Weißer Bildschirm, nach "Meldung" vom BKA

Reewee · 15.06.2013, 14:02

Hallo,
ich bin neu hier und der infizierte Rechner hat Windows Vista Home.

Ich bekam heute eine "Meldung" vom BKA. Jetzt habe ich nur noch einen weißen Bildschirm.
Abgesicherter Modus hat leider nichts gebracht.

Kann mir jemand weiterhelfen?
Wäre echt super!

Danke schonmal im voraus.

markusg · 15.06.2013, 14:05

Hi,
kommst du an nen pc mit brenner?
download:
ISO Burner - Download - Filepony
isoburner anleitung:
http://www.trojaner-board.de/83208-b...ei-cd-dvd.html
• Wenn der Download fertig ist mache ein doppel Klick auf die OTLPENet.exe, was ISOBurner öffnet um es auf die CD zu brennen.
Starte dein System neu und boote von der CD die du gerade erstellt hast.
Wenn du nicht weist wie du deinen Computer dazu bringst von der CD zu booten,
http://www.trojaner-board.de/81857-c...cd-booten.html

• Dein System sollte jetzt einen REATOGO-X-PE Desktop anzeigen.
• Mache einen doppel Klick auf das OTLPE Icon.
• Wenn du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
• Wenn du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
• entferne den haken bei "Automatically Load All Remaining Users" wenn er gesetzt ist.

• OTL sollte nun starten.
Kopiere nun den Inhalt in die

Textbox.

Code:

ATTFilter

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe

• Drücke Run Scan um den Scan zu starten.
• Wenn er fertig ist werden die Dateien in C:\otl.txt gesichert
• Kopiere diesen Ordner auf deinen USB-Stick wenn du keine Internetverbindung auf diesem System hast.
poste beide logs

Reewee · 15.06.2013, 19:54

Hi,
wie lange läuft denn der Scan? Bei mir sind das schon mind. 2 Std.
VG

markusg · 15.06.2013, 20:09

läuft er denn tatsächlich noch? oder ist zb ne meldung out of memory zu sehen?

Reewee · 16.06.2013, 06:49

Ja die Meldung kam. Jetzt scheint es fertig zu sein. Ich habe aber nur eine Datei.
Kann man hier keine Dateien anhängen?OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 6/15/2013 2:52:54 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Basic Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 85.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 81.31 Gb Free Space | 54.55% Space Free | Partition Type: NTFS
Drive E: | 491.73 Mb Total Space | 288.53 Mb Free Space | 58.68% Space Free | Partition Type: FAT
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (SystemStoreService)
SRV - [2013/06/13 14:27:21 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/06/04 10:58:48 | 002,095,752 | ---- | M] () [Auto] -- C:\Program Files\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater)
SRV - [2013/05/17 14:37:54 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/05/10 03:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/24 20:30:15 | 004,443,912 | ---- | M] (COMODO) [Auto] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2013/04/17 07:27:24 | 001,851,088 | ---- | M] (Comodo Security Solutions, Inc.) [Auto] -- C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP)
SRV - [2013/04/17 05:57:08 | 000,070,344 | ---- | M] (Comodo Security Solutions Inc.) [Auto] -- C:\Program Files\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher)
SRV - [2013/04/15 13:38:18 | 000,127,184 | ---- | M] (COMODO) [On_Demand] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth)
SRV - [2010/07/22 04:34:10 | 000,109,136 | ---- | M] (Paragon Software Group) [On_Demand] -- C:\Program Files\Paragon Software\Paragon Backup Home and Office 2011\program\dbhservice.exe -- (Paragon System Backup Dienst)
SRV - [2008/01/18 18:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/18 18:36:50 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008/01/18 18:36:16 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand] --  -- (IpInIp)
DRV - [2013/04/25 06:05:07 | 000,084,928 | ---- | M] (COMODO) [Kernel | System] -- C:\Windows\System32\drivers\inspect.sys -- (inspect)
DRV - [2013/04/15 13:38:46 | 000,043,216 | ---- | M] (COMODO) [Kernel | System] -- C:\Windows\System32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2013/04/15 13:38:45 | 000,582,960 | ---- | M] (COMODO) [File_System | System] -- C:\Windows\System32\drivers\cmdguard.sys -- (cmdGuard)
DRV - [2013/04/15 13:38:44 | 000,020,072 | ---- | M] (COMODO) [File_System | System] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2013/04/10 13:39:05 | 000,067,584 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\EMS7SK.sys -- (EMSCR)
DRV - [2013/04/10 13:39:05 | 000,046,592 | ---- | M] (ENE Technology Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ESD7SK.sys -- (ESDCR)
DRV - [2013/02/05 04:54:40 | 000,037,344 | ---- | M] () [Kernel | On_Demand] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2013/01/31 04:19:50 | 000,181,344 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.)
DRV - [2013/01/31 04:19:50 | 000,083,168 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
DRV - [2012/09/03 03:20:00 | 000,035,064 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System] -- C:\Windows\System32\drivers\CFRMD.sys -- (CFRMD)
DRV - [2010/07/22 04:34:04 | 000,385,768 | ---- | M] (Paragon) [Kernel | System] -- C:\Windows\System32\drivers\Uim_IM.sys -- (Uim_IM)
DRV - [2010/07/22 04:34:04 | 000,034,456 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System] -- C:\Windows\System32\drivers\UimBus.sys -- (UimBus)
DRV - [2010/07/22 04:34:02 | 000,040,624 | ---- | M] (Paragon Software Group) [Kernel | Boot] -- C:\Windows\System32\drivers\hotcore3.sys -- (hotcore3)
DRV - [2009/10/26 10:09:06 | 001,095,936 | ---- | M] (Motorola Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2009/10/05 05:08:42 | 000,065,584 | ---- | M] (Citrix Systems, Inc.) [Kernel | System] -- C:\Windows\System32\drivers\ctxusbm.sys -- (ctxusbm)
DRV - [2009/04/10 16:42:54 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)
DRV - [2009/02/17 00:19:44 | 000,057,672 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\opcomusb.sys -- (FTDIBUS)
DRV - [2008/09/21 22:20:42 | 000,043,520 | ---- | M] (VIA Technologies, Inc.              ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\fetnd6v.sys -- (FETND6V)
DRV - [2008/01/09 06:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/12/10 09:22:22 | 000,110,120 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017unic.sys -- (s3017unic) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM)
DRV - [2007/12/10 09:22:22 | 000,100,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017obex.sys -- (s3017obex)
DRV - [2007/12/10 09:22:20 | 000,104,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017mgmt.sys -- (s3017mgmt) Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM)
DRV - [2007/12/10 09:22:20 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017nd5.sys -- (s3017nd5) Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS)
DRV - [2007/12/10 09:22:18 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017mdm.sys -- (s3017mdm)
DRV - [2007/12/10 09:22:18 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017mdfl.sys -- (s3017mdfl)
DRV - [2007/12/10 09:22:14 | 000,083,880 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\s3017bus.sys -- (s3017bus) Sony Ericsson Device 3017 driver (WDM)
DRV - [2006/12/19 01:25:48 | 000,142,848 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\viahduaa.sys -- (HdAudAddService)
DRV - [1999/12/31 20:00:00 | 000,814,592 | ---- | M] (S3 Graphics Co., Ltd.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\VTGKModeDX32.sys -- (S3GIGP)
DRV - [1999/12/31 20:00:00 | 000,288,256 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\Windows\System32\drivers\rtl8187.sys -- (RTL8187)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Start Page = about:newtab
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Search,Search Bar = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Search,Search Page = hxxp://search.certified-toolbar.com?si=43169&tid=3580&ver=2.9&ts=1368369812233&tguid=43169-3580-1368369812233-B5CD4F919F6382147B714B501047D4E0&st=chrome&q=
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKU\Rainer_ON_C\Software\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKU\Rainer_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/11/01 16:10:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jid0-hjoQNmABq6jg91jHpQyvgJUouUP@jetpack: C:\Program Files\GutscheinFinder\jid0-hjoQNmABq6jg91jHpQyvgJUouUPjetpack.xpi [2013/03/19 12:07:50 | 000,289,397 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/17 14:37:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/17 14:37:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013/05/15 12:55:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
 
[2013/05/17 14:37:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/05/17 14:37:56 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2010/03/10 19:01:02 | 000,124,272 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\CCMSDK.dll
[2010/03/10 19:02:52 | 000,070,512 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\CgpCore.dll
[2010/03/10 19:01:48 | 000,091,504 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\confmgr.dll
[2010/03/10 19:01:24 | 000,022,384 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\ctxlogging.dll
[2010/03/10 19:40:56 | 000,423,248 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npicaN.dll
[2012/06/20 12:14:20 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010/03/10 19:02:48 | 000,023,920 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\TcpPServ.dll
[2013/05/16 13:39:54 | 000,003,307 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Web Search.xml
 
O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Rainer\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
O2 - BHO: (HomeTab) - {96edaac7-6183-4cb5-8823-b8b12d94f967} - C:\Users\Rainer\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (HomeTab) - {96edaac7-6183-4cb5-8823-b8b12d94f967} - C:\Users\Rainer\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.)
O3 - HKU\Rainer_ON_C\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\Comodo\COMODO Internet Security\cistray.exe (COMODO)
O4 - HKLM..\Run: [ConnectionCenter] C:\Program Files\Citrix\ICA Client\concentr.exe (Citrix Systems, Inc.)
O4 - HKLM..\Run: [DBHAgent] C:\Program Files\Paragon Software\Paragon Backup Home and Office 2011\program\dbhagent.exe (Paragon Software Group)
O4 - HKLM..\Run: [gbrspcontrol] C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VistaADeck\HDAudioCPL.exe (VIA.)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [S3Funkey] C:\Windows\System32\S3Funkey.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [S3Trayp] C:\Windows\System32\s3trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\Rainer_ON_C..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKU\Rainer_ON_C..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe (Samsung)
O4 - Startup: Error locating startup folders.
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Filter\application/x-ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\Rainer_ON_C Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\Rainer_ON_C Winlogon: Shell - (C:\Users\Rainer\AppData\Roaming\skype.dat) - C:\Users\Rainer\AppData\Roaming\skype.dat ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 7 Days ==========
 
[2013/06/15 03:03:44 | 000,000,000 | ---D | C] -- C:\FRST
[2013/06/13 15:07:57 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013/06/13 15:07:57 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2013/06/13 15:07:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013/06/13 15:07:54 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013/06/13 15:07:54 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013/06/13 15:07:54 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013/06/13 15:07:53 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2013/06/13 15:07:52 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013/06/13 15:07:51 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/06/13 15:07:48 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013/06/13 13:28:02 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2013/06/13 13:28:02 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll
[2013/06/13 13:27:43 | 000,812,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013/06/13 13:27:42 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013/06/13 13:26:37 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013/06/13 13:26:21 | 003,603,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013/06/13 13:26:20 | 003,551,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
 
========== Files - Modified Within 7 Days ==========
 
[2013/06/15 03:47:34 | 000,000,004 | ---- | M] () -- C:\Users\Rainer\AppData\Roaming\skype.ini
[2013/06/15 03:46:46 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/06/15 03:46:27 | 000,003,952 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/15 03:46:26 | 000,003,952 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/15 03:46:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/06/15 03:46:01 | 2011,348,992 | -HS- | M] () -- C:\hiberfil.sys
[2013/06/15 02:56:13 | 000,897,008 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2013/06/15 02:05:11 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/06/14 14:27:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/06/13 14:27:20 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/06/13 14:27:20 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/06/12 13:48:34 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013/06/12 13:48:34 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/06/12 13:48:34 | 000,126,260 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013/06/12 13:48:34 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
 
========== Files Created - No Company Name ==========
 
[2013/06/15 03:46:01 | 2011,348,992 | -HS- | C] () -- C:\hiberfil.sys
[2013/06/15 01:46:32 | 000,000,004 | ---- | C] () -- C:\Users\Rainer\AppData\Roaming\skype.ini
[2013/04/10 12:36:55 | 001,769,472 | ---- | C] () -- C:\Windows\System32\VTROM.bin
[2013/03/29 03:56:04 | 000,897,008 | ---- | C] () -- C:\Windows\System32\drivers\sfi.dat
[2013/02/17 10:16:28 | 001,456,640 | ---- | C] () -- C:\Program Files\Common Files\Falk Navi-Manager classic.msi
[2013/02/17 07:15:30 | 000,059,392 | ---- | C] () -- C:\Users\Rainer\AppData\Roaming\skype.dat
[2013/02/17 05:57:36 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2013/02/17 05:57:36 | 000,037,344 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2013/02/16 09:05:05 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2013/02/16 09:02:12 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2013/02/16 09:02:11 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2013/01/12 06:27:01 | 000,003,584 | ---- | C] () -- C:\Users\Rainer\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/12/18 05:06:10 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012/12/18 05:06:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012/12/18 05:06:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012/12/18 05:06:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012/12/18 05:06:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2012/11/17 16:32:22 | 001,456,640 | ---- | C] () -- C:\Program Files\Common Files\Falk Navi-Manager.msi
[2012/11/17 11:57:50 | 000,087,552 | ---- | C] () -- C:\Windows\System32\cpwmon2k.dll
[2012/11/02 10:17:23 | 000,000,403 | ---- | C] () -- C:\Windows\ODBC.INI
[2012/11/01 15:57:36 | 000,233,481 | ---- | C] () -- C:\Windows\hpoins47.dat
[2012/11/01 15:57:36 | 000,000,574 | ---- | C] () -- C:\Windows\hpomdl47.dat
[2012/11/01 13:26:44 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2012/11/01 13:25:04 | 000,356,352 | R--- | C] () -- C:\Windows\EMCRI.dll
[2012/11/01 13:23:14 | 000,069,632 | ---- | C] () -- C:\Windows\System32\vuins32.dll
[2012/11/01 12:59:51 | 000,000,680 | ---- | C] () -- C:\Users\Rainer\AppData\Local\d3d9caps.dat
[2009/10/06 03:16:02 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2006/11/02 11:38:05 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2006/11/02 11:38:05 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2006/11/02 11:38:05 | 000,126,260 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2006/11/02 11:38:05 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2006/11/02 08:53:49 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 08:44:53 | 000,291,992 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 06:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[1999/04/29 16:00:00 | 000,065,536 | ---- | C] () -- C:\Windows\System32\MSRTEDIT.DLL
 
========== LOP Check ==========
 
[2013/05/09 02:49:44 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\Azureus
[2013/05/12 10:17:52 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\Complitly
[2013/02/23 11:28:29 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\elsterformular
[2013/03/16 10:07:31 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\GHISLER
[2013/05/16 13:40:12 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\HomeTab
[2013/03/27 15:44:14 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\ICAClient
[2013/02/19 14:33:51 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\IrfanView
[2013/05/12 10:05:18 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\JLC's Software
[2013/01/12 06:19:13 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\LibreOffice
[2013/02/17 05:50:08 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\Samsung
[2013/05/12 10:16:54 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\SimplyTech
[2012/11/01 15:02:56 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\Thunderbird
[2013/04/17 13:59:56 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\uTorrent
[2013/05/17 12:46:23 | 000,000,000 | ---D | M] -- C:\Users\Rainer\AppData\Roaming\www.rene-zeidler.de
[2012/11/01 12:56:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2013/02/04 15:11:48 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software
[2013/05/06 13:12:20 | 000,000,000 | ---D | M] -- C:\ProgramData\BVRP Software
[2013/02/04 09:14:47 | 000,000,000 | ---D | M] -- C:\ProgramData\CheckPoint
[2013/03/27 12:31:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Citrix
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2012/11/01 12:56:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente
[2013/02/23 11:27:21 | 000,000,000 | ---D | M] -- C:\ProgramData\elsterformular
[2013/01/26 06:12:12 | 000,000,000 | ---D | M] -- C:\ProgramData\expLauncher
[2012/11/01 12:56:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2013/05/12 10:12:40 | 000,000,000 | ---D | M] -- C:\ProgramData\FreeSystemUtilities
[2013/05/12 10:11:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Package Cache
[2013/01/26 06:55:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Paragon
[2013/02/17 05:58:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Samsung
[2013/03/29 03:29:43 | 000,000,000 | --SD | M] -- C:\ProgramData\Shared Space
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2012/11/01 12:56:38 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü
[2006/11/02 08:59:44 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2012/11/01 12:56:39 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen
[2013/05/17 12:46:23 | 000,000,000 | ---D | M] -- C:\ProgramData\www.rene-zeidler.de
[2013/06/14 14:38:48 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
< End of report >

--- --- ---

markusg · 17.06.2013, 12:20

reinkopieren ist besser.
auf deinem zweiten pc gehe auf start, programme zubehör editor, kopiere dort
rein:

Code:

ATTFilter

:OTL
O20 - HKU\Rainer_ON_C Winlogon: Shell - (C:\Users\Rainer\AppData\Roaming\skype.dat) - C:\Users\Rainer\AppData\Roaming\skype.dat ()
[2013/06/15 03:47:34 | 000,000,004 | ---- | M] () -- C:\Users\Rainer\AppData\Roaming\skype.ini
:Files
:Commands
[EMPTYFLASH] 
[emptytemp]

dieses speicherst du auf nem usb stick als fix.txt
nutze nun wieder OTLPENet.exe (starte also von der erstellten cd) und hake alles an, wie es bereits im post zu OTLPENet.exe beschrieben ist.
• Klicke nun bitte auf den Fix Button.
es sollte nun eine meldung ähnlich dieser: "load fix from file" erscheinen, lade also die fix.txt von deinem stick.
wenn dies nicht funktioniert, bitte den fix manuell eintragen.
dann klicke erneut den fix buton. pc startet evtl. neu. wenn ja, nimm die cd aus dem laufwerk, windows sollte nun normal starten und die otl.txt öffnen,
log posten bitte.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Hinweis: Die Datei bitte wie in der Anleitung zum UpChannel angegeben auch da hochladen. Bitte NICHT die ZIP-Datei hier als Anhang
in den Thread posten!

Drücke bitte die

+ E Taste.

Öffne dein Systemlaufwerk ( meistens C: )
Suche nun
folgenden Ordner: _OTL und öffne diesen.
Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner
Dies wird eine Movedfiles.zip Datei in _OTL erstellen
Lade diese bitte in unseren Uploadchannel
hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )

Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

Reewee · 17.06.2013, 22:06

Hallo,
die fix datei kann ich weder auswählen noch von Hand eingeben(Tasturbelegung falsch, z.B. statt i kommt 5, f passt). Die Fehlermeldung lautet:Access violation at Adress 7CA0C936 in module 'shell32.dll'. Read of adress 00000006.
Was nun?
VG

ach übrigens: den Rechner kann ich auch nicht runterfahren, nur über die Austaste ausmachen.

markusg · 18.06.2013, 16:27

versuchs mal reinzokopieren, also fix auf stick, öffnen strg+a strg+c dann in otl eingabefelnd strg+v

Reewee · 18.06.2013, 18:55

Hi,
ich bin auf den Knien und verbeuge mich vor Dir, großer Meister!
Die Kiste läuft wieder.
Noch ne Frage, da ich auch Internetbanking mache:
Kann da was passieren?

Viele Grüße und vielen Dank

========== OTL ==========
Registry value HKEY_USERS\Rainer_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Users\Rainer\AppData\Roaming\skype.dat deleted successfully.
C:\Users\Rainer\AppData\Roaming\skype.dat moved successfully.
C:\Users\Rainer\AppData\Roaming\skype.ini moved successfully.
========== FILES ==========
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Rainer
->Temp folder emptied: 22417559 bytes
->Temporary Internet Files folder emptied: 4486278 bytes
->FireFox cache emptied: 19704901 bytes
->Flash cache emptied: 492 bytes

Total Flash Files Cleaned = 44.00 mb

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: Rainer
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 45085849 bytes

Total Files Cleaned = 43.00 mb

OTLPE by OldTimer - Version 3.1.48.0 log created on 06162013_044815

markusg · 18.06.2013, 20:29

Passwörter ändern kann nich schaden, aber dass sollte passen.
Du darfst wieder aufstehen :d
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Reewee · 19.06.2013, 16:36

Hi hier kimmt die Datei:

17:29:45.0938 4120 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:29:46.0266 4120 ============================================================
17:29:46.0266 4120 Current date / time: 2013/06/19 17:29:46.0266
17:29:46.0266 4120 SystemInfo:
17:29:46.0266 4120
17:29:46.0266 4120 OS Version: 6.0.6002 ServicePack: 2.0
17:29:46.0266 4120 Product type: Workstation
17:29:46.0266 4120 ComputerName: RAINERLAPTOP
17:29:46.0266 4120 UserName: Rainer
17:29:46.0266 4120 Windows directory: C:\Windows
17:29:46.0266 4120 System windows directory: C:\Windows
17:29:46.0266 4120 Processor architecture: Intel x86
17:29:46.0266 4120 Number of processors: 2
17:29:46.0266 4120 Page size: 0x1000
17:29:46.0266 4120 Boot type: Normal boot
17:29:46.0266 4120 ============================================================
17:29:48.0719 4120 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
17:29:48.0719 4120 ============================================================
17:29:48.0719 4120 \Device\Harddisk0\DR0:
17:29:48.0719 4120 MBR partitions:
17:29:48.0719 4120 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x12A18800
17:29:48.0719 4120 ============================================================
17:29:48.0766 4120 C: <-> \Device\Harddisk0\DR0\Partition1
17:29:48.0766 4120 ============================================================
17:29:48.0766 4120 Initialize success
17:29:48.0766 4120 ============================================================
17:30:13.0641 1572 ============================================================
17:30:13.0641 1572 Scan started
17:30:13.0641 1572 Mode: Manual; SigCheck; TDLFS;
17:30:13.0641 1572 ============================================================
17:30:15.0438 1572 ================ Scan system memory ========================
17:30:15.0438 1572 System memory - ok
17:30:15.0438 1572 ================ Scan services =============================
17:30:15.0750 1572 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
17:30:16.0000 1572 ACPI - ok
17:30:16.0141 1572 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
17:30:16.0172 1572 AdobeARMservice - ok
17:30:16.0282 1572 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:30:16.0313 1572 AdobeFlashPlayerUpdateSvc - ok
17:30:16.0407 1572 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
17:30:16.0469 1572 adp94xx - ok
17:30:16.0579 1572 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
17:30:16.0625 1572 adpahci - ok
17:30:16.0657 1572 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
17:30:16.0688 1572 adpu160m - ok
17:30:16.0719 1572 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
17:30:16.0750 1572 adpu320 - ok
17:30:16.0829 1572 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
17:30:17.0094 1572 AeLookupSvc - ok
17:30:17.0172 1572 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
17:30:17.0250 1572 AFD - ok
17:30:17.0282 1572 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
17:30:17.0329 1572 aic78xx - ok
17:30:17.0375 1572 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
17:30:17.0547 1572 ALG - ok
17:30:17.0579 1572 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
17:30:17.0594 1572 aliide - ok
17:30:17.0657 1572 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
17:30:17.0688 1572 amdagp - ok
17:30:17.0704 1572 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
17:30:17.0735 1572 amdide - ok
17:30:17.0766 1572 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
17:30:17.0985 1572 AmdK7 - ok
17:30:18.0016 1572 [ 0CA0071DA4315B00FC1328CA86B425DA ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
17:30:18.0110 1572 AmdK8 - ok
17:30:18.0188 1572 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
17:30:18.0266 1572 Appinfo - ok
17:30:18.0313 1572 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
17:30:18.0344 1572 arc - ok
17:30:18.0407 1572 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
17:30:18.0422 1572 arcsas - ok
17:30:18.0485 1572 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
17:30:18.0563 1572 AsyncMac - ok
17:30:18.0610 1572 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
17:30:18.0641 1572 atapi - ok
17:30:18.0719 1572 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:30:18.0782 1572 AudioEndpointBuilder - ok
17:30:18.0797 1572 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
17:30:18.0860 1572 Audiosrv - ok
17:30:18.0922 1572 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
17:30:18.0985 1572 Beep - ok
17:30:19.0047 1572 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
17:30:19.0094 1572 BFE - ok
17:30:19.0204 1572 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
17:30:19.0313 1572 BITS - ok
17:30:19.0313 1572 blbdrive - ok
17:30:19.0391 1572 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
17:30:19.0454 1572 bowser - ok
17:30:19.0516 1572 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
17:30:19.0579 1572 BrFiltLo - ok
17:30:19.0610 1572 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
17:30:19.0688 1572 BrFiltUp - ok
17:30:19.0735 1572 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
17:30:19.0829 1572 Browser - ok
17:30:19.0875 1572 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
17:30:20.0016 1572 Brserid - ok
17:30:20.0063 1572 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
17:30:20.0157 1572 BrSerWdm - ok
17:30:20.0204 1572 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
17:30:20.0297 1572 BrUsbMdm - ok
17:30:20.0344 1572 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
17:30:20.0438 1572 BrUsbSer - ok
17:30:20.0469 1572 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
17:30:20.0579 1572 BTHMODEM - ok
17:30:20.0625 1572 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
17:30:20.0704 1572 cdfs - ok
17:30:20.0766 1572 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
17:30:20.0844 1572 cdrom - ok
17:30:20.0922 1572 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
17:30:21.0000 1572 CertPropSvc - ok
17:30:21.0063 1572 [ 2A3A6EEF9E5479CF662B088EEBEDE8D8 ] CFRMD C:\Windows\system32\DRIVERS\CFRMD.sys
17:30:21.0141 1572 CFRMD - ok
17:30:21.0188 1572 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
17:30:21.0297 1572 circlass - ok
17:30:21.0329 1572 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
17:30:21.0375 1572 CLFS - ok
17:30:21.0454 1572 [ 00E3E885D8C19CAD03BCD05DFEB2C1FE ] CLPSLauncher C:\Program Files\Common Files\COMODO\launcher_service.exe
17:30:21.0469 1572 CLPSLauncher - ok
17:30:21.0579 1572 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:30:21.0657 1572 clr_optimization_v2.0.50727_32 - ok
17:30:21.0766 1572 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:30:21.0829 1572 clr_optimization_v4.0.30319_32 - ok
17:30:21.0875 1572 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
17:30:21.0969 1572 CmBatt - ok
17:30:22.0282 1572 [ D21DD5C3C4BF89D2722D25B7D11336D5 ] cmdAgent C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
17:30:22.0594 1572 cmdAgent - ok
17:30:22.0641 1572 [ 9F5B746646A49DDE3A7E769025742B67 ] cmderd C:\Windows\system32\DRIVERS\cmderd.sys
17:30:22.0672 1572 cmderd - ok
17:30:22.0750 1572 [ AB31A0612CA85B24D220F77076E530CD ] cmdGuard C:\Windows\system32\DRIVERS\cmdguard.sys
17:30:22.0813 1572 cmdGuard - ok
17:30:22.0860 1572 [ 55B480596BC9CE85D2345F9C6906ECCA ] cmdHlp C:\Windows\system32\DRIVERS\cmdhlp.sys
17:30:22.0891 1572 cmdHlp - ok
17:30:22.0938 1572 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
17:30:22.0954 1572 cmdide - ok
17:30:22.0985 1572 [ C2C420573A006CDFB956443735C78A1B ] cmdvirth C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
17:30:23.0016 1572 cmdvirth - ok
17:30:23.0063 1572 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
17:30:23.0094 1572 Compbatt - ok
17:30:23.0110 1572 COMSysApp - ok
17:30:23.0157 1572 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
17:30:23.0172 1572 crcdisk - ok
17:30:23.0219 1572 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
17:30:23.0313 1572 Crusoe - ok
17:30:23.0375 1572 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll
17:30:23.0438 1572 CryptSvc - ok
17:30:23.0500 1572 [ CB6FF7012BB5D59D7C12350DB795CE1F ] ctxusbm C:\Windows\system32\DRIVERS\ctxusbm.sys
17:30:23.0532 1572 ctxusbm - ok
17:30:23.0625 1572 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
17:30:23.0766 1572 DcomLaunch - ok
17:30:23.0813 1572 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
17:30:23.0891 1572 DfsC - ok
17:30:24.0079 1572 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
17:30:24.0266 1572 DFSR - ok
17:30:24.0329 1572 [ 6CC6C4B9D7B906A151AA094CA087B9F0 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
17:30:24.0360 1572 dg_ssudbus - ok
17:30:24.0438 1572 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
17:30:24.0516 1572 Dhcp - ok
17:30:24.0579 1572 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
17:30:24.0610 1572 disk - ok
17:30:24.0688 1572 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
17:30:24.0766 1572 Dnscache - ok
17:30:24.0813 1572 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
17:30:24.0907 1572 dot3svc - ok
17:30:24.0985 1572 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
17:30:25.0079 1572 DPS - ok
17:30:25.0407 1572 [ 493BCC9D95CA98A1DE8A839FF0491DC0 ] DragonUpdater C:\Program Files\Comodo\Dragon\dragon_updater.exe
17:30:25.0594 1572 DragonUpdater - ok
17:30:25.0657 1572 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
17:30:25.0704 1572 drmkaud - ok
17:30:25.0782 1572 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
17:30:25.0829 1572 DXGKrnl - ok
17:30:25.0891 1572 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
17:30:26.0000 1572 E1G60 - ok
17:30:26.0047 1572 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
17:30:26.0110 1572 EapHost - ok
17:30:26.0172 1572 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
17:30:26.0204 1572 Ecache - ok
17:30:26.0266 1572 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
17:30:26.0313 1572 elxstor - ok
17:30:26.0375 1572 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
17:30:26.0516 1572 EMDMgmt - ok
17:30:26.0579 1572 [ 250BE86D107274A4B8FF25825ACD85D5 ] EMSCR C:\Windows\system32\DRIVERS\EMS7SK.sys
17:30:26.0657 1572 EMSCR - ok
17:30:26.0688 1572 [ 5CE738F4F941C3B8380A64F759008C03 ] ESDCR C:\Windows\system32\DRIVERS\ESD7SK.sys
17:30:26.0766 1572 ESDCR - ok
17:30:26.0860 1572 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
17:30:26.0938 1572 EventSystem - ok
17:30:26.0985 1572 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
17:30:27.0063 1572 exfat - ok
17:30:27.0110 1572 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
17:30:27.0188 1572 fastfat - ok
17:30:27.0235 1572 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
17:30:27.0375 1572 fdc - ok
17:30:27.0422 1572 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
17:30:27.0500 1572 fdPHost - ok
17:30:27.0532 1572 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
17:30:27.0625 1572 FDResPub - ok
17:30:27.0719 1572 [ 263F2507788917AB54C4AB8BC740F290 ] FET5X86V C:\Windows\system32\DRIVERS\fetnd5bv.sys
17:30:27.0750 1572 FET5X86V - ok
17:30:27.0797 1572 [ 403BEDAD0226653BA8D05AEFC3F04A0C ] FETND6V C:\Windows\system32\DRIVERS\fetnd6v.sys
17:30:27.0860 1572 FETND6V - ok
17:30:27.0938 1572 [ B2B2C38E916184FF8523C7439DDD417F ] FETNDIS C:\Windows\system32\DRIVERS\fetnd5.sys
17:30:28.0063 1572 FETNDIS - ok
17:30:28.0125 1572 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
17:30:28.0157 1572 FileInfo - ok
17:30:28.0188 1572 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
17:30:28.0266 1572 Filetrace - ok
17:30:28.0297 1572 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
17:30:28.0407 1572 flpydisk - ok
17:30:28.0469 1572 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
17:30:28.0500 1572 FltMgr - ok
17:30:28.0594 1572 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
17:30:28.0704 1572 FontCache - ok
17:30:28.0782 1572 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
17:30:28.0813 1572 FontCache3.0.0.0 - ok
17:30:28.0875 1572 [ DDEE99DC54EFA20BD5A442CD733C4462 ] FsUsbExDisk C:\Windows\system32\FsUsbExDisk.SYS
17:30:29.0094 1572 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - warning
17:30:29.0094 1572 FsUsbExDisk - detected UnsignedFile.Multi.Generic (1)
17:30:29.0157 1572 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
17:30:29.0235 1572 Fs_Rec - ok
17:30:29.0282 1572 [ 7C17235845D5AE3FB33EAD47B5881521 ] FTDIBUS C:\Windows\system32\drivers\opcomusb.sys
17:30:29.0297 1572 FTDIBUS - ok
17:30:29.0329 1572 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
17:30:29.0360 1572 gagp30kx - ok
17:30:29.0469 1572 [ AE63D0DB96C07CAE5DC4CDB2B2A719A0 ] GeekBuddyRSP C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
17:30:29.0579 1572 GeekBuddyRSP - ok
17:30:29.0657 1572 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
17:30:29.0766 1572 gpsvc - ok
17:30:29.0891 1572 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
17:30:29.0922 1572 gupdate - ok
17:30:29.0938 1572 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
17:30:29.0969 1572 gupdatem - ok
17:30:30.0032 1572 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
17:30:30.0063 1572 gusvc - ok
17:30:30.0141 1572 [ CF2E6FB5A3A44C2C354E47AB0991C0BD ] HdAudAddService C:\Windows\system32\drivers\viahduaa.sys
17:30:30.0219 1572 HdAudAddService - ok
17:30:30.0282 1572 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
17:30:30.0375 1572 HDAudBus - ok
17:30:30.0438 1572 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
17:30:30.0532 1572 HidBth - ok
17:30:30.0579 1572 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
17:30:30.0688 1572 HidIr - ok
17:30:30.0735 1572 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
17:30:30.0797 1572 hidserv - ok
17:30:30.0844 1572 [ 3C64042B95E583B366BA4E5D2450235E ] HidUsb C:\Windows\system32\drivers\hidusb.sys
17:30:30.0954 1572 HidUsb - ok
17:30:30.0985 1572 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
17:30:31.0063 1572 hkmsvc - ok
17:30:31.0141 1572 [ 5C19B7F7695872CC131E53B6F5CC4FE0 ] hotcore3 C:\Windows\system32\DRIVERS\hotcore3.sys
17:30:31.0172 1572 hotcore3 - ok
17:30:31.0188 1572 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
17:30:31.0235 1572 HpCISSs - ok
17:30:31.0375 1572 [ 5DA42D24712E00728CEA2342A65009B2 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
17:30:31.0641 1572 hpqcxs08 - ok
17:30:31.0719 1572 [ D86A39BF100069444D026D22D9A6E555 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
17:30:31.0750 1572 hpqddsvc - ok
17:30:31.0907 1572 [ A04F4AC48895774A2CF9D1C9EAAACEF0 ] HPSLPSVC C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL
17:30:31.0985 1572 HPSLPSVC - ok
17:30:32.0063 1572 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys
17:30:32.0172 1572 HTTP - ok
17:30:32.0219 1572 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
17:30:32.0250 1572 i2omp - ok
17:30:32.0313 1572 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
17:30:32.0375 1572 i8042prt - ok
17:30:32.0407 1572 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
17:30:32.0454 1572 iaStorV - ok
17:30:32.0532 1572 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:30:32.0594 1572 idsvc - ok
17:30:32.0641 1572 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
17:30:32.0672 1572 iirsp - ok
17:30:32.0719 1572 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
17:30:32.0813 1572 IKEEXT - ok
17:30:32.0875 1572 [ 57BA03D22DF27184277BA3C2CE7B492D ] inspect C:\Windows\system32\DRIVERS\inspect.sys
17:30:32.0907 1572 inspect - ok
17:30:32.0954 1572 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
17:30:32.0985 1572 intelide - ok
17:30:33.0032 1572 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
17:30:33.0110 1572 intelppm - ok
17:30:33.0157 1572 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
17:30:33.0219 1572 IPBusEnum - ok
17:30:33.0250 1572 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:30:33.0313 1572 IpFilterDriver - ok
17:30:33.0375 1572 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
17:30:33.0454 1572 iphlpsvc - ok
17:30:33.0469 1572 IpInIp - ok
17:30:33.0500 1572 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
17:30:33.0625 1572 IPMIDRV - ok
17:30:33.0657 1572 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
17:30:33.0719 1572 IPNAT - ok
17:30:33.0750 1572 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
17:30:33.0813 1572 IRENUM - ok
17:30:33.0844 1572 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
17:30:33.0875 1572 isapnp - ok
17:30:33.0938 1572 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
17:30:33.0969 1572 iScsiPrt - ok
17:30:34.0000 1572 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
17:30:34.0032 1572 iteatapi - ok
17:30:34.0079 1572 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
17:30:34.0110 1572 iteraid - ok
17:30:34.0141 1572 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
17:30:34.0188 1572 kbdclass - ok
17:30:34.0235 1572 [ D2600CB17B7408B4A83F231DC9A11AC3 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
17:30:34.0329 1572 kbdhid - ok
17:30:34.0391 1572 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
17:30:34.0454 1572 KeyIso - ok
17:30:34.0500 1572 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
17:30:34.0547 1572 KSecDD - ok
17:30:34.0625 1572 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
17:30:34.0719 1572 KtmRm - ok
17:30:34.0782 1572 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
17:30:34.0860 1572 LanmanServer - ok
17:30:34.0938 1572 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:30:35.0016 1572 LanmanWorkstation - ok
17:30:35.0063 1572 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
17:30:35.0110 1572 lltdio - ok
17:30:35.0157 1572 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
17:30:35.0235 1572 lltdsvc - ok
17:30:35.0266 1572 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
17:30:35.0375 1572 lmhosts - ok
17:30:35.0438 1572 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
17:30:35.0454 1572 LSI_FC - ok
17:30:35.0500 1572 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
17:30:35.0532 1572 LSI_SAS - ok
17:30:35.0547 1572 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
17:30:35.0579 1572 LSI_SCSI - ok
17:30:35.0610 1572 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
17:30:35.0688 1572 luafv - ok
17:30:35.0735 1572 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
17:30:35.0750 1572 megasas - ok
17:30:35.0797 1572 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
17:30:35.0860 1572 MMCSS - ok
17:30:35.0907 1572 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
17:30:35.0969 1572 Modem - ok
17:30:36.0032 1572 [ CBB59C41F19EFEA1A000793E08070A62 ] MODEMCSA C:\Windows\system32\drivers\MODEMCSA.sys
17:30:36.0110 1572 MODEMCSA - ok
17:30:36.0141 1572 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
17:30:36.0204 1572 monitor - ok
17:30:36.0235 1572 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
17:30:36.0266 1572 mouclass - ok
17:30:36.0297 1572 [ A3A6DFF7E9E757DB3DF51A833BC28885 ] mouhid C:\Windows\system32\drivers\mouhid.sys
17:30:36.0391 1572 mouhid - ok
17:30:36.0422 1572 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
17:30:36.0454 1572 MountMgr - ok
17:30:36.0532 1572 [ 825BF0E46B4470A463AEB641480C5FCA ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:30:36.0547 1572 MozillaMaintenance - ok
17:30:36.0610 1572 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
17:30:36.0641 1572 mpio - ok
17:30:36.0704 1572 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
17:30:36.0782 1572 mpsdrv - ok
17:30:36.0875 1572 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
17:30:36.0969 1572 MpsSvc - ok
17:30:37.0016 1572 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
17:30:37.0047 1572 Mraid35x - ok
17:30:37.0079 1572 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
17:30:37.0125 1572 MRxDAV - ok
17:30:37.0188 1572 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
17:30:37.0266 1572 mrxsmb - ok
17:30:37.0297 1572 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:30:37.0344 1572 mrxsmb10 - ok
17:30:37.0360 1572 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:30:37.0407 1572 mrxsmb20 - ok
17:30:37.0438 1572 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
17:30:37.0469 1572 msahci - ok
17:30:37.0500 1572 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
17:30:37.0532 1572 msdsm - ok
17:30:37.0563 1572 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
17:30:37.0625 1572 MSDTC - ok
17:30:37.0672 1572 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
17:30:37.0750 1572 Msfs - ok
17:30:37.0797 1572 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
17:30:37.0813 1572 msisadrv - ok
17:30:37.0875 1572 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
17:30:37.0954 1572 MSiSCSI - ok
17:30:37.0954 1572 msiserver - ok
17:30:38.0000 1572 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
17:30:38.0079 1572 MSKSSRV - ok
17:30:38.0125 1572 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
17:30:38.0204 1572 MSPCLOCK - ok
17:30:38.0235 1572 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
17:30:38.0313 1572 MSPQM - ok
17:30:38.0375 1572 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
17:30:38.0422 1572 MsRPC - ok
17:30:38.0454 1572 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
17:30:38.0485 1572 mssmbios - ok
17:30:38.0532 1572 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
17:30:38.0594 1572 MSTEE - ok
17:30:38.0625 1572 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
17:30:38.0657 1572 Mup - ok
17:30:38.0719 1572 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
17:30:38.0766 1572 napagent - ok
17:30:38.0829 1572 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
17:30:38.0860 1572 NativeWifiP - ok
17:30:38.0938 1572 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
17:30:38.0985 1572 NDIS - ok
17:30:39.0032 1572 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
17:30:39.0110 1572 NdisTapi - ok
17:30:39.0141 1572 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
17:30:39.0204 1572 Ndisuio - ok
17:30:39.0250 1572 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
17:30:39.0282 1572 NdisWan - ok
17:30:39.0313 1572 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
17:30:39.0375 1572 NDProxy - ok
17:30:39.0422 1572 [ A081CB6FB9A12668F233EB5414BE3A0E ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
17:30:39.0469 1572 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
17:30:39.0469 1572 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
17:30:39.0500 1572 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
17:30:39.0563 1572 NetBIOS - ok
17:30:39.0610 1572 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
17:30:39.0688 1572 netbt - ok
17:30:39.0735 1572 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
17:30:39.0766 1572 Netlogon - ok
17:30:39.0813 1572 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
17:30:39.0907 1572 Netman - ok
17:30:39.0954 1572 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
17:30:40.0047 1572 netprofm - ok
17:30:40.0079 1572 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:30:40.0110 1572 NetTcpPortSharing - ok
17:30:40.0141 1572 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
17:30:40.0172 1572 nfrd960 - ok
17:30:40.0204 1572 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
17:30:40.0297 1572 NlaSvc - ok
17:30:40.0344 1572 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
17:30:40.0391 1572 Npfs - ok
17:30:40.0438 1572 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
17:30:40.0500 1572 nsi - ok
17:30:40.0532 1572 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
17:30:40.0610 1572 nsiproxy - ok
17:30:40.0704 1572 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
17:30:41.0016 1572 Ntfs - ok
17:30:41.0063 1572 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
17:30:41.0157 1572 ntrigdigi - ok
17:30:41.0204 1572 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
17:30:41.0250 1572 Null - ok
17:30:41.0266 1572 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
17:30:41.0297 1572 nvraid - ok
17:30:41.0329 1572 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
17:30:41.0360 1572 nvstor - ok
17:30:41.0391 1572 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
17:30:41.0422 1572 nv_agp - ok
17:30:41.0438 1572 NwlnkFlt - ok
17:30:41.0469 1572 NwlnkFwd - ok
17:30:41.0547 1572 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
17:30:41.0610 1572 ohci1394 - ok
17:30:41.0704 1572 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
17:30:41.0829 1572 p2pimsvc - ok
17:30:41.0860 1572 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
17:30:41.0938 1572 p2psvc - ok
17:30:42.0063 1572 [ 332048AC9BFEC1C4B060DF70670DB7B0 ] Paragon System Backup Dienst C:\Program Files\Paragon Software\Paragon Backup Home and Office 2011\program\dbhservice.exe
17:30:42.0282 1572 Paragon System Backup Dienst - ok
17:30:42.0313 1572 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
17:30:42.0422 1572 Parport - ok
17:30:42.0469 1572 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
17:30:42.0500 1572 partmgr - ok
17:30:42.0532 1572 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
17:30:42.0641 1572 Parvdm - ok
17:30:42.0719 1572 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
17:30:42.0797 1572 PcaSvc - ok
17:30:42.0844 1572 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
17:30:42.0875 1572 pci - ok
17:30:42.0922 1572 [ 3B1901E401473E03EB8C874271E50C26 ] pciide C:\Windows\system32\drivers\pciide.sys
17:30:42.0938 1572 pciide - ok
17:30:42.0985 1572 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
17:30:43.0016 1572 pcmcia - ok
17:30:43.0079 1572 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
17:30:43.0235 1572 PEAUTH - ok
17:30:43.0375 1572 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
17:30:43.0532 1572 pla - ok
17:30:43.0594 1572 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
17:30:43.0657 1572 PlugPlay - ok
17:30:43.0719 1572 [ 65BC271F337637731D3C71455AE1F476 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
17:30:43.0750 1572 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
17:30:43.0750 1572 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
17:30:43.0797 1572 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
17:30:43.0860 1572 PNRPAutoReg - ok
17:30:43.0891 1572 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
17:30:43.0954 1572 PNRPsvc - ok
17:30:44.0032 1572 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
17:30:44.0125 1572 PolicyAgent - ok
17:30:44.0172 1572 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
17:30:44.0235 1572 PptpMiniport - ok
17:30:44.0297 1572 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
17:30:44.0391 1572 Processor - ok
17:30:44.0438 1572 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
17:30:44.0500 1572 ProfSvc - ok
17:30:44.0532 1572 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
17:30:44.0547 1572 ProtectedStorage - ok
17:30:44.0610 1572 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
17:30:44.0641 1572 PSched - ok
17:30:44.0735 1572 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
17:30:44.0813 1572 ql2300 - ok
17:30:44.0844 1572 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
17:30:44.0875 1572 ql40xx - ok
17:30:44.0922 1572 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
17:30:44.0985 1572 QWAVE - ok
17:30:45.0016 1572 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
17:30:45.0079 1572 QWAVEdrv - ok
17:30:45.0141 1572 [ 70DBDAB246C18B78E2200D6401D038BE ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll
17:30:45.0235 1572 RapiMgr - ok
17:30:45.0266 1572 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
17:30:45.0360 1572 RasAcd - ok
17:30:45.0375 1572 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
17:30:45.0469 1572 RasAuto - ok
17:30:45.0547 1572 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
17:30:45.0641 1572 Rasl2tp - ok
17:30:45.0688 1572 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
17:30:45.0750 1572 RasMan - ok
17:30:45.0782 1572 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
17:30:45.0844 1572 RasPppoe - ok
17:30:45.0860 1572 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
17:30:45.0907 1572 RasSstp - ok
17:30:45.0954 1572 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
17:30:46.0032 1572 rdbss - ok
17:30:46.0063 1572 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
17:30:46.0125 1572 RDPCDD - ok
17:30:46.0219 1572 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
17:30:46.0297 1572 rdpdr - ok
17:30:46.0313 1572 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
17:30:46.0375 1572 RDPENCDD - ok
17:30:46.0454 1572 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
17:30:46.0500 1572 RDPWD - ok
17:30:46.0547 1572 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
17:30:46.0641 1572 RemoteAccess - ok
17:30:46.0688 1572 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
17:30:46.0766 1572 RemoteRegistry - ok
17:30:46.0797 1572 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
17:30:46.0860 1572 RpcLocator - ok
17:30:46.0922 1572 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
17:30:47.0000 1572 RpcSs - ok
17:30:47.0047 1572 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
17:30:47.0094 1572 rspndr - ok
17:30:47.0188 1572 [ 6D53F52B54BDE4D98C9820AAF883B758 ] RTL8187 C:\Windows\system32\DRIVERS\RTL8187.sys
17:30:47.0438 1572 RTL8187 - ok
17:30:47.0516 1572 [ AA786AD3A2684D39630744787B00E6F4 ] s3017bus C:\Windows\system32\DRIVERS\s3017bus.sys
17:30:47.0532 1572 s3017bus - ok
17:30:47.0610 1572 [ CBA4CA5BCE44084E98CE420FD6692D3A ] s3017mdfl C:\Windows\system32\DRIVERS\s3017mdfl.sys
17:30:47.0641 1572 s3017mdfl - ok
17:30:47.0672 1572 [ 68036EFF647970D6C0399789C8707CAD ] s3017mdm C:\Windows\system32\DRIVERS\s3017mdm.sys
17:30:47.0704 1572 s3017mdm - ok
17:30:47.0766 1572 [ 3672E7F9349BD98FD3F5AC33E7B2B1A6 ] s3017mgmt C:\Windows\system32\DRIVERS\s3017mgmt.sys
17:30:47.0797 1572 s3017mgmt - ok
17:30:47.0844 1572 [ B1133B37EB184AEF81D56B4302DBAE9C ] s3017nd5 C:\Windows\system32\DRIVERS\s3017nd5.sys
17:30:47.0860 1572 s3017nd5 - ok
17:30:47.0907 1572 [ D81B1D504AA1426622E7EC09F25130A9 ] s3017obex C:\Windows\system32\DRIVERS\s3017obex.sys
17:30:47.0938 1572 s3017obex - ok
17:30:47.0985 1572 [ 7B95C53EA8BB585013767EEF2875C0A0 ] s3017unic C:\Windows\system32\DRIVERS\s3017unic.sys
17:30:48.0016 1572 s3017unic - ok
17:30:48.0110 1572 [ 8143A0E902C2ADFB7B4903E231E348DE ] S3GIGP C:\Windows\system32\DRIVERS\VTGKModeDX32.sys
17:30:48.0204 1572 S3GIGP - ok
17:30:48.0235 1572 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
17:30:48.0266 1572 SamSs - ok
17:30:48.0313 1572 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
17:30:48.0344 1572 sbp2port - ok
17:30:48.0407 1572 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
17:30:48.0485 1572 SCardSvr - ok
17:30:48.0547 1572 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
17:30:48.0657 1572 Schedule - ok
17:30:48.0688 1572 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
17:30:48.0735 1572 SCPolicySvc - ok
17:30:48.0797 1572 [ 8F36B54688C31EED4580129040C6A3D3 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
17:30:48.0844 1572 sdbus - ok
17:30:48.0891 1572 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
17:30:48.0985 1572 SDRSVC - ok
17:30:49.0016 1572 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
17:30:49.0141 1572 secdrv - ok
17:30:49.0172 1572 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
17:30:49.0250 1572 seclogon - ok
17:30:49.0329 1572 [ E5B56569A9F79B70314FEDE6C953641E ] seehcri C:\Windows\system32\DRIVERS\seehcri.sys
17:30:49.0579 1572 seehcri - ok
17:30:49.0625 1572 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
17:30:49.0672 1572 SENS - ok
17:30:49.0704 1572 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
17:30:49.0813 1572 Serenum - ok
17:30:49.0844 1572 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
17:30:49.0938 1572 Serial - ok
17:30:49.0985 1572 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
17:30:50.0032 1572 sermouse - ok
17:30:50.0094 1572 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
17:30:50.0157 1572 SessionEnv - ok
17:30:50.0204 1572 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
17:30:50.0313 1572 sffdisk - ok
17:30:50.0344 1572 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
17:30:50.0438 1572 sffp_mmc - ok
17:30:50.0469 1572 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
17:30:50.0563 1572 sffp_sd - ok
17:30:50.0610 1572 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
17:30:50.0688 1572 sfloppy - ok
17:30:50.0735 1572 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
17:30:50.0813 1572 SharedAccess - ok
17:30:50.0875 1572 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:30:50.0954 1572 ShellHWDetection - ok
17:30:50.0985 1572 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
17:30:51.0016 1572 SiSRaid2 - ok
17:30:51.0047 1572 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
17:30:51.0063 1572 SiSRaid4 - ok
17:30:51.0235 1572 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
17:30:51.0454 1572 slsvc - ok
17:30:51.0485 1572 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
17:30:51.0563 1572 SLUINotify - ok
17:30:51.0610 1572 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
17:30:51.0657 1572 Smb - ok
17:30:51.0766 1572 [ 859E3ADC59D1C89A66AA6492C14D379E ] smserial C:\Windows\system32\DRIVERS\smserial.sys
17:30:51.0891 1572 smserial - ok
17:30:51.0938 1572 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
17:30:51.0985 1572 SNMPTRAP - ok
17:30:52.0016 1572 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
17:30:52.0047 1572 spldr - ok
17:30:52.0079 1572 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
17:30:52.0157 1572 Spooler - ok
17:30:52.0235 1572 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
17:30:52.0266 1572 srv - ok
17:30:52.0329 1572 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
17:30:52.0375 1572 srv2 - ok
17:30:52.0391 1572 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
17:30:52.0422 1572 srvnet - ok
17:30:52.0469 1572 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
17:30:52.0532 1572 SSDPSRV - ok
17:30:52.0547 1572 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
17:30:52.0594 1572 SstpSvc - ok
17:30:52.0657 1572 [ 359FEE084F1173FFFFD7F9CCBD43D47F ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
17:30:52.0688 1572 ssudmdm - ok
17:30:52.0766 1572 [ EF70B3D22B4BFFDA6EA851ECB063EFAA ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
17:30:52.0829 1572 StillCam - ok
17:30:52.0891 1572 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
17:30:52.0985 1572 stisvc - ok
17:30:53.0032 1572 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
17:30:53.0063 1572 swenum - ok
17:30:53.0125 1572 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
17:30:53.0219 1572 swprv - ok
17:30:53.0266 1572 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
17:30:53.0297 1572 Symc8xx - ok
17:30:53.0313 1572 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
17:30:53.0344 1572 Sym_hi - ok
17:30:53.0391 1572 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
17:30:53.0407 1572 Sym_u3 - ok
17:30:53.0469 1572 [ 9F24AB224E15F99F532A9A52C15BB7F8 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
17:30:53.0500 1572 SynTP - ok
17:30:53.0547 1572 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
17:30:53.0625 1572 SysMain - ok
17:30:53.0672 1572 SystemStoreService - ok
17:30:53.0719 1572 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:30:53.0766 1572 TabletInputService - ok
17:30:53.0813 1572 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
17:30:53.0860 1572 TapiSrv - ok
17:30:53.0907 1572 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
17:30:53.0954 1572 TBS - ok
17:30:54.0032 1572 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
17:30:54.0297 1572 Tcpip - ok
17:30:54.0344 1572 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
17:30:54.0422 1572 Tcpip6 - ok
17:30:54.0454 1572 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
17:30:54.0500 1572 tcpipreg - ok
17:30:54.0563 1572 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
17:30:54.0625 1572 TDPIPE - ok
17:30:54.0641 1572 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
17:30:54.0735 1572 TDTCP - ok
17:30:54.0766 1572 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
17:30:54.0860 1572 tdx - ok
17:30:54.0875 1572 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
17:30:54.0907 1572 TermDD - ok
17:30:54.0969 1572 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
17:30:55.0047 1572 TermService - ok
17:30:55.0079 1572 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
17:30:55.0125 1572 Themes - ok
17:30:55.0157 1572 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
17:30:55.0204 1572 THREADORDER - ok
17:30:55.0266 1572 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
17:30:55.0329 1572 TrkWks - ok
17:30:55.0391 1572 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:30:55.0454 1572 TrustedInstaller - ok
17:30:55.0516 1572 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
17:30:55.0594 1572 tssecsrv - ok
17:30:55.0641 1572 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
17:30:55.0688 1572 tunmp - ok
17:30:55.0719 1572 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
17:30:55.0766 1572 tunnel - ok
17:30:55.0813 1572 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
17:30:55.0844 1572 uagp35 - ok
17:30:55.0891 1572 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
17:30:55.0969 1572 udfs - ok
17:30:56.0047 1572 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
17:30:56.0094 1572 UI0Detect - ok
17:30:56.0141 1572 [ E384CAAAAEA853D1A468B03042488020 ] UimBus C:\Windows\system32\DRIVERS\UimBus.sys
17:30:56.0157 1572 UimBus - ok
17:30:56.0204 1572 [ 5AC3E388C0E029C8A8DD6B70D2DC625F ] Uim_IM C:\Windows\system32\Drivers\Uim_IM.sys
17:30:56.0250 1572 Uim_IM - ok
17:30:56.0282 1572 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
17:30:56.0329 1572 uliagpkx - ok
17:30:56.0360 1572 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
17:30:56.0391 1572 uliahci - ok
17:30:56.0438 1572 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
17:30:56.0469 1572 UlSata - ok
17:30:56.0500 1572 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
17:30:56.0532 1572 ulsata2 - ok
17:30:56.0547 1572 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
17:30:56.0641 1572 umbus - ok
17:30:56.0688 1572 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
17:30:56.0766 1572 upnphost - ok
17:30:56.0860 1572 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
17:30:56.0938 1572 usbccgp - ok
17:30:56.0969 1572 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
17:30:57.0079 1572 usbcir - ok
17:30:57.0110 1572 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
17:30:57.0172 1572 usbehci - ok
17:30:57.0235 1572 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
17:30:57.0297 1572 usbhub - ok
17:30:57.0313 1572 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
17:30:57.0407 1572 usbohci - ok
17:30:57.0438 1572 [ B51E52ACF758BE00EF3A58EA452FE360 ] usbprint C:\Windows\system32\drivers\usbprint.sys
17:30:57.0547 1572 usbprint - ok
17:30:57.0579 1572 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:30:57.0641 1572 USBSTOR - ok
17:30:57.0704 1572 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
17:30:57.0782 1572 usbuhci - ok
17:30:57.0813 1572 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
17:30:57.0891 1572 UxSms - ok
17:30:57.0938 1572 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
17:30:58.0032 1572 vds - ok
17:30:58.0079 1572 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
17:30:58.0204 1572 vga - ok
17:30:58.0250 1572 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
17:30:58.0297 1572 VgaSave - ok
17:30:58.0329 1572 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
17:30:58.0360 1572 viaagp - ok
17:30:58.0391 1572 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
17:30:58.0469 1572 ViaC7 - ok
17:30:58.0516 1572 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
17:30:58.0547 1572 viaide - ok
17:30:58.0579 1572 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
17:30:58.0610 1572 volmgr - ok
17:30:58.0641 1572 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
17:30:58.0688 1572 volmgrx - ok
17:30:58.0735 1572 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
17:30:58.0782 1572 volsnap - ok
17:30:58.0829 1572 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
17:30:58.0844 1572 vsmraid - ok
17:30:58.0922 1572 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
17:30:59.0047 1572 VSS - ok
17:30:59.0079 1572 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
17:30:59.0141 1572 W32Time - ok
17:30:59.0157 1572 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
17:30:59.0266 1572 WacomPen - ok
17:30:59.0297 1572 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
17:30:59.0344 1572 Wanarp - ok
17:30:59.0360 1572 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
17:30:59.0407 1572 Wanarpv6 - ok
17:30:59.0438 1572 [ 779F9C90D3FE9C70B6FFD8EF035F3E83 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll
17:30:59.0532 1572 WcesComm - ok
17:30:59.0594 1572 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
17:30:59.0657 1572 wcncsvc - ok
17:30:59.0704 1572 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:30:59.0782 1572 WcsPlugInService - ok
17:30:59.0813 1572 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
17:30:59.0844 1572 Wd - ok
17:30:59.0907 1572 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
17:30:59.0954 1572 Wdf01000 - ok
17:31:00.0032 1572 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
17:31:00.0110 1572 WdiServiceHost - ok
17:31:00.0125 1572 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
17:31:00.0188 1572 WdiSystemHost - ok
17:31:00.0235 1572 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
17:31:00.0297 1572 WebClient - ok
17:31:00.0329 1572 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
17:31:00.0422 1572 Wecsvc - ok
17:31:00.0454 1572 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
17:31:00.0500 1572 wercplsupport - ok
17:31:00.0547 1572 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
17:31:00.0610 1572 WerSvc - ok
17:31:00.0672 1572 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
17:31:00.0719 1572 WinDefend - ok
17:31:00.0735 1572 WinHttpAutoProxySvc - ok
17:31:00.0829 1572 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
17:31:00.0891 1572 Winmgmt - ok
17:31:00.0969 1572 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
17:31:01.0125 1572 WinRM - ok
17:31:01.0188 1572 [ 676F4B665BDD8053EAA53AC1695B8074 ] winusb C:\Windows\system32\DRIVERS\winusb.sys
17:31:01.0282 1572 winusb - ok
17:31:01.0375 1572 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
17:31:01.0469 1572 Wlansvc - ok
17:31:01.0610 1572 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:31:01.0735 1572 wlidsvc - ok
17:31:01.0782 1572 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
17:31:01.0829 1572 WmiAcpi - ok
17:31:01.0875 1572 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
17:31:01.0954 1572 wmiApSrv - ok
17:31:02.0047 1572 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
17:31:02.0141 1572 WMPNetworkSvc - ok
17:31:02.0204 1572 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
17:31:02.0297 1572 WPCSvc - ok
17:31:02.0329 1572 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
17:31:02.0391 1572 WPDBusEnum - ok
17:31:02.0422 1572 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
17:31:02.0485 1572 WpdUsb - ok
17:31:02.0641 1572 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:31:02.0719 1572 WPFFontCache_v0400 - ok
17:31:02.0766 1572 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
17:31:02.0813 1572 ws2ifsl - ok
17:31:02.0860 1572 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
17:31:02.0907 1572 wscsvc - ok
17:31:02.0938 1572 WSearch - ok
17:31:03.0079 1572 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
17:31:03.0235 1572 wuauserv - ok
17:31:03.0282 1572 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
17:31:03.0329 1572 WudfPf - ok
17:31:03.0375 1572 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
17:31:03.0422 1572 WUDFRd - ok
17:31:03.0454 1572 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
17:31:03.0516 1572 wudfsvc - ok
17:31:03.0563 1572 ================ Scan global ===============================
17:31:03.0610 1572 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
17:31:03.0657 1572 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:31:03.0704 1572 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:31:03.0766 1572 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
17:31:03.0782 1572 [Global] - ok
17:31:03.0782 1572 ================ Scan MBR ==================================
17:31:03.0813 1572 [ 4CE806218858FC122AC37B9867FBB926 ] \Device\Harddisk0\DR0
17:31:05.0266 1572 \Device\Harddisk0\DR0 - ok
17:31:05.0266 1572 ================ Scan VBR ==================================
17:31:05.0266 1572 [ 1C35C1D37235B537FA94E18C5DB437F2 ] \Device\Harddisk0\DR0\Partition1
17:31:05.0266 1572 \Device\Harddisk0\DR0\Partition1 - ok
17:31:05.0282 1572 ============================================================
17:31:05.0282 1572 Scan finished
17:31:05.0282 1572 ============================================================
17:31:05.0313 0448 Detected object count: 3
17:31:05.0313 0448 Actual detected object count: 3
17:31:48.0141 0448 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - skipped by user
17:31:48.0141 0448 FsUsbExDisk ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:31:48.0141 0448 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
17:31:48.0141 0448 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:31:48.0157 0448 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
17:31:48.0157 0448 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip

markusg · 19.06.2013, 18:46

Hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Reewee · 20.06.2013, 16:36

Hi, ich hatte extrem viele Fehlermeldungen. Die txt-Datei ist nicht erzeugt worden.
Und jetzt?

schrauber · 21.06.2013, 10:50

Hi,

Markus ist im Urlaub. Gibt es noch irgendwelche Probleme mit dem System?

Reewee · 21.06.2013, 11:44

Hi,
nein Probleme gibt es nicht. Ich bin nur überhaupt nicht sicher, ob der letzte Scan gelaufen ist weil ich keine Ergebnisdatei habe.

21.06.2013, 10:50	#14
schrauber /// the machine /// TB-Ausbilder	Weißer Bildschirm, nach "Meldung" vom BKA Hi, Markus ist im Urlaub. Gibt es noch irgendwelche Probleme mit dem System? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Weißer Bildschirm, nach "Meldung" vom BKA

Log-Analyse und Auswertung: Weißer Bildschirm, nach "Meldung" vom BKA