| |
| |||||||
Log-Analyse und Auswertung: Goingonearth - nicht zu entfernen, Logfiles angehangenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
16.05.2011, 17:42
| #1 |
| |  Goingonearth - nicht zu entfernen, Logfiles angehangen Hallo zusammen, ich habe leider den o.g. Virus/Maleware auf meinem System. Leider bekomme ich das Teil alleine nicht gelöscht, deswegen wende ich mich hier hin. Vielleicht kann mir ja jemand von euch helfen! Meine OTL Berichte wären hier verfügbar: hxxp://www.file-upload.net/download-3435102/Dokument.rtf.html Bei der Erstellung der Berichte bin ich wie in folgendem Thred beschrieben vorgegangen: hxxp://forum.avira.com/wbb/index.php?page=Thread&threadID=130513 Wäre schön, wenn ich nicht alles neu aufsetzten müsste. Vielen Dank! |
|
16.05.2011, 21:30
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Goingonearth - nicht zu entfernen, Logfiles angehangen Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.
__________________Die Logs bitte NICHT in RTF- oder Worddokumente gießen, zum transportieren von reinen Text sind die schon im richtigen Format (txt)!
__________________ |
|
16.05.2011, 22:03
| #3 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen Vielen Dank für die Hinweise.
__________________Anbei mein Malwarebytes-Log: Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Datenbank Version: 6584 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 15.05.2011 16:28:07 mbam-log-2011-05-15 (16-28-07).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|H:\|I:\|) Durchsuchte Objekte: 349654 Laufzeit: 30 Minute(n), 27 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 2 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CURRENT_USER\Software\R8388QA8U8 (Malware.Trace) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
|
16.05.2011, 22:04
| #4 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen und hier von gerade eben: Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Datenbank Version: 6593 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 16.05.2011 22:59:43 mbam-log-2011-05-16 (22-59-43).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|H:\|) Durchsuchte Objekte: 328500 Laufzeit: 18 Minute(n), 16 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
|
16.05.2011, 22:17
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Goingonearth - nicht zu entfernen, Logfiles angehangen Wieviele Scans mit MBAM hast du jetzt insgesamt gemacht?
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
16.05.2011, 22:20
| #6 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen Ich habe bisher zwei gemacht. |
|
16.05.2011, 22:26
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Goingonearth - nicht zu entfernen, Logfiles angehangen Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!) Code:
ATTFilter :OTL
O4 - HKLM..\Run: [S6000Mnt] File not found
O4 - HKLM..\Run: [SessionLogon] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-21-1423356672-3347264016-3198935766-1004..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-21-1870489595-635842138-884940051-1292..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Bwfhjavfsn = rundll32 "C:\Windows\SysWOW64\dwmapi9.dll",iakhtqhdl
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe
[2011.05.16 11:09:43 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2011.05.14 21:30:35 | 000,004,096 | ---- | M] () -- C:\Users\Public\Documents\00001A63.LCS
[2011.05.13 22:47:49 | 000,143,360 | RHS- | C] () -- C:\Windows\SysWow64\dwmapi9.dll
[2011.05.13 22:47:49 | 000,000,310 | RHS- | C] () -- C:\Windows\tasks\jdhh.job
:Commands
[purity]
[resethosts]
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet. Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
16.05.2011, 22:37
| #8 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen Herzlichen Dank. Anbei das Log: ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\S6000Mnt deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SessionLogon deleted successfully. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-21-1423356672-3347264016-3198935766-1004\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry key HKEY_USERS\S-1-5-21-1870489595-635842138-884940051-1292\Software\Microsoft\Windows\CurrentVersion\RunOnce not found. C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\\Bwfhjavfsn deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d42ace84-54af-11e0-ba4d-806e6f6e6963}\ not found. File F:\setup.exe not found. C:\Windows\SysNative\acovcnt.exe moved successfully. C:\Users\Public\Documents\00001A63.LCS moved successfully. C:\Windows\SysWOW64\dwmapi9.dll moved successfully. C:\Windows\Tasks\jdhh.job moved successfully. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.22.3 log created on 05162011_233600 |
|
16.05.2011, 22:53
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Goingonearth - nicht zu entfernen, Logfiles angehangen Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.  Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, bitte unhide ausführen: Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )  Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
17.05.2011, 16:23
| #10 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen Anbei der Bericht: 2011/05/17 17:21:33.0007 7028 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29 2011/05/17 17:21:33.0226 7028 ================================================================================ 2011/05/17 17:21:33.0226 7028 SystemInfo: 2011/05/17 17:21:33.0226 7028 2011/05/17 17:21:33.0226 7028 OS Version: 6.1.7601 ServicePack: 1.0 2011/05/17 17:21:33.0226 7028 Product type: Workstation 2011/05/17 17:21:33.0226 7028 ComputerName: JVDEWITZ-NB 2011/05/17 17:21:33.0227 7028 UserName: JvDewitz 2011/05/17 17:21:33.0227 7028 Windows directory: C:\Windows 2011/05/17 17:21:33.0227 7028 System windows directory: C:\Windows 2011/05/17 17:21:33.0227 7028 Running under WOW64 2011/05/17 17:21:33.0227 7028 Processor architecture: Intel x64 2011/05/17 17:21:33.0227 7028 Number of processors: 8 2011/05/17 17:21:33.0227 7028 Page size: 0x1000 2011/05/17 17:21:33.0227 7028 Boot type: Normal boot 2011/05/17 17:21:33.0227 7028 ================================================================================ 2011/05/17 17:21:34.0353 7028 Initialize success 2011/05/17 17:21:51.0538 6004 ================================================================================ 2011/05/17 17:21:51.0538 6004 Scan started 2011/05/17 17:21:51.0538 6004 Mode: Manual; 2011/05/17 17:21:51.0538 6004 ================================================================================ 2011/05/17 17:21:54.0251 6004 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\DRIVERS\1394ohci.sys 2011/05/17 17:21:54.0299 6004 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\DRIVERS\ACPI.sys 2011/05/17 17:21:54.0339 6004 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\DRIVERS\acpipmi.sys 2011/05/17 17:21:54.0388 6004 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 2011/05/17 17:21:54.0436 6004 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 2011/05/17 17:21:54.0479 6004 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 2011/05/17 17:21:54.0559 6004 AFD (d31dc7a16dea4a9baf179f3d6fbdb38c) C:\Windows\system32\drivers\afd.sys 2011/05/17 17:21:54.0599 6004 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 2011/05/17 17:21:54.0650 6004 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 2011/05/17 17:21:54.0690 6004 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 2011/05/17 17:21:54.0734 6004 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 2011/05/17 17:21:54.0774 6004 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 2011/05/17 17:21:54.0815 6004 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\DRIVERS\amdsata.sys 2011/05/17 17:21:54.0858 6004 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 2011/05/17 17:21:54.0894 6004 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\DRIVERS\amdxata.sys 2011/05/17 17:21:54.0940 6004 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 2011/05/17 17:21:55.0014 6004 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 2011/05/17 17:21:55.0058 6004 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 2011/05/17 17:21:55.0104 6004 AsDsm (88fbc8bebfd38566235eaa5e4dbc4e05) C:\Windows\system32\drivers\AsDsm.sys 2011/05/17 17:21:55.0144 6004 ASMMAP64 (4c016fd76ed5c05e84ca8cab77993961) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys 2011/05/17 17:21:55.0256 6004 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/05/17 17:21:55.0305 6004 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 2011/05/17 17:21:55.0369 6004 athr (f8633cdd09647a64ee8db550630427ff) C:\Windows\system32\DRIVERS\athrx.sys 2011/05/17 17:21:55.0441 6004 atksgt (4aef9ec86818375495fb78ca58df4e18) C:\Windows\system32\DRIVERS\atksgt.sys 2011/05/17 17:21:55.0518 6004 AVGIDSEH (656366fd0c0e2481a89196fb3d1be49a) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys 2011/05/17 17:21:55.0582 6004 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 2011/05/17 17:21:55.0630 6004 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 2011/05/17 17:21:55.0688 6004 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 2011/05/17 17:21:55.0748 6004 BHDrvx64 (3b9b31981894123f78c4ef0d97184319) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110430.001\BHDrvx64.sys 2011/05/17 17:21:55.0812 6004 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 2011/05/17 17:21:55.0851 6004 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 2011/05/17 17:21:55.0888 6004 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 2011/05/17 17:21:55.0935 6004 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 2011/05/17 17:21:55.0991 6004 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 2011/05/17 17:21:56.0035 6004 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 2011/05/17 17:21:56.0073 6004 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 2011/05/17 17:21:56.0121 6004 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 2011/05/17 17:21:56.0166 6004 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys 2011/05/17 17:21:56.0215 6004 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 2011/05/17 17:21:56.0259 6004 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 2011/05/17 17:21:56.0307 6004 BTHPORT (0d25b6d300ba26a5f2c3b2a8e96b158b) C:\Windows\system32\Drivers\BTHport.sys 2011/05/17 17:21:56.0355 6004 BTHUSB (1f9912f8ec5bfa53432e71e150636a8a) C:\Windows\system32\Drivers\BTHUSB.sys 2011/05/17 17:21:56.0395 6004 btusbflt (d3466f77c2c49c6e393ba5fba963a33e) C:\Windows\system32\drivers\btusbflt.sys 2011/05/17 17:21:56.0440 6004 btwaudio (a72a9101f9730db7332714e566614e4d) C:\Windows\system32\drivers\btwaudio.sys 2011/05/17 17:21:56.0484 6004 btwavdt (5ceec634b617525f2b6ad29f871033f7) C:\Windows\system32\drivers\btwavdt.sys 2011/05/17 17:21:56.0531 6004 btwl2cap (6149301dc3f81d6f9667a3fbac410975) C:\Windows\system32\DRIVERS\btwl2cap.sys 2011/05/17 17:21:56.0570 6004 btwrchid (2af5604d28bef77b7cf4b9d232fe7cd3) C:\Windows\system32\DRIVERS\btwrchid.sys 2011/05/17 17:21:56.0612 6004 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/05/17 17:21:56.0654 6004 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys 2011/05/17 17:21:56.0711 6004 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 2011/05/17 17:21:56.0758 6004 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 2011/05/17 17:21:56.0830 6004 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/05/17 17:21:56.0869 6004 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 2011/05/17 17:21:56.0924 6004 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys 2011/05/17 17:21:56.0965 6004 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 2011/05/17 17:21:57.0008 6004 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys 2011/05/17 17:21:57.0055 6004 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 2011/05/17 17:21:57.0131 6004 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys 2011/05/17 17:21:57.0209 6004 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 2011/05/17 17:21:57.0267 6004 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 2011/05/17 17:21:57.0307 6004 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 2011/05/17 17:21:57.0349 6004 dmvsc (5db085a8a6600be6401f2b24eecb5415) C:\Windows\system32\DRIVERS\dmvsc.sys 2011/05/17 17:21:57.0420 6004 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 2011/05/17 17:21:57.0464 6004 dtsoftbus01 (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys 2011/05/17 17:21:57.0518 6004 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 2011/05/17 17:21:57.0629 6004 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 2011/05/17 17:21:57.0705 6004 eeCtrl (eb0883462ac43829e47929d705d40933) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 2011/05/17 17:21:57.0783 6004 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 2011/05/17 17:21:57.0813 6004 EraserUtilRebootDrv (86fc0d272f6bb43e7214d4ba955a41e7) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 2011/05/17 17:21:57.0844 6004 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 2011/05/17 17:21:57.0920 6004 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 2011/05/17 17:21:57.0959 6004 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 2011/05/17 17:21:58.0010 6004 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 2011/05/17 17:21:58.0080 6004 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 2011/05/17 17:21:58.0118 6004 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 2011/05/17 17:21:58.0157 6004 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/05/17 17:21:58.0204 6004 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 2011/05/17 17:21:58.0244 6004 FLxHCIc (e546fb34a4986316afc4dbacb32ae80e) C:\Windows\system32\DRIVERS\FLxHCIc.sys 2011/05/17 17:21:58.0307 6004 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 2011/05/17 17:21:58.0346 6004 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 2011/05/17 17:21:58.0392 6004 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 2011/05/17 17:21:58.0433 6004 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 2011/05/17 17:21:58.0462 6004 ghaio (7d66ebde8b7f9b4e00beefeee82670d4) C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys 2011/05/17 17:21:58.0512 6004 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 2011/05/17 17:21:58.0556 6004 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 2011/05/17 17:21:58.0598 6004 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/05/17 17:21:58.0639 6004 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys 2011/05/17 17:21:58.0684 6004 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 2011/05/17 17:21:58.0727 6004 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 2011/05/17 17:21:58.0768 6004 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 2011/05/17 17:21:58.0823 6004 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys 2011/05/17 17:21:58.0884 6004 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\DRIVERS\HpSAMD.sys 2011/05/17 17:21:58.0942 6004 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 2011/05/17 17:21:58.0987 6004 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 2011/05/17 17:21:59.0025 6004 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/05/17 17:21:59.0078 6004 iaStor (2064090c9faad92c090d77e50e735b2e) C:\Windows\system32\DRIVERS\iaStor.sys 2011/05/17 17:21:59.0133 6004 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\DRIVERS\iaStorV.sys 2011/05/17 17:21:59.0176 6004 IDSVia64 (8f9faa4583e634a1505bad8d0c04c5c9) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110514.001\IDSvia64.sys 2011/05/17 17:21:59.0218 6004 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 2011/05/17 17:21:59.0314 6004 IntcAzAudAddService (c55f3030ceb3922590e6199fd2d39a0d) C:\Windows\system32\drivers\RTKVHD64.sys 2011/05/17 17:21:59.0382 6004 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 2011/05/17 17:21:59.0432 6004 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 2011/05/17 17:21:59.0483 6004 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/05/17 17:21:59.0538 6004 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\DRIVERS\IPMIDrv.sys 2011/05/17 17:21:59.0575 6004 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 2011/05/17 17:21:59.0644 6004 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 2011/05/17 17:21:59.0689 6004 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 2011/05/17 17:21:59.0732 6004 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/05/17 17:21:59.0770 6004 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/05/17 17:21:59.0813 6004 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys 2011/05/17 17:21:59.0853 6004 kbfiltr (e63ef8c3271d014f14e2469ce75fecb4) C:\Windows\system32\DRIVERS\kbfiltr.sys 2011/05/17 17:21:59.0912 6004 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys 2011/05/17 17:21:59.0951 6004 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys 2011/05/17 17:21:59.0988 6004 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 2011/05/17 17:22:00.0062 6004 LGBusEnum (fa529fb35694c24bf98a9ef67c1cd9d0) C:\Windows\system32\drivers\LGBusEnum.sys 2011/05/17 17:22:00.0106 6004 LGVirHid (94b29ce153765e768f004fb3440be2b0) C:\Windows\system32\drivers\LGVirHid.sys 2011/05/17 17:22:00.0145 6004 lirsgt (b658b7076b1acaa5876524595630f183) C:\Windows\system32\DRIVERS\lirsgt.sys 2011/05/17 17:22:00.0185 6004 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 2011/05/17 17:22:00.0260 6004 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 2011/05/17 17:22:00.0300 6004 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 2011/05/17 17:22:00.0338 6004 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 2011/05/17 17:22:00.0377 6004 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 2011/05/17 17:22:00.0419 6004 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 2011/05/17 17:22:00.0457 6004 MBfilt (8ff2d95cba49b405c5de27039ff0bf35) C:\Windows\system32\drivers\MBfilt64.sys 2011/05/17 17:22:00.0508 6004 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 2011/05/17 17:22:00.0552 6004 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 2011/05/17 17:22:00.0610 6004 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 2011/05/17 17:22:00.0650 6004 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 2011/05/17 17:22:00.0692 6004 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 2011/05/17 17:22:00.0736 6004 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 2011/05/17 17:22:00.0790 6004 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 2011/05/17 17:22:00.0831 6004 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\DRIVERS\mpio.sys 2011/05/17 17:22:00.0871 6004 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 2011/05/17 17:22:00.0926 6004 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 2011/05/17 17:22:00.0968 6004 mrxsmb (c2b4651001a867ff3f8865863b592991) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/05/17 17:22:01.0011 6004 mrxsmb10 (7e79946afc5f799ab62982282be5ac13) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/05/17 17:22:01.0054 6004 mrxsmb20 (5fb954100cea2bfec6446fbbecaa3f79) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/05/17 17:22:01.0095 6004 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\DRIVERS\msahci.sys 2011/05/17 17:22:01.0140 6004 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\DRIVERS\msdsm.sys 2011/05/17 17:22:01.0208 6004 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 2011/05/17 17:22:01.0248 6004 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 2011/05/17 17:22:01.0290 6004 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 2011/05/17 17:22:01.0350 6004 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 2011/05/17 17:22:01.0393 6004 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/05/17 17:22:01.0440 6004 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 2011/05/17 17:22:01.0484 6004 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 2011/05/17 17:22:01.0537 6004 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/05/17 17:22:01.0577 6004 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 2011/05/17 17:22:01.0621 6004 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 2011/05/17 17:22:01.0664 6004 MTsensor (032d35c996f21d19a205a7c8f0b76f3c) C:\Windows\system32\DRIVERS\ATK64AMD.sys 2011/05/17 17:22:01.0705 6004 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 2011/05/17 17:22:01.0758 6004 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 2011/05/17 17:22:01.0799 6004 NAVENG (ba3d1e520fccc1783282f43b8adfc4ca) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110516.040\ENG64.SYS 2011/05/17 17:22:01.0862 6004 NAVEX15 (9f602385a74e30d13fb9083213cddc87) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\VirusDefs\20110516.040\EX64.SYS 2011/05/17 17:22:01.0938 6004 ncpfilt (0a586e57afa9028bb940a638e6ee94cd) C:\Windows\system32\DRIVERS\ncplelhp.sys 2011/05/17 17:22:01.0967 6004 ncplelhp (0a586e57afa9028bb940a638e6ee94cd) C:\Windows\system32\DRIVERS\ncplelhp.sys 2011/05/17 17:22:02.0040 6004 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 2011/05/17 17:22:02.0089 6004 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 2011/05/17 17:22:02.0130 6004 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/05/17 17:22:02.0173 6004 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/05/17 17:22:02.0218 6004 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/05/17 17:22:02.0256 6004 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 2011/05/17 17:22:02.0295 6004 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 2011/05/17 17:22:02.0340 6004 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 2011/05/17 17:22:02.0448 6004 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 2011/05/17 17:22:02.0497 6004 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 2011/05/17 17:22:02.0549 6004 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 2011/05/17 17:22:02.0625 6004 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 2011/05/17 17:22:02.0687 6004 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 2011/05/17 17:22:02.0730 6004 NVHDA (f2662fdc20518ee8a8eed4f61ba42349) C:\Windows\system32\drivers\nvhda64v.sys 2011/05/17 17:22:02.0988 6004 nvlddmkm (a963c2c276a97b088ded5d7a83be8052) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2011/05/17 17:22:03.0208 6004 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\DRIVERS\nvraid.sys 2011/05/17 17:22:03.0251 6004 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\DRIVERS\nvstor.sys 2011/05/17 17:22:03.0292 6004 NvStUSB (c026efac6b01987ba5c63650e3ded0e1) C:\Windows\system32\DRIVERS\nvstusb.sys 2011/05/17 17:22:03.0351 6004 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 2011/05/17 17:22:03.0407 6004 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/05/17 17:22:03.0496 6004 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 2011/05/17 17:22:03.0539 6004 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys 2011/05/17 17:22:03.0588 6004 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\DRIVERS\pci.sys 2011/05/17 17:22:03.0628 6004 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 2011/05/17 17:22:03.0672 6004 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 2011/05/17 17:22:03.0712 6004 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 2011/05/17 17:22:03.0763 6004 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 2011/05/17 17:22:03.0931 6004 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 2011/05/17 17:22:03.0972 6004 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 2011/05/17 17:22:04.0034 6004 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 2011/05/17 17:22:04.0079 6004 PxHlpa64 (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys 2011/05/17 17:22:04.0147 6004 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 2011/05/17 17:22:04.0202 6004 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 2011/05/17 17:22:04.0251 6004 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 2011/05/17 17:22:04.0289 6004 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 2011/05/17 17:22:04.0330 6004 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 2011/05/17 17:22:04.0381 6004 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/05/17 17:22:04.0435 6004 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/05/17 17:22:04.0480 6004 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 2011/05/17 17:22:04.0524 6004 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 2011/05/17 17:22:04.0564 6004 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 2011/05/17 17:22:04.0612 6004 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/05/17 17:22:04.0676 6004 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys 2011/05/17 17:22:04.0715 6004 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 2011/05/17 17:22:04.0762 6004 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 2011/05/17 17:22:04.0817 6004 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys 2011/05/17 17:22:04.0858 6004 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys 2011/05/17 17:22:04.0905 6004 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 2011/05/17 17:22:04.0963 6004 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 2011/05/17 17:22:05.0038 6004 RSPCIESTOR (4ec9bac49473043ebd1eec6ea59d8b2f) C:\Windows\system32\DRIVERS\RtsPStor.sys 2011/05/17 17:22:05.0078 6004 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 2011/05/17 17:22:05.0125 6004 RTL8167 (20a466b9ea2bd828c0ec723f99b8cfe7) C:\Windows\system32\DRIVERS\Rt64win7.sys 2011/05/17 17:22:05.0175 6004 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\DRIVERS\vms3cap.sys 2011/05/17 17:22:05.0219 6004 S6000KNT (268967955b42dab765395e72277f5346) C:\Windows\system32\Drivers\S6000KNT.sys 2011/05/17 17:22:05.0265 6004 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\DRIVERS\sbp2port.sys 2011/05/17 17:22:05.0310 6004 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 2011/05/17 17:22:05.0381 6004 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 2011/05/17 17:22:05.0530 6004 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 2011/05/17 17:22:05.0571 6004 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 2011/05/17 17:22:05.0609 6004 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 2011/05/17 17:22:05.0690 6004 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 2011/05/17 17:22:05.0732 6004 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 2011/05/17 17:22:05.0776 6004 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\DRIVERS\sffp_sd.sys 2011/05/17 17:22:05.0817 6004 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 2011/05/17 17:22:05.0877 6004 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 2011/05/17 17:22:05.0917 6004 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 2011/05/17 17:22:05.0949 6004 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 2011/05/17 17:22:06.0015 6004 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 2011/05/17 17:22:06.0107 6004 SRTSP (90ef30c3867bcde4579c01a6d6e75a7a) C:\Windows\System32\Drivers\NAVx64\1206000.01D\SRTSP64.SYS 2011/05/17 17:22:06.0157 6004 SRTSPX (c513e8a5e7978da49077f5484344ee1b) C:\Windows\system32\drivers\NAVx64\1206000.01D\SRTSPX64.SYS 2011/05/17 17:22:06.0207 6004 srv (65bbf4920148c2ee279055da7228fc7b) C:\Windows\system32\DRIVERS\srv.sys 2011/05/17 17:22:06.0258 6004 srv2 (da939f762a1ccc2d77428621ddbd40a7) C:\Windows\system32\DRIVERS\srv2.sys 2011/05/17 17:22:06.0300 6004 srvnet (3f847c9dc87299516f7dc82fb6572865) C:\Windows\system32\DRIVERS\srvnet.sys 2011/05/17 17:22:06.0379 6004 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 2011/05/17 17:22:06.0427 6004 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\DRIVERS\vmstorfl.sys 2011/05/17 17:22:06.0461 6004 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\DRIVERS\storvsc.sys 2011/05/17 17:22:06.0499 6004 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 2011/05/17 17:22:06.0561 6004 SymDS (6160145c7a87fc7672e8e3b886888176) C:\Windows\system32\drivers\NAVx64\1206000.01D\SYMDS64.SYS 2011/05/17 17:22:06.0622 6004 SymEFA (96aeed40d4d3521568b42027687e69e0) C:\Windows\system32\drivers\NAVx64\1206000.01D\SYMEFA64.SYS 2011/05/17 17:22:06.0675 6004 SymEvent (21a1c2d694c3cf962d31f5e873ab3d6f) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2011/05/17 17:22:06.0715 6004 SymIRON (bd0d711d8cbfcaa19ca123306eaf53a5) C:\Windows\system32\drivers\NAVx64\1206000.01D\Ironx64.SYS 2011/05/17 17:22:06.0763 6004 SymNetS (81d134628a98a22b6e054e971af525dc) C:\Windows\System32\Drivers\NAVx64\1206000.01D\SYMNETS.SYS 2011/05/17 17:22:06.0803 6004 Synth3dVsc (c3a39c4079305480972d29c44b868c78) C:\Windows\system32\drivers\synth3dvsc.sys 2011/05/17 17:22:06.0916 6004 Tcpip (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\drivers\tcpip.sys 2011/05/17 17:22:07.0014 6004 TCPIP6 (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\DRIVERS\tcpip.sys 2011/05/17 17:22:07.0076 6004 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 2011/05/17 17:22:07.0125 6004 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 2011/05/17 17:22:07.0163 6004 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 2011/05/17 17:22:07.0209 6004 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 2011/05/17 17:22:07.0250 6004 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys 2011/05/17 17:22:07.0290 6004 terminpt (2b5bdff688ec9871d7ec5837833374e9) C:\Windows\system32\DRIVERS\terminpt.sys 2011/05/17 17:22:07.0395 6004 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/05/17 17:22:07.0584 6004 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 2011/05/17 17:22:07.0633 6004 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\DRIVERS\TsUsbGD.sys 2011/05/17 17:22:07.0675 6004 tsusbhub (e1748d04ae40118b62bc18ac86032192) C:\Windows\system32\drivers\tsusbhub.sys 2011/05/17 17:22:07.0717 6004 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 2011/05/17 17:22:07.0756 6004 TurboB (c45a3e051c65106a28982caed125f855) C:\Windows\system32\DRIVERS\TurboB.sys 2011/05/17 17:22:07.0812 6004 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 2011/05/17 17:22:07.0861 6004 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 2011/05/17 17:22:07.0928 6004 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 2011/05/17 17:22:07.0972 6004 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys 2011/05/17 17:22:08.0013 6004 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 2011/05/17 17:22:08.0084 6004 usbccgp (481dff26b4dca8f4cbac1f7dce1d6829) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/05/17 17:22:08.0125 6004 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 2011/05/17 17:22:08.0169 6004 usbehci (74ee782b1d9c241efe425565854c661c) C:\Windows\system32\DRIVERS\usbehci.sys 2011/05/17 17:22:08.0215 6004 usbhub (dc96bd9ccb8403251bcf25047573558e) C:\Windows\system32\DRIVERS\usbhub.sys 2011/05/17 17:22:08.0253 6004 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 2011/05/17 17:22:08.0297 6004 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 2011/05/17 17:22:08.0340 6004 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 2011/05/17 17:22:08.0386 6004 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/05/17 17:22:08.0424 6004 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/05/17 17:22:08.0474 6004 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys 2011/05/17 17:22:08.0534 6004 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 2011/05/17 17:22:08.0588 6004 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/05/17 17:22:08.0629 6004 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 2011/05/17 17:22:08.0708 6004 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\DRIVERS\vhdmp.sys 2011/05/17 17:22:08.0750 6004 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 2011/05/17 17:22:08.0799 6004 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\DRIVERS\vmbus.sys 2011/05/17 17:22:08.0842 6004 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\DRIVERS\VMBusHID.sys 2011/05/17 17:22:08.0886 6004 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\DRIVERS\volmgr.sys 2011/05/17 17:22:08.0930 6004 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 2011/05/17 17:22:08.0981 6004 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\DRIVERS\volsnap.sys 2011/05/17 17:22:09.0025 6004 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 2011/05/17 17:22:09.0078 6004 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 2011/05/17 17:22:09.0121 6004 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 2011/05/17 17:22:09.0180 6004 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 2011/05/17 17:22:09.0228 6004 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 2011/05/17 17:22:09.0256 6004 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 2011/05/17 17:22:09.0335 6004 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 2011/05/17 17:22:09.0386 6004 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 2011/05/17 17:22:09.0613 6004 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 2011/05/17 17:22:09.0657 6004 WimFltr (52ded146e4797e6ccf94799e8e22bb2a) C:\Windows\system32\DRIVERS\wimfltr.sys 2011/05/17 17:22:09.0700 6004 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 2011/05/17 17:22:09.0817 6004 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys 2011/05/17 17:22:09.0877 6004 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/05/17 17:22:09.0978 6004 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 2011/05/17 17:22:10.0055 6004 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 2011/05/17 17:22:10.0103 6004 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/05/17 17:22:10.0437 6004 ================================================================================ 2011/05/17 17:22:10.0437 6004 Scan finished 2011/05/17 17:22:10.0437 6004 ================================================================================ |
|
17.05.2011, 18:09
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Goingonearth - nicht zu entfernen, Logfiles angehangen Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.05.2011, 08:29
| #12 |
| | Goingonearth - nicht zu entfernen, Logfiles angehangen Vielen Dank: Combofix Logfile: Code:
ATTFilter ComboFix 11-05-23.02 - dewitz 24.05.2011 9:15.1.8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.12213.10446 [GMT 2:00]
ausgeführt von:: c:\users\dewitz\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\dewitz\AppData\Local\Microsoft\Windows\Temporary Internet Files\{1093866B-42F9-414B-921F-C54E2F5D436E}.xps
c:\users\dewitz\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3AC8A6DF-69E9-44E1-832E-EBD8B381E1CC}.xps
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-04-24 bis 2011-05-24 ))))))))))))))))))))))))))))))
.
.
2011-05-23 08:22 . 2011-05-23 08:22 -------- d-----w- c:\program files (x86)\Print Server Utilities
2011-05-23 08:22 . 2010-04-19 19:27 212992 ----a-w- c:\windows\SysWow64\Bot.dll
2011-05-18 13:43 . 2011-05-23 19:58 -------- d-----r- c:\users\JvDewitz\Dropbox
2011-05-18 13:42 . 2011-05-23 19:58 -------- d-----w- c:\users\JvDewitz\AppData\Roaming\Dropbox
2011-05-17 21:09 . 2011-05-24 06:25 -------- d-----w- c:\programdata\NVIDIA
2011-05-17 21:08 . 2011-05-14 04:27 794216 ----a-w- c:\windows\system32\easyupdatusapiu64.dll
2011-05-17 21:08 . 2011-05-14 04:27 6289512 ----a-w- c:\windows\system32\nvcpl.dll
2011-05-17 21:08 . 2011-05-14 04:27 61544 ----a-w- c:\windows\system32\nvshext.dll
2011-05-17 21:08 . 2011-05-14 04:27 326760 ----a-w- c:\windows\system32\nvhotkey.dll
2011-05-17 21:08 . 2011-05-14 04:27 3040360 ----a-w- c:\windows\system32\nvsvc64.dll
2011-05-17 21:08 . 2011-05-14 04:27 2560616 ----a-w- c:\windows\system32\nvsvcr.dll
2011-05-17 21:08 . 2011-05-14 04:27 117864 ----a-w- c:\windows\system32\nvmctray.dll
2011-05-17 21:08 . 2011-05-14 04:27 1016936 ----a-w- c:\windows\system32\nvvsvc.exe
2011-05-17 21:08 . 2011-05-17 21:08 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-05-17 21:05 . 2011-05-17 21:05 -------- d-----w- C:\NVIDIA
2011-05-17 21:01 . 2011-05-17 21:01 -------- d-----w- c:\program files (x86)\Phyxion.net
2011-05-17 21:00 . 2011-05-23 17:59 45056 ----a-w- c:\windows\system32\acovcnt.exe
2011-05-17 19:14 . 2011-05-17 19:14 -------- d-----w- c:\users\JvDewitz\AppData\Local\The Witcher 2
2011-05-17 12:01 . 2011-05-17 12:01 -------- d-----w- c:\users\JvDewitz\AppData\Local\GaHero
2011-05-17 11:57 . 2011-05-17 11:57 35328 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2011-05-17 11:57 . 2011-05-17 11:57 303616 ----a-w- c:\windows\system32\drivers\atksgt.sys
2011-05-17 11:54 . 2011-05-17 11:54 303236 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll
2011-05-17 11:54 . 2011-05-17 11:54 180356 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll
2011-05-17 11:54 . 2004-07-15 22:20 733184 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll
2011-05-17 11:54 . 2004-07-15 22:20 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll
2011-05-17 11:54 . 2004-07-15 22:19 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll
2011-05-17 11:54 . 2004-07-15 22:18 172032 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll
2011-05-17 11:54 . 2004-07-15 22:18 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe
2011-05-17 09:54 . 2011-05-17 09:54 -------- d-----w- c:\users\JvDewitz\AppData\Local\Funcom
2011-05-16 21:36 . 2011-05-16 21:36 -------- d-----w- C:\_OTL
2011-05-15 13:46 . 2011-05-15 13:46 -------- d-----w- c:\program files (x86)\Common Files\Steam
2011-05-15 13:46 . 2011-05-23 19:58 -------- d-----w- c:\program files (x86)\Steam
2011-05-15 13:45 . 2011-05-15 13:45 -------- d-----w- c:\program files\CCleaner
2011-05-15 13:40 . 2011-05-15 13:40 -------- d-----w- c:\users\JvDewitz\AppData\Roaming\Malwarebytes
2011-05-15 13:39 . 2011-05-15 13:39 -------- d-----w- c:\programdata\Malwarebytes
2011-05-15 13:39 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-15 13:39 . 2011-05-15 13:39 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-05-15 13:39 . 2010-12-20 16:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-15 12:45 . 2011-05-17 12:00 -------- d-----w- c:\programdata\Media Center Programs
2011-05-14 19:30 . 2011-05-14 19:30 -------- d-----w- c:\users\JvDewitz\AppData\Roaming\ProtectDISC
2011-05-14 17:31 . 2011-05-17 11:58 -------- d-----w- c:\users\JvDewitz\AppData\Local\CrashDumps
2011-05-14 16:05 . 2011-05-14 16:05 -------- d-----w- c:\program files (x86)\PiranhaBytes
2011-05-14 10:32 . 2011-05-14 10:32 -------- d-----w- c:\windows\Sun
2011-05-14 10:26 . 2011-05-14 10:26 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-05-14 10:26 . 2011-05-14 10:25 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-05-14 10:25 . 2011-05-14 10:25 -------- d-----w- c:\program files (x86)\Java
2011-05-14 10:23 . 2011-05-14 10:23 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared
2011-05-14 10:14 . 2011-05-14 10:23 174200 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2011-05-14 10:14 . 2011-05-14 10:23 -------- d-----w- c:\program files\Symantec
2011-05-14 10:14 . 2011-05-14 10:14 -------- d-----w- c:\program files\Common Files\Symantec Shared
2011-05-14 10:14 . 2011-05-14 10:28 -------- d-----w- c:\windows\system32\drivers\NAVx64
2011-05-14 10:14 . 2011-05-14 10:14 -------- d-----w- c:\programdata\Norton
2011-05-14 10:14 . 2011-05-14 10:14 -------- d-----w- c:\program files (x86)\Norton AntiVirus
2011-05-14 10:14 . 2011-05-14 10:14 -------- d-----w- c:\program files (x86)\NortonInstaller
2011-05-14 08:32 . 2011-05-14 08:32 -------- d-----w- c:\users\JvDewitz\AppData\Roaming\AVG10
2011-05-13 20:18 . 2011-05-13 20:18 304744 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2011-05-12 12:45 . 2011-05-12 12:45 -------- d-----w- c:\programdata\Codemasters
2011-05-12 11:51 . 2011-05-12 11:51 -------- d-----w- c:\users\JvDewitz\AppData\Local\Microsoft Help
2011-05-10 06:26 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DCC2BCE0-1B70-4291-97A9-1ED7035BB555}\mpengine.dll
2011-05-08 11:35 . 2011-05-08 11:35 276584 ----a-w- c:\windows\system32\drivers\nvstusb.sys
2011-04-28 18:46 . 2011-05-17 20:48 -------- d-----w- c:\users\UpdatusUser
2011-04-28 18:37 . 2011-04-28 18:39 -------- d-----w- c:\program files (x86)\Wise Registry Cleaner
2011-04-28 09:41 . 2011-05-15 17:05 -------- d-----w- c:\users\JvDewitz\AppData\Roaming\TS3Client
2011-04-28 09:41 . 2011-04-28 09:41 -------- d-----w- c:\program files (x86)\TeamSpeak 3 Client
2011-04-27 07:26 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2011-04-27 07:26 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2011-04-26 06:07 . 2011-04-26 06:06 8192 ----a-w- c:\windows\SysWow64\srvany.exe
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-12 12:47 . 2009-08-18 10:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2011-05-12 12:47 . 2009-08-18 09:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-04-16 22:01 . 2011-04-16 22:01 374792 ----a-w- c:\windows\system32\drivers\UMDF\lgSSQVGA.dll
2011-04-16 22:01 . 2011-04-16 22:01 22408 ----a-w- c:\windows\system32\drivers\LGBusEnum.sys
2011-04-16 22:01 . 2011-04-16 22:01 16008 ----a-w- c:\windows\system32\drivers\LGVirHid.sys
2011-04-16 22:01 . 2011-04-16 22:01 157704 ----a-w- c:\windows\system32\drivers\UMDF\lgSSBW.dll
2011-04-09 16:55 . 2011-04-09 16:55 15453336 ----a-w- c:\windows\SysWow64\xlive.dll
2011-04-09 16:55 . 2011-04-09 16:55 13642904 ----a-w- c:\windows\SysWow64\xlivefnt.dll
2011-04-08 13:42 . 2011-03-22 18:40 466520 ----a-w- c:\windows\system32\wrap_oal.dll
2011-04-08 13:42 . 2011-03-22 18:40 445016 ----a-w- c:\windows\SysWow64\wrap_oal.dll
2011-04-05 17:40 . 2011-04-05 17:40 189248 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-04-05 17:40 . 2011-04-05 17:40 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
2011-03-29 12:40 . 2011-03-29 12:40 253952 ------w- c:\windows\Setup1.exe
2011-03-29 12:40 . 2011-03-29 12:40 74752 ----a-w- c:\windows\ST6UNST.EXE
2011-03-29 09:14 . 2011-03-29 09:14 119808 ----a-r- c:\users\dewitz\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
2011-03-27 17:01 . 2011-03-27 17:01 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-03-24 07:41 . 2011-03-24 07:41 258352 ----a-w- c:\windows\SysWow64\unicows.dll
2011-03-22 18:47 . 2011-03-22 18:47 80512 ----a-w- c:\windows\Asus_GSeries_Screensaver Uninstaller.exe
2011-03-22 18:47 . 2011-03-22 18:47 3058304 ----a-w- c:\windows\AsScrPro.exe
2011-03-22 18:46 . 2011-03-22 18:46 35384 ----a-w- c:\windows\system32\drivers\AsDsm.sys
2011-03-22 18:40 . 2011-03-22 18:40 123480 ----a-w- c:\windows\system32\OpenAL32.dll
2011-03-22 18:40 . 2011-03-22 18:40 109144 ----a-w- c:\windows\SysWow64\OpenAL32.dll
2011-03-22 18:39 . 2011-03-22 18:39 30376 ----a-w- c:\windows\system32\drivers\frmupgr.sys
2011-03-11 06:34 . 2011-04-14 11:24 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-11 06:34 . 2011-04-14 11:24 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-03-11 05:33 . 2011-04-14 11:24 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-03-11 05:33 . 2011-04-14 11:24 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-03-08 06:29 . 2011-04-14 11:24 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-08 05:28 . 2011-04-14 11:24 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-03-07 06:31 . 2011-04-14 11:24 1188864 ----a-w- c:\windows\system32\wininet.dll
2011-03-07 05:33 . 2011-04-14 11:24 981504 ----a-w- c:\windows\SysWow64\wininet.dll
2011-03-07 04:24 . 2011-04-14 11:24 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-03-07 03:52 . 2011-04-14 11:24 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-03-04 06:19 . 2011-04-27 07:27 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:19 . 2011-04-27 07:27 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-03-03 06:24 . 2011-04-14 11:24 183296 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-03-03 06:21 . 2011-04-14 11:24 30208 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-03-03 05:36 . 2011-04-14 11:24 28672 ----a-w- c:\windows\SysWow64\dnscacheugc.exe
2011-03-03 03:52 . 2011-04-14 11:24 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-02-24 06:15 . 2011-04-14 11:24 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-24 05:38 . 2011-04-14 11:24 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 16:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"THX TruStudio NB Settings"="c:\program files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" [2010-03-24 899072]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-06-24 6806144]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-05-03 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-08-11 1597440]
"CPMonitor"="c:\program files (x86)\Roxio\CinePlayer\5.0\CPMonitor.exe" [2010-06-11 84464]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
.
c:\users\JvDewitz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\dewitz\AppData\Roaming\Dropbox\bin\Dropbox.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-3-11 1083680]
FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2011-3-22 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 0 (0x0)
"EnableInstallerDetection"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 NcpSec;NCP Client PKI Support;c:\program files (x86)\LANCOM\Advanced VPN Client\NCPSEC.EXE [2010-05-07 93184]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;f:\i386\AsPrOb64.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-03-22 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-03-22 79360]
R3 dmvsc;dmvsc;c:\windows\system32\DRIVERS\dmvsc.sys [x]
R3 ipswuio;ipswuio;c:\windows\system32\DRIVERS\ipswuio.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 ncpfilt;LANCOM Filter;c:\windows\system32\DRIVERS\ncplelhp.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\DRIVERS\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\DRIVERS\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-08-06 118672]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1206000.01D\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1206000.01D\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\BASHDefs\20110518.001\BHDrvx64.sys [2011-04-29 1127032]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_18.1.0.37\Definitions\IPSDefs\20110518.001\IDSvia64.sys [2011-03-14 476792]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1206000.01D\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NAVx64\1206000.01D\SYMNETS.SYS [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008]
S2 ncpclcfg;NCP Client Configuration Support;c:\program files (x86)\LANCOM\Advanced VPN Client\ncpclcfg.exe [2010-05-21 133712]
S2 ncprwsnt;NCP Client VPN und Dialing Service;c:\program files (x86)\LANCOM\Advanced VPN Client\ncprwsnt.exe [2010-06-30 1421904]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-14 2226792]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-13 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-14 136824]
S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [x]
S3 ncplelhp;LANCOM Secure Client NDIS6 Driver;c:\windows\system32\DRIVERS\ncplelhp.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 S6000KNT;S6000KNT_WebCam Driver;c:\windows\system32\Drivers\S6000KNT.sys [x]
.
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 15:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"THXCfg64"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2010-11-16 104008]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
FF - ProfilePath - c:\users\dewitz\AppData\Roaming\Mozilla\Firefox\Profiles\zxmafcui.default\
FF - prefs.js: network.proxy.ftp - proxy.bg.bib.de
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.http - proxy.bg.bib.de
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.socks - proxy.bg.bib.de
FF - prefs.js: network.proxy.socks_port - 8080
FF - prefs.js: network.proxy.ssl - proxy.bg.bib.de
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-Adobe Flash Player Plugin - c:\windows\SysWOW64\Macromed\Flash\FlashUtil10p_Plugin.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NAV]
"ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-05-24 09:27:06
ComboFix-quarantined-files.txt 2011-05-24 07:27
.
Vor Suchlauf: 11 Verzeichnis(se), 14.446.350.336 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 14.344.720.384 Bytes frei
.
- - End Of File - - CA9621BD5071583EF9C7FA5C70478590
|
|
24.05.2011, 12:12
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Goingonearth - nicht zu entfernen, Logfiles angehangen Bitte nun Logs mit GMER und mbrcheck erstellen und posten. GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg Anleitung zu mbrcheck: Downloade Dir MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Goingonearth - nicht zu entfernen, Logfiles angehangen |
| aufsetzten, earth, ellung, entferne, entfernen, erstellung, folge, gelöscht, gen, goingonearth, hallo zusammen, logfiles, neu, neu aufsetzten, schön, thread, verfügbar, zusammen |
Linear-Darstellung
