Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Verschlüsselungstrojaner eingefangen! E-Mail Anhang geöffnet! (https://www.trojaner-board.de/117081-verschluesselungstrojaner-eingefangen-e-mail-anhang-geoeffnet.html)

cosinus 25.06.2012 20:05
Ja und Müll wurde auch entfernt

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

Xyrak 25.06.2012 20:37
Code:
21:34:53.0790 3892        TDSS rootkit removing tool 2.7.41.0 Jun 20 2012 20:53:32
21:34:53.0870 3892        ============================================================
21:34:53.0870 3892        Current date / time: 2012/06/25 21:34:53.0870
21:34:53.0870 3892        SystemInfo:
21:34:53.0870 3892       
21:34:53.0870 3892        OS Version: 6.1.7601 ServicePack: 1.0
21:34:53.0870 3892        Product type: Workstation
21:34:53.0870 3892        ComputerName: STEPHAN-PC
21:34:53.0870 3892        UserName: Stephan
21:34:53.0870 3892        Windows directory: C:\Windows
21:34:53.0870 3892        System windows directory: C:\Windows
21:34:53.0870 3892        Running under WOW64
21:34:53.0870 3892        Processor architecture: Intel x64
21:34:53.0870 3892        Number of processors: 4
21:34:53.0870 3892        Page size: 0x1000
21:34:53.0870 3892        Boot type: Normal boot
21:34:53.0870 3892        ============================================================
21:34:54.0650 3892        Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:34:54.0650 3892        ============================================================
21:34:54.0650 3892        \Device\Harddisk0\DR0:
21:34:54.0650 3892        MBR partitions:
21:34:54.0650 3892        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1B479000
21:34:54.0670 3892        \Device\Harddisk0\DR0\Partition1: MBR, Type 0xB, StartLBA 0x1B47983F, BlocksNum 0x1D4AD42
21:34:54.0670 3892        ============================================================
21:34:54.0720 3892        C: <-> \Device\Harddisk0\DR0\Partition0
21:34:54.0750 3892        D: <-> \Device\Harddisk0\DR0\Partition1
21:34:54.0750 3892        ============================================================
21:34:54.0750 3892        Initialize success
21:34:54.0750 3892        ============================================================
21:35:49.0560 2200        ============================================================
21:35:49.0560 2200        Scan started
21:35:49.0560 2200        Mode: Manual; SigCheck; TDLFS;
21:35:49.0560 2200        ============================================================
21:35:50.0500 2200        1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\DRIVERS\1394ohci.sys
21:35:50.0610 2200        1394ohci - ok
21:35:50.0640 2200        ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
21:35:50.0660 2200        ACPI - ok
21:35:50.0670 2200        AcpiPmi        (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
21:35:50.0740 2200        AcpiPmi - ok
21:35:50.0840 2200        AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:35:50.0860 2200        AdobeARMservice - ok
21:35:51.0010 2200        AdobeFlashPlayerUpdateSvc (f3cd7b20b27d1772c946df993ff3635c) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:35:51.0020 2200        AdobeFlashPlayerUpdateSvc - ok
21:35:51.0080 2200        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
21:35:51.0110 2200        adp94xx - ok
21:35:51.0160 2200        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
21:35:51.0190 2200        adpahci - ok
21:35:51.0200 2200        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
21:35:51.0230 2200        adpu320 - ok
21:35:51.0260 2200        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
21:35:51.0380 2200        AeLookupSvc - ok
21:35:51.0440 2200        AFD            (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
21:35:51.0500 2200        AFD - ok
21:35:51.0540 2200        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
21:35:51.0550 2200        agp440 - ok
21:35:51.0600 2200        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
21:35:51.0650 2200        ALG - ok
21:35:51.0680 2200        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
21:35:51.0690 2200        aliide - ok
21:35:51.0740 2200        AMD External Events Utility (5ec60409bd50953bd4f892b18840039e) C:\Windows\system32\atiesrxx.exe
21:35:51.0830 2200        AMD External Events Utility - ok
21:35:51.0870 2200        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
21:35:51.0890 2200        amdide - ok
21:35:51.0930 2200        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
21:35:51.0970 2200        AmdK8 - ok
21:35:52.0380 2200        amdkmdag        (322e5c178990f116f00e3d923f4e6b1c) C:\Windows\system32\DRIVERS\atikmdag.sys
21:35:52.0640 2200        amdkmdag - ok
21:35:52.0820 2200        amdkmdap        (961a81a84fdd700e361e8294528a37ba) C:\Windows\system32\DRIVERS\atikmpag.sys
21:35:52.0870 2200        amdkmdap - ok
21:35:52.0920 2200        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
21:35:52.0960 2200        AmdPPM - ok
21:35:53.0020 2200        amdsata        (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
21:35:53.0030 2200        amdsata - ok
21:35:53.0070 2200        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
21:35:53.0090 2200        amdsbs - ok
21:35:53.0110 2200        amdxata        (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
21:35:53.0120 2200        amdxata - ok
21:35:53.0250 2200        AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
21:35:53.0260 2200        AntiVirSchedulerService - ok
21:35:53.0310 2200        AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
21:35:53.0320 2200        AntiVirService - ok
21:35:53.0380 2200        AppID          (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
21:35:53.0540 2200        AppID - ok
21:35:53.0570 2200        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
21:35:53.0620 2200        AppIDSvc - ok
21:35:53.0660 2200        Appinfo        (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
21:35:53.0730 2200        Appinfo - ok
21:35:53.0760 2200        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
21:35:53.0760 2200        arc - ok
21:35:53.0800 2200        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
21:35:53.0820 2200        arcsas - ok
21:35:53.0850 2200        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
21:35:53.0910 2200        AsyncMac - ok
21:35:53.0920 2200        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
21:35:53.0930 2200        atapi - ok
21:35:53.0960 2200        AtiHDAudioService (230cf51113cd4b830b3bfd09b0d4c066) C:\Windows\system32\drivers\AtihdW76.sys
21:35:53.0980 2200        AtiHDAudioService - ok
21:35:54.0380 2200        atikmdag        (322e5c178990f116f00e3d923f4e6b1c) C:\Windows\system32\DRIVERS\atikmdag.sys
21:35:54.0460 2200        atikmdag - ok
21:35:54.0630 2200        AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
21:35:54.0700 2200        AudioEndpointBuilder - ok
21:35:54.0700 2200        AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
21:35:54.0730 2200        AudioSrv - ok
21:35:54.0830 2200        avgntflt        (26e38b5a58c6c55fafbc563eeddb0867) C:\Windows\system32\DRIVERS\avgntflt.sys
21:35:54.0850 2200        avgntflt - ok
21:35:54.0900 2200        avipbb          (9d1f00beff84cbbf46d7f052bc7e0565) C:\Windows\system32\DRIVERS\avipbb.sys
21:35:54.0920 2200        avipbb - ok
21:35:54.0960 2200        avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
21:35:54.0970 2200        avkmgr - ok
21:35:55.0010 2200        AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
21:35:55.0050 2200        AxInstSV - ok
21:35:55.0120 2200        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
21:35:55.0180 2200        b06bdrv - ok
21:35:55.0240 2200        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
21:35:55.0290 2200        b57nd60a - ok
21:35:55.0340 2200        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
21:35:55.0370 2200        BDESVC - ok
21:35:55.0380 2200        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
21:35:55.0440 2200        Beep - ok
21:35:55.0520 2200        BFE            (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
21:35:55.0590 2200        BFE - ok
21:35:55.0660 2200        BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
21:35:55.0740 2200        BITS - ok
21:35:55.0830 2200        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
21:35:55.0860 2200        blbdrive - ok
21:35:55.0920 2200        bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
21:35:55.0960 2200        bowser - ok
21:35:55.0990 2200        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
21:35:56.0030 2200        BrFiltLo - ok
21:35:56.0060 2200        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
21:35:56.0090 2200        BrFiltUp - ok
21:35:56.0150 2200        Browser        (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
21:35:56.0200 2200        Browser - ok
21:35:56.0230 2200        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
21:35:56.0290 2200        Brserid - ok
21:35:56.0310 2200        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
21:35:56.0350 2200        BrSerWdm - ok
21:35:56.0390 2200        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
21:35:56.0430 2200        BrUsbMdm - ok
21:35:56.0450 2200        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
21:35:56.0480 2200        BrUsbSer - ok
21:35:56.0500 2200        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
21:35:56.0530 2200        BTHMODEM - ok
21:35:56.0600 2200        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
21:35:56.0660 2200        bthserv - ok
21:35:56.0700 2200        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
21:35:56.0760 2200        cdfs - ok
21:35:56.0800 2200        cdrom          (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
21:35:56.0840 2200        cdrom - ok
21:35:56.0880 2200        CertPropSvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
21:35:56.0920 2200        CertPropSvc - ok
21:35:56.0960 2200        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
21:35:56.0980 2200        circlass - ok
21:35:57.0020 2200        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
21:35:57.0030 2200        CLFS - ok
21:35:57.0130 2200        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:35:57.0140 2200        clr_optimization_v2.0.50727_32 - ok
21:35:57.0210 2200        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:35:57.0220 2200        clr_optimization_v2.0.50727_64 - ok
21:35:57.0260 2200        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
21:35:57.0290 2200        CmBatt - ok
21:35:57.0310 2200        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
21:35:57.0320 2200        cmdide - ok
21:35:57.0380 2200        CNG            (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
21:35:57.0400 2200        CNG - ok
21:35:57.0410 2200        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
21:35:57.0420 2200        Compbatt - ok
21:35:57.0450 2200        CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
21:35:57.0490 2200        CompositeBus - ok
21:35:57.0510 2200        COMSysApp - ok
21:35:57.0560 2200        cpuz135        (262969a3fab32b9e17e63e2d17a57744) C:\Windows\system32\drivers\cpuz135_x64.sys
21:35:57.0570 2200        cpuz135 - ok
21:35:57.0590 2200        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
21:35:57.0600 2200        crcdisk - ok
21:35:57.0660 2200        CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
21:35:57.0700 2200        CryptSvc - ok
21:35:57.0750 2200        DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
21:35:57.0810 2200        DcomLaunch - ok
21:35:57.0850 2200        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
21:35:57.0910 2200        defragsvc - ok
21:35:57.0940 2200        DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
21:35:58.0000 2200        DfsC - ok
21:35:58.0040 2200        Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
21:35:58.0090 2200        Dhcp - ok
21:35:58.0120 2200        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
21:35:58.0180 2200        discache - ok
21:35:58.0210 2200        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
21:35:58.0220 2200        Disk - ok
21:35:58.0270 2200        Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
21:35:58.0320 2200        Dnscache - ok
21:35:58.0360 2200        dot3svc        (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
21:35:58.0400 2200        dot3svc - ok
21:35:58.0410 2200        DPS            (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
21:35:58.0460 2200        DPS - ok
21:35:58.0500 2200        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
21:35:58.0540 2200        drmkaud - ok
21:35:58.0600 2200        dtsoftbus01    (400582b09e0bb557d0ec28a945150eeb) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
21:35:58.0620 2200        dtsoftbus01 - ok
21:35:58.0710 2200        DXGKrnl        (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
21:35:58.0750 2200        DXGKrnl - ok
21:35:58.0790 2200        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
21:35:58.0840 2200        EapHost - ok
21:35:59.0010 2200        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
21:35:59.0100 2200        ebdrv - ok
21:35:59.0190 2200        EFS            (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
21:35:59.0240 2200        EFS - ok
21:35:59.0350 2200        ehRecvr        (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
21:35:59.0420 2200        ehRecvr - ok
21:35:59.0450 2200        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
21:35:59.0500 2200        ehSched - ok
21:35:59.0610 2200        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
21:35:59.0640 2200        elxstor - ok
21:35:59.0650 2200        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
21:35:59.0670 2200        ErrDev - ok
21:35:59.0730 2200        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
21:35:59.0780 2200        EventSystem - ok
21:35:59.0830 2200        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
21:35:59.0890 2200        exfat - ok
21:35:59.0920 2200        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
21:35:59.0960 2200        fastfat - ok
21:36:00.0030 2200        Fax            (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
21:36:00.0090 2200        Fax - ok
21:36:00.0120 2200        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
21:36:00.0150 2200        fdc - ok
21:36:00.0170 2200        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
21:36:00.0230 2200        fdPHost - ok
21:36:00.0260 2200        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
21:36:00.0310 2200        FDResPub - ok
21:36:00.0330 2200        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
21:36:00.0340 2200        FileInfo - ok
21:36:00.0350 2200        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
21:36:00.0410 2200        Filetrace - ok
21:36:00.0430 2200        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
21:36:00.0450 2200        flpydisk - ok
21:36:00.0490 2200        FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
21:36:00.0510 2200        FltMgr - ok
21:36:00.0590 2200        FontCache      (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
21:36:00.0660 2200        FontCache - ok
21:36:00.0780 2200        FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:36:00.0800 2200        FontCache3.0.0.0 - ok
21:36:00.0870 2200        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
21:36:00.0880 2200        FsDepends - ok
21:36:00.0920 2200        Fs_Rec          (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
21:36:00.0930 2200        Fs_Rec - ok
21:36:00.0960 2200        fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
21:36:00.0980 2200        fvevol - ok
21:36:01.0010 2200        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
21:36:01.0020 2200        gagp30kx - ok
21:36:01.0100 2200        gpsvc          (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
21:36:01.0160 2200        gpsvc - ok
21:36:01.0180 2200        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
21:36:01.0230 2200        hcw85cir - ok
21:36:01.0280 2200        HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
21:36:01.0330 2200        HdAudAddService - ok
21:36:01.0360 2200        HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
21:36:01.0390 2200        HDAudBus - ok
21:36:01.0410 2200        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
21:36:01.0440 2200        HidBatt - ok
21:36:01.0470 2200        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
21:36:01.0500 2200        HidBth - ok
21:36:01.0520 2200        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
21:36:01.0550 2200        HidIr - ok
21:36:01.0590 2200        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
21:36:01.0650 2200        hidserv - ok
21:36:01.0690 2200        HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
21:36:01.0720 2200        HidUsb - ok
21:36:01.0750 2200        hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
21:36:01.0810 2200        hkmsvc - ok
21:36:01.0850 2200        HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
21:36:01.0910 2200        HomeGroupListener - ok
21:36:01.0950 2200        HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
21:36:01.0980 2200        HomeGroupProvider - ok
21:36:02.0020 2200        HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
21:36:02.0030 2200        HpSAMD - ok
21:36:02.0090 2200        HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
21:36:02.0160 2200        HTTP - ok
21:36:02.0190 2200        hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
21:36:02.0200 2200        hwpolicy - ok
21:36:02.0230 2200        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
21:36:02.0240 2200        i8042prt - ok
21:36:02.0290 2200        iaStorV        (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
21:36:02.0310 2200        iaStorV - ok
21:36:02.0460 2200        idsvc          (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:36:02.0500 2200        idsvc - ok
21:36:02.0550 2200        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
21:36:02.0560 2200        iirsp - ok
21:36:02.0670 2200        IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
21:36:02.0740 2200        IKEEXT - ok
21:36:02.0970 2200        IntcAzAudAddService (254faae42afc641c0be628de123ea9de) C:\Windows\system32\drivers\RTKVHD64.sys
21:36:03.0050 2200        IntcAzAudAddService - ok
21:36:03.0210 2200        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
21:36:03.0220 2200        intelide - ok
21:36:03.0250 2200        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
21:36:03.0290 2200        intelppm - ok
21:36:03.0310 2200        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
21:36:03.0390 2200        IPBusEnum - ok
21:36:03.0410 2200        IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:36:03.0460 2200        IpFilterDriver - ok
21:36:03.0500 2200        iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
21:36:03.0550 2200        iphlpsvc - ok
21:36:03.0570 2200        IPMIDRV        (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
21:36:03.0590 2200        IPMIDRV - ok
21:36:03.0620 2200        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
21:36:03.0670 2200        IPNAT - ok
21:36:03.0700 2200        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
21:36:03.0730 2200        IRENUM - ok
21:36:03.0760 2200        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
21:36:03.0780 2200        isapnp - ok
21:36:03.0810 2200        iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
21:36:03.0830 2200        iScsiPrt - ok
21:36:03.0860 2200        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
21:36:03.0870 2200        kbdclass - ok
21:36:03.0890 2200        kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
21:36:03.0930 2200        kbdhid - ok
21:36:03.0960 2200        KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:36:03.0980 2200        KeyIso - ok
21:36:03.0990 2200        KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
21:36:04.0010 2200        KSecDD - ok
21:36:04.0020 2200        KSecPkg        (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
21:36:04.0030 2200        KSecPkg - ok
21:36:04.0040 2200        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
21:36:04.0090 2200        ksthunk - ok
21:36:04.0130 2200        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
21:36:04.0200 2200        KtmRm - ok
21:36:04.0260 2200        LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
21:36:04.0330 2200        LanmanServer - ok
21:36:04.0380 2200        LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
21:36:04.0440 2200        LanmanWorkstation - ok
21:36:04.0500 2200        LGBusEnum      (fa529fb35694c24bf98a9ef67c1cd9d0) C:\Windows\system32\drivers\LGBusEnum.sys
21:36:04.0510 2200        LGBusEnum - ok
21:36:04.0540 2200        LGVirHid        (94b29ce153765e768f004fb3440be2b0) C:\Windows\system32\drivers\LGVirHid.sys
21:36:04.0550 2200        LGVirHid - ok
21:36:04.0620 2200        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
21:36:04.0680 2200        lltdio - ok
21:36:04.0720 2200        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
21:36:04.0790 2200        lltdsvc - ok
21:36:04.0820 2200        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
21:36:04.0860 2200        lmhosts - ok
21:36:04.0900 2200        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
21:36:04.0920 2200        LSI_FC - ok
21:36:04.0950 2200        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
21:36:04.0970 2200        LSI_SAS - ok
21:36:04.0980 2200        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
21:36:05.0000 2200        LSI_SAS2 - ok
21:36:05.0010 2200        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
21:36:05.0030 2200        LSI_SCSI - ok
21:36:05.0060 2200        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
21:36:05.0090 2200        luafv - ok
21:36:05.0120 2200        MBAMProtector  (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys
21:36:05.0120 2200        MBAMProtector - ok
21:36:05.0210 2200        MBAMService    (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
21:36:05.0230 2200        MBAMService - ok
21:36:05.0250 2200        MBfilt          (8ff2d95cba49b405c5de27039ff0bf35) C:\Windows\system32\drivers\MBfilt64.sys
21:36:05.0260 2200        MBfilt - ok
21:36:05.0300 2200        Mcx2Svc        (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
21:36:05.0340 2200        Mcx2Svc - ok
21:36:05.0370 2200        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
21:36:05.0380 2200        megasas - ok
21:36:05.0430 2200        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
21:36:05.0450 2200        MegaSR - ok
21:36:05.0480 2200        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
21:36:05.0540 2200        MMCSS - ok
21:36:05.0560 2200        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
21:36:05.0600 2200        Modem - ok
21:36:05.0630 2200        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
21:36:05.0650 2200        monitor - ok
21:36:05.0680 2200        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
21:36:05.0690 2200        mouclass - ok
21:36:05.0700 2200        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
21:36:05.0730 2200        mouhid - ok
21:36:05.0760 2200        mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
21:36:05.0770 2200        mountmgr - ok
21:36:05.0790 2200        mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
21:36:05.0810 2200        mpio - ok
21:36:05.0830 2200        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
21:36:05.0890 2200        mpsdrv - ok
21:36:05.0960 2200        MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
21:36:06.0010 2200        MpsSvc - ok
21:36:06.0040 2200        MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
21:36:06.0080 2200        MRxDAV - ok
21:36:06.0120 2200        mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
21:36:06.0160 2200        mrxsmb - ok
21:36:06.0190 2200        mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:36:06.0230 2200        mrxsmb10 - ok
21:36:06.0250 2200        mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:36:06.0300 2200        mrxsmb20 - ok
21:36:06.0320 2200        msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
21:36:06.0340 2200        msahci - ok
21:36:06.0360 2200        msdsm          (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
21:36:06.0380 2200        msdsm - ok
21:36:06.0420 2200        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
21:36:06.0460 2200        MSDTC - ok
21:36:06.0490 2200        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
21:36:06.0520 2200        Msfs - ok
21:36:06.0550 2200        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
21:36:06.0580 2200        mshidkmdf - ok
21:36:06.0620 2200        MSICDSetup - ok
21:36:06.0630 2200        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
21:36:06.0640 2200        msisadrv - ok
21:36:06.0680 2200        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
21:36:06.0760 2200        MSiSCSI - ok
21:36:06.0760 2200        msiserver - ok
21:36:06.0810 2200        MSI_MSIBIOS_010507 - ok
21:36:06.0830 2200        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
21:36:06.0880 2200        MSKSSRV - ok
21:36:06.0890 2200        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
21:36:06.0940 2200        MSPCLOCK - ok
21:36:06.0950 2200        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
21:36:07.0000 2200        MSPQM - ok
21:36:07.0030 2200        MsRPC          (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
21:36:07.0050 2200        MsRPC - ok
21:36:07.0060 2200        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
21:36:07.0060 2200        mssmbios - ok
21:36:07.0080 2200        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
21:36:07.0120 2200        MSTEE - ok
21:36:07.0140 2200        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
21:36:07.0170 2200        MTConfig - ok
21:36:07.0190 2200        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
21:36:07.0200 2200        Mup - ok
21:36:07.0250 2200        napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
21:36:07.0310 2200        napagent - ok
21:36:07.0360 2200        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
21:36:07.0410 2200        NativeWifiP - ok
21:36:07.0490 2200        NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
21:36:07.0520 2200        NDIS - ok
21:36:07.0540 2200        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
21:36:07.0590 2200        NdisCap - ok
21:36:07.0620 2200        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
21:36:07.0680 2200        NdisTapi - ok
21:36:07.0710 2200        Ndisuio        (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
21:36:07.0750 2200        Ndisuio - ok
21:36:07.0780 2200        NdisWan        (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
21:36:07.0840 2200        NdisWan - ok
21:36:07.0850 2200        NDProxy        (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
21:36:07.0900 2200        NDProxy - ok
21:36:07.0920 2200        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
21:36:07.0960 2200        NetBIOS - ok
21:36:07.0990 2200        NetBT          (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
21:36:08.0040 2200        NetBT - ok
21:36:08.0070 2200        Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:36:08.0090 2200        Netlogon - ok
21:36:08.0140 2200        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
21:36:08.0210 2200        Netman - ok
21:36:08.0250 2200        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
21:36:08.0300 2200        netprofm - ok
21:36:08.0410 2200        NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:36:08.0420 2200        NetTcpPortSharing - ok
21:36:08.0470 2200        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
21:36:08.0490 2200        nfrd960 - ok
21:36:08.0520 2200        NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
21:36:08.0580 2200        NlaSvc - ok
21:36:08.0600 2200        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
21:36:08.0660 2200        Npfs - ok
21:36:08.0700 2200        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
21:36:08.0740 2200        nsi - ok
21:36:08.0770 2200        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
21:36:08.0800 2200        nsiproxy - ok
21:36:08.0930 2200        Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
21:36:08.0980 2200        Ntfs - ok
21:36:09.0030 2200        NTIOLib_1_0_4 - ok
21:36:09.0070 2200        NTIOLib_1_0_C - ok
21:36:09.0210 2200        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
21:36:09.0270 2200        Null - ok
21:36:09.0320 2200        NVENETFD        (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys
21:36:09.0360 2200        NVENETFD - ok
21:36:09.0410 2200        NVHDA          (8d4aac74b571fc356560e5b308955e93) C:\Windows\system32\drivers\nvhda64v.sys
21:36:09.0430 2200        NVHDA - ok
21:36:09.0940 2200        nvlddmkm        (9c1996dd3c0469bc8933321f15709f5a) C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:36:10.0290 2200        nvlddmkm - ok
21:36:10.0450 2200        nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
21:36:10.0470 2200        nvraid - ok
21:36:10.0510 2200        nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
21:36:10.0530 2200        nvstor - ok
21:36:10.0620 2200        nvsvc          (34e5498528bb3d5a951f889f8756ad26) C:\Windows\system32\nvvsvc.exe
21:36:10.0650 2200        nvsvc - ok
21:36:10.0830 2200        nvUpdatusService (cd0bfaa6872cfe38c908d313ae17c350) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
21:36:10.0860 2200        nvUpdatusService - ok
21:36:11.0020 2200        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
21:36:11.0050 2200        nv_agp - ok
21:36:11.0060 2200        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
21:36:11.0090 2200        ohci1394 - ok
21:36:11.0170 2200        ose            (7a56cf3e3f12e8af599963b16f50fb6a) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:36:11.0180 2200        ose - ok
21:36:11.0260 2200        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
21:36:11.0320 2200        p2pimsvc - ok
21:36:11.0370 2200        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
21:36:11.0410 2200        p2psvc - ok
21:36:11.0450 2200        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
21:36:11.0480 2200        Parport - ok
21:36:11.0510 2200        partmgr        (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
21:36:11.0530 2200        partmgr - ok
21:36:11.0540 2200        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
21:36:11.0580 2200        PcaSvc - ok
21:36:11.0610 2200        pci            (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
21:36:11.0630 2200        pci - ok
21:36:11.0630 2200        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
21:36:11.0640 2200        pciide - ok
21:36:11.0870 2200        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
21:36:11.0890 2200        pcmcia - ok
21:36:11.0900 2200        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
21:36:11.0920 2200        pcw - ok
21:36:11.0960 2200        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
21:36:12.0030 2200        PEAUTH - ok
21:36:12.0110 2200        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
21:36:12.0140 2200        PerfHost - ok
21:36:12.0260 2200        Ph6xIB64        (e4f04c21885070e502e1ad7178d58335) C:\Windows\system32\DRIVERS\Ph6xIB64.sys
21:36:12.0350 2200        Ph6xIB64 - ok
21:36:12.0520 2200        pla            (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
21:36:12.0610 2200        pla - ok
21:36:12.0690 2200        PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
21:36:12.0740 2200        PlugPlay - ok
21:36:12.0750 2200        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
21:36:12.0780 2200        PNRPAutoReg - ok
21:36:12.0810 2200        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
21:36:12.0830 2200        PNRPsvc - ok
21:36:12.0880 2200        PolicyAgent    (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
21:36:12.0920 2200        PolicyAgent - ok
21:36:12.0960 2200        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
21:36:13.0010 2200        Power - ok
21:36:13.0080 2200        PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
21:36:13.0150 2200        PptpMiniport - ok
21:36:13.0180 2200        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
21:36:13.0210 2200        Processor - ok
21:36:13.0250 2200        ProfSvc        (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
21:36:13.0310 2200        ProfSvc - ok
21:36:13.0330 2200        ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:36:13.0340 2200        ProtectedStorage - ok
21:36:13.0390 2200        Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
21:36:13.0420 2200        Psched - ok
21:36:13.0510 2200        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
21:36:13.0570 2200        ql2300 - ok
21:36:13.0720 2200        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
21:36:13.0740 2200        ql40xx - ok
21:36:13.0860 2200        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
21:36:13.0890 2200        QWAVE - ok
21:36:13.0910 2200        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
21:36:13.0940 2200        QWAVEdrv - ok
21:36:13.0960 2200        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
21:36:14.0010 2200        RasAcd - ok
21:36:14.0070 2200        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
21:36:14.0130 2200        RasAgileVpn - ok
21:36:14.0150 2200        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
21:36:14.0210 2200        RasAuto - ok
21:36:14.0250 2200        Rasl2tp        (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
21:36:14.0310 2200        Rasl2tp - ok
21:36:14.0360 2200        RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
21:36:14.0420 2200        RasMan - ok
21:36:14.0440 2200        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
21:36:14.0490 2200        RasPppoe - ok
21:36:14.0520 2200        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
21:36:14.0570 2200        RasSstp - ok
21:36:14.0610 2200        rdbss          (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
21:36:14.0660 2200        rdbss - ok
21:36:14.0670 2200        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
21:36:14.0700 2200        rdpbus - ok
21:36:14.0720 2200        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
21:36:14.0770 2200        RDPCDD - ok
21:36:14.0810 2200        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
21:36:14.0860 2200        RDPENCDD - ok
21:36:14.0880 2200        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
21:36:14.0910 2200        RDPREFMP - ok
21:36:14.0950 2200        RDPWD          (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys
21:36:15.0000 2200        RDPWD - ok
21:36:15.0020 2200        rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
21:36:15.0040 2200        rdyboost - ok
21:36:15.0080 2200        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
21:36:15.0140 2200        RemoteAccess - ok
21:36:15.0170 2200        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
21:36:15.0240 2200        RemoteRegistry - ok
21:36:15.0260 2200        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
21:36:15.0310 2200        RpcEptMapper - ok
21:36:15.0340 2200        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
21:36:15.0370 2200        RpcLocator - ok
21:36:15.0410 2200        RpcSs          (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
21:36:15.0440 2200        RpcSs - ok
21:36:15.0470 2200        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
21:36:15.0530 2200        rspndr - ok
21:36:15.0620 2200        RTCore64        (2e887e52e45bba3c47ccd0e75fc5266f) C:\Program Files (x86)\MSI Afterburner\RTCore64.sys
21:36:15.0640 2200        RTCore64 - ok
21:36:15.0690 2200        RTL8167        (ee082e06a82ff630351d1e0ebbd3d8d0) C:\Windows\system32\DRIVERS\Rt64win7.sys
21:36:15.0720 2200        RTL8167 - ok
21:36:15.0740 2200        SamSs          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:36:15.0750 2200        SamSs - ok
21:36:15.0770 2200        sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
21:36:15.0780 2200        sbp2port - ok
21:36:15.0820 2200        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
21:36:15.0860 2200        SCardSvr - ok
21:36:15.0900 2200        scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
21:36:15.0950 2200        scfilter - ok
21:36:16.0030 2200        Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
21:36:16.0090 2200        Schedule - ok
21:36:16.0120 2200        SCPolicySvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
21:36:16.0150 2200        SCPolicySvc - ok
21:36:16.0170 2200        SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
21:36:16.0220 2200        SDRSVC - ok
21:36:16.0300 2200        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
21:36:16.0330 2200        secdrv - ok
21:36:16.0340 2200        seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
21:36:16.0380 2200        seclogon - ok
21:36:16.0410 2200        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
21:36:16.0460 2200        SENS - ok
21:36:16.0510 2200        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
21:36:16.0550 2200        SensrSvc - ok
21:36:16.0560 2200        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
21:36:16.0590 2200        Serenum - ok
21:36:16.0640 2200        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
21:36:16.0660 2200        Serial - ok
21:36:16.0700 2200        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
21:36:16.0730 2200        sermouse - ok
21:36:16.0770 2200        SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
21:36:16.0840 2200        SessionEnv - ok
21:36:16.0860 2200        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
21:36:16.0880 2200        sffdisk - ok
21:36:16.0920 2200        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
21:36:16.0980 2200        sffp_mmc - ok
21:36:17.0070 2200        sffp_sd        (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
21:36:17.0130 2200        sffp_sd - ok
21:36:17.0150 2200        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
21:36:17.0180 2200        sfloppy - ok
21:36:17.0230 2200        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
21:36:17.0290 2200        SharedAccess - ok
21:36:17.0340 2200        ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
21:36:17.0410 2200        ShellHWDetection - ok
21:36:17.0430 2200        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
21:36:17.0450 2200        SiSRaid2 - ok
21:36:17.0470 2200        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
21:36:17.0480 2200        SiSRaid4 - ok
21:36:17.0530 2200        skfiltv        (01acb9228c303de1fff82b807d28b2b0) C:\Windows\system32\drivers\skfiltv.sys
21:36:17.0580 2200        skfiltv - ok
21:36:17.0670 2200        SkypeUpdate    (6128e98eaaed364ed1a32708d2fd22cb) C:\Program Files (x86)\Skype\Updater\Updater.exe
21:36:17.0690 2200        SkypeUpdate - ok
21:36:17.0730 2200        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
21:36:17.0780 2200        Smb - ok
21:36:17.0820 2200        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
21:36:17.0850 2200        SNMPTRAP - ok
21:36:17.0950 2200        speedfan        (12583af6cbe0050651eaf2723b3ad7b3) C:\Windows\syswow64\speedfan.sys
21:36:17.0970 2200        speedfan - ok
21:36:17.0980 2200        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
21:36:17.0990 2200        spldr - ok
21:36:18.0020 2200        Spooler        (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
21:36:18.0070 2200        Spooler - ok
21:36:18.0250 2200        sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
21:36:18.0340 2200        sppsvc - ok
21:36:18.0440 2200        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
21:36:18.0490 2200        sppuinotify - ok
21:36:18.0570 2200        srv            (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
21:36:18.0610 2200        srv - ok
21:36:18.0650 2200        srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
21:36:18.0690 2200        srv2 - ok
21:36:18.0730 2200        srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
21:36:18.0760 2200        srvnet - ok
21:36:18.0820 2200        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
21:36:18.0880 2200        SSDPSRV - ok
21:36:18.0910 2200        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
21:36:18.0960 2200        SstpSvc - ok
21:36:19.0010 2200        Steam Client Service - ok
21:36:19.0090 2200        Stereo Service  (8544a200c40447e465f06e58687428bb) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:36:19.0110 2200        Stereo Service - ok
21:36:19.0140 2200        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
21:36:19.0150 2200        stexstor - ok
21:36:19.0220 2200        stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
21:36:19.0270 2200        stisvc - ok
21:36:19.0290 2200        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
21:36:19.0310 2200        swenum - ok
21:36:19.0350 2200        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
21:36:19.0420 2200        swprv - ok
21:36:19.0520 2200        SysMain        (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
21:36:19.0580 2200        SysMain - ok
21:36:19.0680 2200        TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
21:36:19.0720 2200        TabletInputService - ok
21:36:19.0750 2200        TapiSrv        (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
21:36:19.0830 2200        TapiSrv - ok
21:36:19.0860 2200        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
21:36:19.0910 2200        TBS - ok
21:36:20.0050 2200        Tcpip          (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
21:36:20.0110 2200        Tcpip - ok
21:36:20.0280 2200        TCPIP6          (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
21:36:20.0320 2200        TCPIP6 - ok
21:36:20.0390 2200        tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
21:36:20.0440 2200        tcpipreg - ok
21:36:20.0450 2200        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
21:36:20.0500 2200        TDPIPE - ok
21:36:20.0520 2200        TDTCP          (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
21:36:20.0550 2200        TDTCP - ok
21:36:20.0570 2200        tdx            (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
21:36:20.0620 2200        tdx - ok
21:36:20.0870 2200        TeamViewer7    (33966a658ff37e0c65d46e59f37e2380) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
21:36:20.0920 2200        TeamViewer7 - ok
21:36:21.0070 2200        TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
21:36:21.0080 2200        TermDD - ok
21:36:21.0150 2200        TermService    (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
21:36:21.0220 2200        TermService - ok
21:36:21.0240 2200        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
21:36:21.0270 2200        Themes - ok
21:36:21.0310 2200        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
21:36:21.0340 2200        THREADORDER - ok
21:36:21.0360 2200        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
21:36:21.0400 2200        TrkWks - ok
21:36:21.0470 2200        TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
21:36:21.0520 2200        TrustedInstaller - ok
21:36:21.0540 2200        tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
21:36:21.0560 2200        tssecsrv - ok
21:36:21.0580 2200        TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
21:36:21.0610 2200        TsUsbFlt - ok
21:36:21.0660 2200        TsUsbGD        (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
21:36:21.0680 2200        TsUsbGD - ok
21:36:21.0720 2200        tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
21:36:21.0790 2200        tunnel - ok
21:36:21.0810 2200        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
21:36:21.0820 2200        uagp35 - ok
21:36:21.0840 2200        udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
21:36:21.0910 2200        udfs - ok
21:36:21.0940 2200        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
21:36:21.0970 2200        UI0Detect - ok
21:36:22.0000 2200        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
21:36:22.0010 2200        uliagpkx - ok
21:36:22.0030 2200        umbus          (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
21:36:22.0060 2200        umbus - ok
21:36:22.0090 2200        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
21:36:22.0120 2200        UmPass - ok
21:36:22.0180 2200        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
21:36:22.0250 2200        upnphost - ok
21:36:22.0290 2200        usbaudio        (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
21:36:22.0320 2200        usbaudio - ok
21:36:22.0380 2200        usbccgp        (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
21:36:22.0430 2200        usbccgp - ok
21:36:22.0440 2200        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
21:36:22.0470 2200        usbcir - ok
21:36:22.0510 2200        usbehci        (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
21:36:22.0540 2200        usbehci - ok
21:36:22.0590 2200        usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
21:36:22.0640 2200        usbhub - ok
21:36:22.0660 2200        usbohci        (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
21:36:22.0690 2200        usbohci - ok
21:36:22.0740 2200        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
21:36:22.0770 2200        usbprint - ok
21:36:22.0800 2200        USBSTOR        (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:36:22.0860 2200        USBSTOR - ok
21:36:22.0880 2200        usbuhci        (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
21:36:22.0910 2200        usbuhci - ok
21:36:22.0940 2200        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
21:36:22.0990 2200        UxSms - ok
21:36:23.0010 2200        VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:36:23.0030 2200        VaultSvc - ok
21:36:23.0060 2200        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
21:36:23.0070 2200        vdrvroot - ok
21:36:23.0110 2200        vds            (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
21:36:23.0170 2200        vds - ok
21:36:23.0190 2200        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
21:36:23.0220 2200        vga - ok
21:36:23.0240 2200        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
21:36:23.0300 2200        VgaSave - ok
21:36:23.0320 2200        vhdmp          (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
21:36:23.0340 2200        vhdmp - ok
21:36:23.0350 2200        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
21:36:23.0360 2200        viaide - ok
21:36:23.0370 2200        volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
21:36:23.0380 2200        volmgr - ok
21:36:23.0410 2200        volmgrx        (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
21:36:23.0420 2200        volmgrx - ok
21:36:23.0440 2200        volsnap        (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
21:36:23.0450 2200        volsnap - ok
21:36:23.0480 2200        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
21:36:23.0490 2200        vsmraid - ok
21:36:23.0600 2200        VSS            (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
21:36:23.0670 2200        VSS - ok
21:36:23.0830 2200        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
21:36:23.0860 2200        vwifibus - ok
21:36:23.0910 2200        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
21:36:23.0970 2200        W32Time - ok
21:36:23.0990 2200        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
21:36:24.0020 2200        WacomPen - ok
21:36:24.0040 2200        WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
21:36:24.0100 2200        WANARP - ok
21:36:24.0120 2200        Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
21:36:24.0150 2200        Wanarpv6 - ok
21:36:24.0240 2200        WatAdminSvc    (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
21:36:24.0290 2200        WatAdminSvc - ok
21:36:24.0390 2200        wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
21:36:24.0470 2200        wbengine - ok
21:36:24.0570 2200        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
21:36:24.0620 2200        WbioSrvc - ok
21:36:24.0650 2200        wcncsvc        (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
21:36:24.0700 2200        wcncsvc - ok
21:36:24.0730 2200        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
21:36:24.0770 2200        WcsPlugInService - ok
21:36:24.0840 2200        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
21:36:24.0850 2200        Wd - ok
21:36:24.0900 2200        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
21:36:24.0920 2200        Wdf01000 - ok
21:36:24.0940 2200        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
21:36:25.0020 2200        WdiServiceHost - ok
21:36:25.0020 2200        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
21:36:25.0030 2200        WdiSystemHost - ok
21:36:25.0080 2200        WebClient      (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
21:36:25.0120 2200        WebClient - ok
21:36:25.0150 2200        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
21:36:25.0200 2200        Wecsvc - ok
21:36:25.0220 2200        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
21:36:25.0270 2200        wercplsupport - ok
21:36:25.0300 2200        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
21:36:25.0340 2200        WerSvc - ok
21:36:25.0400 2200        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
21:36:25.0450 2200        WfpLwf - ok
21:36:25.0470 2200        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
21:36:25.0480 2200        WIMMount - ok
21:36:25.0530 2200        WinDefend - ok
21:36:25.0530 2200        WinHttpAutoProxySvc - ok
21:36:25.0620 2200        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
21:36:25.0670 2200        Winmgmt - ok
21:36:25.0790 2200        WinRM          (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
21:36:25.0870 2200        WinRM - ok
21:36:26.0040 2200        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
21:36:26.0110 2200        Wlansvc - ok
21:36:26.0190 2200        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
21:36:26.0220 2200        WmiAcpi - ok
21:36:26.0300 2200        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
21:36:26.0340 2200        wmiApSrv - ok
21:36:26.0410 2200        WMPNetworkSvc - ok
21:36:26.0450 2200        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
21:36:26.0470 2200        WPCSvc - ok
21:36:26.0490 2200        WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
21:36:26.0560 2200        WPDBusEnum - ok
21:36:26.0590 2200        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
21:36:26.0650 2200        ws2ifsl - ok
21:36:26.0680 2200        wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
21:36:26.0710 2200        wscsvc - ok
21:36:26.0710 2200        WSearch - ok
21:36:26.0850 2200        wuauserv        (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
21:36:26.0920 2200        wuauserv - ok
21:36:27.0070 2200        WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
21:36:27.0130 2200        WudfPf - ok
21:36:27.0160 2200        WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
21:36:27.0230 2200        WUDFRd - ok
21:36:27.0270 2200        wudfsvc        (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
21:36:27.0320 2200        wudfsvc - ok
21:36:27.0350 2200        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
21:36:27.0390 2200        WwanSvc - ok
21:36:27.0460 2200        ZSMC301b        (99217bd11bee7f21e873f6e39b93aafd) C:\Windows\system32\Drivers\usbVM31b.sys
21:36:27.0500 2200        ZSMC301b - ok
21:36:27.0540 2200        MBR (0x1B8)    (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
21:36:27.0870 2200        \Device\Harddisk0\DR0 - ok
21:36:27.0880 2200        Boot (0x1200)  (c4e2d48dff16468ae0f916e103dc6d70) \Device\Harddisk0\DR0\Partition0
21:36:27.0880 2200        \Device\Harddisk0\DR0\Partition0 - ok
21:36:27.0890 2200        Boot (0x1200)  (7ec47e7439e93fa00d8e4bb2f60a5199) \Device\Harddisk0\DR0\Partition1
21:36:27.0890 2200        \Device\Harddisk0\DR0\Partition1 - ok
21:36:27.0890 2200        ============================================================
21:36:27.0890 2200        Scan finished
21:36:27.0890 2200        ============================================================
21:36:27.0900 2924        Detected object count: 0
21:36:27.0900 2924        Actual detected object count: 0

cosinus 26.06.2012 08:37
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Xyrak 26.06.2012 15:17
Code:
ComboFix 12-06-26.01 - Stephan 26.06.2012  16:00:44.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8162.6291 [GMT 2:00]
ausgeführt von:: c:\users\Stephan\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\TrayMin315.exe.lnk
c:\users\Stephan\AppData\Local\assembly\tmp
c:\users\Stephan\AppData\Local\Temp\{3C8A4649-A37C-4942-A685-AA75EA29BB73}\fpb.tmp
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-05-26 bis 2012-06-26  ))))))))))))))))))))))))))))))
.
.
2012-06-26 14:05 . 2012-06-26 14:05        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp
2012-06-26 13:56 . 2012-06-26 13:56        --------        d-----w-        c:\users\TEMP
2012-06-25 17:35 . 2012-06-25 17:35        --------        d-----w-        C:\_OTL
2012-06-21 16:52 . 2012-06-21 16:52        --------        d-----w-        c:\program files (x86)\ESET
2012-06-21 13:58 . 2012-06-02 22:19        2428952        ----a-w-        c:\windows\system32\wuaueng.dll
2012-06-21 13:58 . 2012-06-02 22:19        57880        ----a-w-        c:\windows\system32\wuauclt.exe
2012-06-21 13:58 . 2012-06-02 22:19        44056        ----a-w-        c:\windows\system32\wups2.dll
2012-06-21 13:58 . 2012-06-02 22:15        2622464        ----a-w-        c:\windows\system32\wucltux.dll
2012-06-21 13:58 . 2012-06-02 22:19        38424        ----a-w-        c:\windows\system32\wups.dll
2012-06-21 13:58 . 2012-06-02 22:19        701976        ----a-w-        c:\windows\system32\wuapi.dll
2012-06-21 13:58 . 2012-06-02 22:15        99840        ----a-w-        c:\windows\system32\wudriver.dll
2012-06-21 13:58 . 2012-06-02 13:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll
2012-06-21 13:58 . 2012-06-02 13:15        36864        ----a-w-        c:\windows\system32\wuapp.exe
2012-06-14 17:56 . 2012-04-26 05:41        77312        ----a-w-        c:\windows\system32\rdpwsx.dll
2012-06-14 17:56 . 2012-04-26 05:41        149504        ----a-w-        c:\windows\system32\rdpcorekmts.dll
2012-06-14 17:56 . 2012-04-26 05:34        9216        ----a-w-        c:\windows\system32\rdrmemptylst.exe
2012-06-14 17:56 . 2012-05-04 11:06        5559664        ----a-w-        c:\windows\system32\ntoskrnl.exe
2012-06-14 17:56 . 2012-05-04 10:03        3968368        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2012-06-14 17:56 . 2012-05-04 10:03        3913072        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2012-06-14 17:56 . 2012-05-15 01:32        3146752        ----a-w-        c:\windows\system32\win32k.sys
2012-06-14 17:56 . 2012-04-28 03:55        210944        ----a-w-        c:\windows\system32\drivers\rdpwd.sys
2012-06-13 13:56 . 2012-06-13 13:56        --------        d-----w-        c:\program files (x86)\7-Zip
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-16 11:36 . 2012-04-04 06:22        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2012-06-16 11:36 . 2011-08-30 20:18        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-08 18:26 . 2011-10-16 06:24        98848        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2012-05-08 18:26 . 2011-10-16 06:24        132832        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2012-05-04 19:51 . 2012-04-16 12:51        8769696        ----a-w-        c:\windows\SysWow64\FlashPlayerInstaller.exe
2012-04-04 13:56 . 2011-11-06 08:53        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-03-30 11:35 . 2012-05-09 23:59        1918320        ----a-w-        c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"VM_STI"="c:\windows\VM_STI.exe" [2004-06-09 40960]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-05-08 348624]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-16 257224]
R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [x]
R3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\program files (x86)\MSI\Live Update 5\msibios64_100507.sys [x]
R3 MSICDSetup;MSICDSetup;E:\CDriver64.sys [x]
R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;E:\NTIOLib_X64.sys [x]
R3 Ph6xIB64;NXP 716x PCIe TV Card;c:\windows\system32\DRIVERS\Ph6xIB64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-02-10 2348352]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-02-09 382272]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys [2010-05-27 14648]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 skfiltv;skfiltv;c:\windows\system32\drivers\skfiltv.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - RTCORE64
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-06-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 11:36]
.
2012-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2464019588-1876532964-1267720530-1001Core.job
- c:\users\Stephan\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-30 19:03]
.
2012-06-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2464019588-1876532964-1267720530-1001UA.job
- c:\users\Stephan\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-30 19:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2011-09-29 110360]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-09-09 7466600]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
TCP: DhcpNameServer = 192.168.2.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-ApnUpdater - c:\program files (x86)\Ask.com\Updater\Updater.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\MSI Afterburner\MSIAfterburner.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\TeamViewer\Version7\TeamViewer.exe
c:\program files (x86)\TeamViewer\Version7\tv_w32.exe
c:\program files (x86)\Windows Media Player\wmplayer.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-06-26  16:10:54 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-06-26 14:10
.
Vor Suchlauf: 15 Verzeichnis(se), 90.144.440.320 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 95.449.890.816 Bytes frei
.
- - End Of File - - CD567E049BF78B93E893429E6ACBA8F6

cosinus 26.06.2012 15:42
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Xyrak 26.06.2012 17:09
Erledigt Gmer: Log ist leer..keinerlei Funde

Erledigt OSAM:
Code:
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 17:56:25 on 26.06.2012

OS: Windows 7 Home Premium Edition Service Pack 1 (Build 7601), 64-bit
Default Browser: Microsoft Corporation Internet Explorer 9.00.8112.16421

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskUserS-1-5-21-2464019588-1876532964-1267720530-1001Core.job" - "Google Inc." - C:\Users\Stephan\AppData\Local\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskUserS-1-5-21-2464019588-1876532964-1267720530-1001UA.job" - "Google Inc." - C:\Users\Stephan\AppData\Local\Google\Update\GoogleUpdate.exe
"Adobe Flash Player Updater.job" - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AMD Function Driver for HD Audio Service" (AtiHDAudioService) - "Advanced Micro Devices" - C:\Windows\System32\drivers\AtihdW76.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"avkmgr" (avkmgr) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avkmgr.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"cpuz135" (cpuz135) - "CPUID" - C:\Windows\system32\drivers\cpuz135_x64.sys
"MBAMProtector" (MBAMProtector) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbam.sys
"MSICDSetup" (MSICDSetup) - ? - E:\CDriver64.sys  (File not found)
"MSI_MSIBIOS_010507" (MSI_MSIBIOS_010507) - ? - C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys  (File not found)
"NTIOLib_1_0_4" (NTIOLib_1_0_4) - ? - C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys  (File not found)
"NTIOLib_1_0_C" (NTIOLib_1_0_C) - ? - E:\NTIOLib_X64.sys  (File not found)
"speedfan" (speedfan) - "Almico Software" - C:\Windows\SysWOW64\speedfan.sys

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Program Files (x86)\7-Zip\7-zip.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files (x86)\Microsoft Office\OFFICE11\msohev.dll

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
ITBar7Height "ITBar7Height" - ? -  (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -  (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{7530BFB8-7293-4D34-9923-61A11451AFC5} "OnlineScanner Control" - "ESET" - C:\PROGRA~2\ESET\ESETON~1\ONLINE~1.OCX / hxxp://download.eset.com/special/eos/OnlineScanner.cab
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"avgnt" - "Avira Operations GmbH & Co. KG" - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"Malwarebytes' Anti-Malware" - "Malwarebytes Corporation" - "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@%ProgramFiles%\Windows Defender\MsMpRes.dll,-103" (WinDefend) - ? - C:\Program Files (x86)\Windows Defender\mpsvc.dll  (File not found)
"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
"Adobe Flash Player Update Service" (AdobeFlashPlayerUpdateSvc) - "Adobe Systems Incorporated" - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - ? - C:\Windows\system32\drivers\aspnet_state.sys  (File not found)
"Avira Echtzeit Scanner" (AntiVirService) - "Avira Operations GmbH & Co. KG" - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
"Avira Planer" (AntiVirSchedulerService) - "Avira Operations GmbH & Co. KG" - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
"MBAMService" (MBAMService) - "Malwarebytes Corporation" - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe
"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service) - "NVIDIA Corporation" - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
"NVIDIA Update Service Daemon" (nvUpdatusService) - "NVIDIA Corporation" - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"Skype Updater" (SkypeUpdate) - "Skype Technologies" - C:\Program Files (x86)\Skype\Updater\Updater.exe
"Steam Client Service" (Steam Client Service) - "Valve Corporation" - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
"TeamViewer 7" (TeamViewer7) - "TeamViewer GmbH" - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
Und die aswMBR nu noch:
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-06-26 17:58:24
-----------------------------
17:58:24.918    OS Version: Windows x64 6.1.7601 Service Pack 1
17:58:24.918    Number of processors: 4 586 0x2A07
17:58:24.918    ComputerName: STEPHAN-PC  UserName: Stephan
17:58:25.791    Initialize success
18:00:16.224    AVAST engine defs: 12062600
18:00:27.472    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1
18:00:27.472    Disk 0 Vendor: WDC_WD2500AAJS-00B4A0 01.03A01 Size: 238475MB BusType: 3
18:00:27.487    Disk 0 MBR read successfully
18:00:27.503    Disk 0 MBR scan
18:00:27.503    Disk 0 Windows 7 default MBR code
18:00:27.519    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS      223474 MB offset 2048
18:00:27.519    Disk 0 Partition - 00    0F Extended LBA            14997 MB offset 457676800
18:00:27.550    Disk 0 Partition 2 00    0B        FAT32 MSDOS5.0    14997 MB offset 457676863
18:00:27.597    Disk 0 scanning C:\Windows\system32\drivers
18:00:35.241    Service scanning
18:00:43.743    Service MSICDSetup E:\CDriver64.sys **LOCKED** 21
18:00:44.960    Service NTIOLib_1_0_C E:\NTIOLib_X64.sys **LOCKED** 21
18:00:53.150    Modules scanning
18:00:53.649    Disk 0 trace - called modules:
18:00:53.664    ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys ataport.SYS pciide.sys PCIIDEX.SYS hal.dll atapi.sys
18:00:53.664    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007d9b060]
18:00:53.664    3 CLASSPNP.SYS[fffff880019c243f] -> nt!IofCallDriver -> [0xfffffa8007aaf580]
18:00:53.680    5 ACPI.sys[fffff88000d4e7a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-1[0xfffffa8007ab5060]
18:00:54.725    AVAST engine scan C:\Windows
18:00:56.987    AVAST engine scan C:\Windows\system32
18:02:38.621    AVAST engine scan C:\Windows\system32\drivers
18:02:47.233    AVAST engine scan C:\Users\Stephan
18:06:23.277    AVAST engine scan C:\ProgramData
18:06:46.007    Scan finished successfully
18:07:35.677    Disk 0 MBR has been saved successfully to "C:\Users\Stephan\Desktop\MBR.dat"
18:07:35.693    The log file has been saved successfully to "C:\Users\Stephan\Desktop\aswMBR.txt"

cosinus 26.06.2012 18:14
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Xyrak 26.06.2012 21:12
Code:
Malwarebytes Anti-Malware (Test) 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.06.26.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Stephan :: STEPHAN-PC [Administrator]

Schutz: Deaktiviert

26.06.2012 20:28:39
mbam-log-2012-06-26 (20-28-39).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 344126
Laufzeit: 53 Minute(n), 38 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
und Superantispyware:
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/26/2012 at 10:01 PM

Application Version : 5.1.1002

Core Rules Database Version : 8800
Trace Rules Database Version: 6612

Scan type      : Complete Scan
Total Scan Time : 01:28:49

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 600
Memory threats detected  : 0
Registry items scanned    : 67184
Registry threats detected : 0
File items scanned        : 111082
File threats detected    : 169

Adware.Tracking Cookie
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\3VY5RILT.txt [ /revsci.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\NEGDBSW6.txt [ /adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\9GFC287I.txt [ /fastclick.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0XELIY3J.txt [ /zanox-affiliate.de ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\EXZ5E4WR.txt [ /ad1.adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VA5EW1VQ.txt [ /smartadserver.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\ISHSO8JU.txt [ /www.zanox-affiliate.de ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\6EY513MA.txt [ /ads.creative-serving.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0TN25UIG.txt [ /kontera.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0KZMBIOZ.txt [ /ad.zanox.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\KG3OUGEK.txt [ /ad3.adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\CRGW0RGN.txt [ /atdmt.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\AGXLFDCH.txt [ /account.swtor.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\XFQ1I1Y7.txt [ /c.atdmt.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\5Q2VRX18.txt [ /tracking.quisma.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\TRE6K7KY.txt [ /adform.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\D0U1900K.txt [ /invitemedia.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\RLDQZ9VP.txt [ /legolas-media.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\3IB5K84Q.txt [ /doubleclick.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\90EAPNBZ.txt [ /mediaplex.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VZDUG585.txt [ /dyntracker.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\ZFLZ642S.txt [ /zanox.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\R684Y3AY.txt [ /track.adform.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\7F9KLRHM.txt [ /apmebf.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VUW87863.txt [ /ad.dyntracker.de ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WKC46FWW.txt [ Cookie:stephan@bs.serving-sys.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y6289KND.txt [ Cookie:stephan@sexplaycam.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\31WZC577.txt [ Cookie:stephan@revsci.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FU1OBKB2.txt [ Cookie:stephan@adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\3MKBCQCH.txt [ Cookie:stephan@fastclick.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDDXTB42.txt [ Cookie:stephan@amazon-adsystem.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JBTMWVCZ.txt [ Cookie:stephan@zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OE9IYL6Z.txt [ Cookie:stephan@......... ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0BMFG10D.txt [ Cookie:stephan@amazonservices.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z7NA1LTX.txt [ Cookie:stephan@imrworldwide.com/cgi-bin ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\EW7J3VG8.txt [ Cookie:stephan@ad1.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\236T11OV.txt [ Cookie:stephan@dc.tremormedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CX31RNXI.txt [ Cookie:stephan@.........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0UXOBMCQ.txt [ Cookie:stephan@ad.dyntracker.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0E2B1QSO.txt [ Cookie:stephan@hightraffic.hugoboss.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\C9B6YN2I.txt [ Cookie:stephan@ad.yieldmanager.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IZ7B62OG.txt [ Cookie:stephan@smartadserver.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RTNVJHGD.txt [ Cookie:stephan@www.zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QXOQ8L7I.txt [ Cookie:stephan@adtech.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ERA2XK00.txt [ Cookie:stephan@collective-media.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IJDKTGER.txt [ Cookie:stephan@......../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XT2DLV29.txt [ Cookie:stephan@ad3.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\M9YOJJFO.txt [ Cookie:stephan@ad.zanox.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\L9EGJW4Z.txt [ Cookie:stephan@serving-sys.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BCQ1MI3C.txt [ Cookie:stephan@s2.trafficmaxx.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OWL19S8H.txt [ Cookie:stephan@yadro.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WZ0BG1EI.txt [ Cookie:stephan@ww251.smartadserver.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\DUKIEIBI.txt [ Cookie:stephan@harrenmedianetwork.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\K2MAMGTX.txt [ Cookie:stephan@tradedoubler.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\N0W0AOCO.txt [ Cookie:stephan@www........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\HR8OQ7DO.txt [ Cookie:stephan@im.banner.t-online.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\522DP4W3.txt [ Cookie:stephan@rambler.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WTBICSC3.txt [ Cookie:stephan@elitepvpers.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\61US5Y9S.txt [ Cookie:stephan@....../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7J9NB8PF.txt [ Cookie:stephan@ad2.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\N7RHCXZB.txt [ Cookie:stephan@webmasterplan.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\9JASM4YK.txt [ Cookie:stephan@zedo.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7GMADI0J.txt [ Cookie:stephan@tracking.gameforge.de/track/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XU2VT2FV.txt [ Cookie:stephan@c.atdmt.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\V00MLK1R.txt [ Cookie:stephan@insightexpressai.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\8DD7AIJE.txt [ Cookie:stephan@edates.traffective-tracking.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4ZX3D57T.txt [ Cookie:stephan@...../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\G5XSPK0U.txt [ Cookie:stephan@adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JD4SAHEN.txt [ Cookie:stephan@ad4.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0JX44KHV.txt [ Cookie:stephan@www.elitepvpers.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\E40QBGSA.txt [ Cookie:stephan@eaeacom.112.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\D2J6RE08.txt [ Cookie:stephan@invitemedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\GJZ2Y7HZ.txt [ Cookie:stephan@yieldmanager.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\15R3IVVU.txt [ Cookie:stephan@adviva.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4ULEPYBA.txt [ Cookie:stephan@www.adserving.pixfuture.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BUSZWBSD.txt [ Cookie:stephan@adxpose.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BVWAVEY9.txt [ Cookie:stephan@server.cpmstar.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\UG1TXCUT.txt [ Cookie:stephan@unitymedia.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\32VJQK18.txt [ Cookie:stephan@adxpansion.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QS0PNE59.txt [ Cookie:stephan@tns-counter.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\UE8KV7YP.txt [ Cookie:stephan@traffictrack.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\F3OYRIA0.txt [ Cookie:stephan@adx.chip.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\C7V0YBA9.txt [ Cookie:stephan@www.google.de/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CGYBQIO7.txt [ Cookie:stephan@adbrite.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VLZN5YF1.txt [ Cookie:stephan@track.effiliation.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZKWHFZR2.txt [ Cookie:stephan@track.adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ILY6G7R4.txt [ Cookie:stephan@zanox.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JSZQZOVE.txt [ Cookie:stephan@apmebf.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\90A00CUC.txt [ Cookie:stephan@specificclick.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JKXX6M5W.txt [ Cookie:stephan@adserver.adtechus.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RN1BRY1W.txt [ Cookie:stephan@ads.247activemedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4VW28DGZ.txt [ Cookie:stephan@media.gan-online.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VNT64OYI.txt [ Cookie:stephan@m1.webstats.motigo.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1UOVEN6G.txt [ Cookie:stephan@de.sitestat.com/karstadt-de/karstadt/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\DO3O9BND.txt [ Cookie:stephan@guj.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\H4RD9H5J.txt [ Cookie:stephan@uk.at.atwola.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IE9E4GEA.txt [ Cookie:stephan@exoclick.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\R2A10WMH.txt [ Cookie:stephan@atwola.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\8553RVPE.txt [ Cookie:stephan@www......../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BNO66JRG.txt [ Cookie:stephan@lfstmedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\2L1KXKQW.txt [ Cookie:stephan@e-2dj6wmkyqgdpmfp.stats.esomniture.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\MP2SUGHD.txt [ Cookie:stephan@teufel-media.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\X5FUAEVT.txt [ Cookie:stephan@adformdsp.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\14E6YLX8.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1055079916/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JF8509G0.txt [ Cookie:stephan@dealtime.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7IP2PM6M.txt [ Cookie:stephan@www.google.com/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\J2FGZUXL.txt [ Cookie:stephan@h.atdmt.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FFBJ3HGZ.txt [ Cookie:stephan@track.gridlockparadise.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OWTU2R9F.txt [ Cookie:stephan@www.republicofadvertising.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\M3HZBUY1.txt [ Cookie:stephan@www.etracker.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1RY5BEB3.txt [ Cookie:stephan@......./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\EA10872B.txt [ Cookie:stephan@adlegend.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\HEI1YR9A.txt [ Cookie:stephan@tracking.mobile.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\E8LWT1F9.txt [ Cookie:stephan@media6degrees.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\5ILHTAGB.txt [ Cookie:stephan@ru4.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XE9BOS3B.txt [ Cookie:stephan@www.ardmediathek.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JKNJSSM1.txt [ Cookie:stephan@2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\KC29BINK.txt [ Cookie:stephan@tracking.mindshare.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\YX1CDTU0.txt [ Cookie:stephan@www....../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ACMINGSU.txt [ Cookie:stephan@server.adformdsp.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QSU8T9Y0.txt [ Cookie:stephan@questionmarket.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\V4TZ6FB3.txt [ Cookie:stephan@interclick.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\3NF80VCW.txt [ Cookie:stephan@a.revenuemax.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FN16D0TY.txt [ Cookie:stephan@www....../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\6CX10VZ7.txt [ Cookie:stephan@...../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RQ3SSYTS.txt [ Cookie:stephan@...../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q88EMEH8.txt [ Cookie:stephan@advertising.superweb.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QXBEOMEW.txt [ Cookie:stephan@www.usenext.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CKPRB6OM.txt [ Cookie:stephan@parship.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\B3YAZ28K.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1044648193/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\J9HQMWZ2.txt [ Cookie:stephan@microsoftwllivemkt.112.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4UU1AA1J.txt [ Cookie:stephan@ad.dyntracker.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\SL1ZKNCA.txt [ Cookie:stephan@accounts.youtube.com/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\6HYCTEMO.txt [ Cookie:stephan@ads.crakmedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\O1EORXH0.txt [ Cookie:stephan@account.swtor.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\KF7KLYUQ.txt [ Cookie:stephan@statse.webtrendslive.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\G3F91QZ6.txt [ Cookie:stephan@server.adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XV1SRSFL.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1010295416/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\2JKPUJF4.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1028954965/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1PZN26VN.txt [ Cookie:stephan@...../ ]
        C:\USERS\STEPHAN\Cookies\3VY5RILT.txt [ Cookie:stephan@revsci.net/ ]
        C:\USERS\STEPHAN\Cookies\NEGDBSW6.txt [ Cookie:stephan@adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\9GFC287I.txt [ Cookie:stephan@fastclick.net/ ]
        C:\USERS\STEPHAN\Cookies\0XELIY3J.txt [ Cookie:stephan@zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\Cookies\EXZ5E4WR.txt [ Cookie:stephan@ad1.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\VA5EW1VQ.txt [ Cookie:stephan@smartadserver.com/ ]
        C:\USERS\STEPHAN\Cookies\ISHSO8JU.txt [ Cookie:stephan@www.zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\Cookies\0TN25UIG.txt [ Cookie:stephan@kontera.com/ ]
        C:\USERS\STEPHAN\Cookies\0KZMBIOZ.txt [ Cookie:stephan@ad.zanox.com/ ]
        C:\USERS\STEPHAN\Cookies\KG3OUGEK.txt [ Cookie:stephan@ad3.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\AGXLFDCH.txt [ Cookie:stephan@account.swtor.com/ ]
        C:\USERS\STEPHAN\Cookies\XFQ1I1Y7.txt [ Cookie:stephan@c.atdmt.com/ ]
        C:\USERS\STEPHAN\Cookies\TRE6K7KY.txt [ Cookie:stephan@adform.net/ ]
        C:\USERS\STEPHAN\Cookies\D0U1900K.txt [ Cookie:stephan@invitemedia.com/ ]
        C:\USERS\STEPHAN\Cookies\VZDUG585.txt [ Cookie:stephan@dyntracker.com/ ]
        C:\USERS\STEPHAN\Cookies\ZFLZ642S.txt [ Cookie:stephan@zanox.com/ ]
        C:\USERS\STEPHAN\Cookies\R684Y3AY.txt [ Cookie:stephan@track.adform.net/ ]
        C:\USERS\STEPHAN\Cookies\7F9KLRHM.txt [ Cookie:stephan@apmebf.com/ ]
        C:\USERS\STEPHAN\Cookies\VUW87863.txt [ Cookie:stephan@ad.dyntracker.de/ ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .invitemedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .atdmt.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .atdmt.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
bei einigen cookies bin ich manuell hier eingestiegen und habe diese in punkte umgewandelt ....

cosinus 27.06.2012 12:34
Zitat:
UAC On - Limited User
Du warst kein echter Admin. Du musst SASW als Administrator ausführen über Rechtsklick.
Die Anleitung zu SASW wurde nun auch überarbeitet

Xyrak 27.06.2012 17:10
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/27/2012 at 05:47 PM

Application Version : 5.1.1002

Core Rules Database Version : 8800
Trace Rules Database Version: 6612

Scan type      : Complete Scan
Total Scan Time : 02:29:22

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 685
Memory threats detected  : 0
Registry items scanned    : 67295
Registry threats detected : 0
File items scanned        : 111624
File threats detected    : 179

Adware.Tracking Cookie
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\3VY5RILT.txt [ /revsci.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\NEGDBSW6.txt [ /adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\9GFC287I.txt [ /fastclick.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0XELIY3J.txt [ /zanox-affiliate.de ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\J5WYVEKJ.txt [ /exoclick.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\EXZ5E4WR.txt [ /ad1.adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VA5EW1VQ.txt [ /smartadserver.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\ISHSO8JU.txt [ /www.zanox-affiliate.de ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\6EY513MA.txt [ /ads.creative-serving.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0TN25UIG.txt [ /kontera.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\0KZMBIOZ.txt [ /ad.zanox.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\KG3OUGEK.txt [ /ad3.adfarm1.adition.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\CRGW0RGN.txt [ /atdmt.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\AGXLFDCH.txt [ /account.swtor.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VS5LU8AR.txt [ /sunporno.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\XFQ1I1Y7.txt [ /c.atdmt.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\I17EW1CX.txt [ /ero-advertising.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\5Q2VRX18.txt [ /tracking.quisma.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\TRE6K7KY.txt [ /adform.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\OJC96MFB.txt [ /adultadworld.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\D0U1900K.txt [ /invitemedia.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\RLDQZ9VP.txt [ /legolas-media.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\KIKBFSVZ.txt [ /adxpansion.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\8UE4OYHQ.txt [ /doubleclick.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\70A8MISP.txt [ /www.sunporno.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\90EAPNBZ.txt [ /mediaplex.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VZDUG585.txt [ /dyntracker.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\ZFLZ642S.txt [ /zanox.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\R684Y3AY.txt [ /track.adform.net ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\7F9KLRHM.txt [ /apmebf.com ]
        C:\Users\Stephan\AppData\Roaming\Microsoft\Windows\Cookies\VUW87863.txt [ /ad.dyntracker.de ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WKC46FWW.txt [ Cookie:stephan@bs.serving-sys.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y6289KND.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\31WZC577.txt [ Cookie:stephan@revsci.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FU1OBKB2.txt [ Cookie:stephan@adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\3MKBCQCH.txt [ Cookie:stephan@fastclick.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDDXTB42.txt [ Cookie:stephan@amazon-adsystem.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JBTMWVCZ.txt [ Cookie:stephan@zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OE9IYL6Z.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0BMFG10D.txt [ Cookie:stephan@amazonservices.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z7NA1LTX.txt [ Cookie:stephan@imrworldwide.com/cgi-bin ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\EW7J3VG8.txt [ Cookie:stephan@ad1.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\236T11OV.txt [ Cookie:stephan@dc.tremormedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CX31RNXI.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0UXOBMCQ.txt [ Cookie:stephan@ad.dyntracker.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0E2B1QSO.txt [ Cookie:stephan@hightraffic.hugoboss.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\C9B6YN2I.txt [ Cookie:stephan@ad.yieldmanager.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IZ7B62OG.txt [ Cookie:stephan@smartadserver.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RTNVJHGD.txt [ Cookie:stephan@www.zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QXOQ8L7I.txt [ Cookie:stephan@adtech.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ERA2XK00.txt [ Cookie:stephan@collective-media.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IJDKTGER.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XT2DLV29.txt [ Cookie:stephan@ad3.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\M9YOJJFO.txt [ Cookie:stephan@ad.zanox.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\L9EGJW4Z.txt [ Cookie:stephan@serving-sys.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BCQ1MI3C.txt [ Cookie:stephan@s2.trafficmaxx.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OWL19S8H.txt [ Cookie:stephan@yadro.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WZ0BG1EI.txt [ Cookie:stephan@ww251.smartadserver.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\DUKIEIBI.txt [ Cookie:stephan@harrenmedianetwork.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\K2MAMGTX.txt [ Cookie:stephan@tradedoubler.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\N0W0AOCO.txt [ Cookie:stephan@www........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\HR8OQ7DO.txt [ Cookie:stephan@im.banner.t-online.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\522DP4W3.txt [ Cookie:stephan@rambler.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\WTBICSC3.txt [ Cookie:stephan@elitepvpers.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\61US5Y9S.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7J9NB8PF.txt [ Cookie:stephan@ad2.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\N7RHCXZB.txt [ Cookie:stephan@webmasterplan.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\9JASM4YK.txt [ Cookie:stephan@zedo.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7GMADI0J.txt [ Cookie:stephan@tracking.gameforge.de/track/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XU2VT2FV.txt [ Cookie:stephan@c.atdmt.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\V00MLK1R.txt [ Cookie:stephan@insightexpressai.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\8DD7AIJE.txt [ Cookie:stephan@edates.traffective-tracking.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4ZX3D57T.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\G5XSPK0U.txt [ Cookie:stephan@adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JD4SAHEN.txt [ Cookie:stephan@ad4.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\0JX44KHV.txt [ Cookie:stephan@www.elitepvpers.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\E40QBGSA.txt [ Cookie:stephan@eaeacom.112.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\D2J6RE08.txt [ Cookie:stephan@invitemedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\GJZ2Y7HZ.txt [ Cookie:stephan@yieldmanager.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\15R3IVVU.txt [ Cookie:stephan@adviva.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4ULEPYBA.txt [ Cookie:stephan@www.adserving.pixfuture.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BUSZWBSD.txt [ Cookie:stephan@adxpose.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BVWAVEY9.txt [ Cookie:stephan@server.cpmstar.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\UG1TXCUT.txt [ Cookie:stephan@unitymedia.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\32VJQK18.txt [ Cookie:stephan@adxpansion.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QS0PNE59.txt [ Cookie:stephan@tns-counter.ru/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\UE8KV7YP.txt [ Cookie:stephan@traffictrack.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\F3OYRIA0.txt [ Cookie:stephan@adx.chip.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\C7V0YBA9.txt [ Cookie:stephan@www.google.de/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CGYBQIO7.txt [ Cookie:stephan@adbrite.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VLZN5YF1.txt [ Cookie:stephan@track.effiliation.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZKWHFZR2.txt [ Cookie:stephan@track.adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ILY6G7R4.txt [ Cookie:stephan@zanox.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JSZQZOVE.txt [ Cookie:stephan@apmebf.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\90A00CUC.txt [ Cookie:stephan@specificclick.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JKXX6M5W.txt [ Cookie:stephan@adserver.adtechus.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RN1BRY1W.txt [ Cookie:stephan@ads.247activemedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4VW28DGZ.txt [ Cookie:stephan@media.gan-online.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\VNT64OYI.txt [ Cookie:stephan@m1.webstats.motigo.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1UOVEN6G.txt [ Cookie:stephan@de.sitestat.com/karstadt-de/karstadt/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\DO3O9BND.txt [ Cookie:stephan@guj.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\H4RD9H5J.txt [ Cookie:stephan@uk.at.atwola.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\IE9E4GEA.txt [ Cookie:stephan@exoclick.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\R2A10WMH.txt [ Cookie:stephan@atwola.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\8553RVPE.txt [ Cookie:stephan@www........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\BNO66JRG.txt [ Cookie:stephan@lfstmedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\2L1KXKQW.txt [ Cookie:stephan@e-2dj6wmkyqgdpmfp.stats.esomniture.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\MP2SUGHD.txt [ Cookie:stephan@teufel-media.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\X5FUAEVT.txt [ Cookie:stephan@adformdsp.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\14E6YLX8.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1055079916/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JF8509G0.txt [ Cookie:stephan@dealtime.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\7IP2PM6M.txt [ Cookie:stephan@www.google.com/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\J2FGZUXL.txt [ Cookie:stephan@h.atdmt.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FFBJ3HGZ.txt [ Cookie:stephan@track.gridlockparadise.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\OWTU2R9F.txt [ Cookie:stephan@www.republicofadvertising.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\M3HZBUY1.txt [ Cookie:stephan@www.etracker.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1RY5BEB3.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\EA10872B.txt [ Cookie:stephan@adlegend.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\HEI1YR9A.txt [ Cookie:stephan@tracking.mobile.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\E8LWT1F9.txt [ Cookie:stephan@media6degrees.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\5ILHTAGB.txt [ Cookie:stephan@ru4.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XE9BOS3B.txt [ Cookie:stephan@www.ardmediathek.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\JKNJSSM1.txt [ Cookie:stephan@2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\KC29BINK.txt [ Cookie:stephan@tracking.mindshare.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\YX1CDTU0.txt [ Cookie:stephan@www........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\ACMINGSU.txt [ Cookie:stephan@server.adformdsp.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QSU8T9Y0.txt [ Cookie:stephan@questionmarket.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\V4TZ6FB3.txt [ Cookie:stephan@interclick.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\3NF80VCW.txt [ Cookie:stephan@a.revenuemax.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\FN16D0TY.txt [ Cookie:stephan@www........../ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\6CX10VZ7.txt [ Cookie:stephan@......... ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\RQ3SSYTS.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q88EMEH8.txt [ Cookie:stephan@advertising.superweb.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\QXBEOMEW.txt [ Cookie:stephan@www.usenext.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\CKPRB6OM.txt [ Cookie:stephan@parship.122.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\B3YAZ28K.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1044648193/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\J9HQMWZ2.txt [ Cookie:stephan@microsoftwllivemkt.112.2o7.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\4UU1AA1J.txt [ Cookie:stephan@ad.dyntracker.de/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\SL1ZKNCA.txt [ Cookie:stephan@accounts.youtube.com/accounts ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\6HYCTEMO.txt [ Cookie:stephan@ads.crakmedia.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\O1EORXH0.txt [ Cookie:stephan@account.swtor.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\KF7KLYUQ.txt [ Cookie:stephan@statse.webtrendslive.com/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\G3F91QZ6.txt [ Cookie:stephan@server.adform.net/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\XV1SRSFL.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1010295416/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\2JKPUJF4.txt [ Cookie:stephan@www.googleadservices.com/pagead/conversion/1028954965/ ]
        C:\USERS\STEPHAN\AppData\Roaming\Microsoft\Windows\Cookies\Low\1PZN26VN.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\Cookies\3VY5RILT.txt [ Cookie:stephan@revsci.net/ ]
        C:\USERS\STEPHAN\Cookies\NEGDBSW6.txt [ Cookie:stephan@adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\9GFC287I.txt [ Cookie:stephan@fastclick.net/ ]
        C:\USERS\STEPHAN\Cookies\0XELIY3J.txt [ Cookie:stephan@zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\Cookies\J5WYVEKJ.txt [ Cookie:stephan@exoclick.com/ ]
        C:\USERS\STEPHAN\Cookies\EXZ5E4WR.txt [ Cookie:stephan@ad1.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\VA5EW1VQ.txt [ Cookie:stephan@smartadserver.com/ ]
        C:\USERS\STEPHAN\Cookies\ISHSO8JU.txt [ Cookie:stephan@www.zanox-affiliate.de/ ]
        C:\USERS\STEPHAN\Cookies\0TN25UIG.txt [ Cookie:stephan@kontera.com/ ]
        C:\USERS\STEPHAN\Cookies\0KZMBIOZ.txt [ Cookie:stephan@ad.zanox.com/ ]
        C:\USERS\STEPHAN\Cookies\KG3OUGEK.txt [ Cookie:stephan@ad3.adfarm1.adition.com/ ]
        C:\USERS\STEPHAN\Cookies\AGXLFDCH.txt [ Cookie:stephan@account.swtor.com/ ]
        C:\USERS\STEPHAN\Cookies\VS5LU8AR.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\Cookies\XFQ1I1Y7.txt [ Cookie:stephan@c.atdmt.com/ ]
        C:\USERS\STEPHAN\Cookies\TRE6K7KY.txt [ Cookie:stephan@adform.net/ ]
        C:\USERS\STEPHAN\Cookies\OJC96MFB.txt [ Cookie:stephan@........./ ]
        C:\USERS\STEPHAN\Cookies\D0U1900K.txt [ Cookie:stephan@invitemedia.com/ ]
        C:\USERS\STEPHAN\Cookies\KIKBFSVZ.txt [ Cookie:stephan@adxpansion.com/ ]
        C:\USERS\STEPHAN\Cookies\VZDUG585.txt [ Cookie:stephan@dyntracker.com/ ]
        C:\USERS\STEPHAN\Cookies\ZFLZ642S.txt [ Cookie:stephan@zanox.com/ ]
        C:\USERS\STEPHAN\Cookies\R684Y3AY.txt [ Cookie:stephan@track.adform.net/ ]
        C:\USERS\STEPHAN\Cookies\7F9KLRHM.txt [ Cookie:stephan@apmebf.com/ ]
        C:\USERS\STEPHAN\Cookies\VUW87863.txt [ Cookie:stephan@ad.dyntracker.de/ ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .invitemedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .atdmt.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .atdmt.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .serving-sys.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .lfstmedia.com [ C:\USERS\STEPHAN\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

cosinus 28.06.2012 09:59
Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Xyrak 28.06.2012 18:49
Ich kann bis hier her keinerlei Probleme finden. Ganz im Gegenteil....mein Explorer arbeitet schneller als zuvor!

Kannst du mir abschliessend sagen ob bei mir und was angerichtet wurde an Schaden??

cosinus 29.06.2012 11:39
Sind denn noch Dateien bei dir verschlüsselt?

Xyrak 29.06.2012 18:29
Ich konnte nur 3 jpeg´s erkennen welche nicht mehr gingen, aber das war das einzigste.

cosinus 01.07.2012 14:21
Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:26 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131