Hallo liebe Helfer!
Ich habe schon seit einiger Zeit im Masterbootsektor von Laufwerk 'Masterbootsektor HD0' einen Virus oder unerwünschtes Programm 'BOO/TDss.O', mir ist es leider erst jetzt aufgefallen, da ich Probleme mit meinem Anzeigetreiber habe und mich deshalb auf die Suche nach der Ursache gemacht habe..
Ich würde mich über eure Hilfe sehr freuen, da ich nicht weiß, was zu tun ist!


defogger_disable.txt

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:36 on 10/04/2014 (root)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

FRST.txt
FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 (ATTENTION: ====> FRST version is 28 days old and could be outdated)
Ran by Maja (ATTENTION: The logged in user is not administrator) on MAJA-PC on 10-04-2014 15:38:23
Running from C:\Users\Maja\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Dropbox, Inc.) C:\Users\Maja\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avcenter.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [Personal ID] - C:\PROGRA~2\COOLSP~1\PERSON~1\PID.EXE
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [rfxsrvtray] - C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [Desk 365] - "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\MountPoints2: {c84b9e86-4457-11e1-9f85-806e6f6e6963} - D:\Msetup4.exe
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\MountPoints2: {e27ca323-8511-11e3-bf22-8f2b221a73bc} - E:\LGAutoRun.exe
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Maja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Maja\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (No File)
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=hp&babsrc=lnkry_nt
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=ild&from=ild&uid=HitachiXHTS545050B9A300_100921PBG403Q7DUZ2XVX&ts=1374520329
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO-x32: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-bho.dll (installdaddy)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Maja\AppData\Roaming\Mozilla\Firefox\Profiles\356kotzc.default-1386528680383
FF Homepage: hxxp://www.facebook.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Maja\AppData\Roaming\Mozilla\Firefox\Profiles\356kotzc.default-1386528680383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-19]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()

==================== Drivers (Whitelisted) ====================

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93696 2013-04-23] (LG Electronics Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2013-04-24] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2013-04-24] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2013-04-24] (LG Electronics Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-10 15:38 - 2014-04-10 15:38 - 00014300 _____ () C:\Users\Maja\Downloads\FRST.txt
2014-04-10 15:38 - 2014-04-10 15:38 - 00000000 ____D () C:\FRST
2014-04-10 15:37 - 2014-04-10 15:37 - 02157056 _____ (Farbar) C:\Users\Maja\Downloads\FRST64.exe
2014-04-10 15:36 - 2014-04-10 15:36 - 00000470 _____ () C:\Users\Maja\Downloads\defogger_disable.log
2014-04-10 15:35 - 2014-04-10 15:35 - 00050477 _____ () C:\Users\Maja\Downloads\Defogger.exe
2014-04-09 16:38 - 2014-04-09 16:38 - 00000000 ____D () C:\698756deb55656e23b71
2014-04-09 15:41 - 2014-03-31 03:16 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-09 15:41 - 2014-03-31 03:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-09 15:41 - 2014-03-31 02:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-09 15:41 - 2014-03-31 01:57 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-09 15:40 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 15:40 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 15:40 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 15:40 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 15:40 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 15:39 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 15:39 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 15:39 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 15:39 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 15:39 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 15:39 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 15:39 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-04 19:00 - 2014-04-04 19:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-04-04 18:41 - 2014-04-04 18:41 - 00000000 ____D () C:\o4xr
2014-04-04 17:27 - 2014-04-04 17:27 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2014-04-04 17:15 - 2014-04-04 17:15 - 02056192 _____ () C:\Users\Maja\Downloads\CMInstaller.msi
2014-04-03 20:18 - 2014-04-03 20:54 - 00000000 ____D () C:\Users\Maja\Documents\Sport
2014-03-26 18:25 - 2014-03-26 18:25 - 00000000 ____D () C:\Windows\pss
2014-03-23 14:56 - 2014-03-23 14:56 - 00000000 __SHD () C:\found.000
2014-03-20 17:42 - 2014-03-20 17:42 - 00000000 ____D () C:\a7e325c585dad218287780de8bb2bc6c
2014-03-15 14:22 - 2014-03-22 11:30 - 00000000 ____D () C:\Users\Maja\Documents\Scan
2014-03-15 12:40 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-15 12:40 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 12:40 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-15 12:40 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-15 12:40 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 12:40 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-15 12:40 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 12:40 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 12:40 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-15 12:40 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-15 12:40 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-15 12:40 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-15 12:40 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-15 12:40 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 12:40 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-15 12:40 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-15 12:40 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 12:40 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 12:40 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-15 12:40 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 12:40 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-15 12:40 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 12:40 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-15 12:40 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 12:40 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 12:40 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-15 12:40 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 12:40 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 12:40 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 12:40 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 12:40 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 12:40 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 12:40 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 12:40 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 12:40 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-15 12:40 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-15 12:40 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 12:40 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 12:40 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 12:40 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-15 12:39 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 12:39 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 12:39 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 12:39 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

==================== One Month Modified Files and Folders =======

2014-04-10 15:38 - 2014-04-10 15:38 - 00014300 _____ () C:\Users\Maja\Downloads\FRST.txt
2014-04-10 15:38 - 2014-04-10 15:38 - 00000000 ____D () C:\FRST
2014-04-10 15:37 - 2014-04-10 15:37 - 02157056 _____ (Farbar) C:\Users\Maja\Downloads\FRST64.exe
2014-04-10 15:36 - 2014-04-10 15:36 - 00000470 _____ () C:\Users\Maja\Downloads\defogger_disable.log
2014-04-10 15:36 - 2013-05-09 17:18 - 00000000 ____D () C:\Users\root
2014-04-10 15:35 - 2014-04-10 15:35 - 00050477 _____ () C:\Users\Maja\Downloads\Defogger.exe
2014-04-10 15:15 - 2012-03-02 15:28 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-10 15:13 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-10 15:13 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-10 15:12 - 2013-07-22 21:12 - 00001210 _____ () C:\Windows\Tasks\HDvid Codec V1-updater.job
2014-04-10 15:12 - 2013-07-22 21:12 - 00001114 _____ () C:\Windows\Tasks\HDvid Codec V1-enabler.job
2014-04-10 15:11 - 2013-07-22 21:11 - 00001204 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job
2014-04-10 15:10 - 2009-07-14 19:58 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-04-10 15:10 - 2009-07-14 19:58 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-04-10 15:10 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-10 15:05 - 2013-11-18 20:58 - 00000000 ___RD () C:\Users\Maja\Dropbox
2014-04-10 15:05 - 2013-11-18 20:54 - 00000000 ____D () C:\Users\Maja\AppData\Roaming\Dropbox
2014-04-10 15:04 - 2013-04-13 23:12 - 00000338 _____ () C:\Windows\Tasks\dsmonitor.job
2014-04-10 15:04 - 2012-03-02 15:28 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-10 15:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-10 15:03 - 2009-07-14 06:51 - 00092017 _____ () C:\Windows\setupact.log
2014-04-10 14:56 - 2012-01-21 19:49 - 01113041 _____ () C:\Windows\WindowsUpdate.log
2014-04-10 14:43 - 2012-04-13 12:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 16:38 - 2014-04-09 16:38 - 00000000 ____D () C:\698756deb55656e23b71
2014-04-09 16:38 - 2013-08-14 17:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 16:38 - 2012-01-25 21:50 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 15:26 - 2012-04-26 20:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 11:59 - 2013-05-05 14:45 - 00000000 ____D () C:\Users\Maja\Documents\Berufsorientierung
2014-04-06 09:26 - 2014-02-19 16:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-04 19:00 - 2014-04-04 19:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-04-04 18:57 - 2014-02-01 13:12 - 00157352 _____ () C:\Users\Maja\Downloads\IS11LG_SystemBackupTest.signed.apk
2014-04-04 18:41 - 2014-04-04 18:41 - 00000000 ____D () C:\o4xr
2014-04-04 18:20 - 2012-10-04 22:19 - 00000000 ____D () C:\Users\Maja\Documents\Handy
2014-04-04 17:27 - 2014-04-04 17:27 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2014-04-04 17:25 - 2012-01-21 20:25 - 00000000 ____D () C:\Users\Maja
2014-04-04 17:15 - 2014-04-04 17:15 - 02056192 _____ () C:\Users\Maja\Downloads\CMInstaller.msi
2014-04-03 20:54 - 2014-04-03 20:18 - 00000000 ____D () C:\Users\Maja\Documents\Sport
2014-03-31 03:16 - 2014-04-09 15:41 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-31 03:13 - 2014-04-09 15:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-31 02:13 - 2014-04-09 15:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-31 01:57 - 2014-04-09 15:41 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-27 20:53 - 2012-01-22 13:21 - 00141934 _____ () C:\Windows\PFRO.log
2014-03-26 18:55 - 2012-09-21 15:24 - 00000000 ____D () C:\Program Files (x86)\HTC
2014-03-26 18:54 - 2012-05-06 11:23 - 00000000 ____D () C:\Users\Maja\AppData\Local\Downloaded Installations
2014-03-26 18:50 - 2012-01-21 20:51 - 00000000 ____D () C:\Users\Maja\AppData\Roaming\Apple Computer
2014-03-26 18:47 - 2013-04-13 23:14 - 00000000 ____D () C:\Program Files\DivX
2014-03-26 18:47 - 2013-04-13 23:11 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-03-26 18:47 - 2013-04-13 23:10 - 00000000 ____D () C:\ProgramData\DivX
2014-03-26 18:40 - 2013-10-27 11:34 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-26 18:25 - 2014-03-26 18:25 - 00000000 ____D () C:\Windows\pss
2014-03-25 15:49 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-03-23 14:56 - 2014-03-23 14:56 - 00000000 __SHD () C:\found.000
2014-03-22 11:30 - 2014-03-15 14:22 - 00000000 ____D () C:\Users\Maja\Documents\Scan
2014-03-20 17:42 - 2014-03-20 17:42 - 00000000 ____D () C:\a7e325c585dad218287780de8bb2bc6c
2014-03-16 14:25 - 2009-07-14 06:45 - 00323704 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 13:26 - 2013-09-24 15:19 - 00008932 _____ () C:\Users\Maja\Desktop\Infohausaufgaben.odt
2014-03-15 12:43 - 2012-04-13 12:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-15 12:43 - 2012-01-22 00:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Maja\AppData\Local\Temp\AskSLib.dll
C:\Users\Maja\AppData\Local\Temp\avgnt.exe
C:\Users\Maja\AppData\Local\Temp\CMInstaller.exe
C:\Users\Maja\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Maja\AppData\Local\Temp\PhotoScape_V3.6.1.exe
C:\Users\Maja\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Maja\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Maja\AppData\Local\Temp\TOBITCLT.DLL
C:\Users\Maja\AppData\Local\Temp\_isABAA.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

--- --- ---
Additions.txtFRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Maja at 2014-04-10 15:39:26
Running from C:\Users\Maja\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland Delphi 5 (HKLM-x32\...\Delphi5) (Version:  - )
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.249.2 - Broadcom Corporation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - ‪Canon Inc.‬)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MG3200 series Benutzerregistrierung (HKLM-x32\...\Canon MG3200 series Benutzerregistrierung) (Version:  - Canon Inc.‎)
Canon MG3200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3200_series) (Version: 1.01 - Canon Inc.)
Canon MG3200 series On-screen Manual (HKLM-x32\...\Canon MG3200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CM Installer (HKLM-x32\...\{E8F42777-958D-4C14-9A42-8DCA1929FD26}) (Version: 1.0.0.0 - Cyanogen Inc.)
Descartes3D Version 2.51 (HKLM-x32\...\Descartes3D Version 2.51_is1) (Version: 2.51 - Roland Wejner)
DriverTuner 3.1.0.0 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.0 - LionSea SoftWare)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
GeoGebra 4.2 (HKCU\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HDvid Codec V1 (HKLM-x32\...\HDvid Codec V1) (Version: 1.27.153.8 - installdaddy) <==== ATTENTION
HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.021 - HTC Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.06.20130913 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
OpenOffice.org 3.2 (HKLM-x32\...\{8D1E61D1-1395-4E97-997F-D002DB3A5074}) (Version: 3.2.9502 - OpenOffice.org)
Opera 11.60 (HKLM-x32\...\Opera 11.60.1185) (Version: 11.60.1185 - Opera Software ASA)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.6 - Pando Networks Inc.)
PHOTOfunSTUDIO 6.0 (HKLM-x32\...\{B62A8A6F-5E48-4336-BF13-1632D5921872}) (Version: 6.00.135 - Panasonic Corporation)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Radio.fx (HKLM-x32\...\Tobit Radio.fx Server) (Version:  - Tobit.Software)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Skype™ 6.0 (HKLM-x32\...\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}) (Version: 6.0.126 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Windows-Treiberpaket - Intel (NETw5s64) net  (05/31/2010 13.2.1.5) (HKLM\...\08116AAA5079D141DE9F37C0804CDE8B00E3F4AD) (Version: 05/31/2010 13.2.1.5 - Intel)
Windows-Treiberpaket - Intel (NETw5v64) net  (05/31/2010 13.2.1.5) (HKLM\...\60F79568B15F277EAF37083939CFCC51ADCD2906) (Version: 05/31/2010 13.2.1.5 - Intel)
Wsys Control 1.0.0.2557 (HKLM-x32\...\WsysControl) (Version: 1.0.0.2557 - Wsys Co., Ltd.) <==== ATTENTION

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\dsmonitor.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-codedownloader.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-enabler.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-updater.job => ?

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: IJNetworkScannerSelectorEX => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

==================== Faulty Device Manager Devices =============

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13323

Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13323

Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4798154

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4798154

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3604

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3604

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 05:51:52 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2574


System errors:
=============
Error: (04/10/2014 03:03:54 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎10.‎04.‎2014 um 14:56:22 unerwartet heruntergefahren.

Error: (04/10/2014 02:29:00 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎09.‎04.‎2014 um 16:39:56 unerwartet heruntergefahren.

Error: (04/07/2014 01:56:17 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{4785B55C-66AA-4100-A395-4FE9BA777B96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/27/2014 08:54:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem dienstspezifischem Fehler beendet: %%0.

Error: (03/27/2014 08:54:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (03/27/2014 08:54:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "WinHttpAutoProxySvc" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (03/24/2014 01:56:33 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{4785B55C-66AA-4100-A395-4FE9BA777B96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/23/2014 06:33:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (03/22/2014 11:33:01 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Acer" den Befehl "chkdsk" aus.

Error: (03/22/2014 11:20:20 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "C:" den Befehl "chkdsk" aus.


Microsoft Office Sessions:
=========================
Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13323

Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13323

Error: (04/10/2014 02:43:51 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4798154

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4798154

Error: (04/08/2014 07:11:47 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3604

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3604

Error: (04/08/2014 05:51:53 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/08/2014 05:51:52 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2574


CodeIntegrity Errors:
===================================
  Date: 2013-02-10 14:45:15.617
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:45:15.417
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:13:09.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:13:08.823
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:26.842
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:26.629
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:16.399
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:16.137
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:01:54.955
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:01:54.727
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 4025.97 MB
Available physical RAM: 2136.32 MB
Total Pagefile: 8050.13 MB
Available Pagefile: 5913.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:366.2 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

--- --- ---
GMER.txt
GMER Logfile:

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-10 16:15:58
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS545050B9A300 rev.PB4OC60F 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\root\AppData\Local\Temp\kwldypow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[1576] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000076f21465 2 bytes [F2, 76]
.text  C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[1576] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000076f214bb 2 bytes [F2, 76]
.text  ...                                                                                                                              * 2
.text  C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe[1664] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter   0000000077238791 5 bytes JMP 000000010067b780

---- EOF - GMER 2.1 ----
         

--- --- ---
Avira Logfile

Exportierte Ereignisse:

10.04.2014 16:19 [Echtzeit-Scanner] Malware in Bootsektor gefunden
Im Masterbootsektor von Laufwerk 'Masterbootsektor HD0' wurde ein Virus oder
unerwünschtes Programm 'BOO/TDss.O' [virus] gefunden.
Ausgeführte Aktion: Zugriff verweigern



Liebe Grüße,
bssbss!

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
• Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
• Bitte kein Crossposting (posten in mehreren Foren).
• Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
• Speichere alle unsere Tools auf dem Desktop ab.
• Poste die Logfiles direkt in deinen Thread in Code-Tags.
• Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweise: Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Das dauert dann zwar ein paar Stunden länger, garantiert aber, dass Du kompetente Hilfe und geprüfte Antworten bekommst. Siehe hier...

Ich bedanke mich für Deine Geduld!

Hallo,
bitte führe alle unsere Bereinigungsschritte vom Administrator-Konto aus.

Wir machen so weiter:

Schritt 1
Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

• Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
• Drücke Start Scan
  
• Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
  TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
  Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

TDSS Killer

21:49:18.0105 3864 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
21:49:21.0505 3864 ============================================================
21:49:21.0505 3864 Current date / time: 2014/04/12 21:49:21.0505
21:49:21.0505 3864 SystemInfo:
21:49:21.0505 3864
21:49:21.0505 3864 OS Version: 6.1.7601 ServicePack: 1.0
21:49:21.0505 3864 Product type: Workstation
21:49:21.0505 3864 ComputerName: MAJA-PC
21:49:21.0505 3864 UserName: root
21:49:21.0505 3864 Windows directory: C:\Windows
21:49:21.0505 3864 System windows directory: C:\Windows
21:49:21.0505 3864 Running under WOW64
21:49:21.0505 3864 Processor architecture: Intel x64
21:49:21.0505 3864 Number of processors: 2
21:49:21.0505 3864 Page size: 0x1000
21:49:21.0505 3864 Boot type: Normal boot
21:49:21.0505 3864 ============================================================
21:49:22.0753 3864 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:49:22.0769 3864 ============================================================
21:49:22.0769 3864 \Device\Harddisk0\DR0:
21:49:22.0769 3864 MBR partitions:
21:49:22.0769 3864 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
21:49:22.0769 3864 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x38953000
21:49:22.0769 3864 ============================================================
21:49:22.0785 3864 C: <-> \Device\Harddisk0\DR0\Partition2
21:49:22.0785 3864 ============================================================
21:49:22.0785 3864 Initialize success
21:49:22.0785 3864 ============================================================
21:49:38.0229 4052 ============================================================
21:49:38.0229 4052 Scan started
21:49:38.0229 4052 Mode: Manual; SigCheck; TDLFS;
21:49:38.0229 4052 ============================================================
21:49:39.0118 4052 ================ Scan system memory ========================
21:49:39.0118 4052 System memory - ok
21:49:39.0133 4052 ================ Scan services =============================
21:49:39.0336 4052 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
21:49:39.0477 4052 1394ohci - ok
21:49:39.0508 4052 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:49:39.0539 4052 ACPI - ok
21:49:39.0570 4052 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:49:39.0664 4052 AcpiPmi - ok
21:49:39.0789 4052 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:49:39.0820 4052 AdobeARMservice - ok
21:49:39.0929 4052 [ C2CE3311D2477B1B24CFB67020AD49B6 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:49:39.0960 4052 AdobeFlashPlayerUpdateSvc - ok
21:49:40.0023 4052 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
21:49:40.0069 4052 adp94xx - ok
21:49:40.0085 4052 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
21:49:40.0116 4052 adpahci - ok
21:49:40.0147 4052 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
21:49:40.0179 4052 adpu320 - ok
21:49:40.0210 4052 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:49:40.0366 4052 AeLookupSvc - ok
21:49:40.0428 4052 [ 79059559E89D06E8B80CE2944BE20228 ] AFD C:\Windows\system32\drivers\afd.sys
21:49:40.0491 4052 AFD - ok
21:49:40.0537 4052 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:49:40.0569 4052 agp440 - ok
21:49:40.0615 4052 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
21:49:40.0709 4052 ALG - ok
21:49:40.0756 4052 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
21:49:40.0787 4052 aliide - ok
21:49:40.0803 4052 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
21:49:40.0818 4052 amdide - ok
21:49:40.0865 4052 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
21:49:40.0927 4052 AmdK8 - ok
21:49:40.0943 4052 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
21:49:40.0990 4052 AmdPPM - ok
21:49:41.0052 4052 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:49:41.0083 4052 amdsata - ok
21:49:41.0115 4052 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
21:49:41.0146 4052 amdsbs - ok
21:49:41.0161 4052 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:49:41.0193 4052 amdxata - ok
21:49:41.0239 4052 [ 8769A70C4E7648D1885BECF0119AEA1C ] andnetadb C:\Windows\system32\Drivers\lgandnetadb.sys
21:49:41.0317 4052 andnetadb - ok
21:49:41.0364 4052 [ B46840E5BDAEE0C749A3E5778F65EBE4 ] AndNetDiag C:\Windows\system32\DRIVERS\lgandnetdiag64.sys
21:49:41.0427 4052 AndNetDiag - ok
21:49:41.0473 4052 [ 130701C53E4DF44B54FED8C3892150F5 ] ANDNetModem C:\Windows\system32\DRIVERS\lgandnetmodem64.sys
21:49:41.0520 4052 ANDNetModem - ok
21:49:41.0551 4052 [ E3EC070581BBE36BA9F48BBB04E74FAC ] andnetndis C:\Windows\system32\DRIVERS\lgandnetndis64.sys
21:49:41.0629 4052 andnetndis - ok
21:49:41.0723 4052 [ 4D282B9C5BB05DF92C9F3977DFB9F916 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:49:41.0754 4052 AntiVirSchedulerService - ok
21:49:41.0832 4052 [ 65AF41A7A2C5B6693E1B4164E7632C3E ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:49:41.0848 4052 AntiVirService - ok
21:49:41.0941 4052 [ 3D15C6EDBF84D792ACEBD2289546DBAF ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
21:49:41.0973 4052 AntiVirWebService - ok
21:49:42.0035 4052 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
21:49:42.0207 4052 AppID - ok
21:49:42.0253 4052 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:49:42.0363 4052 AppIDSvc - ok
21:49:42.0425 4052 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
21:49:42.0487 4052 Appinfo - ok
21:49:42.0519 4052 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
21:49:42.0550 4052 arc - ok
21:49:42.0565 4052 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
21:49:42.0581 4052 arcsas - ok
21:49:42.0721 4052 [ 9A262EDD17F8473B91B333D6B031A901 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:49:42.0815 4052 aspnet_state - ok
21:49:42.0831 4052 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:49:42.0924 4052 AsyncMac - ok
21:49:42.0955 4052 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
21:49:42.0987 4052 atapi - ok
21:49:43.0033 4052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:49:43.0143 4052 AudioEndpointBuilder - ok
21:49:43.0158 4052 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:49:43.0236 4052 AudioSrv - ok
21:49:43.0314 4052 [ 7806BFCD1D7FA5EC23F7324D4EAFD25B ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
21:49:43.0345 4052 avgntflt - ok
21:49:43.0377 4052 [ C3A58DBD18786C338126D30BF8C33D72 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
21:49:43.0392 4052 avipbb - ok
21:49:43.0439 4052 [ 390184FAD8FCC1B6DA25AEBAE928C3B6 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
21:49:43.0455 4052 avkmgr - ok
21:49:43.0501 4052 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:49:43.0611 4052 AxInstSV - ok
21:49:43.0642 4052 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
21:49:43.0720 4052 b06bdrv - ok
21:49:43.0751 4052 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
21:49:43.0798 4052 b57nd60a - ok
21:49:43.0923 4052 [ 2D659B569A76CDB83B815675A80D7096 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
21:49:44.0047 4052 BCM43XX - ok
21:49:44.0141 4052 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
21:49:44.0219 4052 BDESVC - ok
21:49:44.0266 4052 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
21:49:44.0359 4052 Beep - ok
21:49:44.0422 4052 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
21:49:44.0469 4052 BFE - ok
21:49:44.0515 4052 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
21:49:44.0625 4052 BITS - ok
21:49:44.0656 4052 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
21:49:44.0687 4052 blbdrive - ok
21:49:44.0781 4052 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
21:49:44.0812 4052 Bonjour Service - ok
21:49:44.0859 4052 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:49:44.0921 4052 bowser - ok
21:49:44.0968 4052 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:49:45.0061 4052 BrFiltLo - ok
21:49:45.0077 4052 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:49:45.0108 4052 BrFiltUp - ok
21:49:45.0155 4052 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
21:49:45.0217 4052 Browser - ok
21:49:45.0264 4052 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:49:45.0342 4052 Brserid - ok
21:49:45.0358 4052 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:49:45.0405 4052 BrSerWdm - ok
21:49:45.0436 4052 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:49:45.0498 4052 BrUsbMdm - ok
21:49:45.0529 4052 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:49:45.0561 4052 BrUsbSer - ok
21:49:45.0576 4052 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
21:49:45.0623 4052 BTHMODEM - ok
21:49:45.0670 4052 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
21:49:45.0779 4052 bthserv - ok
21:49:45.0810 4052 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:49:45.0888 4052 cdfs - ok
21:49:45.0951 4052 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:49:45.0982 4052 cdrom - ok
21:49:46.0044 4052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
21:49:46.0122 4052 CertPropSvc - ok
21:49:46.0153 4052 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
21:49:46.0200 4052 circlass - ok
21:49:46.0247 4052 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
21:49:46.0278 4052 CLFS - ok
21:49:46.0372 4052 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:49:46.0403 4052 clr_optimization_v2.0.50727_32 - ok
21:49:46.0465 4052 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:49:46.0497 4052 clr_optimization_v2.0.50727_64 - ok
21:49:46.0575 4052 [ E87213F37A13E2B54391E40934F071D0 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:49:46.0684 4052 clr_optimization_v4.0.30319_32 - ok
21:49:46.0715 4052 [ 4AEDAB50F83580D0B4D6CF78191F92AA ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:49:46.0746 4052 clr_optimization_v4.0.30319_64 - ok
21:49:46.0793 4052 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
21:49:46.0824 4052 CmBatt - ok
21:49:46.0855 4052 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:49:46.0887 4052 cmdide - ok
21:49:46.0918 4052 [ EBF28856F69CF094A902F884CF989706 ] CNG C:\Windows\system32\Drivers\cng.sys
21:49:46.0980 4052 CNG - ok
21:49:47.0011 4052 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
21:49:47.0043 4052 Compbatt - ok
21:49:47.0089 4052 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
21:49:47.0136 4052 CompositeBus - ok
21:49:47.0152 4052 COMSysApp - ok
21:49:47.0167 4052 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
21:49:47.0199 4052 crcdisk - ok
21:49:47.0261 4052 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:49:47.0308 4052 CryptSvc - ok
21:49:47.0339 4052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:49:47.0448 4052 DcomLaunch - ok
21:49:47.0511 4052 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
21:49:47.0620 4052 defragsvc - ok
21:49:47.0667 4052 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:49:47.0745 4052 DfsC - ok
21:49:47.0807 4052 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
21:49:47.0854 4052 Dhcp - ok
21:49:47.0901 4052 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
21:49:47.0963 4052 discache - ok
21:49:47.0979 4052 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
21:49:48.0010 4052 Disk - ok
21:49:48.0041 4052 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:49:48.0088 4052 Dnscache - ok
21:49:48.0135 4052 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
21:49:48.0244 4052 dot3svc - ok
21:49:48.0275 4052 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
21:49:48.0353 4052 DPS - ok
21:49:48.0400 4052 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:49:48.0447 4052 drmkaud - ok
21:49:48.0509 4052 [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:49:48.0556 4052 DXGKrnl - ok
21:49:48.0603 4052 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
21:49:48.0681 4052 EapHost - ok
21:49:48.0790 4052 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
21:49:48.0946 4052 ebdrv - ok
21:49:48.0977 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] EFS C:\Windows\System32\lsass.exe
21:49:49.0024 4052 EFS - ok
21:49:49.0117 4052 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:49:49.0211 4052 ehRecvr - ok
21:49:49.0242 4052 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
21:49:49.0320 4052 ehSched - ok
21:49:49.0383 4052 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
21:49:49.0429 4052 elxstor - ok
21:49:49.0461 4052 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:49:49.0507 4052 ErrDev - ok
21:49:49.0570 4052 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
21:49:49.0663 4052 EventSystem - ok
21:49:49.0679 4052 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
21:49:49.0773 4052 exfat - ok
21:49:49.0788 4052 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:49:49.0882 4052 fastfat - ok
21:49:49.0944 4052 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
21:49:50.0007 4052 Fax - ok
21:49:50.0038 4052 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
21:49:50.0069 4052 fdc - ok
21:49:50.0100 4052 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
21:49:50.0209 4052 fdPHost - ok
21:49:50.0225 4052 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
21:49:50.0319 4052 FDResPub - ok
21:49:50.0334 4052 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:49:50.0350 4052 FileInfo - ok
21:49:50.0381 4052 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:49:50.0443 4052 Filetrace - ok
21:49:50.0459 4052 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
21:49:50.0490 4052 flpydisk - ok
21:49:50.0537 4052 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:49:50.0568 4052 FltMgr - ok
21:49:50.0631 4052 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
21:49:50.0693 4052 FontCache - ok
21:49:50.0771 4052 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:49:50.0802 4052 FontCache3.0.0.0 - ok
21:49:50.0849 4052 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:49:50.0880 4052 FsDepends - ok
21:49:50.0911 4052 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:49:50.0943 4052 Fs_Rec - ok
21:49:50.0989 4052 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:49:51.0021 4052 fvevol - ok
21:49:51.0052 4052 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
21:49:51.0067 4052 gagp30kx - ok
21:49:51.0114 4052 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:49:51.0130 4052 GEARAspiWDM - ok
21:49:51.0192 4052 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
21:49:51.0301 4052 gpsvc - ok
21:49:51.0395 4052 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:49:51.0411 4052 gupdate - ok
21:49:51.0426 4052 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
21:49:51.0442 4052 gupdatem - ok
21:49:51.0473 4052 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:49:51.0535 4052 hcw85cir - ok
21:49:51.0598 4052 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:49:51.0660 4052 HdAudAddService - ok
21:49:51.0691 4052 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
21:49:51.0738 4052 HDAudBus - ok
21:49:51.0769 4052 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
21:49:51.0801 4052 HidBatt - ok
21:49:51.0832 4052 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
21:49:51.0879 4052 HidBth - ok
21:49:51.0894 4052 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
21:49:51.0941 4052 HidIr - ok
21:49:51.0972 4052 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
21:49:52.0050 4052 hidserv - ok
21:49:52.0097 4052 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:49:52.0144 4052 HidUsb - ok
21:49:52.0175 4052 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:49:52.0269 4052 hkmsvc - ok
21:49:52.0315 4052 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:49:52.0362 4052 HomeGroupListener - ok
21:49:52.0409 4052 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:49:52.0440 4052 HomeGroupProvider - ok
21:49:52.0503 4052 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:49:52.0534 4052 HpSAMD - ok
21:49:52.0565 4052 [ F47CEC45FB85791D4AB237563AD0FA8F ] HTCAND64 C:\Windows\system32\Drivers\ANDROIDUSB.sys
21:49:52.0627 4052 HTCAND64 - ok
21:49:52.0659 4052 [ B8B1B284362E1D8135112573395D5DA5 ] htcnprot C:\Windows\system32\DRIVERS\htcnprot.sys
21:49:52.0674 4052 htcnprot - ok
21:49:52.0721 4052 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:49:52.0815 4052 HTTP - ok
21:49:52.0846 4052 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:49:52.0877 4052 hwpolicy - ok
21:49:52.0908 4052 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
21:49:52.0939 4052 i8042prt - ok
21:49:52.0971 4052 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:49:53.0002 4052 iaStorV - ok
21:49:53.0095 4052 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:49:53.0189 4052 idsvc - ok
21:49:53.0236 4052 IEEtwCollectorService - ok
21:49:53.0423 4052 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
21:49:53.0641 4052 igfx - ok
21:49:53.0688 4052 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
21:49:53.0719 4052 iirsp - ok
21:49:53.0766 4052 [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT C:\Windows\System32\ikeext.dll
21:49:53.0813 4052 IKEEXT - ok
21:49:53.0860 4052 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
21:49:53.0875 4052 intelide - ok
21:49:53.0922 4052 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:49:53.0953 4052 intelppm - ok
21:49:54.0000 4052 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:49:54.0094 4052 IPBusEnum - ok
21:49:54.0125 4052 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:49:54.0203 4052 IpFilterDriver - ok
21:49:54.0250 4052 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:49:54.0312 4052 iphlpsvc - ok
21:49:54.0359 4052 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:49:54.0390 4052 IPMIDRV - ok
21:49:54.0421 4052 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:49:54.0499 4052 IPNAT - ok
21:49:54.0562 4052 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
21:49:54.0593 4052 iPod Service - ok
21:49:54.0609 4052 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:49:54.0718 4052 IRENUM - ok
21:49:54.0733 4052 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:49:54.0765 4052 isapnp - ok
21:49:54.0796 4052 [ 96BB922A0981BC7432C8CF52B5410FE6 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:49:54.0827 4052 iScsiPrt - ok
21:49:54.0843 4052 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
21:49:54.0874 4052 kbdclass - ok
21:49:54.0905 4052 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
21:49:54.0936 4052 kbdhid - ok
21:49:54.0952 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] KeyIso C:\Windows\system32\lsass.exe
21:49:54.0967 4052 KeyIso - ok
21:49:55.0014 4052 [ 8F489706472F7E9A06BAAA198703FA64 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:49:55.0045 4052 KSecDD - ok
21:49:55.0061 4052 [ 868A2CAAB12EFC7A021682BCA0EEC54C ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:49:55.0092 4052 KSecPkg - ok
21:49:55.0123 4052 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:49:55.0233 4052 ksthunk - ok
21:49:55.0295 4052 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
21:49:55.0404 4052 KtmRm - ok
21:49:55.0482 4052 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
21:49:55.0576 4052 LanmanServer - ok
21:49:55.0607 4052 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:49:55.0701 4052 LanmanWorkstation - ok
21:49:55.0763 4052 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:49:55.0825 4052 lltdio - ok
21:49:55.0888 4052 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:49:55.0997 4052 lltdsvc - ok
21:49:56.0013 4052 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:49:56.0075 4052 lmhosts - ok
21:49:56.0106 4052 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
21:49:56.0138 4052 LSI_FC - ok
21:49:56.0169 4052 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
21:49:56.0200 4052 LSI_SAS - ok
21:49:56.0231 4052 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:49:56.0247 4052 LSI_SAS2 - ok
21:49:56.0262 4052 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:49:56.0294 4052 LSI_SCSI - ok
21:49:56.0309 4052 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
21:49:56.0387 4052 luafv - ok
21:49:56.0418 4052 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:49:56.0481 4052 Mcx2Svc - ok
21:49:56.0512 4052 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
21:49:56.0543 4052 megasas - ok
21:49:56.0574 4052 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
21:49:56.0606 4052 MegaSR - ok
21:49:56.0652 4052 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
21:49:56.0730 4052 MMCSS - ok
21:49:56.0746 4052 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
21:49:56.0824 4052 Modem - ok
21:49:56.0886 4052 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:49:56.0918 4052 monitor - ok
21:49:56.0980 4052 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:49:56.0996 4052 mouclass - ok
21:49:57.0042 4052 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:49:57.0074 4052 mouhid - ok
21:49:57.0120 4052 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:49:57.0136 4052 mountmgr - ok
21:49:57.0230 4052 [ AEE4E9CC59CDEB55B1ECB0E596E796BE ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:49:57.0276 4052 MozillaMaintenance - ok
21:49:57.0323 4052 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
21:49:57.0339 4052 mpio - ok
21:49:57.0386 4052 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:49:57.0448 4052 mpsdrv - ok
21:49:57.0495 4052 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:49:57.0604 4052 MpsSvc - ok
21:49:57.0635 4052 [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:49:57.0682 4052 MRxDAV - ok
21:49:57.0729 4052 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:49:57.0776 4052 mrxsmb - ok
21:49:57.0807 4052 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:49:57.0854 4052 mrxsmb10 - ok
21:49:57.0869 4052 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:49:57.0916 4052 mrxsmb20 - ok
21:49:57.0947 4052 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
21:49:57.0963 4052 msahci - ok
21:49:57.0994 4052 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:49:58.0025 4052 msdsm - ok
21:49:58.0072 4052 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
21:49:58.0134 4052 MSDTC - ok
21:49:58.0181 4052 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:49:58.0259 4052 Msfs - ok
21:49:58.0259 4052 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:49:58.0353 4052 mshidkmdf - ok
21:49:58.0384 4052 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:49:58.0400 4052 msisadrv - ok
21:49:58.0462 4052 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:49:58.0571 4052 MSiSCSI - ok
21:49:58.0571 4052 msiserver - ok
21:49:58.0634 4052 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:49:58.0712 4052 MSKSSRV - ok
21:49:58.0743 4052 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:49:58.0821 4052 MSPCLOCK - ok
21:49:58.0836 4052 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:49:58.0914 4052 MSPQM - ok
21:49:58.0961 4052 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:49:58.0992 4052 MsRPC - ok
21:49:59.0039 4052 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
21:49:59.0070 4052 mssmbios - ok
21:49:59.0102 4052 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:49:59.0180 4052 MSTEE - ok
21:49:59.0211 4052 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
21:49:59.0242 4052 MTConfig - ok
21:49:59.0273 4052 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
21:49:59.0304 4052 Mup - ok
21:49:59.0351 4052 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
21:49:59.0445 4052 napagent - ok
21:49:59.0507 4052 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:49:59.0554 4052 NativeWifiP - ok
21:49:59.0601 4052 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
21:49:59.0663 4052 NDIS - ok
21:49:59.0694 4052 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:49:59.0772 4052 NdisCap - ok
21:49:59.0819 4052 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:49:59.0913 4052 NdisTapi - ok
21:49:59.0944 4052 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:50:00.0006 4052 Ndisuio - ok
21:50:00.0053 4052 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:50:00.0131 4052 NdisWan - ok
21:50:00.0162 4052 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:50:00.0225 4052 NDProxy - ok
21:50:00.0272 4052 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:50:00.0350 4052 NetBIOS - ok
21:50:00.0396 4052 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:50:00.0474 4052 NetBT - ok
21:50:00.0490 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] Netlogon C:\Windows\system32\lsass.exe
21:50:00.0521 4052 Netlogon - ok
21:50:00.0568 4052 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
21:50:00.0662 4052 Netman - ok
21:50:00.0708 4052 [ 21318671BCAD3ACF16638F98D4D00973 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:50:00.0786 4052 NetMsmqActivator - ok
21:50:00.0786 4052 [ 21318671BCAD3ACF16638F98D4D00973 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:50:00.0818 4052 NetPipeActivator - ok
21:50:00.0849 4052 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
21:50:00.0942 4052 netprofm - ok
21:50:00.0942 4052 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:50:00.0974 4052 NetTcpActivator - ok
21:50:00.0989 4052 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:50:01.0020 4052 NetTcpPortSharing - ok
21:50:01.0067 4052 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
21:50:01.0098 4052 nfrd960 - ok
21:50:01.0130 4052 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:50:01.0161 4052 NlaSvc - ok
21:50:01.0192 4052 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:50:01.0254 4052 Npfs - ok
21:50:01.0286 4052 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
21:50:01.0364 4052 nsi - ok
21:50:01.0379 4052 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:50:01.0457 4052 nsiproxy - ok
21:50:01.0520 4052 [ 1A29A59A4C5BA6F8C85062A613B7E2B2 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:50:01.0598 4052 Ntfs - ok
21:50:01.0644 4052 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
21:50:01.0722 4052 Null - ok
21:50:01.0754 4052 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:50:01.0769 4052 nvraid - ok
21:50:01.0785 4052 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:50:01.0816 4052 nvstor - ok
21:50:01.0832 4052 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:50:01.0863 4052 nv_agp - ok
21:50:01.0910 4052 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:50:01.0925 4052 ohci1394 - ok
21:50:01.0972 4052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:50:02.0034 4052 p2pimsvc - ok
21:50:02.0066 4052 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
21:50:02.0112 4052 p2psvc - ok
21:50:02.0144 4052 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
21:50:02.0159 4052 Parport - ok
21:50:02.0206 4052 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:50:02.0237 4052 partmgr - ok
21:50:02.0300 4052 [ AFADA8B97BE3C9398DC6C770409C3544 ] PassThru Service C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
21:50:02.0331 4052 PassThru Service ( UnsignedFile.Multi.Generic ) - warning
21:50:02.0331 4052 PassThru Service - detected UnsignedFile.Multi.Generic (1)
21:50:02.0378 4052 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:50:02.0440 4052 PcaSvc - ok
21:50:02.0456 4052 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
21:50:02.0487 4052 pci - ok
21:50:02.0518 4052 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
21:50:02.0549 4052 pciide - ok
21:50:02.0580 4052 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
21:50:02.0612 4052 pcmcia - ok
21:50:02.0627 4052 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
21:50:02.0658 4052 pcw - ok
21:50:02.0690 4052 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:50:02.0783 4052 PEAUTH - ok
21:50:02.0861 4052 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:50:02.0908 4052 PerfHost - ok
21:50:02.0986 4052 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
21:50:03.0111 4052 pla - ok
21:50:03.0158 4052 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:50:03.0204 4052 PlugPlay - ok
21:50:03.0236 4052 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:50:03.0282 4052 PNRPAutoReg - ok
21:50:03.0314 4052 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:50:03.0345 4052 PNRPsvc - ok
21:50:03.0392 4052 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:50:03.0501 4052 PolicyAgent - ok
21:50:03.0548 4052 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
21:50:03.0626 4052 Power - ok
21:50:03.0688 4052 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:50:03.0750 4052 PptpMiniport - ok
21:50:03.0797 4052 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
21:50:03.0844 4052 Processor - ok
21:50:03.0891 4052 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
21:50:03.0969 4052 ProfSvc - ok
21:50:04.0000 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] ProtectedStorage C:\Windows\system32\lsass.exe
21:50:04.0016 4052 ProtectedStorage - ok
21:50:04.0078 4052 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:50:04.0156 4052 Psched - ok
21:50:04.0203 4052 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
21:50:04.0281 4052 ql2300 - ok
21:50:04.0312 4052 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
21:50:04.0343 4052 ql40xx - ok
21:50:04.0374 4052 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
21:50:04.0452 4052 QWAVE - ok
21:50:04.0468 4052 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:50:04.0515 4052 QWAVEdrv - ok
21:50:04.0686 4052 [ 9B35220786B06B61D19C54406904E6ED ] Radio.fx C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
21:50:04.0858 4052 Radio.fx - ok
21:50:04.0905 4052 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:50:04.0983 4052 RasAcd - ok
21:50:05.0030 4052 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:50:05.0108 4052 RasAgileVpn - ok
21:50:05.0139 4052 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
21:50:05.0232 4052 RasAuto - ok
21:50:05.0279 4052 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:50:05.0357 4052 Rasl2tp - ok
21:50:05.0388 4052 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
21:50:05.0498 4052 RasMan - ok
21:50:05.0529 4052 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:50:05.0622 4052 RasPppoe - ok
21:50:05.0638 4052 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:50:05.0716 4052 RasSstp - ok
21:50:05.0763 4052 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:50:05.0841 4052 rdbss - ok
21:50:05.0856 4052 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
21:50:05.0903 4052 rdpbus - ok
21:50:05.0934 4052 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:50:06.0012 4052 RDPCDD - ok
21:50:06.0044 4052 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:50:06.0122 4052 RDPENCDD - ok
21:50:06.0137 4052 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:50:06.0200 4052 RDPREFMP - ok
21:50:06.0246 4052 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:50:06.0309 4052 RDPWD - ok
21:50:06.0340 4052 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:50:06.0371 4052 rdyboost - ok
21:50:06.0418 4052 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:50:06.0512 4052 RemoteAccess - ok
21:50:06.0558 4052 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:50:06.0652 4052 RemoteRegistry - ok
21:50:06.0699 4052 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:50:06.0792 4052 RpcEptMapper - ok
21:50:06.0824 4052 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
21:50:06.0870 4052 RpcLocator - ok
21:50:06.0917 4052 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
21:50:06.0995 4052 RpcSs - ok
21:50:07.0026 4052 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:50:07.0089 4052 rspndr - ok
21:50:07.0120 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] SamSs C:\Windows\system32\lsass.exe
21:50:07.0136 4052 SamSs - ok
21:50:07.0182 4052 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:50:07.0214 4052 sbp2port - ok
21:50:07.0245 4052 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:50:07.0354 4052 SCardSvr - ok
21:50:07.0385 4052 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:50:07.0463 4052 scfilter - ok
21:50:07.0526 4052 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
21:50:07.0650 4052 Schedule - ok
21:50:07.0697 4052 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
21:50:07.0760 4052 SCPolicySvc - ok
21:50:07.0775 4052 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:50:07.0822 4052 SDRSVC - ok
21:50:07.0869 4052 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:50:07.0947 4052 secdrv - ok
21:50:07.0994 4052 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
21:50:08.0072 4052 seclogon - ok
21:50:08.0118 4052 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
21:50:08.0196 4052 SENS - ok
21:50:08.0212 4052 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:50:08.0274 4052 SensrSvc - ok
21:50:08.0306 4052 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
21:50:08.0337 4052 Serenum - ok
21:50:08.0368 4052 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
21:50:08.0415 4052 Serial - ok
21:50:08.0430 4052 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
21:50:08.0462 4052 sermouse - ok
21:50:08.0508 4052 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
21:50:08.0586 4052 SessionEnv - ok
21:50:08.0618 4052 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:50:08.0664 4052 sffdisk - ok
21:50:08.0696 4052 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:50:08.0742 4052 sffp_mmc - ok
21:50:08.0758 4052 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:50:08.0789 4052 sffp_sd - ok
21:50:08.0820 4052 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
21:50:08.0867 4052 sfloppy - ok
21:50:08.0898 4052 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:50:09.0023 4052 SharedAccess - ok
21:50:09.0054 4052 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:50:09.0148 4052 ShellHWDetection - ok
21:50:09.0179 4052 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:50:09.0210 4052 SiSRaid2 - ok
21:50:09.0273 4052 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
21:50:09.0304 4052 SiSRaid4 - ok
21:50:09.0398 4052 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:50:09.0491 4052 SkypeUpdate - ok
21:50:09.0538 4052 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:50:09.0600 4052 Smb - ok
21:50:09.0663 4052 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:50:09.0725 4052 SNMPTRAP - ok
21:50:09.0772 4052 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
21:50:09.0803 4052 spldr - ok
21:50:09.0866 4052 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
21:50:09.0912 4052 Spooler - ok
21:50:10.0037 4052 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
21:50:10.0224 4052 sppsvc - ok
21:50:10.0256 4052 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:50:10.0349 4052 sppuinotify - ok
21:50:10.0396 4052 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
21:50:10.0474 4052 srv - ok
21:50:10.0490 4052 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:50:10.0536 4052 srv2 - ok
21:50:10.0568 4052 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:50:10.0614 4052 srvnet - ok
21:50:10.0661 4052 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:50:10.0739 4052 SSDPSRV - ok
21:50:10.0755 4052 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:50:10.0833 4052 SstpSvc - ok
21:50:10.0864 4052 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
21:50:10.0880 4052 stexstor - ok
21:50:10.0926 4052 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
21:50:10.0989 4052 stisvc - ok
21:50:11.0020 4052 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
21:50:11.0036 4052 swenum - ok
21:50:11.0098 4052 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
21:50:11.0192 4052 swprv - ok
21:50:11.0270 4052 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
21:50:11.0363 4052 SysMain - ok
21:50:11.0394 4052 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:50:11.0457 4052 TabletInputService - ok
21:50:11.0472 4052 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:50:11.0582 4052 TapiSrv - ok
21:50:11.0613 4052 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
21:50:11.0706 4052 TBS - ok
21:50:11.0784 4052 [ 40AF23633D197905F03AB5628C558C51 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:50:11.0862 4052 Tcpip - ok
21:50:11.0909 4052 [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:50:11.0972 4052 TCPIP6 - ok
21:50:12.0018 4052 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:50:12.0065 4052 tcpipreg - ok
21:50:12.0112 4052 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:50:12.0174 4052 TDPIPE - ok
21:50:12.0206 4052 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:50:12.0252 4052 TDTCP - ok
21:50:12.0299 4052 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:50:12.0362 4052 tdx - ok
21:50:12.0393 4052 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
21:50:12.0424 4052 TermDD - ok
21:50:12.0455 4052 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
21:50:12.0533 4052 TermService - ok
21:50:12.0580 4052 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
21:50:12.0627 4052 Themes - ok
21:50:12.0642 4052 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
21:50:12.0720 4052 THREADORDER - ok
21:50:12.0752 4052 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
21:50:12.0830 4052 TrkWks - ok
21:50:12.0908 4052 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:50:12.0986 4052 TrustedInstaller - ok
21:50:13.0032 4052 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:50:13.0079 4052 tssecsrv - ok
21:50:13.0126 4052 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:50:13.0188 4052 TsUsbFlt - ok
21:50:13.0251 4052 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:50:13.0329 4052 tunnel - ok
21:50:13.0360 4052 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
21:50:13.0391 4052 uagp35 - ok
21:50:13.0438 4052 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:50:13.0516 4052 udfs - ok
21:50:13.0547 4052 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:50:13.0610 4052 UI0Detect - ok
21:50:13.0625 4052 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:50:13.0656 4052 uliagpkx - ok
21:50:13.0703 4052 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
21:50:13.0734 4052 umbus - ok
21:50:13.0781 4052 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
21:50:13.0812 4052 UmPass - ok
21:50:13.0844 4052 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
21:50:13.0953 4052 upnphost - ok
21:50:14.0000 4052 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
21:50:14.0031 4052 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
21:50:14.0031 4052 USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
21:50:14.0078 4052 [ 60029C2AC9CCD32D8CE758CE672CD25F ] usbbus C:\Windows\system32\DRIVERS\lgx64bus.sys
21:50:14.0140 4052 usbbus - ok
21:50:14.0171 4052 [ DCA68B0943D6FA415F0C56C92158A83A ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:50:14.0234 4052 usbccgp - ok
21:50:14.0280 4052 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:50:14.0327 4052 usbcir - ok
21:50:14.0374 4052 [ 7E355CF2DCF7360B7D25E160C38211BE ] UsbDiag C:\Windows\system32\DRIVERS\lgx64diag.sys
21:50:14.0405 4052 UsbDiag - ok
21:50:14.0436 4052 [ 18A85013A3E0F7E1755365D287443965 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
21:50:14.0468 4052 usbehci - ok
21:50:14.0499 4052 [ 8D1196CFBB223621F2C67D45710F25BA ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:50:14.0546 4052 usbhub - ok
21:50:14.0592 4052 [ BB3392DB7F1E6D9B44D6855B31F1E056 ] USBModem C:\Windows\system32\DRIVERS\lgx64modem.sys
21:50:14.0624 4052 USBModem - ok
21:50:14.0655 4052 [ 765A92D428A8DB88B960DA5A8D6089DC ] usbohci C:\Windows\system32\drivers\usbohci.sys
21:50:14.0702 4052 usbohci - ok
21:50:14.0748 4052 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:50:14.0795 4052 usbprint - ok
21:50:14.0842 4052 [ 9661DA76B4531B2DA272ECCE25A8AF24 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
21:50:14.0889 4052 usbscan - ok
21:50:14.0936 4052 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:50:14.0982 4052 USBSTOR - ok
21:50:15.0029 4052 [ DD253AFC3BC6CBA412342DE60C3647F3 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
21:50:15.0045 4052 usbuhci - ok
21:50:15.0107 4052 [ 1F775DA4CF1A3A1834207E975A72E9D7 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
21:50:15.0170 4052 usbvideo - ok
21:50:15.0232 4052 [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx C:\Windows\system32\drivers\usb8023x.sys
21:50:15.0263 4052 usb_rndisx - ok
21:50:15.0294 4052 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
21:50:15.0388 4052 UxSms - ok
21:50:15.0404 4052 [ 4D71227301DD8D09097B9E4CC6527E5A ] VaultSvc C:\Windows\system32\lsass.exe
21:50:15.0435 4052 VaultSvc - ok
21:50:15.0450 4052 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:50:15.0482 4052 vdrvroot - ok
21:50:15.0528 4052 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
21:50:15.0622 4052 vds - ok
21:50:15.0653 4052 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:50:15.0684 4052 vga - ok
21:50:15.0700 4052 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
21:50:15.0762 4052 VgaSave - ok
21:50:15.0809 4052 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:50:15.0840 4052 vhdmp - ok
21:50:15.0872 4052 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
21:50:15.0903 4052 viaide - ok
21:50:15.0918 4052 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:50:15.0934 4052 volmgr - ok
21:50:15.0996 4052 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:50:16.0028 4052 volmgrx - ok
21:50:16.0059 4052 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:50:16.0090 4052 volsnap - ok
21:50:16.0137 4052 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
21:50:16.0168 4052 vsmraid - ok
21:50:16.0230 4052 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
21:50:16.0340 4052 VSS - ok
21:50:16.0355 4052 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
21:50:16.0402 4052 vwifibus - ok
21:50:16.0433 4052 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
21:50:16.0464 4052 vwififlt - ok
21:50:16.0511 4052 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
21:50:16.0589 4052 W32Time - ok
21:50:16.0620 4052 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
21:50:16.0652 4052 WacomPen - ok
21:50:16.0698 4052 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:50:16.0776 4052 WANARP - ok
21:50:16.0776 4052 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:50:16.0839 4052 Wanarpv6 - ok
21:50:16.0917 4052 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
21:50:17.0010 4052 WatAdminSvc - ok
21:50:17.0088 4052 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
21:50:17.0151 4052 wbengine - ok
21:50:17.0198 4052 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:50:17.0244 4052 WbioSrvc - ok
21:50:17.0291 4052 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:50:17.0338 4052 wcncsvc - ok
21:50:17.0354 4052 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:50:17.0400 4052 WcsPlugInService - ok
21:50:17.0432 4052 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
21:50:17.0463 4052 Wd - ok
21:50:17.0510 4052 [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:50:17.0572 4052 Wdf01000 - ok
21:50:17.0588 4052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:50:17.0712 4052 WdiServiceHost - ok
21:50:17.0728 4052 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:50:17.0759 4052 WdiSystemHost - ok
21:50:17.0806 4052 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D ] WebClient C:\Windows\System32\webclnt.dll
21:50:17.0853 4052 WebClient - ok
21:50:17.0900 4052 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:50:18.0009 4052 Wecsvc - ok
21:50:18.0040 4052 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:50:18.0118 4052 wercplsupport - ok
21:50:18.0134 4052 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
21:50:18.0212 4052 WerSvc - ok
21:50:18.0258 4052 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:50:18.0336 4052 WfpLwf - ok
21:50:18.0352 4052 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:50:18.0383 4052 WIMMount - ok
21:50:18.0399 4052 WinDefend - ok
21:50:18.0414 4052 WinHttpAutoProxySvc - ok
21:50:18.0492 4052 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:50:18.0570 4052 Winmgmt - ok
21:50:18.0664 4052 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
21:50:18.0804 4052 WinRM - ok
21:50:18.0867 4052 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
21:50:18.0914 4052 WinUsb - ok
21:50:18.0960 4052 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
21:50:19.0054 4052 Wlansvc - ok
21:50:19.0085 4052 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:50:19.0116 4052 WmiAcpi - ok
21:50:19.0163 4052 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:50:19.0226 4052 wmiApSrv - ok
21:50:19.0257 4052 WMPNetworkSvc - ok
21:50:19.0288 4052 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:50:19.0350 4052 WPCSvc - ok
21:50:19.0382 4052 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:50:19.0413 4052 WPDBusEnum - ok
21:50:19.0460 4052 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:50:19.0538 4052 ws2ifsl - ok
21:50:19.0553 4052 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
21:50:19.0584 4052 wscsvc - ok
21:50:19.0600 4052 WSearch - ok
21:50:19.0694 4052 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
21:50:19.0787 4052 wuauserv - ok
21:50:19.0834 4052 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:50:19.0896 4052 WudfPf - ok
21:50:19.0974 4052 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:50:20.0021 4052 WUDFRd - ok
21:50:20.0052 4052 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:50:20.0084 4052 wudfsvc - ok
21:50:20.0130 4052 [ 04F82965C09CBDF646B487E145060301 ] WwanSvc C:\Windows\System32\wwansvc.dll
21:50:20.0193 4052 WwanSvc - ok
21:50:20.0240 4052 ================ Scan global ===============================
21:50:20.0271 4052 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
21:50:20.0318 4052 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
21:50:20.0333 4052 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
21:50:20.0364 4052 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
21:50:20.0411 4052 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
21:50:20.0411 4052 [Global] - ok
21:50:20.0411 4052 ================ Scan MBR ==================================
21:50:20.0427 4052 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
21:50:20.0661 4052 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
21:50:20.0661 4052 \Device\Harddisk0\DR0 - detected TDSS File System (1)
21:50:20.0661 4052 ================ Scan VBR ==================================
21:50:20.0676 4052 [ 2FBFDFA06C1E8CD4F2108E2F757ADADC ] \Device\Harddisk0\DR0\Partition1
21:50:20.0676 4052 \Device\Harddisk0\DR0\Partition1 - ok
21:50:20.0708 4052 [ 9201042947DD4B67D34AC18E10A5EE98 ] \Device\Harddisk0\DR0\Partition2
21:50:20.0708 4052 \Device\Harddisk0\DR0\Partition2 - ok
21:50:20.0708 4052 ============================================================
21:50:20.0708 4052 Scan finished
21:50:20.0708 4052 ============================================================
21:50:20.0723 0360 Detected object count: 3
21:50:20.0723 0360 Actual detected object count: 3
21:50:29.0646 0360 PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
21:50:29.0646 0360 PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:50:29.0646 0360 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
21:50:29.0646 0360 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:50:29.0646 0360 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
21:50:29.0646 0360 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
21:50:33.0234 4028 Deinitialize success

Hi,
gut gemacht!

Bitte warte auf weitere Anweisungen, OK?
Melde mich voraussichtlich morgen wieder!

Weiter geht's...


Schritt 1
Starte bitte TDSSkiller.exe erneut.
Vista und Win7 User mit Rechtsklick "als Administrator ausführen".

• Klicke auf "Change parameters". (Bild 1)
• Setze die Haken auch bei "Additional options" (Bild 2) und klicke auf OK.
• Drücke auf Start Scan.
  Mache während des Scans nichts am Rechner!
• Gehe sicher, dass bei TDSS File System die Option Cure oder Delete angehakt ist. (Bild 3) [Andere Einträge - Skip wählen]
• Drücke Continue
• Bestätige den Reboot (Bild 4)
• TDSSKiller wird ein Logfile auf deinem Systemlaufwerk speichern (C:\TDSSKiller.<version_date_time>log.txt).

Poste bitte den Inhalt dieses Logfiles in den Thread hier.

Hi,

ich hab schon länger keine Antwort mehr von Dir erhalten. Brauchst Du noch Hilfe?

Hinweis: Sollte ich die nächsten 24h keine Nachricht von Dir bekommen, lösche ich das Thema aus meinen Abos und werde daher über Änderungen oder Beiträge nicht weiter informiert. Wenn Du weitermachen möchtest, schreib mir dann einfach eine PM.

TDSSKiller

16:51:06.0182 2392 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
16:51:08.0194 2392 ============================================================
16:51:08.0194 2392 Current date / time: 2014/04/28 16:51:08.0194
16:51:08.0194 2392 SystemInfo:
16:51:08.0194 2392
16:51:08.0194 2392 OS Version: 6.1.7601 ServicePack: 1.0
16:51:08.0194 2392 Product type: Workstation
16:51:08.0194 2392 ComputerName: MAJA-PC
16:51:08.0194 2392 UserName: root
16:51:08.0194 2392 Windows directory: C:\Windows
16:51:08.0194 2392 System windows directory: C:\Windows
16:51:08.0194 2392 Running under WOW64
16:51:08.0194 2392 Processor architecture: Intel x64
16:51:08.0194 2392 Number of processors: 2
16:51:08.0194 2392 Page size: 0x1000
16:51:08.0194 2392 Boot type: Normal boot
16:51:08.0194 2392 ============================================================
16:51:09.0739 2392 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:51:09.0754 2392 ============================================================
16:51:09.0754 2392 \Device\Harddisk0\DR0:
16:51:09.0754 2392 MBR partitions:
16:51:09.0754 2392 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
16:51:09.0754 2392 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x38953000
16:51:09.0754 2392 ============================================================
16:51:09.0770 2392 C: <-> \Device\Harddisk0\DR0\Partition2
16:51:09.0770 2392 ============================================================
16:51:09.0770 2392 Initialize success
16:51:09.0770 2392 ============================================================
16:52:25.0885 4416 ============================================================
16:52:25.0885 4416 Scan started
16:52:25.0885 4416 Mode: Manual; SigCheck; TDLFS;
16:52:25.0885 4416 ============================================================
16:52:26.0306 4416 ================ Scan system memory ========================
16:52:26.0306 4416 System memory - ok
16:52:26.0306 4416 ================ Scan services =============================
16:52:26.0556 4416 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
16:52:26.0712 4416 1394ohci - ok
16:52:26.0759 4416 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
16:52:26.0805 4416 ACPI - ok
16:52:26.0837 4416 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
16:52:26.0899 4416 AcpiPmi - ok
16:52:27.0024 4416 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:52:27.0055 4416 AdobeARMservice - ok
16:52:27.0180 4416 [ C2CE3311D2477B1B24CFB67020AD49B6 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:52:27.0195 4416 AdobeFlashPlayerUpdateSvc - ok
16:52:27.0273 4416 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
16:52:27.0336 4416 adp94xx - ok
16:52:27.0351 4416 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
16:52:27.0398 4416 adpahci - ok
16:52:27.0414 4416 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
16:52:27.0461 4416 adpu320 - ok
16:52:27.0507 4416 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
16:52:27.0585 4416 AeLookupSvc - ok
16:52:27.0648 4416 [ 79059559E89D06E8B80CE2944BE20228 ] AFD C:\Windows\system32\drivers\afd.sys
16:52:27.0726 4416 AFD - ok
16:52:27.0788 4416 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
16:52:27.0819 4416 agp440 - ok
16:52:27.0866 4416 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
16:52:27.0944 4416 ALG - ok
16:52:28.0022 4416 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
16:52:28.0053 4416 aliide - ok
16:52:28.0069 4416 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
16:52:28.0100 4416 amdide - ok
16:52:28.0147 4416 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
16:52:28.0209 4416 AmdK8 - ok
16:52:28.0225 4416 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
16:52:28.0334 4416 AmdPPM - ok
16:52:28.0397 4416 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
16:52:28.0428 4416 amdsata - ok
16:52:28.0490 4416 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
16:52:28.0537 4416 amdsbs - ok
16:52:28.0553 4416 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
16:52:28.0584 4416 amdxata - ok
16:52:28.0631 4416 [ 8769A70C4E7648D1885BECF0119AEA1C ] andnetadb C:\Windows\system32\Drivers\lgandnetadb.sys
16:52:28.0677 4416 andnetadb - ok
16:52:28.0724 4416 [ B46840E5BDAEE0C749A3E5778F65EBE4 ] AndNetDiag C:\Windows\system32\DRIVERS\lgandnetdiag64.sys
16:52:28.0787 4416 AndNetDiag - ok
16:52:28.0833 4416 [ 130701C53E4DF44B54FED8C3892150F5 ] ANDNetModem C:\Windows\system32\DRIVERS\lgandnetmodem64.sys
16:52:28.0880 4416 ANDNetModem - ok
16:52:28.0943 4416 [ E3EC070581BBE36BA9F48BBB04E74FAC ] andnetndis C:\Windows\system32\DRIVERS\lgandnetndis64.sys
16:52:29.0021 4416 andnetndis - ok
16:52:29.0067 4416 [ 9C59BF508C5D408BB348254E0BA2EE30 ] androidusb C:\Windows\system32\Drivers\androidusb.sys
16:52:29.0099 4416 androidusb - ok
16:52:29.0208 4416 [ 4D282B9C5BB05DF92C9F3977DFB9F916 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
16:52:29.0255 4416 AntiVirSchedulerService - ok
16:52:29.0333 4416 [ 65AF41A7A2C5B6693E1B4164E7632C3E ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
16:52:29.0379 4416 AntiVirService - ok
16:52:29.0426 4416 [ 3D15C6EDBF84D792ACEBD2289546DBAF ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
16:52:29.0504 4416 AntiVirWebService - ok
16:52:29.0567 4416 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
16:52:29.0676 4416 AppID - ok
16:52:29.0707 4416 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
16:52:29.0816 4416 AppIDSvc - ok
16:52:29.0863 4416 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
16:52:29.0910 4416 Appinfo - ok
16:52:29.0972 4416 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
16:52:30.0003 4416 arc - ok
16:52:30.0019 4416 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
16:52:30.0050 4416 arcsas - ok
16:52:30.0222 4416 [ 9A262EDD17F8473B91B333D6B031A901 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
16:52:30.0331 4416 aspnet_state - ok
16:52:30.0362 4416 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
16:52:30.0456 4416 AsyncMac - ok
16:52:30.0503 4416 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
16:52:30.0534 4416 atapi - ok
16:52:30.0581 4416 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
16:52:30.0705 4416 AudioEndpointBuilder - ok
16:52:30.0705 4416 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
16:52:30.0783 4416 AudioSrv - ok
16:52:30.0877 4416 [ 7806BFCD1D7FA5EC23F7324D4EAFD25B ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
16:52:30.0955 4416 avgntflt - ok
16:52:30.0986 4416 [ C3A58DBD18786C338126D30BF8C33D72 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
16:52:31.0017 4416 avipbb - ok
16:52:31.0064 4416 [ 390184FAD8FCC1B6DA25AEBAE928C3B6 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
16:52:31.0095 4416 avkmgr - ok
16:52:31.0142 4416 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
16:52:31.0251 4416 AxInstSV - ok
16:52:31.0314 4416 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
16:52:31.0407 4416 b06bdrv - ok
16:52:31.0454 4416 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
16:52:31.0517 4416 b57nd60a - ok
16:52:31.0673 4416 [ 2D659B569A76CDB83B815675A80D7096 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys
16:52:31.0813 4416 BCM43XX - ok
16:52:31.0860 4416 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
16:52:31.0938 4416 BDESVC - ok
16:52:31.0985 4416 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
16:52:32.0063 4416 Beep - ok
16:52:32.0141 4416 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
16:52:32.0187 4416 BFE - ok
16:52:32.0265 4416 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
16:52:32.0390 4416 BITS - ok
16:52:32.0437 4416 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
16:52:32.0484 4416 blbdrive - ok
16:52:32.0562 4416 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
16:52:32.0609 4416 Bonjour Service - ok
16:52:32.0671 4416 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
16:52:32.0733 4416 bowser - ok
16:52:32.0780 4416 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:52:32.0827 4416 BrFiltLo - ok
16:52:32.0858 4416 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:52:32.0889 4416 BrFiltUp - ok
16:52:32.0905 4416 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
16:52:32.0952 4416 Browser - ok
16:52:32.0983 4416 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
16:52:33.0061 4416 Brserid - ok
16:52:33.0123 4416 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
16:52:33.0170 4416 BrSerWdm - ok
16:52:33.0186 4416 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
16:52:33.0248 4416 BrUsbMdm - ok
16:52:33.0264 4416 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
16:52:33.0311 4416 BrUsbSer - ok
16:52:33.0357 4416 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
16:52:33.0435 4416 BTHMODEM - ok
16:52:33.0545 4416 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
16:52:33.0638 4416 bthserv - ok
16:52:33.0669 4416 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
16:52:33.0763 4416 cdfs - ok
16:52:33.0825 4416 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
16:52:33.0857 4416 cdrom - ok
16:52:33.0919 4416 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
16:52:34.0013 4416 CertPropSvc - ok
16:52:34.0059 4416 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
16:52:34.0122 4416 circlass - ok
16:52:34.0169 4416 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
16:52:34.0200 4416 CLFS - ok
16:52:34.0293 4416 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:52:34.0325 4416 clr_optimization_v2.0.50727_32 - ok
16:52:34.0387 4416 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:52:34.0418 4416 clr_optimization_v2.0.50727_64 - ok
16:52:34.0543 4416 [ E87213F37A13E2B54391E40934F071D0 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:52:34.0683 4416 clr_optimization_v4.0.30319_32 - ok
16:52:34.0699 4416 [ 4AEDAB50F83580D0B4D6CF78191F92AA ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:52:34.0761 4416 clr_optimization_v4.0.30319_64 - ok
16:52:34.0808 4416 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
16:52:34.0855 4416 CmBatt - ok
16:52:34.0902 4416 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
16:52:34.0933 4416 cmdide - ok
16:52:34.0995 4416 [ EBF28856F69CF094A902F884CF989706 ] CNG C:\Windows\system32\Drivers\cng.sys
16:52:35.0058 4416 CNG - ok
16:52:35.0105 4416 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
16:52:35.0136 4416 Compbatt - ok
16:52:35.0183 4416 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
16:52:35.0245 4416 CompositeBus - ok
16:52:35.0261 4416 COMSysApp - ok
16:52:35.0276 4416 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
16:52:35.0307 4416 crcdisk - ok
16:52:35.0354 4416 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
16:52:35.0401 4416 CryptSvc - ok
16:52:35.0463 4416 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
16:52:35.0557 4416 DcomLaunch - ok
16:52:35.0619 4416 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
16:52:35.0729 4416 defragsvc - ok
16:52:35.0775 4416 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
16:52:35.0853 4416 DfsC - ok
16:52:35.0916 4416 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
16:52:35.0963 4416 Dhcp - ok
16:52:35.0994 4416 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
16:52:36.0072 4416 discache - ok
16:52:36.0119 4416 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
16:52:36.0165 4416 Disk - ok
16:52:36.0197 4416 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
16:52:36.0275 4416 Dnscache - ok
16:52:36.0321 4416 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
16:52:36.0431 4416 dot3svc - ok
16:52:36.0462 4416 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
16:52:36.0555 4416 DPS - ok
16:52:36.0618 4416 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
16:52:36.0649 4416 drmkaud - ok
16:52:36.0727 4416 [ 88612F1CE3BF42256913BF6E61C70D52 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
16:52:36.0789 4416 DXGKrnl - ok
16:52:36.0836 4416 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
16:52:36.0930 4416 EapHost - ok
16:52:37.0039 4416 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
16:52:37.0211 4416 ebdrv - ok
16:52:37.0257 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] EFS C:\Windows\System32\lsass.exe
16:52:37.0304 4416 EFS - ok
16:52:37.0398 4416 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
16:52:37.0491 4416 ehRecvr - ok
16:52:37.0523 4416 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
16:52:37.0601 4416 ehSched - ok
16:52:37.0679 4416 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
16:52:37.0741 4416 elxstor - ok
16:52:37.0772 4416 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
16:52:37.0819 4416 ErrDev - ok
16:52:37.0897 4416 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
16:52:37.0991 4416 EventSystem - ok
16:52:38.0006 4416 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
16:52:38.0115 4416 exfat - ok
16:52:38.0131 4416 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
16:52:38.0225 4416 fastfat - ok
16:52:38.0287 4416 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
16:52:38.0349 4416 Fax - ok
16:52:38.0381 4416 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
16:52:38.0412 4416 fdc - ok
16:52:38.0459 4416 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
16:52:38.0552 4416 fdPHost - ok
16:52:38.0583 4416 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
16:52:38.0677 4416 FDResPub - ok
16:52:38.0693 4416 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
16:52:38.0724 4416 FileInfo - ok
16:52:38.0771 4416 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
16:52:38.0864 4416 Filetrace - ok
16:52:38.0880 4416 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
16:52:38.0911 4416 flpydisk - ok
16:52:38.0958 4416 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
16:52:39.0005 4416 FltMgr - ok
16:52:39.0067 4416 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
16:52:39.0145 4416 FontCache - ok
16:52:39.0239 4416 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:52:39.0270 4416 FontCache3.0.0.0 - ok
16:52:39.0317 4416 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
16:52:39.0363 4416 FsDepends - ok
16:52:39.0410 4416 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
16:52:39.0441 4416 Fs_Rec - ok
16:52:39.0488 4416 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
16:52:39.0535 4416 fvevol - ok
16:52:39.0566 4416 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
16:52:39.0597 4416 gagp30kx - ok
16:52:39.0660 4416 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
16:52:39.0675 4416 GEARAspiWDM - ok
16:52:39.0738 4416 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
16:52:39.0847 4416 gpsvc - ok
16:52:39.0925 4416 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:52:39.0941 4416 gupdate - ok
16:52:39.0956 4416 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:52:39.0972 4416 gupdatem - ok
16:52:40.0019 4416 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
16:52:40.0065 4416 hcw85cir - ok
16:52:40.0143 4416 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
16:52:40.0190 4416 HdAudAddService - ok
16:52:40.0237 4416 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
16:52:40.0284 4416 HDAudBus - ok
16:52:40.0331 4416 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
16:52:40.0362 4416 HidBatt - ok
16:52:40.0393 4416 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
16:52:40.0455 4416 HidBth - ok
16:52:40.0471 4416 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
16:52:40.0518 4416 HidIr - ok
16:52:40.0565 4416 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
16:52:40.0658 4416 hidserv - ok
16:52:40.0705 4416 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
16:52:40.0752 4416 HidUsb - ok
16:52:40.0783 4416 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
16:52:40.0877 4416 hkmsvc - ok
16:52:40.0923 4416 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
16:52:41.0001 4416 HomeGroupListener - ok
16:52:41.0048 4416 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
16:52:41.0079 4416 HomeGroupProvider - ok
16:52:41.0157 4416 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
16:52:41.0189 4416 HpSAMD - ok
16:52:41.0235 4416 [ 3AEC26EBDEB6735A4EC3EECB86660D44 ] hsCDFiDrv C:\Windows\system32\DRIVERS\hsCDFiDrv.sys
16:52:41.0267 4416 hsCDFiDrv - ok
16:52:41.0313 4416 [ 9C59BF508C5D408BB348254E0BA2EE30 ] HTCAND64 C:\Windows\system32\Drivers\ANDROIDUSB.sys
16:52:41.0329 4416 HTCAND64 - ok
16:52:41.0360 4416 [ B8B1B284362E1D8135112573395D5DA5 ] htcnprot C:\Windows\system32\DRIVERS\htcnprot.sys
16:52:41.0391 4416 htcnprot - ok
16:52:41.0454 4416 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
16:52:41.0563 4416 HTTP - ok
16:52:41.0625 4416 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
16:52:41.0641 4416 hwpolicy - ok
16:52:41.0688 4416 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
16:52:41.0719 4416 i8042prt - ok
16:52:41.0735 4416 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
16:52:41.0797 4416 iaStorV - ok
16:52:41.0906 4416 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:52:41.0984 4416 idsvc - ok
16:52:42.0015 4416 IEEtwCollectorService - ok
16:52:42.0218 4416 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
16:52:42.0639 4416 igfx - ok
16:52:42.0686 4416 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
16:52:42.0733 4416 iirsp - ok
16:52:42.0780 4416 [ 344789398EC3EE5A4E00C52B31847946 ] IKEEXT C:\Windows\System32\ikeext.dll
16:52:42.0842 4416 IKEEXT - ok
16:52:42.0889 4416 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
16:52:42.0920 4416 intelide - ok
16:52:42.0983 4416 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
16:52:43.0029 4416 intelppm - ok
16:52:43.0076 4416 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
16:52:43.0170 4416 IPBusEnum - ok
16:52:43.0217 4416 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:52:43.0295 4416 IpFilterDriver - ok
16:52:43.0341 4416 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
16:52:43.0404 4416 iphlpsvc - ok
16:52:43.0435 4416 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
16:52:43.0482 4416 IPMIDRV - ok
16:52:43.0529 4416 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
16:52:43.0622 4416 IPNAT - ok
16:52:43.0685 4416 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
16:52:43.0731 4416 iPod Service - ok
16:52:43.0763 4416 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
16:52:43.0809 4416 IRENUM - ok
16:52:43.0825 4416 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
16:52:43.0856 4416 isapnp - ok
16:52:43.0903 4416 [ 96BB922A0981BC7432C8CF52B5410FE6 ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
16:52:43.0950 4416 iScsiPrt - ok
16:52:43.0965 4416 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
16:52:43.0997 4416 kbdclass - ok
16:52:44.0043 4416 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
16:52:44.0075 4416 kbdhid - ok
16:52:44.0090 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] KeyIso C:\Windows\system32\lsass.exe
16:52:44.0106 4416 KeyIso - ok
16:52:44.0168 4416 [ 8F489706472F7E9A06BAAA198703FA64 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
16:52:44.0199 4416 KSecDD - ok
16:52:44.0231 4416 [ 868A2CAAB12EFC7A021682BCA0EEC54C ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
16:52:44.0262 4416 KSecPkg - ok
16:52:44.0340 4416 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
16:52:44.0449 4416 ksthunk - ok
16:52:44.0496 4416 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
16:52:44.0621 4416 KtmRm - ok
16:52:44.0683 4416 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
16:52:44.0761 4416 LanmanServer - ok
16:52:44.0823 4416 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
16:52:44.0901 4416 LanmanWorkstation - ok
16:52:44.0948 4416 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
16:52:45.0011 4416 lltdio - ok
16:52:45.0073 4416 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
16:52:45.0198 4416 lltdsvc - ok
16:52:45.0229 4416 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
16:52:45.0291 4416 lmhosts - ok
16:52:45.0323 4416 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
16:52:45.0354 4416 LSI_FC - ok
16:52:45.0401 4416 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
16:52:45.0432 4416 LSI_SAS - ok
16:52:45.0447 4416 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:52:45.0479 4416 LSI_SAS2 - ok
16:52:45.0494 4416 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:52:45.0525 4416 LSI_SCSI - ok
16:52:45.0557 4416 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
16:52:45.0619 4416 luafv - ok
16:52:45.0666 4416 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
16:52:45.0728 4416 Mcx2Svc - ok
16:52:45.0744 4416 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
16:52:45.0791 4416 megasas - ok
16:52:45.0822 4416 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
16:52:45.0869 4416 MegaSR - ok
16:52:45.0900 4416 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
16:52:45.0993 4416 MMCSS - ok
16:52:46.0009 4416 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
16:52:46.0087 4416 Modem - ok
16:52:46.0118 4416 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
16:52:46.0165 4416 monitor - ok
16:52:46.0227 4416 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
16:52:46.0274 4416 mouclass - ok
16:52:46.0321 4416 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
16:52:46.0368 4416 mouhid - ok
16:52:46.0415 4416 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
16:52:46.0446 4416 mountmgr - ok
16:52:46.0539 4416 [ AEE4E9CC59CDEB55B1ECB0E596E796BE ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:52:46.0586 4416 MozillaMaintenance - ok
16:52:46.0617 4416 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
16:52:46.0664 4416 mpio - ok
16:52:46.0695 4416 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
16:52:46.0773 4416 mpsdrv - ok
16:52:46.0836 4416 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
16:52:46.0929 4416 MpsSvc - ok
16:52:46.0976 4416 [ 1A4F75E63C9FB84B85DFFC6B63FD5404 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
16:52:47.0039 4416 MRxDAV - ok
16:52:47.0070 4416 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
16:52:47.0117 4416 mrxsmb - ok
16:52:47.0148 4416 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:52:47.0195 4416 mrxsmb10 - ok
16:52:47.0226 4416 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:52:47.0273 4416 mrxsmb20 - ok
16:52:47.0304 4416 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
16:52:47.0335 4416 msahci - ok
16:52:47.0382 4416 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
16:52:47.0429 4416 msdsm - ok
16:52:47.0460 4416 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
16:52:47.0522 4416 MSDTC - ok
16:52:47.0585 4416 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
16:52:47.0647 4416 Msfs - ok
16:52:47.0663 4416 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
16:52:47.0741 4416 mshidkmdf - ok
16:52:47.0772 4416 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
16:52:47.0803 4416 msisadrv - ok
16:52:47.0850 4416 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
16:52:47.0975 4416 MSiSCSI - ok
16:52:47.0990 4416 msiserver - ok
16:52:48.0037 4416 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
16:52:48.0131 4416 MSKSSRV - ok
16:52:48.0146 4416 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
16:52:48.0240 4416 MSPCLOCK - ok
16:52:48.0255 4416 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
16:52:48.0349 4416 MSPQM - ok
16:52:48.0396 4416 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
16:52:48.0443 4416 MsRPC - ok
16:52:48.0489 4416 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
16:52:48.0521 4416 mssmbios - ok
16:52:48.0567 4416 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
16:52:48.0661 4416 MSTEE - ok
16:52:48.0677 4416 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
16:52:48.0723 4416 MTConfig - ok
16:52:48.0755 4416 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
16:52:48.0786 4416 Mup - ok
16:52:48.0817 4416 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
16:52:48.0911 4416 napagent - ok
16:52:48.0973 4416 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
16:52:49.0051 4416 NativeWifiP - ok
16:52:49.0098 4416 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
16:52:49.0176 4416 NDIS - ok
16:52:49.0223 4416 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
16:52:49.0301 4416 NdisCap - ok
16:52:49.0332 4416 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
16:52:49.0410 4416 NdisTapi - ok
16:52:49.0457 4416 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
16:52:49.0535 4416 Ndisuio - ok
16:52:49.0566 4416 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
16:52:49.0644 4416 NdisWan - ok
16:52:49.0691 4416 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
16:52:49.0769 4416 NDProxy - ok
16:52:49.0815 4416 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
16:52:49.0909 4416 NetBIOS - ok
16:52:49.0956 4416 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
16:52:50.0049 4416 NetBT - ok
16:52:50.0081 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] Netlogon C:\Windows\system32\lsass.exe
16:52:50.0096 4416 Netlogon - ok
16:52:50.0159 4416 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
16:52:50.0237 4416 Netman - ok
16:52:50.0299 4416 [ 21318671BCAD3ACF16638F98D4D00973 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:52:50.0393 4416 NetMsmqActivator - ok
16:52:50.0408 4416 [ 21318671BCAD3ACF16638F98D4D00973 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:52:50.0439 4416 NetPipeActivator - ok
16:52:50.0471 4416 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
16:52:50.0564 4416 netprofm - ok
16:52:50.0595 4416 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:52:50.0627 4416 NetTcpActivator - ok
16:52:50.0627 4416 [ 21318671BCAD3ACF16638F98D4D00973 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
16:52:50.0658 4416 NetTcpPortSharing - ok
16:52:50.0720 4416 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
16:52:50.0751 4416 nfrd960 - ok
16:52:50.0783 4416 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
16:52:50.0829 4416 NlaSvc - ok
16:52:50.0845 4416 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
16:52:50.0923 4416 Npfs - ok
16:52:50.0954 4416 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
16:52:51.0032 4416 nsi - ok
16:52:51.0032 4416 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
16:52:51.0110 4416 nsiproxy - ok
16:52:51.0173 4416 [ 1A29A59A4C5BA6F8C85062A613B7E2B2 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
16:52:51.0297 4416 Ntfs - ok
16:52:51.0329 4416 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
16:52:51.0422 4416 Null - ok
16:52:51.0485 4416 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
16:52:51.0516 4416 nvraid - ok
16:52:51.0531 4416 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
16:52:51.0578 4416 nvstor - ok
16:52:51.0594 4416 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
16:52:51.0641 4416 nv_agp - ok
16:52:51.0656 4416 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
16:52:51.0687 4416 ohci1394 - ok
16:52:51.0734 4416 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
16:52:51.0828 4416 p2pimsvc - ok
16:52:51.0859 4416 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
16:52:51.0890 4416 p2psvc - ok
16:52:51.0937 4416 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
16:52:51.0968 4416 Parport - ok
16:52:52.0015 4416 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
16:52:52.0046 4416 partmgr - ok
16:52:52.0140 4416 [ AFADA8B97BE3C9398DC6C770409C3544 ] PassThru Service C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
16:52:52.0187 4416 PassThru Service ( UnsignedFile.Multi.Generic ) - warning
16:52:52.0187 4416 PassThru Service - detected UnsignedFile.Multi.Generic (1)
16:52:52.0233 4416 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
16:52:52.0280 4416 PcaSvc - ok
16:52:52.0311 4416 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
16:52:52.0343 4416 pci - ok
16:52:52.0389 4416 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
16:52:52.0421 4416 pciide - ok
16:52:52.0467 4416 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
16:52:52.0514 4416 pcmcia - ok
16:52:52.0530 4416 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
16:52:52.0561 4416 pcw - ok
16:52:52.0592 4416 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
16:52:52.0686 4416 PEAUTH - ok
16:52:52.0795 4416 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
16:52:52.0842 4416 PerfHost - ok
16:52:52.0920 4416 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
16:52:53.0060 4416 pla - ok
16:52:53.0107 4416 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
16:52:53.0154 4416 PlugPlay - ok
16:52:53.0185 4416 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
16:52:53.0232 4416 PNRPAutoReg - ok
16:52:53.0263 4416 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
16:52:53.0294 4416 PNRPsvc - ok
16:52:53.0357 4416 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
16:52:53.0466 4416 PolicyAgent - ok
16:52:53.0513 4416 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
16:52:53.0606 4416 Power - ok
16:52:53.0653 4416 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
16:52:53.0731 4416 PptpMiniport - ok
16:52:53.0778 4416 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
16:52:53.0825 4416 Processor - ok
16:52:53.0887 4416 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
16:52:53.0965 4416 ProfSvc - ok
16:52:54.0012 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] ProtectedStorage C:\Windows\system32\lsass.exe
16:52:54.0027 4416 ProtectedStorage - ok
16:52:54.0090 4416 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
16:52:54.0183 4416 Psched - ok
16:52:54.0277 4416 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
16:52:54.0371 4416 ql2300 - ok
16:52:54.0417 4416 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
16:52:54.0449 4416 ql40xx - ok
16:52:54.0495 4416 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
16:52:54.0558 4416 QWAVE - ok
16:52:54.0605 4416 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
16:52:54.0651 4416 QWAVEdrv - ok
16:52:54.0839 4416 [ 9B35220786B06B61D19C54406904E6ED ] Radio.fx C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
16:52:55.0010 4416 Radio.fx - ok
16:52:55.0135 4416 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
16:52:55.0213 4416 RasAcd - ok
16:52:55.0260 4416 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
16:52:55.0338 4416 RasAgileVpn - ok
16:52:55.0369 4416 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
16:52:55.0463 4416 RasAuto - ok
16:52:55.0509 4416 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
16:52:55.0587 4416 Rasl2tp - ok
16:52:55.0634 4416 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
16:52:55.0743 4416 RasMan - ok
16:52:55.0790 4416 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
16:52:55.0884 4416 RasPppoe - ok
16:52:55.0899 4416 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
16:52:55.0977 4416 RasSstp - ok
16:52:56.0040 4416 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
16:52:56.0118 4416 rdbss - ok
16:52:56.0133 4416 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
16:52:56.0196 4416 rdpbus - ok
16:52:56.0227 4416 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
16:52:56.0321 4416 RDPCDD - ok
16:52:56.0352 4416 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
16:52:56.0430 4416 RDPENCDD - ok
16:52:56.0445 4416 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
16:52:56.0523 4416 RDPREFMP - ok
16:52:56.0555 4416 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
16:52:56.0633 4416 RDPWD - ok
16:52:56.0679 4416 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
16:52:56.0726 4416 rdyboost - ok
16:52:56.0773 4416 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
16:52:56.0867 4416 RemoteAccess - ok
16:52:56.0913 4416 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
16:52:57.0007 4416 RemoteRegistry - ok
16:52:57.0038 4416 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
16:52:57.0132 4416 RpcEptMapper - ok
16:52:57.0163 4416 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
16:52:57.0210 4416 RpcLocator - ok
16:52:57.0257 4416 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
16:52:57.0335 4416 RpcSs - ok
16:52:57.0397 4416 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
16:52:57.0475 4416 rspndr - ok
16:52:57.0491 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] SamSs C:\Windows\system32\lsass.exe
16:52:57.0506 4416 SamSs - ok
16:52:57.0569 4416 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
16:52:57.0600 4416 sbp2port - ok
16:52:57.0647 4416 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
16:52:57.0756 4416 SCardSvr - ok
16:52:57.0803 4416 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
16:52:57.0881 4416 scfilter - ok
16:52:57.0943 4416 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
16:52:58.0083 4416 Schedule - ok
16:52:58.0130 4416 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
16:52:58.0193 4416 SCPolicySvc - ok
16:52:58.0239 4416 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
16:52:58.0333 4416 SDRSVC - ok
16:52:58.0427 4416 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
16:52:58.0520 4416 secdrv - ok
16:52:58.0567 4416 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
16:52:58.0645 4416 seclogon - ok
16:52:58.0692 4416 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
16:52:58.0770 4416 SENS - ok
16:52:58.0801 4416 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
16:52:58.0848 4416 SensrSvc - ok
16:52:58.0879 4416 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
16:52:58.0926 4416 Serenum - ok
16:52:58.0957 4416 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
16:52:59.0004 4416 Serial - ok
16:52:59.0019 4416 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
16:52:59.0066 4416 sermouse - ok
16:52:59.0113 4416 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
16:52:59.0191 4416 SessionEnv - ok
16:52:59.0238 4416 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
16:52:59.0269 4416 sffdisk - ok
16:52:59.0300 4416 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
16:52:59.0347 4416 sffp_mmc - ok
16:52:59.0378 4416 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
16:52:59.0425 4416 sffp_sd - ok
16:52:59.0472 4416 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
16:52:59.0503 4416 sfloppy - ok
16:52:59.0550 4416 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
16:52:59.0675 4416 SharedAccess - ok
16:52:59.0721 4416 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
16:52:59.0799 4416 ShellHWDetection - ok
16:52:59.0831 4416 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:52:59.0862 4416 SiSRaid2 - ok
16:52:59.0909 4416 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
16:52:59.0940 4416 SiSRaid4 - ok
16:53:00.0018 4416 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
16:53:00.0127 4416 SkypeUpdate - ok
16:53:00.0221 4416 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
16:53:00.0299 4416 Smb - ok
16:53:00.0377 4416 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
16:53:00.0423 4416 SNMPTRAP - ok
16:53:00.0470 4416 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
16:53:00.0501 4416 spldr - ok
16:53:00.0548 4416 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
16:53:00.0595 4416 Spooler - ok
16:53:00.0720 4416 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
16:53:00.0891 4416 sppsvc - ok
16:53:00.0938 4416 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
16:53:01.0032 4416 sppuinotify - ok
16:53:01.0079 4416 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
16:53:01.0125 4416 srv - ok
16:53:01.0157 4416 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
16:53:01.0203 4416 srv2 - ok
16:53:01.0250 4416 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
16:53:01.0313 4416 srvnet - ok
16:53:01.0375 4416 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
16:53:01.0484 4416 SSDPSRV - ok
16:53:01.0484 4416 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
16:53:01.0578 4416 SstpSvc - ok
16:53:01.0609 4416 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
16:53:01.0640 4416 stexstor - ok
16:53:01.0703 4416 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
16:53:01.0749 4416 stisvc - ok
16:53:01.0796 4416 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
16:53:01.0812 4416 swenum - ok
16:53:01.0859 4416 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
16:53:01.0952 4416 swprv - ok
16:53:02.0046 4416 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
16:53:02.0124 4416 SysMain - ok
16:53:02.0171 4416 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
16:53:02.0233 4416 TabletInputService - ok
16:53:02.0264 4416 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
16:53:02.0358 4416 TapiSrv - ok
16:53:02.0405 4416 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
16:53:02.0498 4416 TBS - ok
16:53:02.0576 4416 [ 40AF23633D197905F03AB5628C558C51 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
16:53:02.0685 4416 Tcpip - ok
16:53:02.0732 4416 [ 40AF23633D197905F03AB5628C558C51 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
16:53:02.0810 4416 TCPIP6 - ok
16:53:02.0857 4416 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
16:53:02.0904 4416 tcpipreg - ok
16:53:02.0951 4416 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
16:53:03.0013 4416 TDPIPE - ok
16:53:03.0044 4416 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
16:53:03.0091 4416 TDTCP - ok
16:53:03.0138 4416 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
16:53:03.0216 4416 tdx - ok
16:53:03.0247 4416 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
16:53:03.0278 4416 TermDD - ok
16:53:03.0325 4416 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
16:53:03.0419 4416 TermService - ok
16:53:03.0450 4416 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
16:53:03.0497 4416 Themes - ok
16:53:03.0512 4416 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
16:53:03.0590 4416 THREADORDER - ok
16:53:03.0637 4416 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
16:53:03.0715 4416 TrkWks - ok
16:53:03.0777 4416 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
16:53:03.0887 4416 TrustedInstaller - ok
16:53:03.0933 4416 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
16:53:03.0980 4416 tssecsrv - ok
16:53:04.0043 4416 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
16:53:04.0105 4416 TsUsbFlt - ok
16:53:04.0183 4416 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
16:53:04.0277 4416 tunnel - ok
16:53:04.0308 4416 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
16:53:04.0339 4416 uagp35 - ok
16:53:04.0386 4416 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
16:53:04.0479 4416 udfs - ok
16:53:04.0526 4416 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
16:53:04.0589 4416 UI0Detect - ok
16:53:04.0620 4416 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
16:53:04.0651 4416 uliagpkx - ok
16:53:04.0698 4416 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
16:53:04.0745 4416 umbus - ok
16:53:04.0776 4416 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
16:53:04.0807 4416 UmPass - ok
16:53:04.0869 4416 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
16:53:04.0979 4416 upnphost - ok
16:53:05.0041 4416 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
16:53:05.0072 4416 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
16:53:05.0072 4416 USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
16:53:05.0119 4416 [ 60029C2AC9CCD32D8CE758CE672CD25F ] usbbus C:\Windows\system32\DRIVERS\lgx64bus.sys
16:53:05.0181 4416 usbbus - ok
16:53:05.0228 4416 [ DCA68B0943D6FA415F0C56C92158A83A ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
16:53:05.0275 4416 usbccgp - ok
16:53:05.0337 4416 [ 80B0F7D5CCF86CEB5D402EAAF61FEC31 ] usbcir C:\Windows\system32\drivers\usbcir.sys
16:53:05.0400 4416 usbcir - ok
16:53:05.0447 4416 [ 7E355CF2DCF7360B7D25E160C38211BE ] UsbDiag C:\Windows\system32\DRIVERS\lgx64diag.sys
16:53:05.0493 4416 UsbDiag - ok
16:53:05.0540 4416 [ 18A85013A3E0F7E1755365D287443965 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
16:53:05.0571 4416 usbehci - ok
16:53:05.0618 4416 [ 8D1196CFBB223621F2C67D45710F25BA ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
16:53:05.0681 4416 usbhub - ok
16:53:05.0727 4416 [ BB3392DB7F1E6D9B44D6855B31F1E056 ] USBModem C:\Windows\system32\DRIVERS\lgx64modem.sys
16:53:05.0774 4416 USBModem - ok
16:53:05.0821 4416 [ 765A92D428A8DB88B960DA5A8D6089DC ] usbohci C:\Windows\system32\drivers\usbohci.sys
16:53:05.0868 4416 usbohci - ok
16:53:05.0915 4416 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
16:53:05.0961 4416 usbprint - ok
16:53:06.0008 4416 [ 9661DA76B4531B2DA272ECCE25A8AF24 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
16:53:06.0055 4416 usbscan - ok
16:53:06.0102 4416 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:53:06.0133 4416 USBSTOR - ok
16:53:06.0164 4416 [ DD253AFC3BC6CBA412342DE60C3647F3 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
16:53:06.0180 4416 usbuhci - ok
16:53:06.0242 4416 [ 1F775DA4CF1A3A1834207E975A72E9D7 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
16:53:06.0305 4416 usbvideo - ok
16:53:06.0383 4416 [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx C:\Windows\system32\drivers\usb8023x.sys
16:53:06.0429 4416 usb_rndisx - ok
16:53:06.0476 4416 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
16:53:06.0585 4416 UxSms - ok
16:53:06.0617 4416 [ 4D71227301DD8D09097B9E4CC6527E5A ] VaultSvc C:\Windows\system32\lsass.exe
16:53:06.0648 4416 VaultSvc - ok
16:53:06.0679 4416 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
16:53:06.0710 4416 vdrvroot - ok
16:53:06.0757 4416 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
16:53:06.0866 4416 vds - ok
16:53:06.0913 4416 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
16:53:06.0944 4416 vga - ok
16:53:06.0960 4416 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
16:53:07.0053 4416 VgaSave - ok
16:53:07.0085 4416 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
16:53:07.0131 4416 vhdmp - ok
16:53:07.0178 4416 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
16:53:07.0209 4416 viaide - ok
16:53:07.0225 4416 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
16:53:07.0256 4416 volmgr - ok
16:53:07.0303 4416 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
16:53:07.0350 4416 volmgrx - ok
16:53:07.0365 4416 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
16:53:07.0412 4416 volsnap - ok
16:53:07.0459 4416 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
16:53:07.0506 4416 vsmraid - ok
16:53:07.0584 4416 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
16:53:07.0693 4416 VSS - ok
16:53:07.0709 4416 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
16:53:07.0755 4416 vwifibus - ok
16:53:07.0802 4416 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
16:53:07.0833 4416 vwififlt - ok
16:53:07.0880 4416 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
16:53:07.0974 4416 W32Time - ok
16:53:08.0005 4416 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
16:53:08.0052 4416 WacomPen - ok
16:53:08.0114 4416 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
16:53:08.0192 4416 WANARP - ok
16:53:08.0192 4416 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
16:53:08.0270 4416 Wanarpv6 - ok
16:53:08.0348 4416 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
16:53:08.0457 4416 WatAdminSvc - ok
16:53:08.0520 4416 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
16:53:08.0613 4416 wbengine - ok
16:53:08.0645 4416 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
16:53:08.0707 4416 WbioSrvc - ok
16:53:08.0754 4416 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
16:53:08.0801 4416 wcncsvc - ok
16:53:08.0816 4416 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
16:53:08.0879 4416 WcsPlugInService - ok
16:53:08.0925 4416 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
16:53:08.0957 4416 Wd - ok
16:53:09.0003 4416 [ E2C933EDBC389386EBE6D2BA953F43D8 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
16:53:09.0081 4416 Wdf01000 - ok
16:53:09.0097 4416 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
16:53:09.0237 4416 WdiServiceHost - ok
16:53:09.0237 4416 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
16:53:09.0284 4416 WdiSystemHost - ok
16:53:09.0331 4416 [ 0EB0E5D22B1760F2DBCE632F2DD7A54D ] WebClient C:\Windows\System32\webclnt.dll
16:53:09.0393 4416 WebClient - ok
16:53:09.0425 4416 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
16:53:09.0549 4416 Wecsvc - ok
16:53:09.0565 4416 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
16:53:09.0659 4416 wercplsupport - ok
16:53:09.0674 4416 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
16:53:09.0783 4416 WerSvc - ok
16:53:09.0830 4416 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
16:53:09.0908 4416 WfpLwf - ok
16:53:09.0924 4416 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
16:53:09.0955 4416 WIMMount - ok
16:53:09.0986 4416 WinDefend - ok
16:53:10.0017 4416 WinHttpAutoProxySvc - ok
16:53:10.0095 4416 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
16:53:10.0189 4416 Winmgmt - ok
16:53:10.0267 4416 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
16:53:10.0407 4416 WinRM - ok
16:53:10.0485 4416 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
16:53:10.0532 4416 WinUsb - ok
16:53:10.0610 4416 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
16:53:10.0704 4416 Wlansvc - ok
16:53:10.0735 4416 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
16:53:10.0782 4416 WmiAcpi - ok
16:53:10.0829 4416 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
16:53:10.0875 4416 wmiApSrv - ok
16:53:10.0922 4416 WMPNetworkSvc - ok
16:53:10.0953 4416 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
16:53:11.0000 4416 WPCSvc - ok
16:53:11.0047 4416 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
16:53:11.0078 4416 WPDBusEnum - ok
16:53:11.0125 4416 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
16:53:11.0203 4416 ws2ifsl - ok
16:53:11.0219 4416 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
16:53:11.0265 4416 wscsvc - ok
16:53:11.0265 4416 WSearch - ok
16:53:11.0375 4416 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
16:53:11.0515 4416 wuauserv - ok
16:53:11.0546 4416 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
16:53:11.0624 4416 WudfPf - ok
16:53:11.0687 4416 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
16:53:11.0733 4416 WUDFRd - ok
16:53:11.0765 4416 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
16:53:11.0811 4416 wudfsvc - ok
16:53:11.0858 4416 [ 04F82965C09CBDF646B487E145060301 ] WwanSvc C:\Windows\System32\wwansvc.dll
16:53:11.0936 4416 WwanSvc - ok
16:53:11.0983 4416 ================ Scan global ===============================
16:53:12.0030 4416 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
16:53:12.0077 4416 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
16:53:12.0092 4416 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll
16:53:12.0123 4416 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
16:53:12.0155 4416 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
16:53:12.0170 4416 [Global] - ok
16:53:12.0170 4416 ================ Scan MBR ==================================
16:53:12.0186 4416 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:53:12.0467 4416 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
16:53:12.0467 4416 \Device\Harddisk0\DR0 - detected TDSS File System (1)
16:53:12.0467 4416 ================ Scan VBR ==================================
16:53:12.0482 4416 [ 2FBFDFA06C1E8CD4F2108E2F757ADADC ] \Device\Harddisk0\DR0\Partition1
16:53:12.0482 4416 \Device\Harddisk0\DR0\Partition1 - ok
16:53:12.0513 4416 [ 9201042947DD4B67D34AC18E10A5EE98 ] \Device\Harddisk0\DR0\Partition2
16:53:12.0513 4416 \Device\Harddisk0\DR0\Partition2 - ok
16:53:12.0513 4416 ============================================================
16:53:12.0513 4416 Scan finished
16:53:12.0513 4416 ============================================================
16:53:12.0529 3180 Detected object count: 3
16:53:12.0529 3180 Actual detected object count: 3
16:54:44.0772 3180 PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user
16:54:44.0772 3180 PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:54:44.0772 3180 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
16:54:44.0772 3180 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
16:54:44.0819 3180 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
16:54:44.0819 3180 \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
16:54:44.0819 3180 \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
16:54:44.0819 3180 \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
16:54:44.0834 3180 \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
16:54:44.0834 3180 \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
16:54:44.0834 3180 \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
16:54:44.0850 3180 \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
16:54:44.0850 3180 \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
16:54:44.0866 3180 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
16:54:44.0897 3180 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
16:54:44.0897 3180 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
16:54:44.0912 3180 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
16:54:44.0912 3180 \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
16:54:44.0912 3180 \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
16:54:44.0928 3180 \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
16:54:44.0928 3180 \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
16:54:44.0959 3180 \Device\Harddisk0\DR0\TDLFS\com64 - copied to quarantine
16:54:44.0975 3180 \Device\Harddisk0\DR0\TDLFS\serf_conf - copied to quarantine
16:54:45.0022 3180 \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
16:54:45.0037 3180 \Device\Harddisk0\DR0\TDLFS\bbr264 - copied to quarantine
16:54:45.0053 3180 \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quarantine
16:54:45.0115 3180 \Device\Harddisk0\DR0\TDLFS\serf364 - copied to quarantine
16:54:45.0131 3180 \Device\Harddisk0\DR0\TDLFS\bbr_conf - copied to quarantine
16:54:45.0131 3180 \Device\Harddisk0\DR0\TDLFS - deleted
16:54:45.0131 3180 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete

Ich habe jetzt noch einmal einen Scan gemacht.
Er zeigt mir nur 2 mal 'Unsigned file' an, aber kein TDSS File System..

Ich habe jetzt noch einmal einen Scan gemacht.
Er zeigt mir nur 2 mal 'Unsigned file' an, aber kein TDSS File System..

Ok! Ich hoffe Du hattest einen schönen Urlaub! Habe Dich jetzt wieder in den Abos und wir machen dann weiter mit der Bereinigung.

Melde mich wieder mit weiteren Anweisungen hier im Thread.

Ja, den hatte ich
Vielen Dank!

Ok. Bitte frische FRST-Logs....

Schritt 1



Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Hi,

ich hab schon länger keine Antwort mehr von Dir erhalten. Brauchst Du noch Hilfe?

Hinweis: Sollte ich die nächsten 24h keine Nachricht von Dir bekommen, lösche ich das Thema aus meinen Abos und werde daher über Änderungen oder Beiträge nicht weiter informiert. Wenn Du weitermachen möchtest, schreib mir dann einfach eine PM.

FRST
FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Maja (ATTENTION: The logged in user is not administrator) on MAJA-PC on 02-05-2014 22:14:47
Running from C:\Users\Maja\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool 
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(Tobit.Software) C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Dropbox, Inc.) C:\Users\Maja\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [Personal ID] => C:\PROGRA~2\COOLSP~1\PERSON~1\PID.EXE
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [rfxsrvtray] => C:\Program Files (x86)\Tobit Radio.fx\Client\rfx-tray.exe [1838872 2013-02-07] (Tobit.Software)
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\Run: [Desk 365] => "C:\Program Files (x86)\Desk 365\desk365.exe" /autorun
HKU\S-1-5-21-1272368407-3421509364-2873337615-1000\...\MountPoints2: {c84b9e86-4457-11e1-9f85-806e6f6e6963} - D:\Msetup4.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 6.0.lnk
ShortcutTarget: PHOTOfunSTUDIO 6.0.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Maja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Maja\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (No File)
Startup: C:\Users\Maja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = QVO6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = QVO6
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = QVO6
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = QVO6
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = QVO6
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = QVO6
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDY&co=DE&userid=697d1960-31ad-47a0-8455-fae43b000a41&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO-x32: HDvid Codec V1 - {11111111-1111-1111-1111-110311431162} - C:\Program Files (x86)\HDvid Codec V1\HDvid Codec V1-bho.dll (installdaddy)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Maja\AppData\Roaming\Mozilla\Firefox\Profiles\356kotzc.default-1386528680383
FF Homepage: hxxp://www.facebook.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Maja\AppData\Roaming\Mozilla\Firefox\Profiles\356kotzc.default-1386528680383\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-19]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()

==================== Drivers (Whitelisted) ====================

S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2013-04-18] (Google Inc)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93696 2013-04-23] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [31744 2009-05-14] (Google Inc)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 hsCDFiDrv; C:\Windows\System32\DRIVERS\hsCDFiDrv.sys [7168 2010-07-16] ()
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [31744 2009-05-14] (Google Inc)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2013-04-24] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2013-04-24] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2013-04-24] (LG Electronics Inc.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-02 22:14 - 2014-05-02 22:15 - 00014141 _____ () C:\Users\Maja\Downloads\FRST.txt
2014-05-02 22:14 - 2014-05-02 22:14 - 00000000 ____D () C:\Users\Maja\Downloads\FRST-OlderVersion
2014-04-30 23:40 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-30 23:40 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-30 23:40 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-30 23:40 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-30 23:39 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-30 23:39 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-30 23:39 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-30 23:39 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-30 23:39 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-30 23:39 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-30 23:39 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-30 23:39 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-30 23:39 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-30 23:39 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-30 23:39 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-30 23:39 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-30 23:39 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-30 23:39 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-30 23:39 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-30 23:39 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-30 23:39 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-30 23:39 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-30 23:39 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-30 23:39 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-30 23:39 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-30 23:39 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-30 23:39 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-30 23:39 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-30 23:39 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-30 23:39 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-30 23:39 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-30 23:39 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-30 23:39 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-30 23:39 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-30 23:39 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-30 23:39 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-30 23:39 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-30 23:39 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-30 23:39 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-30 23:39 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-30 23:39 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-30 23:39 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-30 23:39 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-30 23:39 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-30 23:39 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-30 23:39 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-30 23:39 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-30 23:39 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-28 17:02 - 2014-04-28 17:03 - 00921512 _____ (Oracle Corporation) C:\Users\Maja\Downloads\jxpiinstall(1).exe
2014-04-28 16:54 - 2014-04-28 16:54 - 00000000 ____D () C:\TDSSKiller_Quarantine
2014-04-28 16:49 - 2014-04-28 16:49 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Maja\Desktop\tdsskiller.exe
2014-04-19 08:38 - 2014-04-19 08:41 - 87179530 _____ () C:\Users\Maja\Downloads\gapps-kk-20140105-signed.zip
2014-04-18 22:56 - 2014-04-18 23:05 - 100751136 _____ () C:\Users\Maja\Downloads\gapps-jb-20130812-signed.zip
2014-04-18 18:07 - 2014-04-18 18:08 - 03440140 _____ () C:\Users\Maja\Downloads\ROM_Manager_v5.5.3.2.apk
2014-04-18 17:07 - 2014-04-18 17:54 - 00000205 _____ () C:\Users\Maja\adb
2014-04-18 16:38 - 2014-04-18 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_androidusb_01005.Wdf
2014-04-18 16:38 - 2014-04-18 16:38 - 00000000 ____D () C:\Users\Maja\Downloads\Fastboot-Driver
2014-04-18 16:38 - 2010-07-16 23:59 - 00007168 _____ () C:\Windows\system32\Drivers\hsCDFiDrv.sys
2014-04-18 16:37 - 2014-04-18 16:37 - 04994020 _____ () C:\Users\Maja\Downloads\Fastboot-Driver.zip
2014-04-18 16:25 - 2014-04-18 16:25 - 02219125 _____ ( ) C:\Users\Maja\Downloads\Minimal_ADB_and_Fastboot_1.0.exe
2014-04-18 15:01 - 2014-04-18 15:24 - 203212567 _____ () C:\Users\Maja\Downloads\cm-11-20140418-NIGHTLY-p880.zip
2014-04-18 15:00 - 2014-04-18 15:26 - 173210717 _____ () C:\Users\Maja\Downloads\cm-10.1.3-p880.zip
2014-04-18 15:00 - 2014-04-18 15:21 - 176443522 _____ () C:\Users\Maja\Downloads\gapps-jb43-20130726-signed.zip
2014-04-18 14:24 - 2014-04-18 14:24 - 00000000 ____D () C:\Users\Maja\Downloads\LGO4X-JB-ROOT
2014-04-18 14:19 - 2014-04-18 14:20 - 13460046 _____ () C:\Users\Maja\Downloads\LGO4X-JB-ROOT.zip
2014-04-12 21:12 - 2014-04-12 21:12 - 00000353 _____ () C:\Windows\SynInst.log
2014-04-10 15:42 - 2014-04-10 15:42 - 00380416 _____ () C:\Users\Maja\Downloads\Gmer-19357.exe
2014-04-10 15:38 - 2014-05-02 22:14 - 00000000 ____D () C:\FRST
2014-04-10 15:37 - 2014-05-02 22:14 - 02062336 _____ (Farbar) C:\Users\Maja\Downloads\FRST64.exe
2014-04-10 15:36 - 2014-04-10 15:36 - 00000000 _____ () C:\Users\root\defogger_reenable
2014-04-10 15:35 - 2014-04-10 15:35 - 00050477 _____ () C:\Users\Maja\Downloads\Defogger.exe
2014-04-09 16:38 - 2014-04-09 16:38 - 00000000 ____D () C:\698756deb55656e23b71
2014-04-09 15:40 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 15:40 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 15:40 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 15:40 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 15:40 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-09 15:39 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-09 15:39 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-09 15:39 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-09 15:39 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-09 15:39 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-09 15:39 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-09 15:39 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-09 15:39 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-04 19:00 - 2014-04-04 19:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-04-04 18:41 - 2014-04-04 18:41 - 00000000 ____D () C:\o4xr
2014-04-04 17:27 - 2014-04-04 17:27 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-04-04 17:27 - 2014-04-04 17:27 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2014-04-04 17:15 - 2014-04-04 17:15 - 02056192 _____ () C:\Users\Maja\Downloads\CMInstaller.msi
2014-04-03 20:18 - 2014-04-03 20:54 - 00000000 ____D () C:\Users\Maja\Documents\Sport

==================== One Month Modified Files and Folders =======

2014-05-02 22:15 - 2014-05-02 22:14 - 00014141 _____ () C:\Users\Maja\Downloads\FRST.txt
2014-05-02 22:15 - 2012-03-02 15:28 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-02 22:14 - 2014-05-02 22:14 - 00000000 ____D () C:\Users\Maja\Downloads\FRST-OlderVersion
2014-05-02 22:14 - 2014-04-10 15:38 - 00000000 ____D () C:\FRST
2014-05-02 22:14 - 2014-04-10 15:37 - 02062336 _____ (Farbar) C:\Users\Maja\Downloads\FRST64.exe
2014-05-02 22:00 - 2012-01-21 19:49 - 01602210 _____ () C:\Windows\WindowsUpdate.log
2014-05-02 21:55 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-02 21:55 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-02 21:54 - 2013-11-18 20:54 - 00000000 ____D () C:\Users\Maja\AppData\Roaming\Dropbox
2014-05-02 21:52 - 2013-11-18 20:58 - 00000000 ___RD () C:\Users\Maja\Dropbox
2014-05-02 21:51 - 2012-03-02 15:28 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-02 21:50 - 2013-07-22 21:12 - 00001210 _____ () C:\Windows\Tasks\HDvid Codec V1-updater.job
2014-05-02 21:50 - 2013-07-22 21:12 - 00001114 _____ () C:\Windows\Tasks\HDvid Codec V1-enabler.job
2014-05-02 21:50 - 2013-07-22 21:11 - 00001204 _____ () C:\Windows\Tasks\HDvid Codec V1-codedownloader.job
2014-05-02 21:50 - 2013-04-13 23:12 - 00000338 _____ () C:\Windows\Tasks\dsmonitor.job
2014-05-02 21:49 - 2012-04-13 12:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-02 21:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-02 21:49 - 2009-07-14 06:51 - 00096316 _____ () C:\Windows\setupact.log
2014-05-02 21:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-30 22:43 - 2012-04-13 12:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-30 22:43 - 2012-01-22 00:48 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-30 20:58 - 2009-07-14 19:58 - 00699682 _____ () C:\Windows\system32\perfh007.dat
2014-04-30 20:58 - 2009-07-14 19:58 - 00149790 _____ () C:\Windows\system32\perfc007.dat
2014-04-30 20:58 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-28 17:03 - 2014-04-28 17:02 - 00921512 _____ (Oracle Corporation) C:\Users\Maja\Downloads\jxpiinstall(1).exe
2014-04-28 16:54 - 2014-04-28 16:54 - 00000000 ____D () C:\TDSSKiller_Quarantine
2014-04-28 16:49 - 2014-04-28 16:49 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Maja\Desktop\tdsskiller.exe
2014-04-24 08:52 - 2013-07-22 21:11 - 00000000 ____D () C:\Program Files (x86)\HDvid Codec V1
2014-04-19 11:19 - 2012-10-04 22:19 - 00000000 ____D () C:\Users\Maja\Documents\Handy
2014-04-19 08:41 - 2014-04-19 08:38 - 87179530 _____ () C:\Users\Maja\Downloads\gapps-kk-20140105-signed.zip
2014-04-18 23:05 - 2014-04-18 22:56 - 100751136 _____ () C:\Users\Maja\Downloads\gapps-jb-20130812-signed.zip
2014-04-18 22:41 - 2012-02-04 17:29 - 383520373 _____ () C:\Windows\MEMORY.DMP
2014-04-18 22:41 - 2012-02-04 17:29 - 00000000 ____D () C:\Windows\Minidump
2014-04-18 18:08 - 2014-04-18 18:07 - 03440140 _____ () C:\Users\Maja\Downloads\ROM_Manager_v5.5.3.2.apk
2014-04-18 17:54 - 2014-04-18 17:07 - 00000205 _____ () C:\Users\Maja\adb
2014-04-18 17:07 - 2012-01-21 20:25 - 00000000 ____D () C:\Users\Maja
2014-04-18 16:38 - 2014-04-18 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_androidusb_01005.Wdf
2014-04-18 16:38 - 2014-04-18 16:38 - 00000000 ____D () C:\Users\Maja\Downloads\Fastboot-Driver
2014-04-18 16:38 - 2012-01-21 23:06 - 00099142 _____ () C:\Windows\DPINST.LOG
2014-04-18 16:38 - 2012-01-21 23:06 - 00000000 ____D () C:\Program Files\DIFX
2014-04-18 16:37 - 2014-04-18 16:37 - 04994020 _____ () C:\Users\Maja\Downloads\Fastboot-Driver.zip
2014-04-18 16:25 - 2014-04-18 16:25 - 02219125 _____ ( ) C:\Users\Maja\Downloads\Minimal_ADB_and_Fastboot_1.0.exe
2014-04-18 15:26 - 2014-04-18 15:00 - 173210717 _____ () C:\Users\Maja\Downloads\cm-10.1.3-p880.zip
2014-04-18 15:24 - 2014-04-18 15:01 - 203212567 _____ () C:\Users\Maja\Downloads\cm-11-20140418-NIGHTLY-p880.zip
2014-04-18 15:21 - 2014-04-18 15:00 - 176443522 _____ () C:\Users\Maja\Downloads\gapps-jb43-20130726-signed.zip
2014-04-18 14:24 - 2014-04-18 14:24 - 00000000 ____D () C:\Users\Maja\Downloads\LGO4X-JB-ROOT
2014-04-18 14:20 - 2014-04-18 14:19 - 13460046 _____ () C:\Users\Maja\Downloads\LGO4X-JB-ROOT.zip
2014-04-13 11:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-12 21:18 - 2013-07-22 21:11 - 00000000 ____D () C:\Users\root\AppData\Roaming\Mozilla
2014-04-12 21:12 - 2014-04-12 21:12 - 00000353 _____ () C:\Windows\SynInst.log
2014-04-10 15:42 - 2014-04-10 15:42 - 00380416 _____ () C:\Users\Maja\Downloads\Gmer-19357.exe
2014-04-10 15:36 - 2014-04-10 15:36 - 00000000 _____ () C:\Users\root\defogger_reenable
2014-04-10 15:36 - 2013-05-09 17:18 - 00000000 ____D () C:\Users\root
2014-04-10 15:35 - 2014-04-10 15:35 - 00050477 _____ () C:\Users\Maja\Downloads\Defogger.exe
2014-04-09 16:38 - 2014-04-09 16:38 - 00000000 ____D () C:\698756deb55656e23b71
2014-04-09 16:38 - 2013-08-14 17:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-09 16:38 - 2012-01-25 21:50 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 15:26 - 2012-04-26 20:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-06 11:59 - 2013-05-05 14:45 - 00000000 ____D () C:\Users\Maja\Documents\Berufsorientierung
2014-04-06 09:26 - 2014-02-19 16:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-04 19:00 - 2014-04-04 19:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-04-04 18:41 - 2014-04-04 18:41 - 00000000 ____D () C:\o4xr
2014-04-04 17:27 - 2014-04-04 17:27 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-04-04 17:27 - 2014-04-04 17:27 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2014-04-04 17:15 - 2014-04-04 17:15 - 02056192 _____ () C:\Users\Maja\Downloads\CMInstaller.msi
2014-04-03 20:54 - 2014-04-03 20:18 - 00000000 ____D () C:\Users\Maja\Documents\Sport

Files to move or delete:
====================
C:\Users\Maja\adb.exe
C:\Users\Maja\AdbWinApi.dll
C:\Users\Maja\AdbWinUsbApi.dll
C:\Users\Maja\fastboot.exe
C:\Users\Maja\LGUnitedMobileDriver_S4981MAN37AP22_ML_WHQL_Ver_3.7.2.exe
C:\Users\Maja\root.bat


Some content of TEMP:
====================
C:\Users\Maja\AppData\Local\Temp\AskSLib.dll
C:\Users\Maja\AppData\Local\Temp\avgnt.exe
C:\Users\Maja\AppData\Local\Temp\CMInstaller.exe
C:\Users\Maja\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Maja\AppData\Local\Temp\PhotoScape_V3.6.1.exe
C:\Users\Maja\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Maja\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Maja\AppData\Local\Temp\TOBITCLT.DLL
C:\Users\Maja\AppData\Local\Temp\_isABAA.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== End Of Log ============================
         

--- --- ---
AdditionFRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-05-2014
Ran by Maja at 2014-05-02 22:15:52
Running from C:\Users\Maja\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland Delphi 5 (HKLM-x32\...\Delphi5) (Version:  - )
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.249.2 - Broadcom Corporation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - ‪Canon Inc.‬)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MG3200 series Benutzerregistrierung (HKLM-x32\...\Canon MG3200 series Benutzerregistrierung) (Version:  - Canon Inc.‎)
Canon MG3200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3200_series) (Version: 1.01 - Canon Inc.)
Canon MG3200 series On-screen Manual (HKLM-x32\...\Canon MG3200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CM Installer (HKLM-x32\...\{E8F42777-958D-4C14-9A42-8DCA1929FD26}) (Version: 1.0.0.0 - Cyanogen Inc.)
Descartes3D Version 2.51 (HKLM-x32\...\Descartes3D Version 2.51_is1) (Version: 2.51 - Roland Wejner)
DriverTuner 3.1.0.0 (HKLM-x32\...\{520C1D80-935C-42B9-9340-E883849D804F}_is1) (Version: 3.1.0.0 - LionSea SoftWare)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
GeoGebra 4.2 (HKCU\...\GeoGebra 4.2) (Version: 4.2.60.0 - International GeoGebra Institute)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HDvid Codec V1 (HKLM-x32\...\HDvid Codec V1) (Version: 1.27.153.8 - installdaddy) <==== ATTENTION
HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION
HTC Driver Installer (HKLM-x32\...\{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.021 - HTC Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.3.06.20130913 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{55031CEF-CE75-4A5C-8DEA-60577820529B}) (Version: 3.10.1.0 - LG Electronics)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.1.3 (HKLM-x32\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - )
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
OpenOffice.org 3.2 (HKLM-x32\...\{8D1E61D1-1395-4E97-997F-D002DB3A5074}) (Version: 3.2.9502 - OpenOffice.org)
Opera 11.60 (HKLM-x32\...\Opera 11.60.1185) (Version: 11.60.1185 - Opera Software ASA)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.6 - Pando Networks Inc.)
PHOTOfunSTUDIO 6.0 (HKLM-x32\...\{B62A8A6F-5E48-4336-BF13-1632D5921872}) (Version: 6.00.135 - Panasonic Corporation)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Radio.fx (HKLM-x32\...\Tobit Radio.fx Server) (Version:  - Tobit.Software)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Skype™ 6.0 (HKLM-x32\...\{EA17F4FC-FDBF-4CF8-A529-2D983132D053}) (Version: 6.0.126 - Skype Technologies S.A.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Windows-Treiberpaket - Google, Inc (androidusb) USB  (12/08/2011 1.0.0010.00000) (HKLM\...\7D251EC22D60214180CC8C5E6CCE6A5B1B41BAA4) (Version: 12/08/2011 1.0.0010.00000 - Google, Inc)
Windows-Treiberpaket - Hisense Corporation hsCDFiDrv CDROM  (07/12/2010 1.01.00) (HKLM\...\D6CCB3CCE9E8F1119A58ECAB8CE0B3B24A78942E) (Version: 07/12/2010 1.01.00 - Hisense Corporation)
Windows-Treiberpaket - Intel (NETw5s64) net  (05/31/2010 13.2.1.5) (HKLM\...\08116AAA5079D141DE9F37C0804CDE8B00E3F4AD) (Version: 05/31/2010 13.2.1.5 - Intel)
Windows-Treiberpaket - Intel (NETw5v64) net  (05/31/2010 13.2.1.5) (HKLM\...\60F79568B15F277EAF37083939CFCC51ADCD2906) (Version: 05/31/2010 13.2.1.5 - Intel)
Windows-Treiberpaket - OEM (OEM) Modem  (12/08/2011 2.0.6.7) (HKLM\...\BA1A36908C3FD8A7A9D63AF9C53AA30AAF78BEB2) (Version: 12/08/2011 2.0.6.7 - OEM)
Windows-Treiberpaket - OEM (OEM) Ports  (12/08/2011 2.0.6.7) (HKLM\...\9C085FD7260D8C471D01C15A37A8240A86B8204D) (Version: 12/08/2011 2.0.6.7 - OEM)
Wsys Control 1.0.0.2557 (HKLM-x32\...\WsysControl) (Version: 1.0.0.2557 - Wsys Co., Ltd.) <==== ATTENTION

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\Windows\Tasks\dsmonitor.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-codedownloader.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-enabler.job => ?
Task: C:\Windows\Tasks\HDvid Codec V1-updater.job => ?

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: HTC Sync Loader => "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
MSCONFIG\startupreg: IJNetworkScannerSelectorEX => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

==================== Faulty Device Manager Devices =============

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/28/2014 06:04:37 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (04/28/2014 04:34:03 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (04/26/2014 02:15:33 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 69330806

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 69330806

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/19/2014 00:00:02 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4381537

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4381537

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (04/30/2014 11:39:47 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (04/28/2014 05:15:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/28/2014 05:15:39 PM) (Source: DCOM) (User: )
Description: 3gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (04/18/2014 10:42:22 PM) (Source: BugCheck) (User: )
Description: 0x0000000a (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff80002cd1325)C:\Windows\MEMORY.DMP041814-21699-01

Error: (04/18/2014 10:41:56 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎18.‎04.‎2014 um 22:40:13 unerwartet heruntergefahren.

Error: (04/18/2014 09:01:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Radio.fx Server" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/13/2014 07:18:52 PM) (Source: bowser) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "BIRGIT-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{4785B55C-66AA-4100-A395-4FE9BA777B96}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (04/13/2014 11:35:50 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Acer" den Befehl "chkdsk" aus.

Error: (04/13/2014 11:35:38 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Acer" den Befehl "chkdsk" aus.

Error: (04/13/2014 11:35:34 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Acer" den Befehl "chkdsk" aus.


Microsoft Office Sessions:
=========================
Error: (04/28/2014 06:04:37 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\lg electronics\lg pc suite\LGPCSuite.exe

Error: (04/28/2014 04:34:03 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Program Files (x86)\LG Electronics\LG PC Suite\LGPCSuite.exe

Error: (04/26/2014 02:15:33 PM) (Source: Windows Backup)(User: )
Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 69330806

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 69330806

Error: (04/25/2014 10:12:52 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/19/2014 00:00:02 PM) (Source: Windows Backup)(User: )
Description: E:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4381537

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4381537

Error: (04/19/2014 10:36:11 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity Errors:
===================================
  Date: 2013-02-10 14:45:15.617
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:45:15.417
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:13:09.094
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:13:08.823
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:26.842
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:26.629
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:16.399
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:03:16.137
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:01:54.955
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-02-10 14:01:54.727
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 4025.97 MB
Available physical RAM: 2354.04 MB
Total Pagefile: 8050.13 MB
Available Pagefile: 6183.67 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:358.69 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================
         

--- --- ---

Ok...

Dann machen wir weiter....

Hi,

Wichtig: Bitte führe unsere Bereinigungsschritte mit Administrator-Rechten aus!

Ran by Maja (ATTENTION: The logged in user is not administrator) on MAJA-PC on 02-05-2014 22:14:47

Lösung:

Wenn Sie das Programm starten/installieren möchten, klicken Sie mit der rechten Maustaste auf das Symbol zum Starten/Installieren des Programms, und klicken Sie dann auf "Als Administrator ausführen". Wenn Sie aufgefordert werden, ein Administratorkennwort oder eine Bestätigung einzugeben, geben Sie das Kennwort bzw. die Bestätigung ein. Siehe auch hier...

so gehts weiter:

Schritt 1

Bitte deinstalliere folgende Programme:

HDvid Codec V1
HDVidCodec
Java 7 Update 45
Wsys Control 1.0.0.2557


Versuche es bei Windows 7 zunächst über Systemsteuerung/Programme deinstallieren.
Sollte das nicht gehen, lade Dir bitte Revo Uninstallerhier herunter, entpacke die zip-Datei auf den Desktop und starte die Revouninstaller.exe.
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche dann im Uninstallerfeld nach den oben angegebenen Programmen und wähle sie einzeln aus.

Klicke jedesmal auf Uninstall. Wähle anschließend den Modus "Moderat" aus.

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:

Schritt 2
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 4

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 5




Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.