Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Google Umleitung auf "secure.bidvertiser" (https://www.trojaner-board.de/115573-google-umleitung-secure-bidvertiser.html)

Ordensritter 29.05.2012 20:45
Code:
All processes killed
========== OTL ==========
HKU\S-1-5-21-343818398-583907252-839522115-1006\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ deleted successfully.
C:\Programme\Vuze_Remote\prxtbVuz0.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ff88a983-649d-4207-9336-9b999280b436} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ff88a983-649d-4207-9336-9b999280b436}\ deleted successfully.
C:\Programme\SFT_de3\prxtbSFT_.dll moved successfully.
HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.
Registry key HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\{8EA6FAC8-3782-48CB-AEE1-497A8152DB01}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8EA6FAC8-3782-48CB-AEE1-497A8152DB01}\ not found.
Registry key HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Prefs.js: "SFT_de3 Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3031778&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: ":" removed from network.proxy.ftp
Prefs.js: ":" removed from network.proxy.gopher
Prefs.js: ":" removed from network.proxy.http
Prefs.js: true removed from network.proxy.share_proxy_settings
Prefs.js: ":" removed from network.proxy.socks
Prefs.js: ":" removed from network.proxy.ssl
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\searchplugin folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\modules folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\components folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\extensions\{ff88a983-649d-4207-9336-9b999280b436} folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Programme\ConduitEngine\prxConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ not found.
File C:\Programme\Vuze_Remote\prxtbVuz0.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ff88a983-649d-4207-9336-9b999280b436}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ff88a983-649d-4207-9336-9b999280b436}\ not found.
File C:\Programme\SFT_de3\prxtbSFT_.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Programme\ConduitEngine\prxConduitEngine.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.
C:\Programme\AVG Secure Search\11.0.0.9\AVG Secure Search_toolbar.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ not found.
File C:\Programme\Vuze_Remote\prxtbVuz0.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ff88a983-649d-4207-9336-9b999280b436} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ff88a983-649d-4207-9336-9b999280b436}\ not found.
File C:\Programme\SFT_de3\prxtbSFT_.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BA14329E-9550-4989-B3F2-9732E92D17CC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC}\ not found.
File C:\Programme\Vuze_Remote\prxtbVuz0.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun not found.
Registry value HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\S-1-5-21-343818398-583907252-839522115-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
ADS C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A8ADE5D8 deleted successfully.
ADS C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2 deleted successfully.
========== FILES ==========
C:\Dokumente und Einstellungen\Elsi\Lokale Einstellungen\Anwendungsdaten\SFT_de3\Logs folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Lokale Einstellungen\Anwendungsdaten\SFT_de3 folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Lokale Einstellungen\Anwendungsdaten\ConduitEngine\MyStuffApps folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Lokale Einstellungen\Anwendungsdaten\ConduitEngine\Logs folder moved successfully.
C:\Dokumente und Einstellungen\Elsi\Lokale Einstellungen\Anwendungsdaten\ConduitEngine folder moved successfully.
C:\Programme\ConduitEngine folder moved successfully.
C:\Programme\SFT_de3 folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixtools\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixtools folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixsql\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixsql folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixrs\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixrs folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixns\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixns folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixdts\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixdts folder moved successfully.
Folder move failed. C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixas\files scheduled to be moved on reboot.
C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixas folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\3082 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\2052 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1053 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1049 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1046 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1043 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1042 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1041 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1040 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1036 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1033 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1031 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd\1028 folder moved successfully.
C:\2f16faf963e60c0c9ef21ef81b8729bd folder moved successfully.
Folder move failed. C:\WINDOWS.0\$NtUninstallKB58601$ scheduled to be moved on reboot.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 54422496 bytes
->Temporary Internet Files folder emptied: 64859195 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Elsi
->Temp folder emptied: 164874489 bytes
->Temporary Internet Files folder emptied: 50692163 bytes
->Java cache emptied: 7067601 bytes
->FireFox cache emptied: 1064758839 bytes
->Flash cache emptied: 2025896 bytes
 
User: Elsi_2
->Temp folder emptied: 56621545 bytes
->Temporary Internet Files folder emptied: 489714820 bytes
->Java cache emptied: 9790830 bytes
->FireFox cache emptied: 233865681 bytes
->Flash cache emptied: 4071 bytes
 
User: Gast
->Temp folder emptied: 587497 bytes
->Temporary Internet Files folder emptied: 45293 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 1137582 bytes
 
User: NetworkService
->Temp folder emptied: 278528 bytes
->Temporary Internet Files folder emptied: 4119655 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1138908 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2646116 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 2.106,00 mb
 
 
[EMPTYFLASH]
 
User: Administrator
 
User: All Users
 
User: Default User
 
User: Elsi
->Flash cache emptied: 0 bytes
 
User: Elsi_2
->Flash cache emptied: 0 bytes
 
User: Gast
 
User: LocalService
 
User: NetworkService
 
Total Flash Files Cleaned = 0,00 mb
 
C:\WINDOWS.0\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.43.1 log created on 05292012_193426

Files\Folders moved on Reboot...
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixtools\files not found!
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixsql\files not found!
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixrs\files not found!
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixns\files not found!
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixdts\files not found!
File\Folder C:\2f16faf963e60c0c9ef21ef81b8729bd\hotfixas\files not found!
Folder move failed. C:\WINDOWS.0\$NtUninstallKB58601$ scheduled to be moved on reboot.
File\Folder C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp\Perflib_Perfdata_a30.dat not found!

Registry entries deleted on Reboot...
Computer scheint sich allerdings aufgehängt zu haben beim Neustart

MfG

cosinus 30.05.2012 10:25
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

Ordensritter 30.05.2012 16:17
Code:
16:03:05.0921 1224        TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
16:03:06.0093 1224        ============================================================
16:03:06.0093 1224        Current date / time: 2012/05/30 16:03:06.0093
16:03:06.0093 1224        SystemInfo:
16:03:06.0093 1224       
16:03:06.0093 1224        OS Version: 5.1.2600 ServicePack: 3.0
16:03:06.0093 1224        Product type: Workstation
16:03:06.0093 1224        ComputerName: MICHI
16:03:06.0093 1224        UserName: Elsi
16:03:06.0093 1224        Windows directory: C:\WINDOWS.0
16:03:06.0093 1224        System windows directory: C:\WINDOWS.0
16:03:06.0093 1224        Processor architecture: Intel x86
16:03:06.0093 1224        Number of processors: 2
16:03:06.0093 1224        Page size: 0x1000
16:03:06.0093 1224        Boot type: Normal boot
16:03:06.0093 1224        ============================================================
16:03:09.0218 1224        Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
16:03:09.0250 1224        ============================================================
16:03:09.0250 1224        \Device\Harddisk0\DR0:
16:03:09.0250 1224        MBR partitions:
16:03:09.0250 1224        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A18A82
16:03:09.0250 1224        ============================================================
16:03:09.0328 1224        C: <-> \Device\Harddisk0\DR0\Partition0
16:03:09.0328 1224        ============================================================
16:03:09.0328 1224        Initialize success
16:03:09.0328 1224        ============================================================
16:05:52.0500 2656        ============================================================
16:05:52.0500 2656        Scan started
16:05:52.0500 2656        Mode: Manual; SigCheck; TDLFS;
16:05:52.0500 2656        ============================================================
16:05:52.0765 2656        !SASCORE        (c0393eb99a6c72c6bef9bfc4a72b33a6) C:\Programme\SUPERAntiSpyware\SASCORE.EXE
16:05:52.0890 2656        !SASCORE - ok
16:05:53.0046 2656        Abiosdsk - ok
16:05:53.0062 2656        abp480n5 - ok
16:05:53.0109 2656        ACPI            (deac07203d92bf9385573fa5d790ff3c) C:\WINDOWS.0\system32\DRIVERS\ACPI.sys
16:05:53.0125 2656        Suspicious file (Forged): C:\WINDOWS.0\system32\DRIVERS\ACPI.sys. Real md5: deac07203d92bf9385573fa5d790ff3c, Fake md5: ac407f1a62c3a300b4f2b5a9f1d55b2c
16:05:53.0125 2656        ACPI ( Virus.Win32.Rloader.a ) - infected
16:05:53.0125 2656        ACPI - detected Virus.Win32.Rloader.a (0)
16:05:53.0171 2656        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS.0\system32\drivers\ACPIEC.sys
16:05:54.0140 2656        ACPIEC - ok
16:05:54.0140 2656        adpu160m - ok
16:05:54.0187 2656        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS.0\system32\drivers\aec.sys
16:05:54.0328 2656        aec - ok
16:05:54.0375 2656        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS.0\System32\drivers\afd.sys
16:05:54.0406 2656        AFD - ok
16:05:54.0421 2656        Aha154x - ok
16:05:54.0421 2656        aic78u2 - ok
16:05:54.0421 2656        aic78xx - ok
16:05:54.0484 2656        alcan5wn        (0940030d5a5869067ccc03e3b0b8dec7) C:\WINDOWS.0\system32\DRIVERS\alcan5wn.sys
16:05:54.0562 2656        alcan5wn - ok
16:05:54.0562 2656        alcaudsl        (4c9577888c53243e2991456f510488a1) C:\WINDOWS.0\system32\DRIVERS\alcaudsl.sys
16:05:54.0625 2656        alcaudsl - ok
16:05:54.0640 2656        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS.0\system32\alrsvc.dll
16:05:54.0750 2656        Alerter - ok
16:05:54.0781 2656        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS.0\System32\alg.exe
16:05:54.0843 2656        ALG - ok
16:05:54.0843 2656        AliIde - ok
16:05:54.0843 2656        amsint - ok
16:05:54.0984 2656        Apple Mobile Device (acb095e7e1663f1b83a41c22c5d75f90) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
16:05:55.0000 2656        Apple Mobile Device - ok
16:05:55.0046 2656        AppMgmt        (d45960be52c3c610d361977057f98c54) C:\WINDOWS.0\System32\appmgmts.dll
16:05:55.0109 2656        AppMgmt - ok
16:05:55.0109 2656        asc - ok
16:05:55.0109 2656        asc3350p - ok
16:05:55.0125 2656        asc3550 - ok
16:05:55.0218 2656        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
16:05:55.0250 2656        aspnet_state - ok
16:05:55.0296 2656        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS.0\system32\DRIVERS\asyncmac.sys
16:05:55.0406 2656        AsyncMac - ok
16:05:55.0421 2656        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS.0\system32\DRIVERS\atapi.sys
16:05:55.0531 2656        atapi - ok
16:05:55.0531 2656        Atdisk - ok
16:05:55.0546 2656        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS.0\system32\DRIVERS\atmarpc.sys
16:05:55.0656 2656        Atmarpc - ok
16:05:55.0703 2656        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS.0\System32\audiosrv.dll
16:05:55.0812 2656        AudioSrv - ok
16:05:55.0843 2656        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS.0\system32\DRIVERS\audstub.sys
16:05:55.0953 2656        audstub - ok
16:05:56.0187 2656        AVGIDSAgent    (6d440ff3f44ca72edfd6176c6d6a89c0) C:\Programme\AVG\AVG2012\AVGIDSAgent.exe
16:05:56.0406 2656        AVGIDSAgent - ok
16:05:56.0546 2656        AVGIDSDriver    (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS.0\system32\DRIVERS\AVGIDSDriver.Sys
16:05:56.0578 2656        AVGIDSDriver - ok
16:05:56.0593 2656        AVGIDSEH        (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS.0\system32\DRIVERS\AVGIDSEH.Sys
16:05:56.0609 2656        AVGIDSEH - ok
16:05:56.0609 2656        AVGIDSFilter    (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS.0\system32\DRIVERS\AVGIDSFilter.Sys
16:05:56.0625 2656        AVGIDSFilter - ok
16:05:56.0640 2656        AVGIDSShim      (1e01c2166b5599802bcd61b9691f7476) C:\WINDOWS.0\system32\DRIVERS\AVGIDSShim.Sys
16:05:56.0640 2656        AVGIDSShim - ok
16:05:56.0671 2656        Avgldx86        (bf8118cd5e2255387b715b534d64acd1) C:\WINDOWS.0\system32\DRIVERS\avgldx86.sys
16:05:56.0687 2656        Avgldx86 - ok
16:05:56.0703 2656        Avgmfx86        (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS.0\system32\DRIVERS\avgmfx86.sys
16:05:56.0718 2656        Avgmfx86 - ok
16:05:56.0718 2656        Avgrkx86        (f2038ed7284b79dcef581468121192a9) C:\WINDOWS.0\system32\DRIVERS\avgrkx86.sys
16:05:56.0734 2656        Avgrkx86 - ok
16:05:56.0750 2656        Avgtdix        (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS.0\system32\DRIVERS\avgtdix.sys
16:05:56.0765 2656        Avgtdix - ok
16:05:56.0875 2656        avgwd          (6699ece24fe4b3f752a66c66a602ee86) C:\Programme\AVG\AVG2012\avgwdsvc.exe
16:05:56.0906 2656        avgwd - ok
16:05:56.0953 2656        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS.0\system32\drivers\Beep.sys
16:05:57.0062 2656        Beep - ok
16:05:57.0109 2656        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS.0\system32\qmgr.dll
16:05:57.0281 2656        BITS - ok
16:05:57.0375 2656        Bonjour Service (a065f048e9e23e6c026a7bb548d126a7) C:\Programme\Bonjour\mDNSResponder.exe
16:05:57.0406 2656        Bonjour Service - ok
16:05:57.0453 2656        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS.0\System32\browser.dll
16:05:57.0578 2656        Browser - ok
16:05:57.0625 2656        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS.0\system32\drivers\cbidf2k.sys
16:05:57.0734 2656        cbidf2k - ok
16:05:57.0750 2656        cd20xrnt - ok
16:05:57.0765 2656        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS.0\system32\drivers\Cdaudio.sys
16:05:57.0859 2656        Cdaudio - ok
16:05:57.0890 2656        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS.0\system32\drivers\Cdfs.sys
16:05:58.0000 2656        Cdfs - ok
16:05:58.0015 2656        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS.0\system32\DRIVERS\cdrom.sys
16:05:58.0125 2656        Cdrom - ok
16:05:58.0125 2656        Changer - ok
16:05:58.0171 2656        cisvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS.0\System32\cisvc.exe
16:05:58.0265 2656        cisvc - ok
16:05:58.0312 2656        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS.0\system32\clipsrv.exe
16:05:58.0453 2656        ClipSrv - ok
16:05:58.0546 2656        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:05:58.0625 2656        clr_optimization_v2.0.50727_32 - ok
16:05:58.0625 2656        CmdIde - ok
16:05:58.0625 2656        COMSysApp - ok
16:05:58.0640 2656        Cpqarray - ok
16:05:58.0687 2656        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS.0\System32\cryptsvc.dll
16:05:58.0796 2656        CryptSvc - ok
16:05:58.0796 2656        dac2w2k - ok
16:05:58.0796 2656        dac960nt - ok
16:05:58.0859 2656        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS.0\system32\rpcss.dll
16:05:58.0937 2656        DcomLaunch - ok
16:05:58.0984 2656        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS.0\System32\dhcpcsvc.dll
16:05:59.0109 2656        Dhcp - ok
16:05:59.0156 2656        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS.0\system32\DRIVERS\disk.sys
16:05:59.0265 2656        Disk - ok
16:05:59.0265 2656        dmadmin - ok
16:05:59.0312 2656        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS.0\system32\drivers\dmboot.sys
16:05:59.0437 2656        dmboot - ok
16:05:59.0500 2656        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS.0\system32\drivers\dmio.sys
16:05:59.0609 2656        dmio - ok
16:05:59.0656 2656        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS.0\system32\drivers\dmload.sys
16:05:59.0750 2656        dmload - ok
16:05:59.0796 2656        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS.0\System32\dmserver.dll
16:05:59.0890 2656        dmserver - ok
16:05:59.0921 2656        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS.0\system32\drivers\DMusic.sys
16:06:00.0031 2656        DMusic - ok
16:06:00.0078 2656        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS.0\System32\dnsrslvr.dll
16:06:00.0171 2656        Dnscache - ok
16:06:00.0234 2656        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS.0\System32\dot3svc.dll
16:06:00.0343 2656        Dot3svc - ok
16:06:00.0343 2656        dpti2o - ok
16:06:00.0390 2656        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS.0\system32\drivers\drmkaud.sys
16:06:00.0484 2656        drmkaud - ok
16:06:00.0515 2656        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS.0\System32\eapsvc.dll
16:06:00.0625 2656        EapHost - ok
16:06:00.0671 2656        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS.0\System32\ersvc.dll
16:06:00.0781 2656        ERSvc - ok
16:06:00.0828 2656        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS.0\system32\services.exe
16:06:00.0843 2656        Eventlog - ok
16:06:00.0890 2656        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS.0\system32\Es.dll
16:06:00.0968 2656        EventSystem - ok
16:06:01.0015 2656        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS.0\system32\drivers\Fastfat.sys
16:06:01.0125 2656        Fastfat - ok
16:06:01.0156 2656        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
16:06:01.0218 2656        FastUserSwitchingCompatibility - ok
16:06:01.0234 2656        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS.0\system32\DRIVERS\fdc.sys
16:06:01.0343 2656        Fdc - ok
16:06:01.0375 2656        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS.0\system32\drivers\Fips.sys
16:06:01.0484 2656        Fips - ok
16:06:01.0500 2656        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS.0\system32\DRIVERS\flpydisk.sys
16:06:01.0593 2656        Flpydisk - ok
16:06:01.0640 2656        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS.0\system32\drivers\fltmgr.sys
16:06:01.0750 2656        FltMgr - ok
16:06:01.0859 2656        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
16:06:01.0875 2656        FontCache3.0.0.0 - ok
16:06:01.0921 2656        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS.0\system32\drivers\Fs_Rec.sys
16:06:02.0031 2656        Fs_Rec - ok
16:06:02.0046 2656        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS.0\system32\DRIVERS\ftdisk.sys
16:06:02.0156 2656        Ftdisk - ok
16:06:02.0187 2656        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS.0\system32\Drivers\GEARAspiWDM.sys
16:06:02.0203 2656        GEARAspiWDM - ok
16:06:02.0234 2656        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS.0\system32\DRIVERS\msgpc.sys
16:06:02.0359 2656        Gpc - ok
16:06:02.0484 2656        gusvc          (408ddd80eede47175f6844817b90213e) C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
16:06:02.0500 2656        gusvc - ok
16:06:02.0531 2656        hamachi        (833051c6c6c42117191935f734cfbd97) C:\WINDOWS.0\system32\DRIVERS\hamachi.sys
16:06:02.0562 2656        hamachi - ok
16:06:02.0609 2656        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS.0\system32\DRIVERS\HDAudBus.sys
16:06:02.0718 2656        HDAudBus - ok
16:06:02.0828 2656        helpsvc        (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS.0\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:06:02.0937 2656        helpsvc - ok
16:06:02.0937 2656        HidServ - ok
16:06:02.0984 2656        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS.0\System32\kmsvc.dll
16:06:03.0078 2656        hkmsvc - ok
16:06:03.0078 2656        hpn - ok
16:06:03.0093 2656        hpt3xx - ok
16:06:03.0140 2656        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS.0\system32\Drivers\HTTP.sys
16:06:03.0171 2656        HTTP - ok
16:06:03.0203 2656        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS.0\System32\w3ssl.dll
16:06:03.0296 2656        HTTPFilter - ok
16:06:03.0312 2656        i2omgmt - ok
16:06:03.0312 2656        i2omp - ok
16:06:03.0359 2656        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS.0\system32\DRIVERS\i8042prt.sys
16:06:03.0453 2656        i8042prt - ok
16:06:03.0671 2656        ialm            (2aae7be67911f4aec9ad28e9cfb9096f) C:\WINDOWS.0\system32\DRIVERS\igxpmp32.sys
16:06:04.0093 2656        ialm - ok
16:06:04.0312 2656        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:06:04.0375 2656        idsvc - ok
16:06:04.0515 2656        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS.0\system32\drivers\Imapi.sys
16:06:04.0625 2656        Imapi - ok
16:06:04.0671 2656        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS.0\System32\imapi.exe
16:06:04.0765 2656        ImapiService - ok
16:06:04.0812 2656        InCDfs          (580a81790cd0a48d85da322267da7ac4) C:\WINDOWS.0\system32\drivers\InCDFs.sys
16:06:04.0828 2656        InCDfs - ok
16:06:04.0875 2656        InCDPass        (aaa2789d2ce21b31be9406ba1ceb7285) C:\WINDOWS.0\system32\drivers\InCDPass.sys
16:06:04.0875 2656        InCDPass - ok
16:06:04.0890 2656        InCDrec        (4d022577e9072b5d22e0a383a7806bbb) C:\WINDOWS.0\system32\drivers\InCDrec.sys
16:06:04.0890 2656        InCDrec - ok
16:06:04.0921 2656        incdrm          (c258e57321a3c3737f4fa815fa69ee0b) C:\WINDOWS.0\system32\drivers\InCDRm.sys
16:06:04.0937 2656        incdrm - ok
16:06:05.0109 2656        InCDsrv        (9792b85e32e058cd6a43db274ba47d57) C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
16:06:05.0203 2656        InCDsrv - ok
16:06:05.0359 2656        ini910u - ok
16:06:05.0546 2656        IntcAzAudAddService (eb5608fd4f2961517ac9f5cac88b023b) C:\WINDOWS.0\system32\drivers\RtkHDAud.sys
16:06:05.0828 2656        IntcAzAudAddService - ok
16:06:05.0921 2656        IntelIde - ok
16:06:05.0953 2656        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS.0\system32\DRIVERS\intelppm.sys
16:06:06.0093 2656        intelppm - ok
16:06:06.0109 2656        ip6fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS.0\system32\drivers\ip6fw.sys
16:06:06.0234 2656        ip6fw - ok
16:06:06.0265 2656        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS.0\system32\DRIVERS\ipfltdrv.sys
16:06:06.0375 2656        IpFilterDriver - ok
16:06:06.0421 2656        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS.0\system32\DRIVERS\ipinip.sys
16:06:06.0531 2656        IpInIp - ok
16:06:06.0546 2656        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS.0\system32\DRIVERS\ipnat.sys
16:06:06.0656 2656        IpNat - ok
16:06:06.0750 2656        iPod Service    (d8389f60ec63fb8197772349e82b5bb7) C:\Programme\iPod\bin\iPodService.exe
16:06:06.0796 2656        iPod Service - ok
16:06:06.0812 2656        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS.0\system32\DRIVERS\ipsec.sys
16:06:06.0921 2656        IPSec - ok
16:06:06.0968 2656        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS.0\system32\DRIVERS\irenum.sys
16:06:07.0031 2656        IRENUM - ok
16:06:07.0046 2656        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS.0\system32\DRIVERS\isapnp.sys
16:06:07.0140 2656        isapnp - ok
16:06:07.0312 2656        JavaQuickStarterService (9aa67569d5257462e230767510b0c815) C:\Programme\Java\jre6\bin\jqs.exe
16:06:07.0343 2656        JavaQuickStarterService - ok
16:06:07.0375 2656        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS.0\system32\DRIVERS\kbdclass.sys
16:06:07.0484 2656        Kbdclass - ok
16:06:07.0500 2656        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS.0\system32\drivers\kmixer.sys
16:06:07.0609 2656        kmixer - ok
16:06:07.0656 2656        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS.0\system32\drivers\KSecDD.sys
16:06:07.0718 2656        KSecDD - ok
16:06:07.0765 2656        lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS.0\System32\srvsvc.dll
16:06:07.0796 2656        lanmanserver - ok
16:06:07.0843 2656        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS.0\System32\wkssvc.dll
16:06:07.0906 2656        lanmanworkstation - ok
16:06:07.0906 2656        lbrtfdc - ok
16:06:08.0031 2656        LightScribeService (53710476495886d9961be46983a6a33f) C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
16:06:08.0031 2656        LightScribeService - ok
16:06:08.0093 2656        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS.0\System32\lmhsvc.dll
16:06:08.0203 2656        LmHosts - ok
16:06:08.0218 2656        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS.0\System32\msgsvc.dll
16:06:08.0328 2656        Messenger - ok
16:06:08.0375 2656        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS.0\system32\drivers\mnmdd.sys
16:06:08.0468 2656        mnmdd - ok
16:06:08.0515 2656        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS.0\System32\mnmsrvc.exe
16:06:08.0625 2656        mnmsrvc - ok
16:06:08.0656 2656        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS.0\system32\drivers\Modem.sys
16:06:08.0765 2656        Modem - ok
16:06:08.0812 2656        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS.0\system32\DRIVERS\mouclass.sys
16:06:08.0906 2656        Mouclass - ok
16:06:08.0906 2656        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS.0\system32\drivers\MountMgr.sys
16:06:09.0015 2656        MountMgr - ok
16:06:09.0062 2656        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
16:06:09.0093 2656        MozillaMaintenance - ok
16:06:09.0140 2656        MPFP            (136157e79849b9e5316ba4008d6075a8) C:\WINDOWS.0\system32\Drivers\Mpfp.sys
16:06:09.0171 2656        MPFP - ok
16:06:09.0171 2656        mraid35x - ok
16:06:09.0218 2656        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS.0\system32\DRIVERS\mrxdav.sys
16:06:09.0312 2656        MRxDAV - ok
16:06:09.0390 2656        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS.0\system32\DRIVERS\mrxsmb.sys
16:06:09.0593 2656        MRxSmb - ok
16:06:09.0656 2656        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS.0\System32\msdtc.exe
16:06:09.0796 2656        MSDTC - ok
16:06:09.0890 2656        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS.0\system32\drivers\Msfs.sys
16:06:09.0984 2656        Msfs - ok
16:06:10.0000 2656        MSIServer - ok
16:06:10.0093 2656        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS.0\system32\drivers\MSKSSRV.sys
16:06:10.0203 2656        MSKSSRV - ok
16:06:10.0203 2656        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS.0\system32\drivers\MSPCLOCK.sys
16:06:10.0312 2656        MSPCLOCK - ok
16:06:10.0343 2656        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS.0\system32\drivers\MSPQM.sys
16:06:10.0437 2656        MSPQM - ok
16:06:10.0593 2656        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS.0\system32\DRIVERS\mssmbios.sys
16:06:10.0703 2656        mssmbios - ok
16:06:10.0859 2656        MSSQL$MSSMLBIZ - ok
16:06:11.0062 2656        MSSQLServerADHelper (c06ea83f6fc2959e897c117255b6b1d5) c:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe
16:06:11.0078 2656        MSSQLServerADHelper - ok
16:06:11.0125 2656        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS.0\system32\drivers\Mup.sys
16:06:11.0156 2656        Mup - ok
16:06:11.0218 2656        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS.0\System32\qagentrt.dll
16:06:11.0343 2656        napagent - ok
16:06:11.0484 2656        NBService      (b498a14133bd09ad0817590ace4470ad) C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
16:06:11.0546 2656        NBService - ok
16:06:11.0593 2656        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS.0\system32\drivers\NDIS.sys
16:06:11.0703 2656        NDIS - ok
16:06:11.0750 2656        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS.0\system32\DRIVERS\ndistapi.sys
16:06:11.0781 2656        NdisTapi - ok
16:06:11.0796 2656        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS.0\system32\DRIVERS\ndisuio.sys
16:06:11.0890 2656        Ndisuio - ok
16:06:11.0921 2656        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS.0\system32\DRIVERS\ndiswan.sys
16:06:12.0015 2656        NdisWan - ok
16:06:12.0078 2656        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS.0\system32\drivers\NDProxy.sys
16:06:12.0093 2656        NDProxy - ok
16:06:12.0109 2656        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS.0\system32\DRIVERS\netbios.sys
16:06:12.0218 2656        NetBIOS - ok
16:06:12.0234 2656        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS.0\system32\DRIVERS\netbt.sys
16:06:12.0328 2656        NetBT - ok
16:06:12.0375 2656        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS.0\system32\netdde.exe
16:06:12.0500 2656        NetDDE - ok
16:06:12.0500 2656        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS.0\system32\netdde.exe
16:06:12.0593 2656        NetDDEdsdm - ok
16:06:12.0640 2656        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\System32\lsass.exe
16:06:12.0734 2656        Netlogon - ok
16:06:12.0765 2656        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS.0\System32\netman.dll
16:06:12.0859 2656        Netman - ok
16:06:12.0968 2656        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:06:13.0000 2656        NetTcpPortSharing - ok
16:06:13.0046 2656        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS.0\System32\mswsock.dll
16:06:13.0078 2656        Nla - ok
16:06:13.0218 2656        NMIndexingService (a328a46d87bb92ce4d8a4528e9d84787) C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
16:06:13.0234 2656        NMIndexingService - ok
16:06:13.0281 2656        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS.0\system32\drivers\Npfs.sys
16:06:13.0375 2656        Npfs - ok
16:06:13.0406 2656        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS.0\system32\drivers\Ntfs.sys
16:06:13.0531 2656        Ntfs - ok
16:06:13.0578 2656        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\System32\lsass.exe
16:06:13.0671 2656        NtLmSsp - ok
16:06:13.0718 2656        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS.0\system32\ntmssvc.dll
16:06:13.0859 2656        NtmsSvc - ok
16:06:13.0906 2656        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS.0\system32\drivers\Null.sys
16:06:14.0000 2656        Null - ok
16:06:14.0031 2656        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS.0\system32\DRIVERS\nwlnkflt.sys
16:06:14.0140 2656        NwlnkFlt - ok
16:06:14.0156 2656        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS.0\system32\DRIVERS\nwlnkfwd.sys
16:06:14.0234 2656        NwlnkFwd - ok
16:06:14.0406 2656        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
16:06:14.0437 2656        odserv - ok
16:06:14.0484 2656        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
16:06:14.0500 2656        ose - ok
16:06:14.0546 2656        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS.0\system32\DRIVERS\parport.sys
16:06:14.0640 2656        Parport - ok
16:06:14.0656 2656        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS.0\system32\drivers\PartMgr.sys
16:06:14.0750 2656        PartMgr - ok
16:06:14.0796 2656        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS.0\system32\drivers\ParVdm.sys
16:06:14.0890 2656        ParVdm - ok
16:06:14.0937 2656        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS.0\system32\DRIVERS\pci.sys
16:06:15.0046 2656        PCI - ok
16:06:15.0046 2656        PCIDump - ok
16:06:15.0093 2656        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS.0\system32\DRIVERS\pciide.sys
16:06:15.0187 2656        PCIIde - ok
16:06:15.0203 2656        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS.0\system32\drivers\Pcmcia.sys
16:06:15.0328 2656        Pcmcia - ok
16:06:15.0328 2656        PDCOMP - ok
16:06:15.0328 2656        PDFRAME - ok
16:06:15.0343 2656        PDRELI - ok
16:06:15.0343 2656        PDRFRAME - ok
16:06:15.0359 2656        perc2 - ok
16:06:15.0359 2656        perc2hib - ok
16:06:15.0421 2656        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS.0\system32\services.exe
16:06:15.0437 2656        PlugPlay - ok
16:06:15.0484 2656        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\System32\lsass.exe
16:06:15.0562 2656        PolicyAgent - ok
16:06:15.0609 2656        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS.0\system32\DRIVERS\raspptp.sys
16:06:15.0703 2656        PptpMiniport - ok
16:06:15.0718 2656        Processor      (2cb55427c58679f49ad600fccba76360) C:\WINDOWS.0\system32\DRIVERS\processr.sys
16:06:15.0812 2656        Processor - ok
16:06:15.0812 2656        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
16:06:15.0906 2656        ProtectedStorage - ok
16:06:15.0906 2656        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS.0\system32\DRIVERS\psched.sys
16:06:16.0015 2656        PSched - ok
16:06:16.0062 2656        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS.0\system32\DRIVERS\ptilink.sys
16:06:16.0156 2656        Ptilink - ok
16:06:16.0156 2656        ql1080 - ok
16:06:16.0171 2656        Ql10wnt - ok
16:06:16.0171 2656        ql12160 - ok
16:06:16.0187 2656        ql1240 - ok
16:06:16.0187 2656        ql1280 - ok
16:06:16.0203 2656        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS.0\system32\DRIVERS\rasacd.sys
16:06:16.0296 2656        RasAcd - ok
16:06:16.0328 2656        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS.0\System32\rasauto.dll
16:06:16.0437 2656        RasAuto - ok
16:06:16.0453 2656        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS.0\system32\DRIVERS\rasl2tp.sys
16:06:16.0546 2656        Rasl2tp - ok
16:06:16.0609 2656        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS.0\System32\rasmans.dll
16:06:16.0703 2656        RasMan - ok
16:06:16.0703 2656        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS.0\system32\DRIVERS\raspppoe.sys
16:06:16.0796 2656        RasPppoe - ok
16:06:16.0828 2656        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS.0\system32\DRIVERS\raspti.sys
16:06:16.0921 2656        Raspti - ok
16:06:16.0953 2656        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS.0\system32\DRIVERS\rdbss.sys
16:06:17.0046 2656        Rdbss - ok
16:06:17.0046 2656        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS.0\system32\DRIVERS\RDPCDD.sys
16:06:17.0140 2656        RDPCDD - ok
16:06:17.0171 2656        rdpdr          (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS.0\system32\DRIVERS\rdpdr.sys
16:06:17.0265 2656        rdpdr - ok
16:06:17.0312 2656        RDPWD          (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS.0\system32\drivers\RDPWD.sys
16:06:17.0343 2656        RDPWD - ok
16:06:17.0390 2656        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS.0\system32\sessmgr.exe
16:06:17.0500 2656        RDSessMgr - ok
16:06:17.0515 2656        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS.0\system32\DRIVERS\redbook.sys
16:06:17.0609 2656        redbook - ok
16:06:17.0656 2656        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS.0\System32\mprdim.dll
16:06:17.0765 2656        RemoteAccess - ok
16:06:17.0796 2656        RemoteRegistry  (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS.0\system32\regsvc.dll
16:06:17.0906 2656        RemoteRegistry - ok
16:06:17.0937 2656        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS.0\System32\locator.exe
16:06:18.0046 2656        RpcLocator - ok
16:06:18.0093 2656        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS.0\system32\rpcss.dll
16:06:18.0125 2656        RpcSs - ok
16:06:18.0171 2656        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS.0\System32\rsvp.exe
16:06:18.0281 2656        RSVP - ok
16:06:18.0328 2656        RTL8192su      (7fd98e91896cad23169a84874f145250) C:\WINDOWS.0\system32\DRIVERS\RTL8192su.sys
16:06:18.0375 2656        RTL8192su - ok
16:06:18.0421 2656        RTLE8023xp      (b2961a8861da27c4562282c3707250f5) C:\WINDOWS.0\system32\DRIVERS\Rtenicxp.sys
16:06:18.0468 2656        RTLE8023xp - ok
16:06:18.0468 2656        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
16:06:18.0562 2656        SamSs - ok
16:06:18.0687 2656        SASDIFSV        (39763504067962108505bff25f024345) C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS
16:06:18.0703 2656        SASDIFSV - ok
16:06:18.0718 2656        SASKUTIL        (77b9fc20084b48408ad3e87570eb4a85) C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS
16:06:18.0718 2656        SASKUTIL - ok
16:06:18.0765 2656        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS.0\System32\SCardSvr.exe
16:06:18.0890 2656        SCardSvr - ok
16:06:18.0937 2656        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS.0\system32\schedsvc.dll
16:06:19.0031 2656        Schedule - ok
16:06:19.0078 2656        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS.0\system32\DRIVERS\secdrv.sys
16:06:19.0125 2656        Secdrv - ok
16:06:19.0171 2656        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS.0\System32\seclogon.dll
16:06:19.0265 2656        seclogon - ok
16:06:19.0281 2656        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS.0\system32\sens.dll
16:06:19.0375 2656        SENS - ok
16:06:19.0421 2656        serenum        (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS.0\system32\DRIVERS\serenum.sys
16:06:19.0515 2656        serenum - ok
16:06:19.0531 2656        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS.0\system32\DRIVERS\serial.sys
16:06:19.0625 2656        Serial - ok
16:06:19.0656 2656        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS.0\system32\drivers\Sfloppy.sys
16:06:19.0781 2656        Sfloppy - ok
16:06:19.0828 2656        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS.0\System32\ipnathlp.dll
16:06:19.0937 2656        SharedAccess - ok
16:06:19.0984 2656        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
16:06:20.0000 2656        ShellHWDetection - ok
16:06:20.0000 2656        Simbad - ok
16:06:20.0015 2656        Sparrow - ok
16:06:20.0031 2656        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS.0\system32\drivers\splitter.sys
16:06:20.0125 2656        splitter - ok
16:06:20.0171 2656        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS.0\system32\spoolsv.exe
16:06:20.0218 2656        Spooler - ok
16:06:20.0343 2656        SQLBrowser      (b2ec3e1deac5f0a764bd3486d213a0af) c:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
16:06:20.0375 2656        SQLBrowser - ok
16:06:20.0390 2656        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS.0\system32\DRIVERS\sr.sys
16:06:20.0437 2656        sr - ok
16:06:20.0484 2656        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS.0\System32\srsvc.dll
16:06:20.0546 2656        srservice - ok
16:06:20.0593 2656        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS.0\system32\DRIVERS\srv.sys
16:06:20.0640 2656        Srv - ok
16:06:20.0656 2656        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS.0\System32\ssdpsrv.dll
16:06:20.0703 2656        SSDPSRV - ok
16:06:20.0718 2656        SSPORT          (ef3458337d7341a05169cefc73709264) C:\WINDOWS.0\system32\Drivers\SSPORT.sys
16:06:20.0718 2656        SSPORT ( UnsignedFile.Multi.Generic ) - warning
16:06:20.0718 2656        SSPORT - detected UnsignedFile.Multi.Generic (1)
16:06:20.0734 2656        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS.0\system32\wiaservc.dll
16:06:20.0890 2656        stisvc - ok
16:06:20.0921 2656        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS.0\system32\DRIVERS\swenum.sys
16:06:21.0015 2656        swenum - ok
16:06:21.0031 2656        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS.0\system32\drivers\swmidi.sys
16:06:21.0125 2656        swmidi - ok
16:06:21.0125 2656        SwPrv - ok
16:06:21.0125 2656        symc810 - ok
16:06:21.0140 2656        symc8xx - ok
16:06:21.0140 2656        sym_hi - ok
16:06:21.0156 2656        sym_u3 - ok
16:06:21.0156 2656        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS.0\system32\drivers\sysaudio.sys
16:06:21.0265 2656        sysaudio - ok
16:06:21.0312 2656        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS.0\system32\smlogsvc.exe
16:06:21.0406 2656        SysmonLog - ok
16:06:21.0437 2656        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS.0\System32\tapisrv.dll
16:06:21.0546 2656        TapiSrv - ok
16:06:21.0609 2656        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS.0\system32\DRIVERS\tcpip.sys
16:06:21.0640 2656        Tcpip - ok
16:06:21.0656 2656        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS.0\system32\drivers\TDPIPE.sys
16:06:21.0750 2656        TDPIPE - ok
16:06:21.0781 2656        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS.0\system32\drivers\TDTCP.sys
16:06:21.0890 2656        TDTCP - ok
16:06:21.0921 2656        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS.0\system32\DRIVERS\termdd.sys
16:06:22.0015 2656        TermDD - ok
16:06:22.0062 2656        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS.0\System32\termsrv.dll
16:06:22.0171 2656        TermService - ok
16:06:22.0218 2656        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
16:06:22.0234 2656        Themes - ok
16:06:22.0281 2656        TlntSvr        (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS.0\System32\tlntsvr.exe
16:06:22.0343 2656        TlntSvr - ok
16:06:22.0343 2656        TosIde - ok
16:06:22.0390 2656        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS.0\system32\trkwks.dll
16:06:22.0500 2656        TrkWks - ok
16:06:22.0546 2656        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS.0\system32\drivers\Udfs.sys
16:06:22.0640 2656        Udfs - ok
16:06:22.0640 2656        ultra - ok
16:06:22.0703 2656        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS.0\system32\DRIVERS\update.sys
16:06:22.0812 2656        Update - ok
16:06:22.0875 2656        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS.0\System32\upnphost.dll
16:06:22.0937 2656        upnphost - ok
16:06:22.0953 2656        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS.0\System32\ups.exe
16:06:23.0046 2656        UPS - ok
16:06:23.0093 2656        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS.0\system32\DRIVERS\usbccgp.sys
16:06:23.0187 2656        usbccgp - ok
16:06:23.0250 2656        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS.0\system32\DRIVERS\usbehci.sys
16:06:23.0328 2656        usbehci - ok
16:06:23.0343 2656        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS.0\system32\DRIVERS\usbhub.sys
16:06:23.0453 2656        usbhub - ok
16:06:23.0484 2656        usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS.0\system32\DRIVERS\usbprint.sys
16:06:23.0578 2656        usbprint - ok
16:06:23.0625 2656        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS.0\system32\DRIVERS\USBSTOR.SYS
16:06:23.0703 2656        usbstor - ok
16:06:23.0718 2656        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys
16:06:23.0812 2656        usbuhci - ok
16:06:23.0828 2656        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS.0\System32\drivers\vga.sys
16:06:23.0921 2656        VgaSave - ok
16:06:23.0937 2656        ViaIde - ok
16:06:23.0984 2656        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS.0\system32\drivers\VolSnap.sys
16:06:24.0078 2656        VolSnap - ok
16:06:24.0125 2656        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS.0\System32\vssvc.exe
16:06:24.0187 2656        VSS - ok
16:06:24.0343 2656        vToolbarUpdater11.0.2 (56e1e4442e4613fb2039a6b7421f4e58) C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe
16:06:24.0390 2656        vToolbarUpdater11.0.2 - ok
16:06:24.0437 2656        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS.0\System32\w32time.dll
16:06:24.0562 2656        W32Time - ok
16:06:24.0640 2656        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS.0\system32\DRIVERS\wanarp.sys
16:06:24.0734 2656        Wanarp - ok
16:06:24.0734 2656        WDICA - ok
16:06:24.0750 2656        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS.0\system32\drivers\wdmaud.sys
16:06:24.0859 2656        wdmaud - ok
16:06:24.0890 2656        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS.0\System32\webclnt.dll
16:06:25.0000 2656        WebClient - ok
16:06:25.0093 2656        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS.0\system32\wbem\WMIsvc.dll
16:06:25.0187 2656        winmgmt - ok
16:06:25.0218 2656        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS.0\system32\MsPMSNSv.dll
16:06:25.0296 2656        WmdmPmSN - ok
16:06:25.0359 2656        Wmi            (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS.0\System32\advapi32.dll
16:06:25.0406 2656        Wmi - ok
16:06:25.0468 2656        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS.0\System32\wbem\wmiapsrv.exe
16:06:25.0562 2656        WmiApSrv - ok
16:06:25.0703 2656        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
16:06:25.0765 2656        WMPNetworkSvc - ok
16:06:25.0843 2656        WS2IFSL        (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS.0\System32\drivers\ws2ifsl.sys
16:06:25.0937 2656        WS2IFSL - ok
16:06:25.0953 2656        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS.0\system32\wuauserv.dll
16:06:26.0078 2656        wuauserv - ok
16:06:26.0125 2656        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS.0\system32\DRIVERS\WudfPf.sys
16:06:26.0171 2656        WudfPf - ok
16:06:26.0187 2656        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS.0\system32\DRIVERS\wudfrd.sys
16:06:26.0234 2656        WudfRd - ok
16:06:26.0265 2656        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS.0\System32\WUDFSvc.dll
16:06:26.0296 2656        WudfSvc - ok
16:06:26.0359 2656        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS.0\System32\wzcsvc.dll
16:06:26.0468 2656        WZCSVC - ok
16:06:26.0500 2656        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS.0\System32\xmlprov.dll
16:06:26.0625 2656        xmlprov - ok
16:06:26.0656 2656        MBR (0x1B8)    (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
16:06:27.0078 2656        \Device\Harddisk0\DR0 - ok
16:06:27.0109 2656        Boot (0x1200)  (36c803000a2e00c34790dd34bd6a7c25) \Device\Harddisk0\DR0\Partition0
16:06:27.0109 2656        \Device\Harddisk0\DR0\Partition0 - ok
16:06:27.0109 2656        ============================================================
16:06:27.0109 2656        Scan finished
16:06:27.0109 2656        ============================================================
16:06:27.0218 3896        Detected object count: 2
16:06:27.0218 3896        Actual detected object count: 2
17:14:20.0421 3896        ACPI ( Virus.Win32.Rloader.a ) - skipped by user
17:14:20.0421 3896        ACPI ( Virus.Win32.Rloader.a ) - User select action: Skip
17:14:20.0421 3896        SSPORT ( UnsignedFile.Multi.Generic ) - skipped by user
17:14:20.0421 3896        SSPORT ( UnsignedFile.Multi.Generic ) - User select action: Skip
17:15:24.0406 2532        Deinitialize success
Dankeschön!

cosinus 30.05.2012 20:34
Zitat:
ACPI ( Virus.Win32.Rloader.a ) - skipped by user
Hm, da scheint was im Argen zu sein, aber das würde ich lieber noch nicht mit dem TDSS-Killer fixen lassen

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Ordensritter 31.05.2012 21:58
Code:
ComboFix 12-05-31.02 - Elsi 31.05.2012  22:32:41.1.2 - x86
ausgeführt von:: c:\dokumente und einstellungen\Elsi\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\All Users\Anwendungsdaten\gema
c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\gema
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\1.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\2229.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\4489.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\a.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\b.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\c.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\d.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\e.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\f.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\g.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\h.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\i.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\j.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\k.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\l.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\m.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\mru.xml
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\n.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\o.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\p.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\q.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\r.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\s.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\t.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\u.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\v.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\w.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\wlu.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\x.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\y.txt
c:\dokumente und einstellungen\Elsi\Anwendungsdaten\PriceGong\Data\z.txt
C:\spy.qwas
c:\windows.0\$NtUninstallKB58601$
c:\windows.0\$NtUninstallKB58601$\465749268
c:\windows.0\system32\Cache
c:\windows.0\system32\Cache\001198faa76f4292.fb
c:\windows.0\system32\Cache\272512937d9e61a4.fb
c:\windows.0\system32\Cache\287204568329e189.fb
c:\windows.0\system32\Cache\28bc8f716fd76a47.fb
c:\windows.0\system32\Cache\2c53092c95605355.fb
c:\windows.0\system32\Cache\32c84fe32bb74d60.fb
c:\windows.0\system32\Cache\3917078cb68ec657.fb
c:\windows.0\system32\Cache\590ba23ce359fd0c.fb
c:\windows.0\system32\Cache\610289e025a3ee9a.fb
c:\windows.0\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows.0\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows.0\system32\Cache\6d03dad1035885d3.fb
c:\windows.0\system32\Cache\a8556537add6dfc5.fb
c:\windows.0\system32\Cache\a883dfafb520b503.fb
c:\windows.0\system32\Cache\ad10a52aff5e038d.fb
c:\windows.0\system32\Cache\c1fa887b03019701.fb
c:\windows.0\system32\Cache\c4d28dca2e7648be.fb
c:\windows.0\system32\Cache\d201ef9910cd39de.fb
c:\windows.0\system32\Cache\d2e94710a5708128.fb
c:\windows.0\system32\Cache\d79b9dfe81484ec4.fb
c:\windows.0\system32\Cache\e0de16f883bea794.fb
c:\windows.0\system32\Cache\f998975c9cc711ee.fb
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-04-28 bis 2012-05-31  ))))))))))))))))))))))))))))))
.
.
2012-05-31 20:25 . 2008-04-14 01:49        188800        -c--a-w-        c:\windows.0\system32\dllcache\acpi.sys
2012-05-31 20:25 . 2008-04-14 01:49        188800        ----a-w-        c:\windows.0\system32\drivers\acpi.sys
2012-05-29 17:34 . 2012-05-29 17:34        --------        d-----w-        C:\_OTL
2012-05-23 06:41 . 2012-05-23 06:41        --------        d-----w-        c:\dokumente und einstellungen\Elsi_2\Lokale Einstellungen\Anwendungsdaten\AVG Secure Search
2012-05-22 19:58 . 2012-05-22 19:58        --------        d-----w-        c:\programme\ESET
2012-05-18 07:49 . 2012-05-18 07:49        --------        d-----w-        c:\dokumente und einstellungen\Elsi\Anwendungsdaten\SUPERAntiSpyware.com
2012-05-18 07:48 . 2012-05-18 07:49        --------        d-----w-        c:\programme\SUPERAntiSpyware
2012-05-18 07:48 . 2012-05-18 07:48        --------        d-----w-        c:\dokumente und einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
2012-05-17 17:47 . 2012-05-17 17:47        --------        d-----w-        c:\programme\Malwarebytes' Anti-Malware
2012-05-17 17:47 . 2012-04-04 13:56        22344        ----a-w-        c:\windows.0\system32\drivers\mbam.sys
2012-05-17 16:01 . 2012-05-17 16:01        --------        d-----w-        c:\programme\Conduit
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-11 13:51 . 2001-08-18 04:28        2029056        ----a-w-        c:\windows.0\system32\ntkrnlpa.exe
2012-04-11 13:51 . 2001-08-23 12:00        2150912        ----a-w-        c:\windows.0\system32\ntoskrnl.exe
2012-04-11 13:51 . 2001-08-23 12:00        1862400        ----a-w-        c:\windows.0\system32\win32k.sys
2012-03-06 13:43 . 2012-04-20 16:53        80024        ----a-w-        c:\windows.0\system32\mfcm100u.dll
2012-03-06 13:43 . 2012-04-20 16:53        772248        ----a-w-        c:\windows.0\system32\msvcr100.dll
2012-03-06 13:43 . 2012-04-20 16:53        4421272        ----a-w-        c:\windows.0\system32\mfc100u.dll
2012-03-06 13:43 . 2012-04-20 16:53        419480        ----a-w-        c:\windows.0\system32\msvcp100.dll
2012-03-06 13:43 . 2012-04-20 16:53        136344        ----a-w-        c:\windows.0\system32\atl100.dll
2012-04-26 08:39 . 2011-11-27 14:34        97208        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"LightScribe Control Panel"="c:\programme\Gemeinsame Dateien\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
"OnlineFestplatte"="c:\programme\aon\Onlinefestplatte\OnlineFestplatte.exe" [2008-01-25 253976]
"SUPERAntiSpyware"="c:\programme\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-04-20 3905920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SecurDisc"="c:\programme\Nero\Nero 7\InCD\NBHGui.exe" [2007-06-25 1629480]
"InCD"="c:\programme\Nero\Nero 7\InCD\InCD.exe" [2007-06-25 1057064]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2010-03-17 421888]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2010-03-25 142120]
"AVG_TRAY"="c:\programme\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
"CDAServer"="c:\programme\Gemeinsame Dateien\Common Desktop Agent\CDASrv.exe" [2010-12-17 332288]
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"vProt"="c:\programme\AVG Secure Search\vprot.exe" [2012-04-29 1116544]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programme\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54        551296        ----a-w-        c:\programme\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-03 10:43        69632        ------r-        c:\windows.0\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:22        15360        ----a-w-        c:\windows.0\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2007-01-13 01:47        163840        ----a-r-        c:\windows.0\system32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2007-01-13 01:47        131072        ----a-r-        c:\windows.0\system32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-03-25 23:10        142120        ----a-w-        c:\programme\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KONICA MINOLTA PagePro 1400W STD]
2006-01-18 10:10        184320        ----a-w-        c:\windows.0\system32\MSTMON_Y.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22        1695232        ------w-        c:\programme\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2007-01-13 01:46        135168        ----a-r-        c:\windows.0\system32\igfxpers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53        421888        ----a-w-        c:\programme\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2007-10-25 03:57        16855552        ------r-        c:\windows.0\RTHDCPL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2007-10-11 03:04        1826816        ------r-        c:\windows.0\SkyTel.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedTouch USB Diagnostics]
2004-01-26 09:38        866816        ----a-w-        c:\programme\Thomson\SpeedTouch USB\dragdiag.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SQLBrowser"=2 (0x2)
"MSSQL$MSSMLBIZ"=3 (0x3)
"MpfService"=2 (0x2)
"McSysmon"=3 (0x3)
"McShield"=2 (0x2)
"McProxy"=2 (0x2)
"McODS"=3 (0x3)
"McNASvc"=2 (0x2)
"mcmscsvc"=2 (0x2)
"McAfee SiteAdvisor Service"=2 (0x2)
"gusvc"=2 (0x2)
"clr_optimization_v2.0.50727_32"=3 (0x3)
"BITS"=3 (0x3)
"BcmSqlStartupSvc"=2 (0x2)
"aspnet_state"=3 (0x3)
"Apple Mobile Device"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Programme\\Messenger\\msmsgs.exe"=
"c:\\Programme\\Warcraft III\\Warcraft III.exe"=
"c:\\Programme\\Warcraft III\\War3.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Common Desktop Agent\\CDASrv.exe"=
"c:\\Programme\\Samsung\\Easy Printer Manager\\IDS.Application.exe"=
"c:\\Programme\\Samsung\\Easy Printer Manager\\OrderSupplies.exe"=
"c:\\Programme\\Samsung\\Easy Printer Manager\\IDSAlert.exe"=
"c:\\Programme\\Samsung\\Easy Printer Manager\\CDAS2PC\\CDAS2PC.exe"=
"c:\\Programme\\AVG\\AVG2012\\avgnsx.exe"=
"c:\\Programme\\AVG\\AVG2012\\avgmfapx.exe"=
"c:\\Programme\\AVG\\AVG2012\\avgemcx.exe"=
"c:\\Programme\\Warcraft III\\Frozen Throne.exe"=
"c:\\Programme\\AVG\\AVG2012\\avgdiagex.exe"=
"c:\\WINDOWS.0\\system32\\sessmgr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
"AllowInboundRouterRequest"= 1 (0x1)
"AllowRedirect"= 1 (0x1)
.
R0 AVGIDSEH;AVGIDSEH;c:\windows.0\system32\drivers\AVGIDSEH.sys [22.02.2011 08:13 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows.0\system32\drivers\avgrkx86.sys [19.01.2011 04:32 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows.0\system32\drivers\avgldx86.sys [07.01.2011 06:41 230608]
R1 Avgtdix;AVG TDI Driver;c:\windows.0\system32\drivers\avgtdix.sys [10.02.2011 07:54 295248]
R1 SASDIFSV;SASDIFSV;c:\programme\SUPERAntiSpyware\sasdifsv.sys [22.07.2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\programme\SUPERAntiSpyware\SASKUTIL.SYS [12.07.2011 23:55 67664]
R2 !SASCORE;SAS Core Service;c:\programme\SUPERAntiSpyware\SASCore.exe [12.08.2011 01:38 116608]
R2 AVGIDSAgent;AVGIDSAgent;c:\programme\AVG\AVG2012\AVGIDSAgent.exe [12.10.2011 07:25 4433248]
R2 avgwd;AVG WatchDog;c:\programme\AVG\AVG2012\avgwdsvc.exe [02.08.2011 07:09 192776]
R2 SSPORT;SSPORT;c:\windows.0\system32\drivers\SSPORT.sys [23.12.2010 08:06 5120]
R2 vToolbarUpdater11.0.2;vToolbarUpdater11.0.2;c:\programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe [29.04.2012 20:30 932736]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows.0\system32\drivers\AVGIDSDriver.sys [30.03.2011 17:17 134608]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows.0\system32\drivers\AVGIDSFilter.sys [10.02.2011 07:53 24272]
R3 AVGIDSShim;AVGIDSShim;c:\windows.0\system32\drivers\AVGIDSShim.sys [10.02.2011 07:53 16720]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programme\Mozilla Maintenance Service\maintenanceservice.exe [26.04.2012 10:39 129976]
S3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows.0\system32\drivers\RTL8192su.sys [08.07.2010 16:09 606056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-08-23 15:34        451872        ----a-w-        c:\programme\Gemeinsame Dateien\LightScribe\LSRunOnce.exe
.
Inhalt des "geplante Tasks" Ordners
.
2012-04-02 c:\windows.0\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]
.
2010-10-29 c:\windows.0\Tasks\WGASetup.job
- c:\windows.0\system32\KB905474\wgasetup.exe [2009-04-08 20:18]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page =
uInternet Settings,ProxyOverride = *.local
IE: Free YouTube to MP3 Converter - c:\dokumente und einstellungen\Elsi\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
Trusted Zone: internet
Trusted Zone: mcafee.com
TCP: DhcpNameServer = 10.0.0.138
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\programme\Gemeinsame Dateien\AVG Secure Search\ViProtocolInstaller\11.0.2\ViProtocol.dll
FF - ProfilePath - c:\dokumente und einstellungen\Elsi\Anwendungsdaten\Mozilla\Firefox\Profiles\z1mm8m41.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Be4899ba0-7272-448f-8667-64093e4a1e4a%7D&mid=7fbdd11aaa1d47d1bc32d15020bbdc78-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&ds=AVG&v=11.0.0.9&lang=de&pr=fr&d=2012-02-29%2022%3A46%3A13&sap=ku&q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
HKCU-Run-L08DXLRD_1041453 - c:\programme\Microsoft Lernen und Wissen\Microsoft Encarta 2008 – Lernen und Wissen DVD\EDICT.EXE
HKLM-Run-SunJavaUpdateSched - c:\programme\Java\jre6\bin\jusched.exe
MSConfigStartUp-AVG9_TRAY - c:\progra~2\AVG\AVG9\avgtray.exe
MSConfigStartUp-Internet Security 2010 - c:\program files\InternetSecurity2010\IS2010.exe
MSConfigStartUp-L08DXLRD_11234890 - c:\programme\Microsoft Lernen und Wissen\Microsoft Encarta 2008 – Lernen und Wissen DVD\EDICT.EXE
MSConfigStartUp-SunJavaUpdateSched - c:\programme\Java\jre1.6.0_05\bin\jusched.exe
AddRemove-conduitEngine - c:\programme\ConduitEngine\ConduitEngineUninstall.exe
AddRemove-dlancockpit - c:\programme\devolo\setup.exe
AddRemove-SFT_de3 Toolbar - c:\programme\SFT_de3\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-05-31 22:45
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(920)
c:\programme\SUPERAntiSpyware\SASWINLO.DLL
.
- - - - - - - > 'explorer.exe'(2672)
c:\programme\Gemeinsame Dateien\Ahead\Lib\NeroSearchBar.dll
c:\programme\Gemeinsame Dateien\Ahead\Lib\MFC71U.DLL
c:\programme\Gemeinsame Dateien\Ahead\Lib\BCGCBPRO860un71.dll
c:\windows.0\system32\webcheck.dll
c:\windows.0\system32\WPDShServiceObj.dll
c:\windows.0\system32\PortableDeviceTypes.dll
c:\windows.0\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\progra~2\AVG\AVG2012\avgrsx.exe
c:\programme\AVG\AVG2012\avgcsrvx.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\programme\Nero\Nero 7\InCD\InCDsrv.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
c:\programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\programme\AVG\AVG2012\avgnsx.exe
c:\programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
c:\windows.0\system32\wscntfy.exe
c:\programme\iPod\bin\iPodService.exe
c:\programme\Gemeinsame Dateien\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows.0\System32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-05-31  22:55:34 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-05-31 20:55
.
Vor Suchlauf: 17 Verzeichnis(se), 119.039.803.392 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 119.326.871.552 Bytes frei
.
WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS.0
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS.0="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
multi(0)disk(0)rdisk(0)partition(1)\Windows="Windows Fundamentals for Legacy PCs" /fastdetect
.
- - End Of File - - A60136E3C625A838D3330293314154D3
Hier der Combofix log!:party:

cosinus 01.06.2012 11:49
Ich fürchte das wird noch ein Stück Arbeit werden :pfeiff:
Mach bitte wieder ein neues Log mit dem TDSS-Killer

Ordensritter 02.06.2012 10:19
Code:
11:07:38.0640 3072        TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
11:07:39.0062 3072        ============================================================
11:07:39.0062 3072        Current date / time: 2012/06/02 11:07:39.0062
11:07:39.0062 3072        SystemInfo:
11:07:39.0062 3072       
11:07:39.0062 3072        OS Version: 5.1.2600 ServicePack: 3.0
11:07:39.0062 3072        Product type: Workstation
11:07:39.0062 3072        ComputerName: MICHI
11:07:39.0062 3072        UserName: Elsi
11:07:39.0062 3072        Windows directory: C:\WINDOWS.0
11:07:39.0062 3072        System windows directory: C:\WINDOWS.0
11:07:39.0062 3072        Processor architecture: Intel x86
11:07:39.0062 3072        Number of processors: 2
11:07:39.0062 3072        Page size: 0x1000
11:07:39.0062 3072        Boot type: Normal boot
11:07:39.0062 3072        ============================================================
11:07:43.0359 3072        Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
11:07:43.0390 3072        ============================================================
11:07:43.0390 3072        \Device\Harddisk0\DR0:
11:07:43.0406 3072        MBR partitions:
11:07:43.0406 3072        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A18A82
11:07:43.0406 3072        ============================================================
11:07:43.0468 3072        C: <-> \Device\Harddisk0\DR0\Partition0
11:07:43.0468 3072        ============================================================
11:07:43.0468 3072        Initialize success
11:07:43.0468 3072        ============================================================
11:09:45.0109 2884        ============================================================
11:09:45.0109 2884        Scan started
11:09:45.0109 2884        Mode: Manual; SigCheck; TDLFS;
11:09:45.0109 2884        ============================================================
11:09:45.0281 2884        !SASCORE        (c0393eb99a6c72c6bef9bfc4a72b33a6) C:\Programme\SUPERAntiSpyware\SASCORE.EXE
11:09:45.0421 2884        !SASCORE - ok
11:09:45.0593 2884        Abiosdsk - ok
11:09:45.0593 2884        abp480n5 - ok
11:09:45.0640 2884        ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS.0\system32\DRIVERS\ACPI.sys
11:09:46.0468 2884        ACPI - ok
11:09:46.0500 2884        ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS.0\system32\drivers\ACPIEC.sys
11:09:46.0625 2884        ACPIEC - ok
11:09:46.0640 2884        adpu160m - ok
11:09:46.0687 2884        aec            (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS.0\system32\drivers\aec.sys
11:09:46.0796 2884        aec - ok
11:09:46.0843 2884        AFD            (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS.0\System32\drivers\afd.sys
11:09:46.0906 2884        AFD - ok
11:09:46.0906 2884        Aha154x - ok
11:09:46.0921 2884        aic78u2 - ok
11:09:46.0921 2884        aic78xx - ok
11:09:46.0968 2884        alcan5wn        (0940030d5a5869067ccc03e3b0b8dec7) C:\WINDOWS.0\system32\DRIVERS\alcan5wn.sys
11:09:47.0031 2884        alcan5wn - ok
11:09:47.0031 2884        alcaudsl        (4c9577888c53243e2991456f510488a1) C:\WINDOWS.0\system32\DRIVERS\alcaudsl.sys
11:09:47.0093 2884        alcaudsl - ok
11:09:47.0125 2884        Alerter        (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS.0\system32\alrsvc.dll
11:09:47.0218 2884        Alerter - ok
11:09:47.0234 2884        ALG            (190cd73d4984f94d823f9444980513e5) C:\WINDOWS.0\System32\alg.exe
11:09:47.0296 2884        ALG - ok
11:09:47.0296 2884        AliIde - ok
11:09:47.0296 2884        amsint - ok
11:09:47.0421 2884        Apple Mobile Device (acb095e7e1663f1b83a41c22c5d75f90) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
11:09:47.0453 2884        Apple Mobile Device - ok
11:09:47.0500 2884        AppMgmt        (d45960be52c3c610d361977057f98c54) C:\WINDOWS.0\System32\appmgmts.dll
11:09:47.0562 2884        AppMgmt - ok
11:09:47.0562 2884        asc - ok
11:09:47.0578 2884        asc3350p - ok
11:09:47.0578 2884        asc3550 - ok
11:09:47.0671 2884        aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
11:09:47.0703 2884        aspnet_state - ok
11:09:47.0734 2884        AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS.0\system32\DRIVERS\asyncmac.sys
11:09:47.0843 2884        AsyncMac - ok
11:09:47.0875 2884        atapi          (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS.0\system32\DRIVERS\atapi.sys
11:09:47.0984 2884        atapi - ok
11:09:47.0984 2884        Atdisk - ok
11:09:48.0015 2884        Atmarpc        (9916c1225104ba14794209cfa8012159) C:\WINDOWS.0\system32\DRIVERS\atmarpc.sys
11:09:48.0125 2884        Atmarpc - ok
11:09:48.0171 2884        AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS.0\System32\audiosrv.dll
11:09:48.0281 2884        AudioSrv - ok
11:09:48.0328 2884        audstub        (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS.0\system32\DRIVERS\audstub.sys
11:09:48.0437 2884        audstub - ok
11:09:48.0671 2884        AVGIDSAgent    (6d440ff3f44ca72edfd6176c6d6a89c0) C:\Programme\AVG\AVG2012\AVGIDSAgent.exe
11:09:48.0906 2884        AVGIDSAgent - ok
11:09:49.0093 2884        AVGIDSDriver    (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS.0\system32\DRIVERS\AVGIDSDriver.Sys
11:09:49.0140 2884        AVGIDSDriver - ok
11:09:49.0156 2884        AVGIDSEH        (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS.0\system32\DRIVERS\AVGIDSEH.Sys
11:09:49.0156 2884        AVGIDSEH - ok
11:09:49.0171 2884        AVGIDSFilter    (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS.0\system32\DRIVERS\AVGIDSFilter.Sys
11:09:49.0187 2884        AVGIDSFilter - ok
11:09:49.0203 2884        AVGIDSShim      (1e01c2166b5599802bcd61b9691f7476) C:\WINDOWS.0\system32\DRIVERS\AVGIDSShim.Sys
11:09:49.0203 2884        AVGIDSShim - ok
11:09:49.0234 2884        Avgldx86        (bf8118cd5e2255387b715b534d64acd1) C:\WINDOWS.0\system32\DRIVERS\avgldx86.sys
11:09:49.0281 2884        Avgldx86 - ok
11:09:49.0281 2884        Avgmfx86        (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS.0\system32\DRIVERS\avgmfx86.sys
11:09:49.0296 2884        Avgmfx86 - ok
11:09:49.0296 2884        Avgrkx86        (f2038ed7284b79dcef581468121192a9) C:\WINDOWS.0\system32\DRIVERS\avgrkx86.sys
11:09:49.0312 2884        Avgrkx86 - ok
11:09:49.0328 2884        Avgtdix        (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS.0\system32\DRIVERS\avgtdix.sys
11:09:49.0359 2884        Avgtdix - ok
11:09:49.0500 2884        avgwd          (6699ece24fe4b3f752a66c66a602ee86) C:\Programme\AVG\AVG2012\avgwdsvc.exe
11:09:49.0531 2884        avgwd - ok
11:09:49.0578 2884        Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS.0\system32\drivers\Beep.sys
11:09:49.0703 2884        Beep - ok
11:09:49.0750 2884        BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS.0\system32\qmgr.dll
11:09:49.0921 2884        BITS - ok
11:09:50.0015 2884        Bonjour Service (a065f048e9e23e6c026a7bb548d126a7) C:\Programme\Bonjour\mDNSResponder.exe
11:09:50.0062 2884        Bonjour Service - ok
11:09:50.0109 2884        Browser        (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS.0\System32\browser.dll
11:09:50.0234 2884        Browser - ok
11:09:50.0359 2884        catchme - ok
11:09:50.0406 2884        cbidf2k        (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS.0\system32\drivers\cbidf2k.sys
11:09:50.0515 2884        cbidf2k - ok
11:09:50.0531 2884        cd20xrnt - ok
11:09:50.0578 2884        Cdaudio        (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS.0\system32\drivers\Cdaudio.sys
11:09:50.0687 2884        Cdaudio - ok
11:09:50.0718 2884        Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS.0\system32\drivers\Cdfs.sys
11:09:50.0828 2884        Cdfs - ok
11:09:50.0843 2884        Cdrom          (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS.0\system32\DRIVERS\cdrom.sys
11:09:50.0953 2884        Cdrom - ok
11:09:50.0968 2884        Changer - ok
11:09:51.0015 2884        cisvc          (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS.0\system32\cisvc.exe
11:09:51.0125 2884        cisvc - ok
11:09:51.0140 2884        ClipSrv        (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS.0\system32\clipsrv.exe
11:09:51.0265 2884        ClipSrv - ok
11:09:51.0359 2884        clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:09:51.0453 2884        clr_optimization_v2.0.50727_32 - ok
11:09:51.0453 2884        CmdIde - ok
11:09:51.0453 2884        COMSysApp - ok
11:09:51.0468 2884        Cpqarray - ok
11:09:51.0515 2884        CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS.0\System32\cryptsvc.dll
11:09:51.0640 2884        CryptSvc - ok
11:09:51.0640 2884        dac2w2k - ok
11:09:51.0656 2884        dac960nt - ok
11:09:51.0703 2884        DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS.0\system32\rpcss.dll
11:09:51.0796 2884        DcomLaunch - ok
11:09:51.0843 2884        Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS.0\System32\dhcpcsvc.dll
11:09:51.0984 2884        Dhcp - ok
11:09:52.0015 2884        Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS.0\system32\DRIVERS\disk.sys
11:09:52.0140 2884        Disk - ok
11:09:52.0140 2884        dmadmin - ok
11:09:52.0187 2884        dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS.0\system32\drivers\dmboot.sys
11:09:52.0312 2884        dmboot - ok
11:09:52.0375 2884        dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS.0\system32\drivers\dmio.sys
11:09:52.0484 2884        dmio - ok
11:09:52.0500 2884        dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS.0\system32\drivers\dmload.sys
11:09:52.0609 2884        dmload - ok
11:09:52.0656 2884        dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS.0\System32\dmserver.dll
11:09:52.0765 2884        dmserver - ok
11:09:52.0781 2884        DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS.0\system32\drivers\DMusic.sys
11:09:52.0906 2884        DMusic - ok
11:09:52.0953 2884        Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS.0\System32\dnsrslvr.dll
11:09:53.0046 2884        Dnscache - ok
11:09:53.0093 2884        Dot3svc        (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS.0\System32\dot3svc.dll
11:09:53.0218 2884        Dot3svc - ok
11:09:53.0218 2884        dpti2o - ok
11:09:53.0265 2884        drmkaud        (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS.0\system32\drivers\drmkaud.sys
11:09:53.0375 2884        drmkaud - ok
11:09:53.0406 2884        EapHost        (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS.0\System32\eapsvc.dll
11:09:53.0515 2884        EapHost - ok
11:09:53.0562 2884        ERSvc          (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS.0\System32\ersvc.dll
11:09:53.0687 2884        ERSvc - ok
11:09:53.0734 2884        Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS.0\system32\services.exe
11:09:53.0750 2884        Eventlog - ok
11:09:53.0828 2884        EventSystem    (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS.0\system32\es.dll
11:09:53.0906 2884        EventSystem - ok
11:09:53.0937 2884        Fastfat        (38d332a6d56af32635675f132548343e) C:\WINDOWS.0\system32\drivers\Fastfat.sys
11:09:54.0062 2884        Fastfat - ok
11:09:54.0109 2884        FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
11:09:54.0156 2884        FastUserSwitchingCompatibility - ok
11:09:54.0187 2884        Fdc            (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS.0\system32\DRIVERS\fdc.sys
11:09:54.0296 2884        Fdc - ok
11:09:54.0359 2884        Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS.0\system32\drivers\Fips.sys
11:09:54.0468 2884        Fips - ok
11:09:54.0484 2884        Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS.0\system32\DRIVERS\flpydisk.sys
11:09:54.0593 2884        Flpydisk - ok
11:09:54.0640 2884        FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS.0\system32\drivers\fltmgr.sys
11:09:54.0750 2884        FltMgr - ok
11:09:54.0859 2884        FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
11:09:54.0875 2884        FontCache3.0.0.0 - ok
11:09:54.0890 2884        Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS.0\system32\drivers\Fs_Rec.sys
11:09:55.0015 2884        Fs_Rec - ok
11:09:55.0062 2884        Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS.0\system32\DRIVERS\ftdisk.sys
11:09:55.0171 2884        Ftdisk - ok
11:09:55.0203 2884        GEARAspiWDM    (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS.0\system32\Drivers\GEARAspiWDM.sys
11:09:55.0218 2884        GEARAspiWDM - ok
11:09:55.0265 2884        Gpc            (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS.0\system32\DRIVERS\msgpc.sys
11:09:55.0390 2884        Gpc - ok
11:09:55.0531 2884        gusvc          (408ddd80eede47175f6844817b90213e) C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
11:09:55.0546 2884        gusvc - ok
11:09:55.0593 2884        hamachi        (833051c6c6c42117191935f734cfbd97) C:\WINDOWS.0\system32\DRIVERS\hamachi.sys
11:09:55.0640 2884        hamachi - ok
11:09:55.0703 2884        HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS.0\system32\DRIVERS\HDAudBus.sys
11:09:55.0812 2884        HDAudBus - ok
11:09:55.0875 2884        helpsvc - ok
11:09:55.0875 2884        HidServ - ok
11:09:55.0937 2884        hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS.0\System32\kmsvc.dll
11:09:56.0046 2884        hkmsvc - ok
11:09:56.0046 2884        hpn - ok
11:09:56.0046 2884        hpt3xx - ok
11:09:56.0109 2884        HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS.0\system32\Drivers\HTTP.sys
11:09:56.0171 2884        HTTP - ok
11:09:56.0218 2884        HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS.0\System32\w3ssl.dll
11:09:56.0328 2884        HTTPFilter - ok
11:09:56.0328 2884        i2omgmt - ok
11:09:56.0328 2884        i2omp - ok
11:09:56.0375 2884        i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS.0\system32\DRIVERS\i8042prt.sys
11:09:56.0484 2884        i8042prt - ok
11:09:56.0703 2884        ialm            (2aae7be67911f4aec9ad28e9cfb9096f) C:\WINDOWS.0\system32\DRIVERS\igxpmp32.sys
11:09:57.0031 2884        ialm - ok
11:09:57.0234 2884        idsvc          (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
11:09:57.0281 2884        idsvc - ok
11:09:57.0437 2884        Imapi          (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS.0\system32\drivers\Imapi.sys
11:09:57.0546 2884        Imapi - ok
11:09:57.0593 2884        ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS.0\system32\imapi.exe
11:09:57.0703 2884        ImapiService - ok
11:09:57.0750 2884        InCDfs          (580a81790cd0a48d85da322267da7ac4) C:\WINDOWS.0\system32\drivers\InCDFs.sys
11:09:57.0781 2884        InCDfs - ok
11:09:57.0781 2884        InCDPass        (aaa2789d2ce21b31be9406ba1ceb7285) C:\WINDOWS.0\system32\drivers\InCDPass.sys
11:09:57.0796 2884        InCDPass - ok
11:09:57.0812 2884        InCDrec        (4d022577e9072b5d22e0a383a7806bbb) C:\WINDOWS.0\system32\drivers\InCDrec.sys
11:09:57.0843 2884        InCDrec - ok
11:09:57.0843 2884        incdrm          (c258e57321a3c3737f4fa815fa69ee0b) C:\WINDOWS.0\system32\drivers\InCDRm.sys
11:09:57.0859 2884        incdrm - ok
11:09:58.0031 2884        InCDsrv        (9792b85e32e058cd6a43db274ba47d57) C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
11:09:58.0125 2884        InCDsrv - ok
11:09:58.0296 2884        ini910u - ok
11:09:58.0484 2884        IntcAzAudAddService (eb5608fd4f2961517ac9f5cac88b023b) C:\WINDOWS.0\system32\drivers\RtkHDAud.sys
11:09:58.0796 2884        IntcAzAudAddService - ok
11:09:58.0953 2884        IntelIde - ok
11:09:59.0015 2884        intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS.0\system32\DRIVERS\intelppm.sys
11:09:59.0140 2884        intelppm - ok
11:09:59.0156 2884        ip6fw          (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS.0\system32\drivers\ip6fw.sys
11:09:59.0265 2884        ip6fw - ok
11:09:59.0312 2884        IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS.0\system32\DRIVERS\ipfltdrv.sys
11:09:59.0437 2884        IpFilterDriver - ok
11:09:59.0468 2884        IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS.0\system32\DRIVERS\ipinip.sys
11:09:59.0593 2884        IpInIp - ok
11:09:59.0609 2884        IpNat          (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS.0\system32\DRIVERS\ipnat.sys
11:09:59.0718 2884        IpNat - ok
11:09:59.0828 2884        iPod Service    (d8389f60ec63fb8197772349e82b5bb7) C:\Programme\iPod\bin\iPodService.exe
11:09:59.0875 2884        iPod Service - ok
11:09:59.0921 2884        IPSec          (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS.0\system32\DRIVERS\ipsec.sys
11:10:00.0031 2884        IPSec - ok
11:10:00.0046 2884        IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS.0\system32\DRIVERS\irenum.sys
11:10:00.0140 2884        IRENUM - ok
11:10:00.0171 2884        isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS.0\system32\DRIVERS\isapnp.sys
11:10:00.0296 2884        isapnp - ok
11:10:00.0437 2884        JavaQuickStarterService (9aa67569d5257462e230767510b0c815) C:\Programme\Java\jre6\bin\jqs.exe
11:10:00.0453 2884        JavaQuickStarterService - ok
11:10:00.0500 2884        Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS.0\system32\DRIVERS\kbdclass.sys
11:10:00.0625 2884        Kbdclass - ok
11:10:00.0656 2884        kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS.0\system32\drivers\kmixer.sys
11:10:00.0781 2884        kmixer - ok
11:10:00.0828 2884        KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS.0\system32\drivers\KSecDD.sys
11:10:00.0906 2884        KSecDD - ok
11:10:00.0953 2884        lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS.0\System32\srvsvc.dll
11:10:00.0984 2884        lanmanserver - ok
11:10:01.0046 2884        lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS.0\System32\wkssvc.dll
11:10:01.0093 2884        lanmanworkstation - ok
11:10:01.0109 2884        lbrtfdc - ok
11:10:01.0234 2884        LightScribeService (53710476495886d9961be46983a6a33f) C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
11:10:01.0250 2884        LightScribeService - ok
11:10:01.0296 2884        LmHosts        (636714b7d43c8d0c80449123fd266920) C:\WINDOWS.0\System32\lmhsvc.dll
11:10:01.0421 2884        LmHosts - ok
11:10:01.0437 2884        Messenger      (b7550a7107281d170ce85524b1488c98) C:\WINDOWS.0\System32\msgsvc.dll
11:10:01.0562 2884        Messenger - ok
11:10:01.0609 2884        mnmdd          (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS.0\system32\drivers\mnmdd.sys
11:10:01.0703 2884        mnmdd - ok
11:10:01.0750 2884        mnmsrvc        (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS.0\System32\mnmsrvc.exe
11:10:01.0859 2884        mnmsrvc - ok
11:10:01.0890 2884        Modem          (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS.0\system32\drivers\Modem.sys
11:10:02.0000 2884        Modem - ok
11:10:02.0015 2884        Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS.0\system32\DRIVERS\mouclass.sys
11:10:02.0125 2884        Mouclass - ok
11:10:02.0140 2884        MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS.0\system32\drivers\MountMgr.sys
11:10:02.0250 2884        MountMgr - ok
11:10:02.0296 2884        MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
11:10:02.0328 2884        MozillaMaintenance - ok
11:10:02.0375 2884        MPFP            (136157e79849b9e5316ba4008d6075a8) C:\WINDOWS.0\system32\Drivers\Mpfp.sys
11:10:02.0390 2884        MPFP - ok
11:10:02.0390 2884        mraid35x - ok
11:10:02.0453 2884        MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS.0\system32\DRIVERS\mrxdav.sys
11:10:02.0562 2884        MRxDAV - ok
11:10:02.0625 2884        MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS.0\system32\DRIVERS\mrxsmb.sys
11:10:02.0687 2884        MRxSmb - ok
11:10:02.0734 2884        MSDTC          (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS.0\System32\msdtc.exe
11:10:02.0843 2884        MSDTC - ok
11:10:02.0843 2884        Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS.0\system32\drivers\Msfs.sys
11:10:02.0968 2884        Msfs - ok
11:10:02.0968 2884        MSIServer - ok
11:10:03.0015 2884        MSKSSRV        (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS.0\system32\drivers\MSKSSRV.sys
11:10:03.0125 2884        MSKSSRV - ok
11:10:03.0156 2884        MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS.0\system32\drivers\MSPCLOCK.sys
11:10:03.0250 2884        MSPCLOCK - ok
11:10:03.0281 2884        MSPQM          (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS.0\system32\drivers\MSPQM.sys
11:10:03.0390 2884        MSPQM - ok
11:10:03.0437 2884        mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS.0\system32\DRIVERS\mssmbios.sys
11:10:03.0531 2884        mssmbios - ok
11:10:03.0609 2884        MSSQL$MSSMLBIZ - ok
11:10:03.0640 2884        MSSQLServerADHelper (c06ea83f6fc2959e897c117255b6b1d5) c:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe
11:10:03.0656 2884        MSSQLServerADHelper - ok
11:10:03.0703 2884        Mup            (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS.0\system32\drivers\Mup.sys
11:10:03.0734 2884        Mup - ok
11:10:03.0796 2884        napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS.0\System32\qagentrt.dll
11:10:03.0906 2884        napagent - ok
11:10:04.0062 2884        NBService      (b498a14133bd09ad0817590ace4470ad) C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
11:10:04.0109 2884        NBService - ok
11:10:04.0156 2884        NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS.0\system32\drivers\NDIS.sys
11:10:04.0281 2884        NDIS - ok
11:10:04.0328 2884        NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS.0\system32\DRIVERS\ndistapi.sys
11:10:04.0359 2884        NdisTapi - ok
11:10:04.0375 2884        Ndisuio        (f927a4434c5028758a842943ef1a3849) C:\WINDOWS.0\system32\DRIVERS\ndisuio.sys
11:10:04.0468 2884        Ndisuio - ok
11:10:04.0531 2884        NdisWan        (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS.0\system32\DRIVERS\ndiswan.sys
11:10:04.0640 2884        NdisWan - ok
11:10:04.0687 2884        NDProxy        (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS.0\system32\drivers\NDProxy.sys
11:10:04.0718 2884        NDProxy - ok
11:10:04.0734 2884        NetBIOS        (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS.0\system32\DRIVERS\netbios.sys
11:10:04.0828 2884        NetBIOS - ok
11:10:04.0843 2884        NetBT          (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS.0\system32\DRIVERS\netbt.sys
11:10:04.0953 2884        NetBT - ok
11:10:05.0000 2884        NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS.0\system32\netdde.exe
11:10:05.0109 2884        NetDDE - ok
11:10:05.0109 2884        NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS.0\system32\netdde.exe
11:10:05.0203 2884        NetDDEdsdm - ok
11:10:05.0234 2884        Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
11:10:05.0343 2884        Netlogon - ok
11:10:05.0390 2884        Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS.0\System32\netman.dll
11:10:05.0500 2884        Netman - ok
11:10:05.0609 2884        NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
11:10:05.0625 2884        NetTcpPortSharing - ok
11:10:05.0671 2884        Nla            (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS.0\System32\mswsock.dll
11:10:05.0703 2884        Nla - ok
11:10:05.0843 2884        NMIndexingService (a328a46d87bb92ce4d8a4528e9d84787) C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
11:10:05.0890 2884        NMIndexingService - ok
11:10:05.0937 2884        Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS.0\system32\drivers\Npfs.sys
11:10:06.0031 2884        Npfs - ok
11:10:06.0062 2884        Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS.0\system32\drivers\Ntfs.sys
11:10:06.0234 2884        Ntfs - ok
11:10:06.0281 2884        NtLmSsp        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\System32\lsass.exe
11:10:06.0375 2884        NtLmSsp - ok
11:10:06.0421 2884        NtmsSvc        (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS.0\system32\ntmssvc.dll
11:10:06.0562 2884        NtmsSvc - ok
11:10:06.0593 2884        Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS.0\system32\drivers\Null.sys
11:10:06.0687 2884        Null - ok
11:10:06.0718 2884        NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS.0\system32\DRIVERS\nwlnkflt.sys
11:10:06.0828 2884        NwlnkFlt - ok
11:10:06.0843 2884        NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS.0\system32\DRIVERS\nwlnkfwd.sys
11:10:06.0937 2884        NwlnkFwd - ok
11:10:07.0093 2884        odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
11:10:07.0140 2884        odserv - ok
11:10:07.0187 2884        ose            (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
11:10:07.0203 2884        ose - ok
11:10:07.0250 2884        Parport        (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS.0\system32\DRIVERS\parport.sys
11:10:07.0343 2884        Parport - ok
11:10:07.0375 2884        PartMgr        (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS.0\system32\drivers\PartMgr.sys
11:10:07.0468 2884        PartMgr - ok
11:10:07.0515 2884        ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS.0\system32\drivers\ParVdm.sys
11:10:07.0609 2884        ParVdm - ok
11:10:07.0640 2884        PCI            (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS.0\system32\DRIVERS\pci.sys
11:10:07.0750 2884        PCI - ok
11:10:07.0750 2884        PCIDump - ok
11:10:07.0781 2884        PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS.0\system32\DRIVERS\pciide.sys
11:10:07.0890 2884        PCIIde - ok
11:10:07.0921 2884        Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS.0\system32\drivers\Pcmcia.sys
11:10:08.0046 2884        Pcmcia - ok
11:10:08.0046 2884        PDCOMP - ok
11:10:08.0046 2884        PDFRAME - ok
11:10:08.0062 2884        PDRELI - ok
11:10:08.0062 2884        PDRFRAME - ok
11:10:08.0078 2884        perc2 - ok
11:10:08.0078 2884        perc2hib - ok
11:10:08.0140 2884        PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS.0\system32\services.exe
11:10:08.0156 2884        PlugPlay - ok
11:10:08.0187 2884        PolicyAgent    (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
11:10:08.0281 2884        PolicyAgent - ok
11:10:08.0328 2884        PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS.0\system32\DRIVERS\raspptp.sys
11:10:08.0437 2884        PptpMiniport - ok
11:10:08.0453 2884        Processor      (2cb55427c58679f49ad600fccba76360) C:\WINDOWS.0\system32\DRIVERS\processr.sys
11:10:08.0562 2884        Processor - ok
11:10:08.0562 2884        ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
11:10:08.0656 2884        ProtectedStorage - ok
11:10:08.0656 2884        PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS.0\system32\DRIVERS\psched.sys
11:10:08.0765 2884        PSched - ok
11:10:08.0796 2884        Ptilink        (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS.0\system32\DRIVERS\ptilink.sys
11:10:08.0906 2884        Ptilink - ok
11:10:08.0906 2884        ql1080 - ok
11:10:08.0921 2884        Ql10wnt - ok
11:10:08.0921 2884        ql12160 - ok
11:10:08.0921 2884        ql1240 - ok
11:10:08.0937 2884        ql1280 - ok
11:10:08.0953 2884        RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS.0\system32\DRIVERS\rasacd.sys
11:10:09.0046 2884        RasAcd - ok
11:10:09.0093 2884        RasAuto        (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS.0\System32\rasauto.dll
11:10:09.0218 2884        RasAuto - ok
11:10:09.0234 2884        Rasl2tp        (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS.0\system32\DRIVERS\rasl2tp.sys
11:10:09.0343 2884        Rasl2tp - ok
11:10:09.0375 2884        RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS.0\System32\rasmans.dll
11:10:09.0484 2884        RasMan - ok
11:10:09.0500 2884        RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS.0\system32\DRIVERS\raspppoe.sys
11:10:09.0609 2884        RasPppoe - ok
11:10:09.0640 2884        Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS.0\system32\DRIVERS\raspti.sys
11:10:09.0734 2884        Raspti - ok
11:10:09.0781 2884        Rdbss          (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS.0\system32\DRIVERS\rdbss.sys
11:10:09.0875 2884        Rdbss - ok
11:10:09.0906 2884        RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS.0\system32\DRIVERS\RDPCDD.sys
11:10:10.0000 2884        RDPCDD - ok
11:10:10.0015 2884        rdpdr          (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS.0\system32\DRIVERS\rdpdr.sys
11:10:10.0125 2884        rdpdr - ok
11:10:10.0171 2884        RDPWD          (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS.0\system32\drivers\RDPWD.sys
11:10:10.0218 2884        RDPWD - ok
11:10:10.0250 2884        RDSessMgr      (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS.0\system32\sessmgr.exe
11:10:10.0375 2884        RDSessMgr - ok
11:10:10.0390 2884        redbook        (ed761d453856f795a7fe056e42c36365) C:\WINDOWS.0\system32\DRIVERS\redbook.sys
11:10:10.0500 2884        redbook - ok
11:10:10.0546 2884        RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS.0\System32\mprdim.dll
11:10:10.0671 2884        RemoteAccess - ok
11:10:10.0718 2884        RemoteRegistry  (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS.0\system32\regsvc.dll
11:10:10.0828 2884        RemoteRegistry - ok
11:10:10.0859 2884        RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS.0\System32\locator.exe
11:10:10.0953 2884        RpcLocator - ok
11:10:11.0015 2884        RpcSs          (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS.0\System32\rpcss.dll
11:10:11.0062 2884        RpcSs - ok
11:10:11.0109 2884        RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS.0\System32\rsvp.exe
11:10:11.0234 2884        RSVP - ok
11:10:11.0296 2884        RTL8192su      (7fd98e91896cad23169a84874f145250) C:\WINDOWS.0\system32\DRIVERS\RTL8192su.sys
11:10:11.0343 2884        RTL8192su - ok
11:10:11.0375 2884        RTLE8023xp      (b2961a8861da27c4562282c3707250f5) C:\WINDOWS.0\system32\DRIVERS\Rtenicxp.sys
11:10:11.0437 2884        RTLE8023xp - ok
11:10:11.0468 2884        SamSs          (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS.0\system32\lsass.exe
11:10:11.0578 2884        SamSs - ok
11:10:11.0703 2884        SASDIFSV        (39763504067962108505bff25f024345) C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS
11:10:11.0703 2884        SASDIFSV - ok
11:10:11.0718 2884        SASKUTIL        (77b9fc20084b48408ad3e87570eb4a85) C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS
11:10:11.0734 2884        SASKUTIL - ok
11:10:11.0781 2884        SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS.0\System32\SCardSvr.exe
11:10:11.0890 2884        SCardSvr - ok
11:10:11.0953 2884        Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS.0\system32\schedsvc.dll
11:10:12.0062 2884        Schedule - ok
11:10:12.0109 2884        Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS.0\system32\DRIVERS\secdrv.sys
11:10:12.0156 2884        Secdrv - ok
11:10:12.0203 2884        seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS.0\System32\seclogon.dll
11:10:12.0312 2884        seclogon - ok
11:10:12.0343 2884        SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS.0\System32\sens.dll
11:10:12.0453 2884        SENS - ok
11:10:12.0515 2884        serenum        (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS.0\system32\DRIVERS\serenum.sys
11:10:12.0609 2884        serenum - ok
11:10:12.0609 2884        Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS.0\system32\DRIVERS\serial.sys
11:10:12.0718 2884        Serial - ok
11:10:12.0750 2884        Sfloppy        (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS.0\system32\drivers\Sfloppy.sys
11:10:12.0859 2884        Sfloppy - ok
11:10:12.0906 2884        SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS.0\System32\ipnathlp.dll
11:10:13.0046 2884        SharedAccess - ok
11:10:13.0093 2884        ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
11:10:13.0109 2884        ShellHWDetection - ok
11:10:13.0109 2884        Simbad - ok
11:10:13.0109 2884        Sparrow - ok
11:10:13.0140 2884        splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS.0\system32\drivers\splitter.sys
11:10:13.0250 2884        splitter - ok
11:10:13.0296 2884        Spooler        (60784f891563fb1b767f70117fc2428f) C:\WINDOWS.0\system32\spoolsv.exe
11:10:13.0312 2884        Spooler - ok
11:10:13.0437 2884        SQLBrowser      (b2ec3e1deac5f0a764bd3486d213a0af) c:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe
11:10:13.0468 2884        SQLBrowser - ok
11:10:13.0484 2884        sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS.0\system32\DRIVERS\sr.sys
11:10:13.0531 2884        sr - ok
11:10:13.0578 2884        srservice      (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS.0\system32\srsvc.dll
11:10:13.0625 2884        srservice - ok
11:10:13.0656 2884        Srv            (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS.0\system32\DRIVERS\srv.sys
11:10:13.0703 2884        Srv - ok
11:10:13.0718 2884        SSDPSRV        (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS.0\System32\ssdpsrv.dll
11:10:13.0781 2884        SSDPSRV - ok
11:10:13.0812 2884        SSPORT          (ef3458337d7341a05169cefc73709264) C:\WINDOWS.0\system32\Drivers\SSPORT.sys
11:10:13.0812 2884        SSPORT ( UnsignedFile.Multi.Generic ) - warning
11:10:13.0812 2884        SSPORT - detected UnsignedFile.Multi.Generic (1)
11:10:13.0843 2884        stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS.0\system32\wiaservc.dll
11:10:13.0968 2884        stisvc - ok
11:10:14.0015 2884        swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS.0\system32\DRIVERS\swenum.sys
11:10:14.0109 2884        swenum - ok
11:10:14.0140 2884        swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS.0\system32\drivers\swmidi.sys
11:10:14.0234 2884        swmidi - ok
11:10:14.0234 2884        SwPrv - ok
11:10:14.0250 2884        symc810 - ok
11:10:14.0250 2884        symc8xx - ok
11:10:14.0250 2884        sym_hi - ok
11:10:14.0265 2884        sym_u3 - ok
11:10:14.0281 2884        sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS.0\system32\drivers\sysaudio.sys
11:10:14.0390 2884        sysaudio - ok
11:10:14.0437 2884        SysmonLog      (2903fffa2523926d6219428040dce6b9) C:\WINDOWS.0\system32\smlogsvc.exe
11:10:14.0546 2884        SysmonLog - ok
11:10:14.0593 2884        TapiSrv        (05903cac4b98908d55ea5774775b382e) C:\WINDOWS.0\System32\tapisrv.dll
11:10:14.0703 2884        TapiSrv - ok
11:10:14.0765 2884        Tcpip          (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS.0\system32\DRIVERS\tcpip.sys
11:10:14.0796 2884        Tcpip - ok
11:10:14.0843 2884        TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS.0\system32\drivers\TDPIPE.sys
11:10:14.0937 2884        TDPIPE - ok
11:10:14.0953 2884        TDTCP          (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS.0\system32\drivers\TDTCP.sys
11:10:15.0062 2884        TDTCP - ok
11:10:15.0093 2884        TermDD          (88155247177638048422893737429d9e) C:\WINDOWS.0\system32\DRIVERS\termdd.sys
11:10:15.0187 2884        TermDD - ok
11:10:15.0234 2884        TermService    (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS.0\System32\termsrv.dll
11:10:15.0343 2884        TermService - ok
11:10:15.0390 2884        Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS.0\System32\shsvcs.dll
11:10:15.0406 2884        Themes - ok
11:10:15.0468 2884        TlntSvr        (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS.0\System32\tlntsvr.exe
11:10:15.0531 2884        TlntSvr - ok
11:10:15.0531 2884        TosIde - ok
11:10:15.0578 2884        TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS.0\system32\trkwks.dll
11:10:15.0687 2884        TrkWks - ok
11:10:15.0734 2884        Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS.0\system32\drivers\Udfs.sys
11:10:15.0828 2884        Udfs - ok
11:10:15.0828 2884        ultra - ok
11:10:15.0875 2884        Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS.0\system32\DRIVERS\update.sys
11:10:16.0031 2884        Update - ok
11:10:16.0093 2884        upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS.0\System32\upnphost.dll
11:10:16.0156 2884        upnphost - ok
11:10:16.0171 2884        UPS            (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS.0\System32\ups.exe
11:10:16.0281 2884        UPS - ok
11:10:16.0328 2884        usbccgp        (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS.0\system32\DRIVERS\usbccgp.sys
11:10:16.0437 2884        usbccgp - ok
11:10:16.0484 2884        usbehci        (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS.0\system32\DRIVERS\usbehci.sys
11:10:16.0593 2884        usbehci - ok
11:10:16.0609 2884        usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS.0\system32\DRIVERS\usbhub.sys
11:10:16.0718 2884        usbhub - ok
11:10:16.0765 2884        usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS.0\system32\DRIVERS\usbprint.sys
11:10:16.0859 2884        usbprint - ok
11:10:16.0906 2884        usbstor        (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS.0\system32\DRIVERS\USBSTOR.SYS
11:10:16.0984 2884        usbstor - ok
11:10:17.0015 2884        usbuhci        (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys
11:10:17.0109 2884        usbuhci - ok
11:10:17.0125 2884        VgaSave        (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS.0\System32\drivers\vga.sys
11:10:17.0218 2884        VgaSave - ok
11:10:17.0234 2884        ViaIde - ok
11:10:17.0281 2884        VolSnap        (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS.0\system32\drivers\VolSnap.sys
11:10:17.0390 2884        VolSnap - ok
11:10:17.0437 2884        VSS            (68f106273be29e7b7ef8266977268e78) C:\WINDOWS.0\System32\vssvc.exe
11:10:17.0500 2884        VSS - ok
11:10:17.0718 2884        vToolbarUpdater11.0.2 (56e1e4442e4613fb2039a6b7421f4e58) C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe
11:10:17.0781 2884        vToolbarUpdater11.0.2 - ok
11:10:17.0828 2884        W32Time        (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS.0\system32\w32time.dll
11:10:17.0921 2884        W32Time - ok
11:10:18.0015 2884        Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS.0\system32\DRIVERS\wanarp.sys
11:10:18.0125 2884        Wanarp - ok
11:10:18.0125 2884        WDICA - ok
11:10:18.0140 2884        wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS.0\system32\drivers\wdmaud.sys
11:10:18.0250 2884        wdmaud - ok
11:10:18.0312 2884        WebClient      (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS.0\System32\webclnt.dll
11:10:18.0406 2884        WebClient - ok
11:10:18.0500 2884        winmgmt        (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS.0\system32\wbem\WMIsvc.dll
11:10:18.0609 2884        winmgmt - ok
11:10:18.0640 2884        WmdmPmSN        (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS.0\system32\MsPMSNSv.dll
11:10:18.0734 2884        WmdmPmSN - ok
11:10:18.0796 2884        Wmi            (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS.0\System32\advapi32.dll
11:10:18.0859 2884        Wmi - ok
11:10:18.0921 2884        WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS.0\System32\wbem\wmiapsrv.exe
11:10:19.0031 2884        WmiApSrv - ok
11:10:19.0187 2884        WMPNetworkSvc  (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
11:10:19.0218 2884        WMPNetworkSvc - ok
11:10:19.0312 2884        WS2IFSL        (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS.0\System32\drivers\ws2ifsl.sys
11:10:19.0406 2884        WS2IFSL - ok
11:10:19.0453 2884        wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS.0\system32\wscsvc.dll
11:10:19.0593 2884        wscsvc - ok
11:10:19.0609 2884        wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS.0\system32\wuauserv.dll
11:10:19.0703 2884        wuauserv - ok
11:10:19.0750 2884        WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS.0\system32\DRIVERS\WudfPf.sys
11:10:19.0781 2884        WudfPf - ok
11:10:19.0812 2884        WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS.0\system32\DRIVERS\wudfrd.sys
11:10:19.0843 2884        WudfRd - ok
11:10:19.0875 2884        WudfSvc        (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS.0\System32\WUDFSvc.dll
11:10:19.0906 2884        WudfSvc - ok
11:10:19.0968 2884        WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS.0\System32\wzcsvc.dll
11:10:20.0125 2884        WZCSVC - ok
11:10:20.0156 2884        xmlprov        (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS.0\System32\xmlprov.dll
11:10:20.0265 2884        xmlprov - ok
11:10:20.0296 2884        MBR (0x1B8)    (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
11:10:20.0718 2884        \Device\Harddisk0\DR0 - ok
11:10:20.0734 2884        Boot (0x1200)  (36c803000a2e00c34790dd34bd6a7c25) \Device\Harddisk0\DR0\Partition0
11:10:20.0750 2884        \Device\Harddisk0\DR0\Partition0 - ok
11:10:20.0750 2884        ============================================================
11:10:20.0750 2884        Scan finished
11:10:20.0750 2884        ============================================================
11:10:20.0859 3144        Detected object count: 1
11:10:20.0859 3144        Actual detected object count: 1
11:11:49.0609 3144        SSPORT ( UnsignedFile.Multi.Generic ) - skipped by user
11:11:49.0625 3144        SSPORT ( UnsignedFile.Multi.Generic ) - User select action: Skip
11:12:46.0390 3824        Deinitialize success
Hier nochmals der Log von TDSS Killer. Ich habe wieder nichts gelöscht wie beim ersten Mal. Ich hoffe, das war so richtig!

cosinus 02.06.2012 18:51
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Ordensritter 04.06.2012 22:23
Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 22:41:23 on 04.06.2012

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 12.0

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Boot Execute]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Session Manager )-----
"BootExecute" - "AVG Technologies CZ, s.r.o." - C:\PROGRA~2\AVG\AVG2012\avgrsx.exe

[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - "Apple Inc." - C:\Programme\Apple Software Update\SoftwareUpdate.exe
"Google Software Updater.job" - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"WGASetup.job" - "Microsoft Corporation" - C:\WINDOWS.0\system32\KB905474\wgasetup.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\WINDOWS.0\system32\FlashPlayerCPLApp.cpl
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS.0\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS.0\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~2\MICROS~2\Office12\MLCFG32.CPL
"Nero BurnRights" - "Nero AG" - C:\Programme\Nero\Nero 7\Nero Toolkit\NeroBurnRights.cpl
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AVG Anti-Rootkit Driver" (Avgrkx86) - "AVG Technologies CZ, s.r.o." - C:\WINDOWS.0\System32\DRIVERS\avgrkx86.sys
"AVG AVI Loader Driver" (Avgldx86) - "AVG Technologies CZ, s.r.o." - C:\WINDOWS.0\System32\DRIVERS\avgldx86.sys
"AVG Mini-Filter Resident Anti-Virus Shield" (Avgmfx86) - "AVG Technologies CZ, s.r.o." - C:\WINDOWS.0\System32\DRIVERS\avgmfx86.sys
"AVG TDI Driver" (Avgtdix) - "AVG Technologies CZ, s.r.o." - C:\WINDOWS.0\System32\DRIVERS\avgtdix.sys
"AVGIDSDriver" (AVGIDSDriver) - "AVG Technologies CZ, s.r.o. " - C:\WINDOWS.0\System32\DRIVERS\AVGIDSDriver.Sys
"AVGIDSEH" (AVGIDSEH) - "AVG Technologies CZ, s.r.o. " - C:\WINDOWS.0\System32\DRIVERS\AVGIDSEH.Sys
"AVGIDSFilter" (AVGIDSFilter) - "AVG Technologies CZ, s.r.o. " - C:\WINDOWS.0\System32\DRIVERS\AVGIDSFilter.Sys
"AVGIDSShim" (AVGIDSShim) - "AVG Technologies CZ, s.r.o. " - C:\WINDOWS.0\System32\DRIVERS\AVGIDSShim.Sys
"axldypob" (axldypob) - ? - C:\DOKUME~1\Elsi\LOKALE~1\Temp\axldypob.sys  (Hidden registry entry, rootkit activity | File not found)
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS.0\system32\drivers\Changer.sys  (File not found)
"Hamachi Network Interface" (hamachi) - "LogMeIn, Inc." - C:\WINDOWS.0\System32\DRIVERS\hamachi.sys
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS.0\system32\drivers\i2omgmt.sys  (File not found)
"InCD File System" (InCDfs) - "Nero AG" - C:\WINDOWS.0\System32\drivers\InCDFs.sys
"InCD Reader" (incdrm) - "Nero AG" - C:\WINDOWS.0\System32\drivers\InCDRm.sys
"InCDPass" (InCDPass) - "Nero AG" - C:\WINDOWS.0\System32\drivers\InCDPass.sys
"InCDrec" (InCDrec) - "Nero AG" - C:\WINDOWS.0\system32\drivers\InCDrec.sys
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS.0\system32\drivers\lbrtfdc.sys  (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS.0\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS.0\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS.0\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS.0\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS.0\system32\drivers\PDRFRAME.sys  (File not found)
"SASDIFSV" (SASDIFSV) - "SUPERAdBlocker.com and SUPERAntiSpyware.com" - C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS
"SASKUTIL" (SASKUTIL) - "SUPERAdBlocker.com and SUPERAntiSpyware.com" - C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS
"SSPORT" (SSPORT) - "Samsung Electronics" - C:\WINDOWS.0\system32\Drivers\SSPORT.sys
"WDICA" (WDICA) - ? - C:\WINDOWS.0\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{10880D85-AAD9-4558-ABDC-2AB1552D831F} "LightScribe Control Panel" - "Hewlett-Packard Company" - "C:\Programme\Gemeinsame Dateien\LightScribe\LSRunOnce.exe"
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - c:\WINDOWS.0\system32\Rundll32.exe c:\WINDOWS.0\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{7D4D6379-F301-4311-BEBA-E26EB0561882} "NeroDigitalColumnHandler Class" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroDigitalExt.dll
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS.0\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS.0\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS.0\system32\mscoree.dll
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~2\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" - "Microsoft Corporation" - C:\PROGRA~2\GEMEIN~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
{B658800C-F66E-4EF3-AB85-6C0C227862A9} "ViProtocolOLE Class" - ? - C:\Programme\Gemeinsame Dateien\AVG Secure Search\ViProtocolInstaller\11.0.2\ViProtocol.dll
{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} "XPLPPFilter Class" - "AVG Technologies CZ, s.r.o." - C:\Programme\AVG\AVG2012\avgpp.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "SABShellExecuteHook Class" - "SuperAdBlocker.com" - C:\Programme\SUPERAntiSpyware\SASSEH.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{9F97547E-460A-42C5-AE0C-81C61FFAEBC3} "AVG Find Extension" - ? -  (File not found | COM-object registry key not found)
{9F97547E-4609-42C5-AE0C-81C61FFAEBC3} "AVG Shell Extension Class" - "AVG Technologies CZ, s.r.o." - C:\Programme\AVG\AVG2012\avgse.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? -  (File not found | COM-object registry key not found)
{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - c:\WINDOWS.0\system32\mscoree.dll
{CAE3251E-9B15-4810-B268-852AD9792A59} "InCDShellExt Class" - "Nero AG" - C:\Programme\Nero\Nero 7\InCD\InCDshx.dll
{B3D9AEDE-B2C3-406d-A254-6BE07767B08B} "InCDUdfPerm Class" - "Nero AG" - C:\Programme\Nero\Nero 7\InCD\InCDUP.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -  (File not found | COM-object registry key not found)
{32683183-48a0-441b-a342-7c2a440a9478} "Media Band" - ? -  (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~2\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~2\MICROS~2\Office12\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~2\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} "NeroCoverEdLiveIcons Class" - "Nero AG" - C:\Programme\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll
{B327765E-D724-4347-8B16-78AE18552FC3} "NeroDigitalIconHandler Class" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroDigitalExt.dll
{7F1CF152-04F8-453A-B34C-E609530A9DC8} "NeroDigitalPropSheetHandler Class" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroDigitalExt.dll
{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~2\MICROS~2\Office12\OLKFSTUB.DLL
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - c:\WINDOWS.0\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -  (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - c:\WINDOWS.0\system32\dfshim.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{32683183-48a0-441b-a342-7c2a440a9478} "{32683183-48a0-441b-a342-7c2a440a9478}" - ? -  (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_30" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_30.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} "Java Plug-in 1.6.0_30" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_30.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_30" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_30.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
{7584C670-2274-4EFB-B00B-D6AABA6D3850} "Microsoft RDP Client Control (redist)" - ? - C:\WINDOWS.0\Downloaded Program Files\msrdp.ocx  (File not found) / https://mail.austria-wien.at/Remote/msrdp.cab
{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\WINDOWS.0\system32\LegitCheckControl.DLL / hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" - ? -  (File not found | COM-object registry key not found) / hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC} "ClsidExtension" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_30.dll
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} "AVG Safe Search" - "AVG Technologies CZ, s.r.o." - C:\Programme\AVG\AVG2012\avgssie.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "SSVHelper Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\ssv.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Elsi\Startmenü\Programme\Autostart\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" - "Nero AG" - "C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe"
"LightScribe Control Panel" - "Hewlett-Packard Company" - C:\Programme\Gemeinsame Dateien\LightScribe\LightScribeControlPanel.exe -hidden
"OnlineFestplatte" - "Telekom Austria TA AG" - C:\Programme\aon\Onlinefestplatte\OnlineFestplatte.exe /tray
"SUPERAntiSpyware" - "SUPERAntiSpyware.com" - C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"AVG_TRAY" - "AVG Technologies CZ, s.r.o." - "C:\Programme\AVG\AVG2012\avgtray.exe"
"CDAServer" - ? - C:\Programme\Gemeinsame Dateien\Common Desktop Agent\CDASrv.exe
"InCD" - "Nero AG" - C:\Programme\Nero\Nero 7\InCD\InCD.exe
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"NeroFilterCheck" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"SecurDisc" - "Nero AG" - C:\Programme\Nero\Nero 7\InCD\NBHGui.exe
"vProt" - ? - "C:\Programme\AVG Secure Search\vprot.exe"

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS.0\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"AVG WatchDog" (avgwd) - "AVG Technologies CZ, s.r.o." - C:\Programme\AVG\AVG2012\avgwdsvc.exe
"AVGIDSAgent" (AVGIDSAgent) - "AVG Technologies CZ, s.r.o." - C:\Programme\AVG\AVG2012\AVGIDSAgent.exe
"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Hilfe und Support" (helpsvc) - ? - C:\WINDOWS.0\PCHealth\HelpCtr\Binaries\pchsvc.dlles\pchsvc.dll  (File not found)
"InCD Helper" (InCDsrv) - "Nero AG" - C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
"NBService" (NBService) - "Nero AG" - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
"NMIndexingService" (NMIndexingService) - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"SAS Core Service" (!SASCORE) - "SUPERAntiSpyware.com" - C:\Programme\SUPERAntiSpyware\SASCORE.EXE
"SQL Server (MSSMLBIZ)" (MSSQL$MSSMLBIZ) - "Microsoft Corporation" - c:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
"vToolbarUpdater11.0.2" (vToolbarUpdater11.0.2) - ? - C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.0.2\ToolbarUpdater.exe
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - c:\WINDOWS.0\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"!SASWinLogon" - "SUPERAntiSpyware.com" - C:\Programme\SUPERAntiSpyware\SASWINLO.DLL
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS.0\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-06-04 22:43:25
-----------------------------
22:43:25.203    OS Version: Windows 5.1.2600 Service Pack 3
22:43:25.203    Number of processors: 2 586 0xF0D
22:43:25.203    ComputerName: MICHI  UserName: Elsi
22:43:39.171    Initialize success
22:46:41.328    AVAST engine defs: 12060401
22:46:55.593    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
22:46:55.593    Disk 0 Vendor: ST3160815AS 4.AAB Size: 152627MB BusType: 3
22:46:55.609    Disk 0 MBR read successfully
22:46:55.609    Disk 0 MBR scan
22:46:55.703    Disk 0 Windows XP default MBR code
22:46:55.703    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS      152625 MB offset 63
22:46:55.734    Disk 0 scanning sectors +312576705
22:46:55.875    Disk 0 scanning C:\WINDOWS.0\system32\drivers
22:47:48.234    Service scanning
22:49:14.578    Modules scanning
22:50:02.953    Disk 0 trace - called modules:
22:50:02.968    ntoskrnl.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys
22:50:02.968    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8637dab8]
22:50:03.328    3 CLASSPNP.SYS[f7617fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x86357d98]
22:50:05.375    AVAST engine scan C:\WINDOWS.0
22:51:36.812    AVAST engine scan C:\WINDOWS.0\system32
23:05:43.687    AVAST engine scan C:\WINDOWS.0\system32\drivers
23:06:47.031    AVAST engine scan C:\Dokumente und Einstellungen\Elsi
23:15:57.765    AVAST engine scan C:\Dokumente und Einstellungen\All Users
23:19:58.671    Scan finished successfully
23:21:14.375    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Elsi\Desktop\MBR.dat"
23:21:14.390    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Elsi\Desktop\aswMBR.txt"
Hier die beiden Logs! Tut mir leid, dass es etwas gedauert hat!

cosinus 05.06.2012 09:42
Edit: hab nicht richtig gelesen :stirn:
GMER ging nicht?

Ordensritter 05.06.2012 11:11
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-06-05 12:09:50
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e ST3160815AS rev.4.AAB
Running: w5b5rwgm.exe; Driver: C:\DOKUME~1\Elsi\LOKALE~1\Temp\axldypob.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwOpenProcess [0xA42F4F3C]
SSDT            \??\C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com)                  ZwTerminateProcess [0xA4B4A640]
SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwTerminateThread [0xA42F5080]
SSDT            \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwWriteVirtualMemory [0xA42F511C]

---- User IAT/EAT - GMER 1.0.15 ----

IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\Explorer.EXE [KERNEL32.dll!GetProcAddress]                                    [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                          [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                              [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\ole32.dll [KERNEL32.dll!GetProcAddress]                              [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress]                          [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\WININET.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress]                          [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT            C:\WINDOWS.0\Explorer.EXE[184] @ C:\WINDOWS.0\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress]                            [5CF07774] C:\WINDOWS.0\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                      AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                      InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                                    Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                                    avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                                  Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                                  avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                                  Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                                  avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                                Mpfp.sys (McAfee Personal Firewall Plus Driver/McAfee, Inc.)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                                avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                                    fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                                    fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                                    AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                                    InCDrec.SYS (InCD File System Recognizer/Nero AG)

---- EOF - GMER 1.0.15 ----
Gmer hat sich aufgehängt, jetzt hab ichs nochmal probiert und es hat auch irgendwann einfach aufgehört weiter zu scannen. Ich hab jetzt einfach das, was ich hab gespeichert und voila.

Tut mir leid.

cosinus 05.06.2012 11:32
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Ordensritter 05.06.2012 19:19
Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.05.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Elsi :: MICHI [Administrator]

05.06.2012 17:10:17
mbam-log-2012-06-05 (17-10-17).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 418641
Laufzeit: 2 Stunde(n), 40 Minute(n),

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Hier Malwarebytes, Superantispyware kommt morgen!

Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/06/2012 at 04:08 PM

Application Version : 5.0.1148

Core Rules Database Version : 8689
Trace Rules Database Version: 6501

Scan type      : Complete Scan
Total Scan Time : 02:48:16

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 473
Memory threats detected  : 0
Registry items scanned    : 35582
Registry threats detected : 0
File items scanned        : 42424
File threats detected    : 223

Adware.Tracking Cookie
        .avgtechnologies.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        rts.pgmediaserve.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .autoscout24.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        server.adformdsp.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adformdsp.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        counters.gigya.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .overture.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www1.findallnow.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .findology.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .findology.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .findology.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .kontera.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.adition.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .warnerbros.112.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .amazon-adsystem.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .edsa.122.2o7.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adform.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .lucidmedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        accounts.youtube.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        livestat.derstandard.at [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.at.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tacoda.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .ar.atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .atwola.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        tracking.oe24.at [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        tracking.oe24.at [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track71.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track.solocpm.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track1.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        track2.httptrack.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .ad.adnet.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        tracking.mobile.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .countomat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .etargetnet.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .etargetnet.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .histats.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .findhe.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        tracking.hostgator.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        zeroadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        trekmedia.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        trekmedia.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www.visit-tracker.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .liveperson.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        www.netdebit-counter.de [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .myroitracking.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.velmedia.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        trekmedia.net [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .clicksor.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        tomtailor.dyntracker.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        ad1.adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\DOKUMENTE UND EINSTELLUNGEN\ELSI\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\Z1MM8M41.DEFAULT\COOKIES.SQLITE ]
Und hier noch Superantispyware. Blöde Frage, aber mir ist seit ungefähr 2 Tagen aufgefallen, dass die Warcraft 3 Spiele, die ich im Battlenet spielte sehr laggen. Kann das mit irgendwelchen Viren zusammenhängen?

Thx

cosinus 08.06.2012 17:25
Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?


Zitat:
Blöde Frage, aber mir ist seit ungefähr 2 Tagen aufgefallen, dass die Warcraft 3 Spiele, die ich im Battlenet spielte sehr laggen. Kann das mit irgendwelchen Viren zusammenhängen?
Liegts an der Internetverbindung? Ein Router-Neustart kann da manchmal Wunder wirken :D

Ordensritter 08.06.2012 17:34
Hallo Cosinus!

Vielen Dank für Deine Hilfe und die Zeit, die Du Dir genommen hast! Ich werde mir mal Deine Links zur "Cookieproblematik" zu Gemüte führen, bin aber auch schon sehr froh, dass nun alles passt. Ich werde ja auch bei meiner Google Suche nicht mehr umgeleitet, was ja mein Hauptanmeldegrund hier war.

Den Tipp mit dem Router werde ich beherzigen und ihn mal ausstecken und hoffen, dass es dann wieder besser klappt.

Eine tolle Sache, dieses Forum und die Tatsache, dass Ihr hier helft!

Lg


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:02 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131