Seltsame Pop-Ups und Verlinkungen unter Chrome und IE. Virus?

Skyliner123 · 07.07.2013, 18:04

Hallo Community,

habe seit ein paar Tagen Probleme mit meinen Internet-Browsern. Ich verwende eigentlich nur Chrome, die Probleme existieren aber auch beim IE.

Das Problem: Von Zeit zu Zeit öffnen sich neue Popup-Fenster, die zu Umfragen über Google Chrome führen und bei Teilnahme Gutscheine von Amazon, Apple etc. versprechen. Man landet dort immer bei...
serve.bannersdontwork.com bzw. surveycentral.deadlyblessing.com/home.html

Desweiteren werden adressseitenunabhängig Links bei bestimmten Wörten in fließende Texte eingebaut. Wörter wie Poker, Casino, Trikot oder Hypertonus sind dann blau unterlegt und zeigen beim Überfahren mit der Maus Werbebildchen für die jeweilige Sache.

Danke schon mal im Voraus für etwaige Hilfe!

Gruß

markusg · 07.07.2013, 18:10

Hi,
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Skyliner123 · 07.07.2013, 18:24

Logfile im Anhang.

Edit: Datei ist mit 124kb zu groß. Was nun? Einfach reinkopieren?

markusg · 07.07.2013, 18:28

ja, logs immer reinkopieren, nur fals zu groß zum posten anhängen, bzw packen und anhängen

Skyliner123 · 07.07.2013, 18:31

19:17:11.0341 1600 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:17:11.0643 1600 ============================================================
19:17:11.0643 1600 Current date / time: 2013/07/07 19:17:11.0643
19:17:11.0643 1600 SystemInfo:
19:17:11.0643 1600
19:17:11.0643 1600 OS Version: 6.1.7601 ServicePack: 1.0
19:17:11.0643 1600 Product type: Workstation
19:17:11.0643 1600 ComputerName: HENNING-PC
19:17:11.0643 1600 UserName: Henning
19:17:11.0643 1600 Windows directory: C:\Windows
19:17:11.0643 1600 System windows directory: C:\Windows
19:17:11.0643 1600 Running under WOW64
19:17:11.0643 1600 Processor architecture: Intel x64
19:17:11.0643 1600 Number of processors: 8
19:17:11.0643 1600 Page size: 0x1000
19:17:11.0643 1600 Boot type: Normal boot
19:17:11.0643 1600 ============================================================
19:17:13.0184 1600 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:17:13.0188 1600 ============================================================
19:17:13.0188 1600 \Device\Harddisk0\DR0:
19:17:13.0188 1600 MBR partitions:
19:17:13.0188 1600 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:17:13.0188 1600 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x4A825000
19:17:13.0188 1600 ============================================================
19:17:13.0226 1600 C: <-> \Device\Harddisk0\DR0\Partition2
19:17:13.0227 1600 ============================================================
19:17:13.0227 1600 Initialize success
19:17:13.0227 1600 ============================================================
19:17:34.0089 2680 ============================================================
19:17:34.0089 2680 Scan started
19:17:34.0089 2680 Mode: Manual; SigCheck; TDLFS;
19:17:34.0089 2680 ============================================================
19:17:34.0383 2680 ================ Scan system memory ========================
19:17:34.0383 2680 System memory - ok
19:17:34.0384 2680 ================ Scan services =============================
19:17:34.0539 2680 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
19:17:34.0625 2680 1394ohci - ok
19:17:34.0749 2680 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
19:17:34.0856 2680 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
19:17:34.0929 2680 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
19:17:34.0994 2680 ACPI - ok
19:17:35.0021 2680 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
19:17:35.0072 2680 AcpiPmi - ok
19:17:35.0113 2680 [ 8B46D5A1D3EF08232C04D0EAFB871FB2 ] Adobe LM Service C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
19:17:35.0131 2680 Adobe LM Service ( UnsignedFile.Multi.Generic ) - warning
19:17:35.0131 2680 Adobe LM Service - detected UnsignedFile.Multi.Generic (1)
19:17:35.0257 2680 [ 41D15EAD554396BF35B7C5246AD47A28 ] Adobe Version Cue CS2 c:\Photoshop\Adobe Version Cue CS2\bin\VersionCueCS2.exe
19:17:35.0270 2680 Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - warning
19:17:35.0270 2680 Adobe Version Cue CS2 - detected UnsignedFile.Multi.Generic (1)
19:17:35.0348 2680 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:17:35.0372 2680 AdobeARMservice - ok
19:17:35.0462 2680 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:17:35.0491 2680 AdobeFlashPlayerUpdateSvc - ok
19:17:35.0549 2680 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:17:35.0581 2680 adp94xx - ok
19:17:35.0625 2680 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:17:35.0660 2680 adpahci - ok
19:17:35.0698 2680 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:17:35.0723 2680 adpu320 - ok
19:17:35.0754 2680 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:17:35.0870 2680 AeLookupSvc - ok
19:17:35.0916 2680 [ 0517E1670A58213E3F206066CD209273 ] AF15BDA C:\Windows\system32\DRIVERS\AF15BDA.sys
19:17:35.0947 2680 AF15BDA - ok
19:17:36.0007 2680 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
19:17:36.0064 2680 AFD - ok
19:17:36.0101 2680 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:17:36.0118 2680 agp440 - ok
19:17:36.0159 2680 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
19:17:36.0193 2680 ALG - ok
19:17:36.0212 2680 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
19:17:36.0227 2680 aliide - ok
19:17:36.0243 2680 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
19:17:36.0258 2680 amdide - ok
19:17:36.0292 2680 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:17:36.0310 2680 AmdK8 - ok
19:17:36.0327 2680 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
19:17:36.0346 2680 AmdPPM - ok
19:17:36.0386 2680 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
19:17:36.0411 2680 amdsata - ok
19:17:36.0444 2680 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
19:17:36.0472 2680 amdsbs - ok
19:17:36.0499 2680 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
19:17:36.0521 2680 amdxata - ok
19:17:36.0546 2680 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
19:17:36.0686 2680 AppID - ok
19:17:36.0733 2680 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
19:17:36.0788 2680 AppIDSvc - ok
19:17:36.0829 2680 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
19:17:36.0864 2680 Appinfo - ok
19:17:36.0894 2680 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
19:17:36.0915 2680 arc - ok
19:17:36.0943 2680 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:17:36.0955 2680 arcsas - ok
19:17:37.0084 2680 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:17:37.0104 2680 aspnet_state - ok
19:17:37.0140 2680 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:17:37.0192 2680 AsyncMac - ok
19:17:37.0215 2680 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
19:17:37.0222 2680 atapi - ok
19:17:37.0269 2680 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:17:37.0306 2680 AudioEndpointBuilder - ok
19:17:37.0315 2680 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
19:17:37.0348 2680 AudioSrv - ok
19:17:37.0373 2680 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
19:17:37.0441 2680 AxInstSV - ok
19:17:37.0478 2680 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
19:17:37.0519 2680 b06bdrv - ok
19:17:37.0564 2680 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
19:17:37.0596 2680 b57nd60a - ok
19:17:37.0627 2680 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
19:17:37.0656 2680 BDESVC - ok
19:17:37.0685 2680 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
19:17:37.0738 2680 Beep - ok
19:17:37.0788 2680 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
19:17:37.0850 2680 BFE - ok
19:17:37.0894 2680 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
19:17:37.0946 2680 BITS - ok
19:17:37.0973 2680 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
19:17:37.0990 2680 blbdrive - ok
19:17:38.0024 2680 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:17:38.0068 2680 bowser - ok
19:17:38.0087 2680 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
19:17:38.0104 2680 BrFiltLo - ok
19:17:38.0108 2680 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
19:17:38.0122 2680 BrFiltUp - ok
19:17:38.0157 2680 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
19:17:38.0174 2680 Browser - ok
19:17:38.0191 2680 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
19:17:38.0219 2680 Brserid - ok
19:17:38.0251 2680 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
19:17:38.0262 2680 BrSerWdm - ok
19:17:38.0265 2680 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
19:17:38.0277 2680 BrUsbMdm - ok
19:17:38.0293 2680 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
19:17:38.0302 2680 BrUsbSer - ok
19:17:38.0306 2680 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:17:38.0324 2680 BTHMODEM - ok
19:17:38.0342 2680 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
19:17:38.0371 2680 bthserv - ok
19:17:38.0388 2680 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:17:38.0428 2680 cdfs - ok
19:17:38.0471 2680 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:17:38.0510 2680 cdrom - ok
19:17:38.0546 2680 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
19:17:38.0614 2680 CertPropSvc - ok
19:17:38.0631 2680 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
19:17:38.0643 2680 circlass - ok
19:17:38.0678 2680 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
19:17:38.0693 2680 CLFS - ok
19:17:38.0750 2680 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:17:38.0774 2680 clr_optimization_v2.0.50727_32 - ok
19:17:38.0821 2680 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:17:38.0844 2680 clr_optimization_v2.0.50727_64 - ok
19:17:38.0912 2680 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:17:38.0934 2680 clr_optimization_v4.0.30319_32 - ok
19:17:38.0960 2680 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:17:38.0976 2680 clr_optimization_v4.0.30319_64 - ok
19:17:39.0000 2680 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:17:39.0027 2680 CmBatt - ok
19:17:39.0036 2680 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:17:39.0049 2680 cmdide - ok
19:17:39.0091 2680 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
19:17:39.0112 2680 CNG - ok
19:17:39.0143 2680 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:17:39.0151 2680 Compbatt - ok
19:17:39.0167 2680 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
19:17:39.0194 2680 CompositeBus - ok
19:17:39.0208 2680 COMSysApp - ok
19:17:39.0253 2680 [ DF3E8C2C443D3618260DFF5705CE2DF5 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
19:17:39.0267 2680 cphs - ok
19:17:39.0297 2680 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:17:39.0306 2680 crcdisk - ok
19:17:39.0349 2680 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:17:39.0380 2680 CryptSvc - ok
19:17:39.0422 2680 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:17:39.0470 2680 DcomLaunch - ok
19:17:39.0493 2680 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
19:17:39.0537 2680 defragsvc - ok
19:17:39.0548 2680 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:17:39.0582 2680 DfsC - ok
19:17:39.0616 2680 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
19:17:39.0636 2680 Dhcp - ok
19:17:39.0700 2680 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
19:17:39.0750 2680 discache - ok
19:17:39.0790 2680 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
19:17:39.0799 2680 Disk - ok
19:17:39.0834 2680 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:17:39.0868 2680 Dnscache - ok
19:17:39.0904 2680 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:17:39.0957 2680 dot3svc - ok
19:17:39.0965 2680 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
19:17:39.0993 2680 DPS - ok
19:17:40.0016 2680 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:17:40.0027 2680 drmkaud - ok
19:17:40.0066 2680 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:17:40.0108 2680 DXGKrnl - ok
19:17:40.0145 2680 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
19:17:40.0176 2680 EapHost - ok
19:17:40.0349 2680 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
19:17:40.0485 2680 ebdrv - ok
19:17:40.0517 2680 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
19:17:40.0572 2680 EFS - ok
19:17:40.0650 2680 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:17:40.0693 2680 ehRecvr - ok
19:17:40.0723 2680 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
19:17:40.0738 2680 ehSched - ok
19:17:40.0824 2680 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:17:40.0859 2680 elxstor - ok
19:17:40.0870 2680 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:17:40.0895 2680 ErrDev - ok
19:17:40.0939 2680 [ 3BB2C05D9A515601E85DBF353369E672 ] ETD C:\Windows\system32\DRIVERS\ETD.sys
19:17:40.0968 2680 ETD - ok
19:17:41.0004 2680 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
19:17:41.0049 2680 EventSystem - ok
19:17:41.0074 2680 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
19:17:41.0116 2680 exfat - ok
19:17:41.0143 2680 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:17:41.0203 2680 fastfat - ok
19:17:41.0251 2680 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
19:17:41.0294 2680 Fax - ok
19:17:41.0313 2680 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
19:17:41.0345 2680 fdc - ok
19:17:41.0385 2680 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
19:17:41.0460 2680 fdPHost - ok
19:17:41.0463 2680 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
19:17:41.0491 2680 FDResPub - ok
19:17:41.0531 2680 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:17:41.0539 2680 FileInfo - ok
19:17:41.0551 2680 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:17:41.0585 2680 Filetrace - ok
19:17:41.0604 2680 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
19:17:41.0620 2680 flpydisk - ok
19:17:41.0637 2680 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:17:41.0650 2680 FltMgr - ok
19:17:41.0718 2680 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
19:17:41.0769 2680 FontCache - ok
19:17:41.0803 2680 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:17:41.0812 2680 FontCache3.0.0.0 - ok
19:17:41.0842 2680 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
19:17:41.0862 2680 FsDepends - ok
19:17:41.0894 2680 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:17:41.0909 2680 Fs_Rec - ok
19:17:41.0943 2680 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
19:17:41.0978 2680 fvevol - ok
19:17:41.0999 2680 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:17:42.0012 2680 gagp30kx - ok
19:17:42.0039 2680 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
19:17:42.0088 2680 gpsvc - ok
19:17:42.0119 2680 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
19:17:42.0150 2680 hcw85cir - ok
19:17:42.0190 2680 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:17:42.0238 2680 HdAudAddService - ok
19:17:42.0259 2680 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:17:42.0290 2680 HDAudBus - ok
19:17:42.0318 2680 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
19:17:42.0347 2680 HidBatt - ok
19:17:42.0358 2680 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:17:42.0375 2680 HidBth - ok
19:17:42.0406 2680 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
19:17:42.0434 2680 HidIr - ok
19:17:42.0450 2680 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
19:17:42.0482 2680 hidserv - ok
19:17:42.0514 2680 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:17:42.0523 2680 HidUsb - ok
19:17:42.0546 2680 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:17:42.0574 2680 hkmsvc - ok
19:17:42.0592 2680 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
19:17:42.0608 2680 HomeGroupListener - ok
19:17:42.0639 2680 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
19:17:42.0652 2680 HomeGroupProvider - ok
19:17:42.0680 2680 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
19:17:42.0707 2680 HpSAMD - ok
19:17:42.0756 2680 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:17:42.0818 2680 HTTP - ok
19:17:42.0838 2680 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
19:17:42.0846 2680 hwpolicy - ok
19:17:42.0861 2680 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:17:42.0872 2680 i8042prt - ok
19:17:42.0904 2680 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
19:17:42.0919 2680 iaStorV - ok
19:17:43.0035 2680 [ F85EB9654B4C771470CD13A0A170D3B9 ] IBUpdaterService C:\Windows\system32\dmwu.exe
19:17:43.0078 2680 IBUpdaterService - ok
19:17:43.0140 2680 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:17:43.0175 2680 idsvc - ok
19:17:43.0470 2680 [ 276EE9CDAB16C50E1DF0E4CEFA882F5F ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
19:17:43.0864 2680 igfx - ok
19:17:43.0890 2680 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:17:43.0899 2680 iirsp - ok
19:17:43.0939 2680 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
19:17:43.0978 2680 IKEEXT - ok
19:17:44.0006 2680 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
19:17:44.0014 2680 intelide - ok
19:17:44.0038 2680 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:17:44.0055 2680 intelppm - ok
19:17:44.0084 2680 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:17:44.0134 2680 IPBusEnum - ok
19:17:44.0144 2680 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:17:44.0172 2680 IpFilterDriver - ok
19:17:44.0222 2680 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:17:44.0255 2680 iphlpsvc - ok
19:17:44.0289 2680 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
19:17:44.0306 2680 IPMIDRV - ok
19:17:44.0322 2680 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
19:17:44.0368 2680 IPNAT - ok
19:17:44.0400 2680 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:17:44.0414 2680 IRENUM - ok
19:17:44.0433 2680 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:17:44.0441 2680 isapnp - ok
19:17:44.0458 2680 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
19:17:44.0470 2680 iScsiPrt - ok
19:17:44.0489 2680 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:17:44.0498 2680 kbdclass - ok
19:17:44.0516 2680 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:17:44.0526 2680 kbdhid - ok
19:17:44.0550 2680 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
19:17:44.0560 2680 KeyIso - ok
19:17:44.0573 2680 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:17:44.0583 2680 KSecDD - ok
19:17:44.0599 2680 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
19:17:44.0609 2680 KSecPkg - ok
19:17:44.0622 2680 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
19:17:44.0661 2680 ksthunk - ok
19:17:44.0687 2680 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
19:17:44.0720 2680 KtmRm - ok
19:17:44.0756 2680 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
19:17:44.0801 2680 LanmanServer - ok
19:17:44.0824 2680 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:17:44.0853 2680 LanmanWorkstation - ok
19:17:44.0882 2680 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:17:44.0922 2680 lltdio - ok
19:17:44.0956 2680 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:17:45.0015 2680 lltdsvc - ok
19:17:45.0036 2680 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:17:45.0094 2680 lmhosts - ok
19:17:45.0131 2680 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:17:45.0141 2680 LSI_FC - ok
19:17:45.0148 2680 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:17:45.0158 2680 LSI_SAS - ok
19:17:45.0169 2680 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
19:17:45.0178 2680 LSI_SAS2 - ok
19:17:45.0203 2680 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:17:45.0213 2680 LSI_SCSI - ok
19:17:45.0236 2680 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
19:17:45.0277 2680 luafv - ok
19:17:45.0306 2680 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:17:45.0319 2680 Mcx2Svc - ok
19:17:45.0346 2680 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
19:17:45.0354 2680 megasas - ok
19:17:45.0386 2680 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
19:17:45.0399 2680 MegaSR - ok
19:17:45.0438 2680 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
19:17:45.0446 2680 MEIx64 - ok
19:17:45.0477 2680 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
19:17:45.0506 2680 MMCSS - ok
19:17:45.0526 2680 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
19:17:45.0554 2680 Modem - ok
19:17:45.0573 2680 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:17:45.0592 2680 monitor - ok
19:17:45.0612 2680 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:17:45.0620 2680 mouclass - ok
19:17:45.0654 2680 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:17:45.0680 2680 mouhid - ok
19:17:45.0717 2680 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
19:17:45.0733 2680 mountmgr - ok
19:17:45.0801 2680 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
19:17:45.0835 2680 MpFilter - ok
19:17:45.0848 2680 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
19:17:45.0861 2680 mpio - ok
19:17:45.0889 2680 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:17:45.0917 2680 mpsdrv - ok
19:17:45.0946 2680 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
19:17:45.0985 2680 MpsSvc - ok
19:17:45.0994 2680 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:17:46.0009 2680 MRxDAV - ok
19:17:46.0036 2680 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:17:46.0089 2680 mrxsmb - ok
19:17:46.0123 2680 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:17:46.0152 2680 mrxsmb10 - ok
19:17:46.0163 2680 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:17:46.0173 2680 mrxsmb20 - ok
19:17:46.0193 2680 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
19:17:46.0201 2680 msahci - ok
19:17:46.0217 2680 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:17:46.0227 2680 msdsm - ok
19:17:46.0242 2680 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
19:17:46.0254 2680 MSDTC - ok
19:17:46.0284 2680 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:17:46.0312 2680 Msfs - ok
19:17:46.0340 2680 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
19:17:46.0369 2680 mshidkmdf - ok
19:17:46.0376 2680 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:17:46.0384 2680 msisadrv - ok
19:17:46.0418 2680 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:17:46.0447 2680 MSiSCSI - ok
19:17:46.0450 2680 msiserver - ok
19:17:46.0477 2680 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:17:46.0505 2680 MSKSSRV - ok
19:17:46.0573 2680 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe
19:17:46.0602 2680 MsMpSvc - ok
19:17:46.0641 2680 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:17:46.0710 2680 MSPCLOCK - ok
19:17:46.0718 2680 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:17:46.0745 2680 MSPQM - ok
19:17:46.0772 2680 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:17:46.0787 2680 MsRPC - ok
19:17:46.0804 2680 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:17:46.0812 2680 mssmbios - ok
19:17:46.0834 2680 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:17:46.0862 2680 MSTEE - ok
19:17:46.0878 2680 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
19:17:46.0888 2680 MTConfig - ok
19:17:46.0898 2680 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
19:17:46.0907 2680 Mup - ok
19:17:46.0937 2680 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
19:17:46.0989 2680 napagent - ok
19:17:47.0018 2680 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:17:47.0041 2680 NativeWifiP - ok
19:17:47.0087 2680 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:17:47.0128 2680 NDIS - ok
19:17:47.0164 2680 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
19:17:47.0192 2680 NdisCap - ok
19:17:47.0219 2680 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:17:47.0248 2680 NdisTapi - ok
19:17:47.0258 2680 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:17:47.0301 2680 Ndisuio - ok
19:17:47.0325 2680 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:17:47.0367 2680 NdisWan - ok
19:17:47.0385 2680 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:17:47.0420 2680 NDProxy - ok
19:17:47.0453 2680 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:17:47.0497 2680 NetBIOS - ok
19:17:47.0515 2680 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
19:17:47.0545 2680 NetBT - ok
19:17:47.0561 2680 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
19:17:47.0570 2680 Netlogon - ok
19:17:47.0610 2680 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
19:17:47.0671 2680 Netman - ok
19:17:47.0701 2680 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:17:47.0709 2680 NetMsmqActivator - ok
19:17:47.0712 2680 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:17:47.0720 2680 NetPipeActivator - ok
19:17:47.0747 2680 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
19:17:47.0781 2680 netprofm - ok
19:17:47.0801 2680 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:17:47.0809 2680 NetTcpActivator - ok
19:17:47.0812 2680 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:17:47.0819 2680 NetTcpPortSharing - ok
19:17:48.0060 2680 [ B51E9AD4F4E4F8DBE0AB882756BC5DAB ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys
19:17:48.0341 2680 NETwNs64 - ok
19:17:48.0374 2680 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:17:48.0382 2680 nfrd960 - ok
19:17:48.0444 2680 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
19:17:48.0471 2680 NisDrv - ok
19:17:48.0486 2680 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe
19:17:48.0502 2680 NisSrv - ok
19:17:48.0536 2680 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:17:48.0564 2680 NlaSvc - ok
19:17:48.0584 2680 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:17:48.0613 2680 Npfs - ok
19:17:48.0644 2680 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
19:17:48.0693 2680 nsi - ok
19:17:48.0698 2680 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:17:48.0739 2680 nsiproxy - ok
19:17:48.0790 2680 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:17:48.0827 2680 Ntfs - ok
19:17:48.0849 2680 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
19:17:48.0905 2680 Null - ok
19:17:49.0160 2680 [ 0EB204639119370F5F8F2871FBF4E14B ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
19:17:49.0502 2680 nvlddmkm - ok
19:17:49.0528 2680 [ 3629B8C7257C6231A3CFB44359C68B1D ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
19:17:49.0535 2680 nvpciflt - ok
19:17:49.0564 2680 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:17:49.0575 2680 nvraid - ok
19:17:49.0594 2680 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:17:49.0605 2680 nvstor - ok
19:17:49.0654 2680 [ 32FF8EE6DCEE5C0CB91FF892FB1CA364 ] nvsvc C:\Windows\system32\nvvsvc.exe
19:17:49.0683 2680 nvsvc - ok
19:17:49.0714 2680 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:17:49.0724 2680 nv_agp - ok
19:17:49.0740 2680 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
19:17:49.0751 2680 ohci1394 - ok
19:17:49.0842 2680 [ EC322186D8FCE3D632F3F597D67747DD ] OpenVPNService C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
19:17:49.0863 2680 OpenVPNService ( UnsignedFile.Multi.Generic ) - warning
19:17:49.0863 2680 OpenVPNService - detected UnsignedFile.Multi.Generic (1)
19:17:49.0916 2680 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:17:49.0940 2680 ose - ok
19:17:50.0072 2680 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:17:50.0231 2680 osppsvc - ok
19:17:50.0262 2680 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
19:17:50.0280 2680 p2pimsvc - ok
19:17:50.0310 2680 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
19:17:50.0325 2680 p2psvc - ok
19:17:50.0356 2680 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
19:17:50.0384 2680 Parport - ok
19:17:50.0414 2680 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:17:50.0437 2680 partmgr - ok
19:17:50.0470 2680 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
19:17:50.0495 2680 PcaSvc - ok
19:17:50.0523 2680 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
19:17:50.0540 2680 pci - ok
19:17:50.0557 2680 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
19:17:50.0569 2680 pciide - ok
19:17:50.0582 2680 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:17:50.0599 2680 pcmcia - ok
19:17:50.0621 2680 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
19:17:50.0630 2680 pcw - ok
19:17:50.0652 2680 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:17:50.0696 2680 PEAUTH - ok
19:17:50.0717 2680 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
19:17:50.0727 2680 PerfHost - ok
19:17:50.0778 2680 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
19:17:50.0823 2680 pla - ok
19:17:50.0859 2680 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:17:50.0880 2680 PlugPlay - ok
19:17:50.0902 2680 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
19:17:50.0911 2680 PNRPAutoReg - ok
19:17:50.0929 2680 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
19:17:50.0941 2680 PNRPsvc - ok
19:17:50.0972 2680 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:17:51.0006 2680 PolicyAgent - ok
19:17:51.0025 2680 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
19:17:51.0055 2680 Power - ok
19:17:51.0085 2680 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:17:51.0119 2680 PptpMiniport - ok
19:17:51.0137 2680 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
19:17:51.0147 2680 Processor - ok
19:17:51.0170 2680 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
19:17:51.0196 2680 ProfSvc - ok
19:17:51.0205 2680 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
19:17:51.0214 2680 ProtectedStorage - ok
19:17:51.0241 2680 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
19:17:51.0304 2680 Psched - ok
19:17:51.0365 2680 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:17:51.0414 2680 ql2300 - ok
19:17:51.0425 2680 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:17:51.0435 2680 ql40xx - ok
19:17:51.0459 2680 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
19:17:51.0476 2680 QWAVE - ok
19:17:51.0500 2680 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:17:51.0514 2680 QWAVEdrv - ok
19:17:51.0528 2680 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:17:51.0556 2680 RasAcd - ok
19:17:51.0580 2680 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
19:17:51.0609 2680 RasAgileVpn - ok
19:17:51.0631 2680 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
19:17:51.0661 2680 RasAuto - ok
19:17:51.0690 2680 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:17:51.0726 2680 Rasl2tp - ok
19:17:51.0759 2680 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
19:17:51.0791 2680 RasMan - ok
19:17:51.0809 2680 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:17:51.0847 2680 RasPppoe - ok
19:17:51.0862 2680 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:17:51.0900 2680 RasSstp - ok
19:17:51.0914 2680 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:17:51.0956 2680 rdbss - ok
19:17:51.0988 2680 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
19:17:51.0999 2680 rdpbus - ok
19:17:52.0024 2680 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:17:52.0052 2680 RDPCDD - ok
19:17:52.0060 2680 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:17:52.0098 2680 RDPENCDD - ok
19:17:52.0115 2680 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
19:17:52.0151 2680 RDPREFMP - ok
19:17:52.0175 2680 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:17:52.0216 2680 RDPWD - ok
19:17:52.0252 2680 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
19:17:52.0281 2680 rdyboost - ok
19:17:52.0311 2680 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:17:52.0357 2680 RemoteAccess - ok
19:17:52.0377 2680 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:17:52.0408 2680 RemoteRegistry - ok
19:17:52.0415 2680 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
19:17:52.0453 2680 RpcEptMapper - ok
19:17:52.0478 2680 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
19:17:52.0487 2680 RpcLocator - ok
19:17:52.0525 2680 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
19:17:52.0571 2680 RpcSs - ok
19:17:52.0609 2680 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:17:52.0656 2680 rspndr - ok
19:17:52.0694 2680 [ F4C374B1C46DE294B573BB43723AC3F6 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
19:17:52.0729 2680 RTL8167 - ok
19:17:52.0758 2680 [ 62DB6CC4B0818F1B5F3441241B098F12 ] SABI C:\Windows\system32\Drivers\SABI.sys
19:17:52.0785 2680 SABI - ok
19:17:52.0805 2680 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
19:17:52.0819 2680 SamSs - ok
19:17:52.0831 2680 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:17:52.0845 2680 sbp2port - ok
19:17:52.0873 2680 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:17:52.0903 2680 SCardSvr - ok
19:17:52.0925 2680 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
19:17:52.0951 2680 scfilter - ok
19:17:52.0992 2680 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
19:17:53.0035 2680 Schedule - ok
19:17:53.0056 2680 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
19:17:53.0084 2680 SCPolicySvc - ok
19:17:53.0104 2680 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:17:53.0115 2680 SDRSVC - ok
19:17:53.0148 2680 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
19:17:53.0212 2680 secdrv - ok
19:17:53.0233 2680 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
19:17:53.0261 2680 seclogon - ok
19:17:53.0286 2680 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
19:17:53.0315 2680 SENS - ok
19:17:53.0333 2680 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
19:17:53.0352 2680 SensrSvc - ok
19:17:53.0360 2680 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
19:17:53.0370 2680 Serenum - ok
19:17:53.0403 2680 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
19:17:53.0414 2680 Serial - ok
19:17:53.0426 2680 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:17:53.0436 2680 sermouse - ok
19:17:53.0452 2680 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
19:17:53.0481 2680 SessionEnv - ok
19:17:53.0509 2680 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:17:53.0540 2680 sffdisk - ok
19:17:53.0542 2680 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:17:53.0553 2680 sffp_mmc - ok
19:17:53.0556 2680 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:17:53.0567 2680 sffp_sd - ok
19:17:53.0576 2680 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
19:17:53.0585 2680 sfloppy - ok
19:17:53.0613 2680 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:17:53.0646 2680 SharedAccess - ok
19:17:53.0669 2680 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:17:53.0701 2680 ShellHWDetection - ok
19:17:53.0725 2680 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
19:17:53.0734 2680 SiSRaid2 - ok
19:17:53.0746 2680 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:17:53.0755 2680 SiSRaid4 - ok
19:17:53.0792 2680 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:17:53.0821 2680 Smb - ok
19:17:53.0856 2680 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:17:53.0867 2680 SNMPTRAP - ok
19:17:53.0877 2680 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
19:17:53.0885 2680 spldr - ok
19:17:53.0914 2680 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
19:17:53.0931 2680 Spooler - ok
19:17:54.0034 2680 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
19:17:54.0148 2680 sppsvc - ok
19:17:54.0159 2680 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
19:17:54.0188 2680 sppuinotify - ok
19:17:54.0220 2680 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
19:17:54.0257 2680 srv - ok
19:17:54.0285 2680 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:17:54.0324 2680 srv2 - ok
19:17:54.0343 2680 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:17:54.0361 2680 srvnet - ok
19:17:54.0390 2680 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:17:54.0441 2680 SSDPSRV - ok
19:17:54.0457 2680 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:17:54.0486 2680 SstpSvc - ok
19:17:54.0502 2680 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
19:17:54.0511 2680 stexstor - ok
19:17:54.0557 2680 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
19:17:54.0600 2680 stisvc - ok
19:17:54.0633 2680 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:17:54.0651 2680 swenum - ok
19:17:54.0680 2680 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
19:17:54.0723 2680 swprv - ok
19:17:54.0788 2680 [ 8DF6C536ECE3B538978B53C223AB905D ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
19:17:54.0830 2680 SynTP - ok
19:17:54.0888 2680 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
19:17:54.0926 2680 SysMain - ok
19:17:54.0936 2680 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:17:54.0951 2680 TabletInputService - ok
19:17:54.0978 2680 [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901 C:\Windows\system32\DRIVERS\tap0901.sys
19:17:55.0002 2680 tap0901 - ok
19:17:55.0025 2680 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:17:55.0057 2680 TapiSrv - ok
19:17:55.0072 2680 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
19:17:55.0101 2680 TBS - ok
19:17:55.0193 2680 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:17:55.0239 2680 Tcpip - ok
19:17:55.0308 2680 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
19:17:55.0346 2680 TCPIP6 - ok
19:17:55.0377 2680 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:17:55.0399 2680 tcpipreg - ok
19:17:55.0428 2680 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:17:55.0450 2680 TDPIPE - ok
19:17:55.0464 2680 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:17:55.0473 2680 TDTCP - ok
19:17:55.0500 2680 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:17:55.0540 2680 tdx - ok
19:17:55.0670 2680 [ A4D2CE94B028EF1E437CF4AC3D8FF26C ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
19:17:55.0720 2680 TeamViewer7 - ok
19:17:55.0735 2680 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:17:55.0744 2680 TermDD - ok
19:17:55.0776 2680 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
19:17:55.0827 2680 TermService - ok
19:17:55.0839 2680 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
19:17:55.0854 2680 Themes - ok
19:17:55.0865 2680 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
19:17:55.0893 2680 THREADORDER - ok
19:17:55.0911 2680 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
19:17:55.0947 2680 TrkWks - ok
19:17:55.0988 2680 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:17:56.0016 2680 TrustedInstaller - ok
19:17:56.0038 2680 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:17:56.0065 2680 tssecsrv - ok
19:17:56.0101 2680 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
19:17:56.0121 2680 TsUsbFlt - ok
19:17:56.0124 2680 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
19:17:56.0133 2680 TsUsbGD - ok
19:17:56.0158 2680 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:17:56.0196 2680 tunnel - ok
19:17:56.0205 2680 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:17:56.0214 2680 uagp35 - ok
19:17:56.0235 2680 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:17:56.0266 2680 udfs - ok
19:17:56.0296 2680 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:17:56.0320 2680 UI0Detect - ok
19:17:56.0346 2680 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:17:56.0361 2680 uliagpkx - ok
19:17:56.0397 2680 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:17:56.0427 2680 umbus - ok
19:17:56.0438 2680 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
19:17:56.0453 2680 UmPass - ok
19:17:56.0473 2680 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
19:17:56.0514 2680 upnphost - ok
19:17:56.0534 2680 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:17:56.0563 2680 usbccgp - ok
19:17:56.0589 2680 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:17:56.0601 2680 usbcir - ok
19:17:56.0624 2680 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
19:17:56.0644 2680 usbehci - ok
19:17:56.0674 2680 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:17:56.0688 2680 usbhub - ok
19:17:56.0706 2680 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:17:56.0716 2680 usbohci - ok
19:17:56.0755 2680 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:17:56.0785 2680 usbprint - ok
19:17:56.0817 2680 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
19:17:56.0834 2680 usbscan - ok
19:17:56.0859 2680 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:17:56.0885 2680 USBSTOR - ok
19:17:56.0899 2680 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
19:17:56.0913 2680 usbuhci - ok
19:17:56.0945 2680 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:17:56.0966 2680 usbvideo - ok
19:17:56.0990 2680 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
19:17:57.0029 2680 UxSms - ok
19:17:57.0039 2680 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
19:17:57.0048 2680 VaultSvc - ok
19:17:57.0070 2680 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
19:17:57.0078 2680 vdrvroot - ok
19:17:57.0122 2680 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
19:17:57.0177 2680 vds - ok
19:17:57.0203 2680 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:17:57.0215 2680 vga - ok
19:17:57.0224 2680 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
19:17:57.0263 2680 VgaSave - ok
19:17:57.0275 2680 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
19:17:57.0286 2680 vhdmp - ok
19:17:57.0304 2680 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
19:17:57.0312 2680 viaide - ok
19:17:57.0331 2680 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:17:57.0340 2680 volmgr - ok
19:17:57.0360 2680 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:17:57.0373 2680 volmgrx - ok
19:17:57.0404 2680 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:17:57.0435 2680 volsnap - ok
19:17:57.0454 2680 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:17:57.0467 2680 vsmraid - ok
19:17:57.0530 2680 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
19:17:57.0588 2680 VSS - ok
19:17:57.0606 2680 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
19:17:57.0617 2680 vwifibus - ok
19:17:57.0645 2680 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
19:17:57.0690 2680 vwififlt - ok
19:17:57.0717 2680 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
19:17:57.0783 2680 W32Time - ok
19:17:57.0806 2680 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:17:57.0816 2680 WacomPen - ok
19:17:57.0848 2680 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
19:17:57.0889 2680 WANARP - ok
19:17:57.0892 2680 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:17:57.0920 2680 Wanarpv6 - ok
19:17:57.0970 2680 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
19:17:58.0002 2680 wbengine - ok
19:17:58.0016 2680 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
19:17:58.0032 2680 WbioSrvc - ok
19:17:58.0053 2680 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:17:58.0072 2680 wcncsvc - ok
19:17:58.0099 2680 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:17:58.0109 2680 WcsPlugInService - ok
19:17:58.0129 2680 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
19:17:58.0137 2680 Wd - ok
19:17:58.0177 2680 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:17:58.0199 2680 Wdf01000 - ok
19:17:58.0214 2680 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:17:58.0281 2680 WdiServiceHost - ok
19:17:58.0285 2680 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:17:58.0303 2680 WdiSystemHost - ok
19:17:58.0383 2680 [ D75398987C968DCBABC411E08029E387 ] Web Assistant C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
19:17:58.0407 2680 Web Assistant - ok
19:17:58.0443 2680 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
19:17:58.0492 2680 WebClient - ok
19:17:58.0507 2680 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:17:58.0568 2680 Wecsvc - ok
19:17:58.0597 2680 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:17:58.0627 2680 wercplsupport - ok
19:17:58.0643 2680 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
19:17:58.0672 2680 WerSvc - ok
19:17:58.0701 2680 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
19:17:58.0746 2680 WfpLwf - ok
19:17:58.0755 2680 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
19:17:58.0763 2680 WIMMount - ok
19:17:58.0780 2680 WinDefend - ok
19:17:58.0792 2680 WinHttpAutoProxySvc - ok
19:17:58.0839 2680 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:17:58.0886 2680 Winmgmt - ok
19:17:58.0934 2680 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
19:17:58.0989 2680 WinRM - ok
19:17:59.0037 2680 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
19:17:59.0066 2680 WinUsb - ok
19:17:59.0097 2680 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
19:17:59.0129 2680 Wlansvc - ok
19:17:59.0160 2680 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
19:17:59.0169 2680 WmiAcpi - ok
19:17:59.0196 2680 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:17:59.0208 2680 wmiApSrv - ok
19:17:59.0230 2680 WMPNetworkSvc - ok
19:17:59.0249 2680 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:17:59.0267 2680 WPCSvc - ok
19:17:59.0281 2680 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:17:59.0325 2680 WPDBusEnum - ok
19:17:59.0349 2680 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
19:17:59.0377 2680 ws2ifsl - ok
19:17:59.0397 2680 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
19:17:59.0413 2680 wscsvc - ok
19:17:59.0415 2680 WSearch - ok
19:17:59.0491 2680 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
19:17:59.0552 2680 wuauserv - ok
19:17:59.0578 2680 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
19:17:59.0599 2680 WudfPf - ok
19:17:59.0637 2680 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
19:17:59.0660 2680 WUDFRd - ok
19:17:59.0678 2680 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
19:17:59.0690 2680 wudfsvc - ok
19:17:59.0725 2680 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
19:17:59.0759 2680 WwanSvc - ok
19:17:59.0781 2680 ================ Scan global ===============================
19:17:59.0796 2680 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
19:17:59.0842 2680 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:17:59.0858 2680 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
19:17:59.0887 2680 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
19:17:59.0908 2680 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
19:17:59.0918 2680 [Global] - ok
19:17:59.0919 2680 ================ Scan MBR ==================================
19:17:59.0928 2680 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:18:00.0361 2680 \Device\Harddisk0\DR0 - ok
19:18:00.0362 2680 ================ Scan VBR ==================================
19:18:00.0367 2680 [ 565425E4D0ED6C529B9EB53BA68ED5F6 ] \Device\Harddisk0\DR0\Partition1
19:18:00.0370 2680 \Device\Harddisk0\DR0\Partition1 - ok
19:18:00.0398 2680 [ 93FA6474068BB1F41D6EB27E56E9D7F0 ] \Device\Harddisk0\DR0\Partition2
19:18:00.0402 2680 \Device\Harddisk0\DR0\Partition2 - ok
19:18:00.0402 2680 ============================================================
19:18:00.0403 2680 Scan finished
19:18:00.0403 2680 ============================================================
19:18:00.0419 3936 Detected object count: 3
19:18:00.0420 3936 Actual detected object count: 3
19:18:42.0885 3936 Adobe LM Service ( UnsignedFile.Multi.Generic ) - skipped by user
19:18:42.0885 3936 Adobe LM Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:18:42.0886 3936 Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - skipped by user
19:18:42.0886 3936 Adobe Version Cue CS2 ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:18:42.0887 3936 OpenVPNService ( UnsignedFile.Multi.Generic ) - skipped by user
19:18:42.0887 3936 OpenVPNService ( UnsignedFile.Multi.Generic ) - User select action: Skip
19:19:04.0755 1172 Deinitialize success

markusg · 08.07.2013, 13:21

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Skyliner123 · 08.07.2013, 19:31

Der Combofix-Download hat wohl ein wenig zuviel installiert. Jetzt hab ich anstatt Chrome nun Delta Search als Standard-Browser, was ich so schnell auch nicht ändern konnte. Was nun?

markusg · 08.07.2013, 19:33

also wenn du combofix von dem angegebenen Link hast, wird keine Toolbar instaliert. konttest du combofix.exe denn ausführen?

Skyliner123 · 08.07.2013, 19:37

Die kam 100% von dem Link. Eigentlich dachte ich alle Haken entfernt zu haben (denn es gab da durchaus noch mehr Zusatzsoftware). Habe Combofix noch nicht durchlaufen lassen, weil ich noch Microsoft Security Essentials aktiviert hatte, müsste jetzt aber gehen. Soll ich Combofix also jetzt trotzdem starten?

Also Delta Search ist mittels Avasta Browser Cleaner entfernt.

Der Combofix ist durchgelaufen, hier der Logfile in Code-Form:

Code:

ATTFilter

ComboFix 13-07-08.03 - Henning 08.07.2013  21:03:09.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4008.2410 [GMT 2:00]
ausgeführt von:: c:\users\Henning\Desktop\678978_Setup.EXE
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-06-08 bis 2013-07-08  ))))))))))))))))))))))))))))))
.
.
2013-07-08 19:08 . 2013-07-08 19:08	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-07-08 19:08 . 2013-07-08 19:08	--------	d-----w-	c:\users\Admin\AppData\Local\temp
2013-07-08 18:53 . 2013-07-08 18:53	--------	d-----w-	C:\678978_Setup
2013-07-08 18:06 . 2013-07-08 18:06	--------	d-----w-	c:\windows\SysWow64\searchplugins
2013-07-08 18:06 . 2013-07-08 18:06	--------	d-----w-	c:\windows\SysWow64\Extensions
2013-07-08 18:05 . 2013-07-08 18:06	--------	d-----w-	c:\program files (x86)\Plus-HD-2.3
2013-07-08 18:05 . 2013-07-08 18:05	--------	d-----w-	c:\users\Henning\AppData\Roaming\Babylon
2013-07-08 18:05 . 2013-07-08 18:05	--------	d-----w-	c:\programdata\Babylon
2013-07-08 18:04 . 2013-06-12 03:08	9552976	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8FE60967-E017-4A61-BD22-3553EAFBA5E6}\mpengine.dll
2013-07-07 15:12 . 2013-06-12 03:08	9552976	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-06-21 15:30 . 2013-06-21 15:29	964552	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{20D2E4F7-390E-4F82-9188-1B388CDCCFCA}\gapaengine.dll
2013-06-14 07:17 . 2013-05-17 01:25	257536	----a-w-	c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-06-14 07:17 . 2013-05-17 00:58	701952	----a-w-	c:\program files\Internet Explorer\ieproxy.dll
2013-06-14 07:17 . 2013-05-17 00:58	356352	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2013-06-12 07:19 . 2013-05-08 06:39	1910632	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-14 07:18 . 2012-04-06 21:43	75825640	----a-w-	c:\windows\system32\MRT.exe
2013-06-12 07:28 . 2012-04-06 23:06	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 07:28 . 2012-04-06 23:06	692104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-21 09:44 . 2012-06-13 08:39	964552	------w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2013-05-02 15:29 . 2010-11-21 03:27	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-16 07:41	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-16 07:41	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-16 07:41	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-16 07:41	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-16 07:41	474624	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-16 07:41	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 06:52	1656680	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-04-10 06:01 . 2013-05-16 07:41	265064	----a-w-	c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-16 07:41	983400	----a-w-	c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-16 07:40	3153920	----a-w-	c:\windows\system32\win32k.sys
2013-02-17 22:06 . 2013-02-17 22:06	4126720	----a-w-	c:\program files (x86)\GUT3B86.tmp
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110311341126}]
2013-07-08 18:06	752488	----a-w-	c:\program files (x86)\Plus-HD-2.3\Plus-HD-2.3-bho.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"phonostar-PlayerTimer"="c:\program files (x86)\phonostar-Player\phonostarTimer.exe" [2012-04-03 41472]
"Spotify Web Helper"="c:\users\Henning\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-06 1104384]
"Spotify"="c:\users\Henning\AppData\Roaming\Spotify\Spotify.exe" [2013-07-06 4640768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]
"tvjbmonitor"="c:\program files (x86)\MMEDIA\TV Jukebox 3.5\tvjbMonitor.exe" [2006-12-26 53248]
"Adobe Version Cue CS2"="c:\photoshop\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-06 856064]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
WISO Mein Steuer-Sparbuch heute.lnk - c:\program files (x86)\WISO\Steuersoftware 2011\mshaktuell.exe [2012-12-29 1302680]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [x]
S2 IBUpdaterService;IBUpdaterService;c:\windows\system32\dmwu.exe;c:\windows\SYSNATIVE\dmwu.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-07-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 07:28]
.
2013-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-458821395-1717346453-1308730809-1000Core.job
- c:\users\Henning\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-06 21:20]
.
2013-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-458821395-1717346453-1308730809-1000UA.job
- c:\users\Henning\AppData\Local\Google\Update\GoogleUpdate.exe [2012-04-06 21:20]
.
2013-07-08 c:\windows\Tasks\Plus-HD-2.3-chromeinstaller.job
- c:\program files (x86)\Plus-HD-2.3\Plus-HD-2.3-chromeinstaller.exe [2013-07-08 18:05]
.
2013-07-08 c:\windows\Tasks\Plus-HD-2.3-codedownloader.job
- c:\program files (x86)\Plus-HD-2.3\Plus-HD-2.3-codedownloader.exe [2013-07-08 18:05]
.
2013-07-08 c:\windows\Tasks\Plus-HD-2.3-enabler.job
- c:\program files (x86)\Plus-HD-2.3\Plus-HD-2.3-enabler.exe [2013-07-08 18:06]
.
2013-07-08 c:\windows\Tasks\Plus-HD-2.3-updater.job
- c:\program files (x86)\Plus-HD-2.3\Plus-HD-2.3-updater.exe [2013-07-08 18:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=A0FB00FF4579BEFA&affID=119357&tt=040713_rdrctful&tsp=4937
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-Faraday's Electromagnetic Lab - c:\windows\system32\javaws.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-07-08  21:09:57
ComboFix-quarantined-files.txt  2013-07-08 19:09
.
Vor Suchlauf: 18 Verzeichnis(se), 556.498.022.400 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 557.355.819.008 Bytes frei
.
- - End Of File - - 9C8B9FFC0B3A2A87A5BCAE593F3E45BD
A36C5E4F47E84449FF07ED3517B43A31

markusg · 08.07.2013, 20:24

Hier beim test kam nichts. und wir nutzen das Tool jeden tag, da währ das schon mal aufgefallen :-)
Aber wir deinstalieren das schon.
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Skyliner123 · 08.07.2013, 22:01

Hier das Ergebnis von Malwarebytes. Hab den Fund vom Programm entfernen lassen. Kann man den Fund genauer spezifizieren?

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.07.08.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
Henning :: HENNING-PC [Administrator]

08.07.2013 22:08:51
mbam-log-2013-07-08 (22-08-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 385859
Laufzeit: 48 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 1
HKLM\SYSTEM\CurrentControlSet\Services\IBUpdaterService (PUP.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

markusg · 08.07.2013, 22:03

Hi,

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Skyliner123 · 08.07.2013, 22:36

Hier die Liste.

Und zwischendurch nochmal ein großes Dankeschön!!!

Code:

ATTFilter

ABBYY FineReader 9.0 Sprint - UNBEKANNT	ABBYY	23.04.2012		9.01.513.58212
Adobe Creative Suite 2 - UNBEKANNT		10.01.2013		
Adobe Flash Player 11 ActiveX - wahrscheinlich nötig	Adobe Systems Incorporated	11.06.2013	6,00MB	11.7.700.224
Adobe Flash Player 11 Plugin - wahrscheinlich nötig	Adobe Systems Incorporated	12.06.2013	6,00MB	11.7.700.224
Adobe Reader X (10.1.7) - Deutsch - nötig	Adobe Systems Incorporated	17.05.2013	122MB	10.1.7
Adobe Shockwave Player 12.0 - wahrscheinlich nötig	Adobe Systems, Inc.	02.07.2013		12.0.2.122
Adobe SVG Viewer 3.0 - unbekannt	Adobe Systems, Inc.	10.01.2013		 3.0
Amazon Kindle	Amazon	04.01.2013 - nötig		
BatteryLifeExtender - nötig	Samsung	07.04.2012	31,4MB	1.0.11
CCleaner	Piriform	19.06.2013		4.03
CDBurnerXP	CDBurnerXP - unbekannt	07.04.2012	19,0MB	4.4.0.3018
ChargeableUSB	SAMSUNG	07.04.2012		1.0.0.0
Easy Display Manager - unbekannt	Samsung Electronics Co., Ltd.	07.04.2012		3.2
Easy SpeedUp Manager - unbekannt	Samsung Electronics Co.,Ltd.	07.04.2012		2.1.1.1
Epson Easy Photo Print 2 - nötig	SEIKO EPSON CORPORATION	23.04.2012		2.2.0.0
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - nötig	SEIKO EPSON CORPORATION	23.04.2012		1.00.0000
Epson Event Manager - nötig	SEIKO EPSON CORPORATION	23.04.2012	38,7MB	2.40.0001
EPSON Scan - nötig	Seiko Epson Corporation	23.04.2012		
EPSON SX218 Series Handbuch		23.04.2012		
EPSON SX218 Series Printer Uninstall	SEIKO EPSON Corporation	23.04.2012		
ETDWare PS/2-X64 10.7.6.2_WHQL	ELAN Microelectronic Corp.	07.04.2012		10.7.6.2
Foxit Reader - nötig	Foxit Corporation	06.09.2012	39,2MB	5.4.2.901
Google Chrome- nötig	Google Inc.	06.04.2012		27.0.1453.116
Hattrick Organizer - nötig (remove only)		24.02.2013		
IB Updater Service unbekannt		11.04.2013		3.0.4.6
IBM SPSS Statistics 21	IBM Corp - nötig	06.04.2013	877MB	21.0.0.0
Intel® PROSet/Wireless WiFi-Software	Intel Corporation	06.04.2012	21,0MB	15.00.0000.0642
Java 7 Update 21 - denke mal nötig	Oracle	04.03.2013	129MB	7.0.210
Java(TM) 6 Update 31 - wahrscheinlich alt	Oracle	07.04.2012	97,2MB	6.0.310
JPG2PDF 2.2 - eher unnötig?!	JPG2PDF Developer Team	19.09.2012		
Malwarebytes Anti-Malware Version 1.75.0.1300	Malwarebytes Corporation	08.07.2013	19,2MB	1.75.0.1300
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	07.04.2012	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	07.04.2012	2,93MB	4.0.30319
Microsoft .NET Framework 4 Extended	Microsoft Corporation	14.02.2013	51,9MB	4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack	Microsoft Corporation	14.02.2013	10,6MB	4.0.30319
Microsoft Office Standard 2010	Microsoft Corporation	07.04.2012		14.0.6029.1000
Microsoft Security Essentials	Microsoft Corporation	27.02.2013		4.2.223.1
Microsoft Silverlight	Microsoft Corporation	14.03.2013	100MB	5.1.20125.0
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	25.04.2012	300KB	8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	14.02.2013	788KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	16.02.2013	788KB	9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	29.12.2012	588KB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	31.12.2012	600KB	9.0.30729.6161
Mozilla Thunderbird 11.0.1 (x86 de) - lang nicht benutzt	Mozilla	07.04.2012	37,4MB	11.0.1
NVIDIA Grafiktreiber 296.10	NVIDIA Corporation	07.04.2012		296.10
OpenTTD 1.2.3 - nötig	OpenTTD	11.03.2013		1.2.3
OpenVPN 2.2.2 - nötig		05.05.2012		2.2.2
phonostar-Player Version 3.02.5	- nötig	27.04.2012	47,1MB	
Plus-HD-2.3 - unbekannt	Plus HD	08.07.2013		1.27.153.8
Realtek Ethernet Controller Driver	Realtek	06.04.2012		7.44.421.2011
Skype™ 5.8 - ungenutzt	Skype Technologies S.A.	07.04.2012	18,8MB	5.8.158
SopCast 3.5.0 - nötig	www.sopcast.com	06.11.2012		3.5.0
Spotify	Spotify AB - nötig	06.07.2013		0.9.1.57.ge7405149
Synaptics Pointing Device Driver - unbekannt	Synaptics Incorporated	07.04.2012	46,4MB	15.2.20.0
TeamViewer 7	TeamViewer - nötig	07.04.2012		7.0.12979
TV Jukebox 3.5	Meta Media Inc	29.07.2012 - nötig		3.50.000
VLC media player 2.0.1	VideoLAN - nötig	07.04.2012		2.0.1
WinRAR 4.11 (64-Bit) - nötig	win.rar GmbH	07.04.2012		4.11.0
WISO Steuer-Sparbuch 2011 - nötig	Buhl Data Service GmbH	29.12.2012		18.00.6928

markusg · 08.07.2013, 23:08

hi du hast das mitten reingeschrieben.
bitte schreibe jeweils ans ende der Zeile:
Nötig, unnötig, Unbekannt, danke

Skyliner123 · 08.07.2013, 23:20

Korrektur

Code:

ATTFilter

ABBYY FineReader 9.0 Sprint	ABBYY	23.04.2012		9.01.513.58212 unbekannt
Adobe Creative Suite 2 10.01.2013 unbekannt		
Adobe Flash Player 11 ActiveX   Adobe Systems Incorporated	11.06.2013	6,00MB	11.7.700.224 unbekannt
Adobe Flash Player 11 Plugin 	Adobe Systems Incorporated	12.06.2013	6,00MB	11.7.700.224 unbekannt
Adobe Reader X (10.1.7) - Deutsch 	Adobe Systems Incorporated	17.05.2013	122MB	10.1.7 nötig
Adobe Shockwave Player 12.0 	Adobe Systems, Inc.	02.07.2013		12.0.2.122 unbekannt
Adobe SVG Viewer 3.0 	Adobe Systems, Inc.	10.01.2013		 3.0 unbekannt
Amazon Kindle	Amazon	04.01.2013 nötig 		
BatteryLifeExtender 	Samsung	07.04.2012	31,4MB	1.0.11 nötig
CCleaner	Piriform	19.06.2013		4.03
CDBurnerXP	CDBurnerXP 	07.04.2012	19,0MB	4.4.0.3018 unbekannt
ChargeableUSB	SAMSUNG	07.04.2012		1.0.0.0
Easy Display Manager 	Samsung Electronics Co., Ltd.	07.04.2012		3.2
Easy SpeedUp Manager 	Samsung Electronics Co.,Ltd.	07.04.2012		2.1.1.1
Epson Easy Photo Print 2 	SEIKO EPSON CORPORATION	23.04.2012		2.2.0.0 nötig
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) 	SEIKO EPSON CORPORATION	23.04.2012		1.00.0000 nötig
Epson Event Manager 	SEIKO EPSON CORPORATION	23.04.2012	38,7MB	2.40.0001 nötig
EPSON Scan 	Seiko Epson Corporation	23.04.2012 nötig		
EPSON SX218 Series Handbuch		23.04.2012		
EPSON SX218 Series Printer Uninstall	SEIKO EPSON Corporation	23.04.2012		
ETDWare PS/2-X64 10.7.6.2_WHQL	ELAN Microelectronic Corp.	07.04.2012		10.7.6.2 unbekannt
Foxit Reader 	Foxit Corporation	06.09.2012	39,2MB	5.4.2.901 nötig
Google Chrome	Google Inc.	06.04.2012		27.0.1453.116 nötig
Hattrick Organizer  (remove only)		24.02.2013 nötig		
IB Updater Service 		11.04.2013		3.0.4.6 unbekannt
IBM SPSS Statistics 21	IBM Corp 	06.04.2013	877MB	21.0.0.0 nötig
Intel® PROSet/Wireless WiFi-Software	Intel Corporation	06.04.2012	21,0MB	15.00.0000.0642
Java 7 Update 21 	Oracle	04.03.2013	129MB	7.0.210 nötig
Java(TM) 6 Update 31 	Oracle	07.04.2012	97,2MB	6.0.310 nötig
JPG2PDF 2.2 	JPG2PDF Developer Team	19.09.2012 unbekannt		
Malwarebytes Anti-Malware Version 1.75.0.1300	Malwarebytes Corporation	08.07.2013	19,2MB	1.75.0.1300
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	07.04.2012	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	07.04.2012	2,93MB	4.0.30319
Microsoft .NET Framework 4 Extended	Microsoft Corporation	14.02.2013	51,9MB	4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack	Microsoft Corporation	14.02.2013	10,6MB	4.0.30319
Microsoft Office Standard 2010	Microsoft Corporation	07.04.2012		14.0.6029.1000
Microsoft Security Essentials	Microsoft Corporation	27.02.2013		4.2.223.1
Microsoft Silverlight	Microsoft Corporation	14.03.2013	100MB	5.1.20125.0
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	25.04.2012	300KB	8.0.61001
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	14.02.2013	788KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	16.02.2013	788KB	9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	29.12.2012	588KB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	31.12.2012	600KB	9.0.30729.6161
Mozilla Thunderbird 11.0.1 (x86 de) 	Mozilla	07.04.2012	37,4MB	11.0.1 nötig
NVIDIA Grafiktreiber 296.10	NVIDIA Corporation	07.04.2012		296.10
OpenTTD 1.2.3 	OpenTTD	11.03.2013		1.2.3 nötig
OpenVPN 2.2.2 		05.05.2012		2.2.2 nötig
phonostar-Player Version 3.02.5		27.04.2012	47,1MB nötig	
Plus-HD-2.3 	Plus HD	08.07.2013		1.27.153.8 unbekannt
Realtek Ethernet Controller Driver	Realtek	06.04.2012		7.44.421.2011 unbekannt
Skype™ 5.8 	Skype Technologies S.A.	07.04.2012	18,8MB	5.8.158 unnötig
SopCast 3.5.0 	www.sopcast.com	06.11.2012		3.5.0 nötig
Spotify	Spotify AB 	06.07.2013		0.9.1.57.ge7405149 nötig
Synaptics Pointing Device Driver 	Synaptics Incorporated	07.04.2012	46,4MB	15.2.20.0 unbekannt
TeamViewer 7	TeamViewer 	07.04.2012		7.0.12979 nötig
TV Jukebox 3.5	Meta Media Inc	29.07.2012 		3.50.000 nötig
VLC media player 2.0.1	VideoLAN 	07.04.2012		2.0.1 nötig
WinRAR 4.11 (64-Bit) 	win.rar GmbH	07.04.2012		4.11.0 nötig
WISO Steuer-Sparbuch 2011 	Buhl Data Service GmbH	29.12.2012		18.00.6928 nötig

Seltsame Pop-Ups und Verlinkungen unter Chrome und IE. Virus?

Log-Analyse und Auswertung: Seltsame Pop-Ups und Verlinkungen unter Chrome und IE. Virus?