GMX MultiMessenger GMX GmbH 01.05.2009 30,1MB 3.70.2804 notwendig Google Chrome Google Inc. 02.05.2009 53,6MB 27.0.1453.110 notwendig Google Earth Google 23.03.2013 173MB 7.0.3.8542 notwendig Google Earth Plug-in Google 01.06.2013 83,6MB 7.1.1.1580 unbekannt Google Updater Google Inc. 02.05.2009 3,59MB 2.4.1536.6592 unnötig HP BIOS Configuration for ProtectTools Hewlett-Packard 30.06.2007 2,56MB 3.00 C1 notwendig HP Customer Experience Enhancements Hewlett-Packard 30.06.2007 5.0.0.2258 notwendig HP Easy Setup - Core Hewlett-Packard 30.06.2007 1,02MB 5.0.0.2258 notwendig HP Easy Setup - Frontend Hewlett-Packard 30.06.2007 1,43MB 5.0.0.2258 notwendig HP Help and Support Hewlett-Packard 30.06.2007 20,9MB 1.0.0 notwendig HP Notebook Accessories Product Tour Hewlett-Packard 30.06.2007 10,0MB 13.0.0 unbekannt HP ProtectTools Security Manager Hewlett-Packard 30.06.2007 7,09MB 3.00 A10 notwendig HP Quick Launch Buttons 6.20 F2 Hewlett-Packard 30.06.2007 23,9MB 6.20 F2 unbekannt HP Update Hewlett-Packard 28.03.2011 3,96MB 5.002.007.004 notwendig HP Wireless Assistant Hewlett-Packard 30.06.2007 3,94MB 3.00 F1 notwendig InterVideo DVD Check 23.04.2008 188KB notwendig InterVideo WinDVD InterVideo Inc. 23.04.2008 46,0MB 5.0-B11.1164 notwendig iTunes Apple Inc. 26.05.2013 186MB 11.0.3.42 notwendig Java 7 Update 17 Oracle 06.04.2013 129MB 7.0.170 notwendig JavaFX 2.1.1 Oracle Corporation 24.06.2012 20,8MB 2.1.1 unbekannt Lexmark 2300 Series Lexmark International, Inc. 19.04.2009 78,6MB notwendig LG PC Suite II LG PC Suite 13.07.2010 166MB 2.00.0000 notwendig LG USB Modem driver LG Electronics 13.07.2010 1,18MB 4.9.4 notwendig Malwarebytes Anti-Malware Version 1.75.0.1300 Malwarebytes Corporation 14.06.2013 13,3MB 1.75.0.1300 notwendig McAfee Security Scan Plus McAfee, Inc. 27.02.2013 2,32MB 3.0.318.3 notwendig Microsoft .NET Framework 1.1 27.04.2008 unbekannt Microsoft .NET Framework 1.1 German Language Pack Microsoft 30.06.2007 3,01MB 1.1.4322 unbekannt Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 08.08.2009 36,9MB unbekannt Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 26.06.2009 36,9MB unbekannt Microsoft .NET Framework 4 Client Profile Microsoft Corporation 26.05.2013 120MB 4.0.30320 unbekannt Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 26.05.2013 24,5MB 4.0.30320 unbekannt Microsoft LifeCam Microsoft Corporation 25.01.2009 92,0MB 2.4.542.0 unbekannt Microsoft Silverlight Microsoft Corporation 12.03.2013 80,0MB 5.1.20125.0 unbekannt Microsoft SQL Server Native Client Microsoft Corporation 23.01.2009 2,62MB 9.00.3042.00 unbekannt Microsoft SQL Server VSS Writer Microsoft Corporation 23.01.2009 711KB 9.00.3042.00 unbekannt Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 29.07.2009 251KB 8.0.50727.4053 unbekannt Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 16.06.2011 294KB 8.0.61001 unbekannt Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 29.07.2009 199KB 9.0.30729.4148 unbekannt Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Corporation 19.04.2011 592KB 9.0.30729.5570 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 Microsoft Corporation 26.02.2010 597KB 9.0.30729 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 23.07.2009 590KB 9.0.30729 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 02.04.2010 589KB 9.0.30729.4148 unbekannt Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Corporation 16.06.2011 594KB 9.0.30729.6161 unbekannt Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 06.06.2012 12,2MB 10.0.40219 unbekannt MSCU for Microsoft Vista Hewlett-Packard 30.06.2007 72,9MB 1.0.1.3 notwendig MSXML 4.0 SP2 (KB936181) Microsoft Corporation 27.04.2008 1,26MB 4.20.9848.0 unbekannt MSXML 4.0 SP2 (KB941833) Microsoft Corporation 28.04.2008 1,26MB 4.20.9849.0 unbekannt MSXML 4.0 SP2 (KB954430) Microsoft Corporation 13.11.2008 1,27MB 4.20.9870.0 unbekannt MSXML 4.0 SP2 (KB973688) Microsoft Corporation 24.11.2009 1,33MB 4.20.9876.0 unbekannt MyFreeCodec 26.05.2013 10,6MB unbekannt Nokia Connectivity Cable Driver 26.05.2013 7.1.32.69 unnötig OpenOffice.org 2.4 OpenOffice.org 23.06.2008 342MB 2.4.9310 notwendig PDF Complete 23.04.2008 24,7MB notwendig Pictomio Pictomio GmbH 05.10.2008 13,9MB notwendig QuickTime Apple Inc. 05.01.2013 73,1MB 7.73.80.64 unbekannt RealPlayer RealNetworks 24.01.2013 119MB 16.0.0 notwendig Roxio Creator Audio Roxio 30.06.2007 1,08MB 3.3.0 unbekannt Roxio Creator Copy Roxio 30.06.2007 648KB 3.3.0 unbekannt Roxio Creator Data Roxio 30.06.2007 980KB 3.3.0 unbekannt Roxio Creator Tools Roxio 30.06.2007 345KB 3.3.0 unbekannt Roxio MyDVD Basic v9 Roxio 30.06.2007 297MB 9.0.116 unbekannt Samsung Kies Samsung Electronics Co., Ltd. 26.05.2013 175MB 2.5.3.13043_14 notwendig SAMSUNG USB Driver for Mobile Phones SAMSUNG Electronics Co., Ltd. 14.06.2013 34,6MB 1.5.23.0 notwendig Skype™ 5.10 Skype Technologies S.A. 13.09.2012 19,4MB 5.10.116 notwendig SoundMAX Analog Devices 30.06.2007 56,0KB 6.10.1.5180 notwendig SpyHunter Enigma Software Group USA, LLC 18.05.2013 47,0MB 4.13.6.4253 unnötig ST Wiederherstellungs- & Sicherungsprogramme Hewlett-Packard Company 30.06.2007 7,93GB 4.0.14 notwendig Synaptics Pointing Device Driver Synaptics 30.06.2007 12,8MB 9.1.11.0 unbekannt Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) Microsoft Corporation 23.01.2009 30,8MB 9.00.3042.00 unbekannt USB Video/Audio Device Driver Ihr Firmenname 28.03.2011 5,73MB 1.00.0000 notwendig Vista Default Settings Hewlett-Packard 30.06.2007 281KB 1.0.5.1 unbekannt VoipDiscount Finarea S.A. Switzerland 26.12.2010 10,7MB 4.07 build 629 notwendig Windows Live Anmelde-Assistent Microsoft Corporation 20.02.2009 1,93MB 5.000.818.5 unbekannt Windows Live Essentials Microsoft Corporation 12.02.2011 44,0MB 14.0.8117.0416 unbekannt Windows Live-Uploadtool Microsoft Corporation 21.01.2009 225KB 14.0.8014.1029 unbekannt Windows Media Player Firefox Plugin Microsoft Corp 27.04.2008 296KB 1.0.0.8 notwendig WinRAR 09.01.2009 3,72MB notwendig |
15.06.2013, 14:18 | #12 |
/// Malware-holic | delta search eingefangen deinstaliere: Adobe Flash Player alle Adobe - Adobe Flash Player installieren neueste version laden, instalieren. adobe reader: Adobe - Adobe Reader herunterladen - Alle Versionen haken bei mcafee security scan raus nehmen bitte auch mal den adobe reader wie folgt konfigurieren: adobe reader öffnen, bearbeiten, voreinstellungen. allgemein: nur zertifizierte zusatz module verwenden, anhaken. Sicherheit (erweitert) Erweiterte Sicherheit anhaken und alle Dateien auswählen. internet: hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc. es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht. bei javascript den haken bei java script verwenden raus nehmen bei updater, automatisch instalieren wählen. übernehmen /ok deinstaliere: ArcSoft DivX Google Updater Java : beide downloade Java jre: Java-Downloads für alle Betriebssysteme klicke: Download der Java-Software für Windows Offline laden, und instalieren deinstaliere: Nokia SpyHunter Öffne CCleaner, analysieren, starten, pc neustarten Downloade Dir bitte AdwCleaner auf deinen Desktop.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
15.06.2013, 18:59 | #13 |
| delta search eingefangen Adobe Reader-Installationsfehler Ungültiges Laufwerk: G:\ bricht immer wieder bei ca 82 % ab |
15.06.2013, 19:02 | #14 |
/// Malware-holic | delta search eingefangen hast du ihn denn auf c: instaliert?
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
15.06.2013, 21:19 | #15 |
| delta search eingefangen Adobe installiert nach Doppelklick auf die heruntergeladene Datei eigenständig hab ich jetzt mehrfach versucht, auch nach Neustart des Rechners hier erstmal die Datei und delta search erscheint nicht mehr im 2ten und weiteren Tabs. Danke Code:
ATTFilter # AdwCleaner v2.303 - Datei am 15/06/2013 um 21:48:28 erstellt # Aktualisiert am 08/06/2013 von Xplode # Betriebssystem : Windows Vista (TM) Home Basic Service Pack 2 (32 bits) # Benutzer : Michael - MICHAEL-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Michael\Downloads\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-10.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-4.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-5.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-6.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-7.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-8.xml Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-9.xml ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16490 [OK] Die Registrierungsdatenbank ist sauber. -\\ Mozilla Firefox v21.0 (de) Datei : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\prefs.js [OK] Die Datei ist sauber. Datei : C:\Users\Noknoi\AppData\Roaming\Mozilla\Firefox\Profiles\jwhhut2j.default-1357985151241\prefs.js Gelöscht : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?affID=121562&tt=gc_&babsrc=NT_ss&mntr[...] Gelöscht : user_pref("browser.search.order.1", "Delta Search"); -\\ Google Chrome v27.0.1453.110 Datei : C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. Datei : C:\Users\Noknoi\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [6146 octets] - [18/05/2013 11:40:17] AdwCleaner[R2].txt - [1674 octets] - [18/05/2013 13:44:21] AdwCleaner[R3].txt - [2772 octets] - [15/06/2013 21:48:02] AdwCleaner[S1].txt - [6351 octets] - [18/05/2013 11:41:02] AdwCleaner[S2].txt - [1736 octets] - [18/05/2013 13:46:57] AdwCleaner[S3].txt - [2705 octets] - [15/06/2013 21:48:28] ########## EOF - C:\AdwCleaner[S3].txt - [2765 octets] ########## Grüße |
Themen zu delta search eingefangen |
anhang, antworten, delta, delta search, delta search entfernen, downloaden, eingefangen, freue, gefangen, gelöscht, gen, hallo zusammen, hoffe, mozilla, search, seite, systems, systemsteuerung, tab, taucht, weiteren, worte, zusammen |