| mkquadratt | 18.09.2012 16:09 |
Hallo Marius,
Danke für die schnelle Rückmeldung.
Ich habe alle Schritte durchgeführt und hier die Resultate: Schritt 1: Defogger
keine Fehlmeldungen Klicke den Re-enable Button nicht ohne Anweisung
Ich gehe davon aus, dass diese Anweisung irgendwann während der Bereinigung noch folgt? Schritt 2: OTL
Hier die Logs:
OTL Logfile: Code:
OTL logfile created on: 18.09.2012 15:06:17 - Run 1
OTL by OldTimer - Version 3.2.63.0 Folder = C:\Dokumente und Einstellungen\klatmany\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1014,42 Mb Total Physical Memory | 643,09 Mb Available Physical Memory | 63,40% Memory free
2,38 Gb Paging File | 2,21 Gb Available in Paging File | 92,89% Paging File free
Paging file location(s): C:\pagefile.sys 1524 1524 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 52,26 Gb Total Space | 36,17 Gb Free Space | 69,21% Space Free | Partition Type: NTFS
Computer Name: IBM | User Name: klatmany | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Install\Defogger.exe ()
PRC - C:\Dokumente und Einstellungen\klatmany\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\totalcmd\TOTALCMD.EXE (C. Ghisler & Co.)
========== Modules (No Company Name) ==========
MOD - C:\Install\Defogger.exe ()
MOD - C:\Programme\Mozilla Thunderbird\nsldappr32v60.dll ()
MOD - C:\Programme\Mozilla Thunderbird\nsldap32v60.dll ()
MOD - C:\Programme\Mozilla Thunderbird\mozjs.dll ()
MOD - C:\WINDOWS\system32\tphklock.dll ()
========== Services (SafeList) ==========
SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (AVP) -- C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\avp.exe (Kaspersky Lab ZAO)
SRV - (btwdins) -- C:\Programme\ThinkPad\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation)
SRV - (vtserver) -- C:\Programme\Gemeinsame Dateien\Virtual Token\vtserver.exe (UPEK Inc.)
SRV - (QCONSVC) -- C:\WINDOWS\system32\QCONSVC.EXE (IBM Corp.)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (TpKmpSVC) -- C:\WINDOWS\system32\TpKmpSvc.exe ()
SRV - (SoundMAX Agent Service (default) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
========== Driver Services (SafeList) ==========
DRV - (wuwxb) -- System32\drivers\qmlnoj.sys File not found
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (HTCAND32) -- System32\Drivers\ANDROIDUSB.sys File not found
DRV - (Changer) -- File not found
DRV - (KLIF) -- C:\WINDOWS\system32\drivers\klif.sys (Kaspersky Lab)
DRV - (MDC8021X) -- C:\WINDOWS\system32\drivers\mdc8021x.sys (Meetinghouse Data Communications)
DRV - (SmartDefragDriver) -- C:\WINDOWS\system32\drivers\SmartDefragDriver.sys ()
DRV - (kl2) -- C:\WINDOWS\system32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) -- C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (klim5) -- C:\WINDOWS\system32\drivers\klim5.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) -- C:\WINDOWS\system32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (SNPSTD3) -- C:\WINDOWS\system32\drivers\snpstd3.sys (Sonix Co. Ltd.)
DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation)
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation)
DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation)
DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation)
DRV - (TSMAPIP) -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS ()
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (TPM11) -- C:\WINDOWS\system32\drivers\nsctpm11.sys (National Semiconductor Corp.)
DRV - (TPPWRIF) -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS ()
DRV - (SmiHlp) -- C:\Programme\IBM fingerprint software\smihlp.sys (UPEK Inc.)
DRV - (QCNDISIF) -- C:\WINDOWS\system32\drivers\qcndisif.sys (IBM Corporation.)
DRV - (ANC) -- C:\WINDOWS\system32\drivers\ANC.sys (IBM Corp.)
DRV - (IBMTPCHK) -- C:\WINDOWS\system32\drivers\IBMBLDID.SYS ()
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (w29n51) -- C:\WINDOWS\system32\drivers\w29n51.sys (Intel® Corporation)
DRV - (PcdrNdisuio) -- C:\WINDOWS\system32\drivers\PcdrNdisuio.sys (Windows (R) 2000 DDK provider)
DRV - (Smapint) -- C:\WINDOWS\system32\drivers\SMAPINT.SYS (Microsoft Corporation)
DRV - (TDSMAPI) -- C:\WINDOWS\system32\drivers\TDSMAPI.SYS ()
DRV - (TPDiskPM) -- C:\WINDOWS\System32\drivers\TPDiskPM.sys (IBM Corporation)
DRV - (TPInput) -- C:\WINDOWS\system32\drivers\TPInput.sys (IBM Corporation)
DRV - (HSFHWICH) -- C:\WINDOWS\system32\drivers\HSFHWICH.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) -- C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (EGATHDRV) -- C:\WINDOWS\Downloaded Program Files\EGATHDRV.SYS ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=642886&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.heute.de/"
FF - prefs.js..extensions.enabledAddons: new-tabs-at-end@forerunnerdesigns.com:1.0
FF - prefs.js..extensions.enabledAddons: {c6fb3a99-0bf0-4ab3-9b5b-9fe631d6cde3}:0.2.4
FF - prefs.js..extensions.enabledAddons: {EDA7B1D7-F793-4e03-B074-E6F303317FB0}:1.2.7
FF - prefs.js..extensions.enabledAddons: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.5.5
FF - prefs.js..extensions.enabledAddons: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20120827
FF - prefs.js..extensions.enabledItems: new-tabs-at-end@forerunnerdesigns.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: bug489729@alice0775:1.3
FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.2.556
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=642886&p="
FF - prefs.js..network.proxy.type: 4
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.09.07 22:09:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012.08.26 23:33:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2012.08.26 19:46:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins
[2012.08.26 20:14:29 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Extensions
[2012.09.18 13:45:49 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions
[2012.09.18 13:45:49 | 000,000,000 | ---D | M] (WOT) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012.07.06 06:10:30 | 000,002,881 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\historybutton@darktrojan.net.xpi
[2011.08.19 01:06:35 | 000,001,316 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\new-tabs-at-end@forerunnerdesigns.com.xpi
[2012.09.18 13:45:48 | 000,527,915 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2012.03.31 20:37:40 | 000,008,956 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\{c6fb3a99-0bf0-4ab3-9b5b-9fe631d6cde3}.xpi
[2012.09.18 13:44:01 | 000,741,958 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.08.26 21:54:13 | 000,091,556 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla\Firefox\Profiles\axaht9be.default\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}.xpi
[2012.08.25 20:37:36 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.08.25 20:37:36 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Programme\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru
[2012.08.25 20:37:33 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Programme\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2012.09.07 22:09:23 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2011.10.07 19:52:53 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.08.29 19:24:06 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2011.10.07 19:52:53 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.07 19:52:53 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.10.07 19:52:53 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.07 19:52:53 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2004.08.04 06:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [AVP] C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [ControlCenter3] C:\Programme\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe File not found
O4 - HKCU..\Run: [attjnkpvbnmcbkj] C:\WINDOWS\attjnkpv.exe ()
O4 - HKCU..\Run: [TPKMAPMN] C:\Programme\ThinkPad\Utilities\TpKmapMn.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\ie_banner_deny.htm ()
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: ThinkPad-Software - Aktualisierung - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Programme\Lenovo\PkgMgr\\PkgMgr.exe ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/1.4.2/jinstall-142-win.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (Broadcom Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
O20 - Winlogon\Notify\psfus: DllName - (C:\Programme\IBM fingerprint software\psfus.dll) - C:\Programme\IBM fingerprint software\psfus.dll (UPEK Inc.)
O20 - Winlogon\Notify\QConGina: DllName - (QConGina.dll) - C:\WINDOWS\System32\QConGina.dll (IBM Corp.)
O20 - Winlogon\Notify\tphotkey: DllName - (tphklock.dll) - C:\WINDOWS\System32\tphklock.dll ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.08.03 19:13:46 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2012.09.18 12:00:47 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.09.18 11:56:26 | 000,600,576 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\klatmany\Desktop\OTL.exe
[2012.09.18 11:23:58 | 000,000,000 | ---D | C] -- C:\Programme\ESET
[2012.09.18 11:02:38 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\klatmany\Recent
[2012.09.18 09:59:15 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012.09.18 01:13:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012.09.18 01:13:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.09.18 01:13:38 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.09.18 01:13:38 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2012.09.18 00:17:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\jeppblfjbuhvsuc
[2012.09.09 17:19:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Brother
[2012.09.09 17:16:25 | 000,086,016 | ---- | C] (brother) -- C:\WINDOWS\System32\BrWebIns.dll
[2012.09.09 17:16:25 | 000,069,632 | ---- | C] (brother) -- C:\WINDOWS\System32\BRWEBUP.EXE
[2012.09.09 17:15:49 | 000,126,976 | ---- | C] (Brother Industries,LTD) -- C:\WINDOWS\System32\BrfxD05a.dll
[2012.09.05 00:15:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\archiv
[2012.09.04 20:03:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\!!!!
[2012.09.01 09:46:49 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Brother
[2012.08.27 17:04:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\work
[2012.08.26 23:34:45 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll
[2012.08.26 23:33:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office
[2012.08.26 23:32:56 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft ActiveSync
[2012.08.26 23:32:31 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DESIGNER
[2012.08.26 23:31:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2012.08.26 23:29:44 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET
[2012.08.26 23:29:44 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office
[2012.08.26 23:26:15 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2012.08.26 20:16:35 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Verwaltung
[2012.08.26 20:16:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Winamp Erkennungs-Plug-in
[2012.08.26 20:16:34 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\klatmany\PrivacIE
[2012.08.26 20:16:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Thunderbird
[2012.08.26 20:16:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\PackageAware
[2012.08.26 20:15:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Mozilla
[2012.08.26 20:15:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Help
[2012.08.26 20:15:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\AskToolbar
[2012.08.26 20:15:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Apple Computer
[2012.08.26 20:15:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Apple
[2012.08.26 20:15:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Adobe
[2012.08.26 20:15:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Eigene Videos
[2012.08.26 20:15:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\IBM
[2012.08.26 20:14:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\DVDVideoSoft
[2012.08.26 20:14:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Downloads
[2012.08.26 20:14:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Winamp
[2012.08.26 20:14:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Thunderbird
[2012.08.26 20:14:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Sun
[2012.08.26 20:14:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Skype
[2012.08.26 20:14:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Roxio
[2012.08.26 20:14:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\OpenOffice.org
[2012.08.26 20:14:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Mozilla
[2012.08.26 20:14:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Malwarebytes
[2012.08.26 20:14:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\IObit
[2012.08.26 20:14:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\InterVideo
[2012.08.26 20:14:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Help
[2012.08.26 20:14:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\GetRightToGo
[2012.08.26 20:14:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\ElevatedDiagnostics
[2012.08.26 20:14:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\DVDVideoSoft
[2012.08.26 20:14:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\DB0C5
[2012.08.26 20:14:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Apple Computer
[2012.08.26 20:14:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\AdobeUM
[2012.08.26 20:14:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Adobe
[2012.08.26 20:14:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\50716
[2012.08.26 20:13:06 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\klatmany\IETldCache
[2012.08.26 20:13:01 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Microsoft
[2012.08.26 20:13:01 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten
[2012.08.26 20:13:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Favoriten
[2012.08.26 20:13:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Eigene Musik
[2012.08.26 20:13:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien
[2012.08.26 20:13:01 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Eigene Bilder
[2012.08.26 20:13:01 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\klatmany\Cookies
[2012.08.26 20:13:01 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\klatmany\Druckumgebung
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Symantec
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Sonic
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Macromedia
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\Identities
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Anwendungsdaten\IBM
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Desktop
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\BVRP Software
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Bluetooth-Exchange-Ordner
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Bluetooth Software
[2012.08.26 20:13:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\ApplicationHistory
[2012.08.26 20:13:00 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\klatmany\SendTo
[2012.08.26 20:13:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Zubehör
[2012.08.26 20:13:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Startmenü
[2012.08.26 20:13:00 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Autostart
[2012.08.26 20:13:00 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\klatmany\Vorlagen
[2012.08.26 20:13:00 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\klatmany\Netzwerkumgebung
[2012.08.26 20:13:00 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen
[2012.08.26 20:13:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2012.08.26 19:46:53 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Thunderbird
[2012.08.26 14:48:12 | 000,029,528 | ---- | C] (IObit) -- C:\WINDOWS\System32\SmartDefragBootTime.exe
[2012.08.26 14:47:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Smart Defrag 2
[2012.08.26 14:47:15 | 000,000,000 | ---D | C] -- C:\Programme\IObit
[2012.08.25 20:37:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kaspersky Security Suite CBE 11
[2012.08.25 20:35:46 | 000,000,000 | ---D | C] -- C:\Programme\Kaspersky Lab
[2012.08.25 20:35:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab
[2012.08.25 20:35:21 | 000,475,736 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
[2012.08.19 21:05:37 | 000,000,000 | ---D | C] -- C:\Programme\Broadcom
========== Files - Modified Within 30 Days ==========
[2012.09.18 14:58:30 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\defogger_reenable
[2012.09.18 12:15:43 | 000,002,414 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2012.09.18 12:13:46 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.09.18 12:13:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.09.18 12:02:39 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag_Startup.job
[2012.09.18 11:56:31 | 000,600,576 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\klatmany\Desktop\OTL.exe
[2012.09.18 01:13:49 | 000,000,767 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012.09.18 00:17:24 | 000,076,338 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iodsaadmdjecnhu
[2012.09.18 00:16:14 | 000,084,480 | ---- | M] () -- C:\WINDOWS\attjnkpv.exe
[2012.09.18 00:16:14 | 000,084,480 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\attjnkpv.exe
[2012.09.17 19:43:34 | 000,000,462 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Verknüpfung mit !!!!.lnk
[2012.09.14 11:00:42 | 000,161,136 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.09.09 17:36:51 | 000,000,425 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI
[2012.09.09 17:36:28 | 000,000,164 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2012.09.09 17:22:09 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012.09.09 17:22:09 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.09.09 17:19:56 | 000,000,042 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Speicherkarten-Station.url
[2012.09.09 17:19:30 | 000,000,027 | ---- | M] () -- C:\WINDOWS\BRPP2KA.INI
[2012.09.09 17:18:33 | 000,000,223 | ---- | M] () -- C:\WINDOWS\Brpfx04a.ini
[2012.09.09 17:18:33 | 000,000,093 | ---- | M] () -- C:\WINDOWS\brpcfx.ini
[2012.09.09 17:18:33 | 000,000,050 | ---- | M] () -- C:\WINDOWS\System32\bridf06a.dat
[2012.09.07 20:13:01 | 000,105,732 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\steppjacke_chilly.jpg
[2012.09.07 17:04:46 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.09.01 09:56:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\brmx2001.ini
[2012.08.26 23:38:13 | 000,000,535 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Verknüpfung mit LANChat.lnk
[2012.08.26 23:34:59 | 000,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2012.08.26 19:47:00 | 000,001,643 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Thunderbird.lnk
[2012.08.26 16:21:27 | 000,070,973 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\sciana.jpg
[2012.08.26 14:47:19 | 000,000,806 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Smart Defrag 2.lnk
[2012.08.26 14:45:43 | 000,000,044 | ---- | M] () -- C:\WINDOWS\SMWizard.INI
[2012.08.26 14:32:17 | 000,000,112 | ---- | M] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\rk-proxy.reg
[2012.08.26 12:56:40 | 000,000,194 | RHS- | M] () -- C:\BOOT.INI
[2012.08.25 22:48:57 | 000,116,189 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2012.08.25 22:48:56 | 000,098,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2012.08.25 21:00:16 | 000,002,409 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2012.08.25 20:35:21 | 000,475,736 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys
========== Files Created - No Company Name ==========
[2012.09.18 14:58:30 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\defogger_reenable
[2012.09.18 01:13:49 | 000,000,767 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012.09.18 00:17:22 | 000,084,480 | ---- | C] () -- C:\WINDOWS\attjnkpv.exe
[2012.09.18 00:17:21 | 000,084,480 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\attjnkpv.exe
[2012.09.18 00:16:51 | 000,076,338 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\iodsaadmdjecnhu
[2012.09.17 19:43:34 | 000,000,462 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Verknüpfung mit !!!!.lnk
[2012.09.09 17:19:56 | 000,000,042 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Speicherkarten-Station.url
[2012.09.09 17:16:01 | 000,006,224 | ---- | C] () -- C:\WINDOWS\CVRPAGE.bmp
[2012.09.09 17:15:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brdfxspd.dat
[2012.09.07 20:13:01 | 000,105,732 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\steppjacke_chilly.jpg
[2012.09.01 09:56:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2012.08.26 23:38:13 | 000,000,535 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Verknüpfung mit LANChat.lnk
[2012.08.26 23:34:59 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2012.08.26 20:16:12 | 000,017,408 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db
[2012.08.26 20:15:01 | 001,545,403 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Thunderbird 13.0.1 (de) - 2012-07-06.pcv
[2012.08.26 20:15:00 | 008,310,838 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Eigene Dateien\Firefox 11.0 (de) - 2012-07-06.pcv
[2012.08.26 20:14:59 | 000,070,973 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\sciana.jpg
[2012.08.26 20:14:59 | 000,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Total Commander.lnk
[2012.08.26 20:14:59 | 000,000,414 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Drahtlose Netzwerkverbindung.lnk
[2012.08.26 20:14:59 | 000,000,112 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\rk-proxy.reg
[2012.08.26 20:14:59 | 000,000,100 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Microsoft Fix it.url
[2012.08.26 20:13:13 | 000,000,779 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Windows Media Player.lnk
[2012.08.26 20:13:13 | 000,000,773 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Desktop\Windows Media Player.lnk
[2012.08.26 20:13:02 | 000,000,139 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012.08.26 20:13:01 | 000,001,503 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Remoteunterstützung.lnk
[2012.08.26 20:13:01 | 000,000,758 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Internet Explorer.lnk
[2012.08.26 20:13:01 | 000,000,729 | ---- | C] () -- C:\Dokumente und Einstellungen\klatmany\Startmenü\Programme\Outlook Express.lnk
[2012.08.26 19:47:00 | 000,001,649 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Thunderbird.lnk
[2012.08.26 19:47:00 | 000,001,643 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Thunderbird.lnk
[2012.08.26 14:48:13 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\SmartDefrag_Startup.job
[2012.08.26 14:47:20 | 000,014,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\SmartDefragDriver.sys
[2012.08.26 14:47:19 | 000,000,806 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Smart Defrag 2.lnk
[2012.08.25 20:37:16 | 000,116,189 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2012.08.25 20:37:16 | 000,098,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2012.05.17 12:12:33 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.04.07 18:44:13 | 000,023,928 | ---- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.03.18 15:00:04 | 000,000,164 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2012.02.15 18:45:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.05 20:44:27 | 000,129,024 | ---- | C] () -- C:\Programme\UNWISE.EXE
[2011.10.01 11:44:40 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI
[2011.08.23 13:46:43 | 000,002,414 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2011.08.19 10:57:20 | 000,000,425 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2011.08.19 10:57:20 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2011.08.19 10:56:40 | 000,000,223 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2011.08.19 10:56:40 | 000,000,093 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2011.08.19 10:56:40 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf06a.dat
[2011.08.19 10:54:33 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2011.08.19 10:50:59 | 000,027,114 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2011.08.03 19:19:35 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2011.08.03 19:19:35 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE
========== ZeroAccess Check ==========
[2009.02.26 09:51:06 | 000,000,227 | ---- | M] () -- C:\WINDOWS\assembly\Desktop.ini
< End of report >
--- --- ---
OTL Logfile: Code:
OTL Extras logfile created on: 18.09.2012 15:06:17 - Run 1
OTL by OldTimer - Version 3.2.63.0 Folder = C:\Dokumente und Einstellungen\klatmany\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1014,42 Mb Total Physical Memory | 643,09 Mb Available Physical Memory | 63,40% Memory free
2,38 Gb Paging File | 2,21 Gb Available in Paging File | 92,89% Paging File free
Paging file location(s): C:\pagefile.sys 1524 1524 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 52,26 Gb Total Space | 36,17 Gb Free Space | 69,21% Space Free | Partition Type: NTFS
Computer Name: IBM | User Name: klatmany | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = htmlfile] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\World of Warcraft\Launcher.exe" = C:\Programme\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher
"C:\Programme\World of Warcraft\Launcher.patch.exe" = C:\Programme\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher
"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"C:\Dokumente und Einstellungen\Nika\Anwendungsdaten\Spotify\spotify.exe" = C:\Dokumente und Einstellungen\Nika\Anwendungsdaten\Spotify\spotify.exe:*:Enabled:Spotify
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0873B1A3-00A9-40D6-BACE-3DB4BC5DA840}" = IBM SATA Power Management Driver
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{1007F41F-7D69-468E-8017-3849A5A973C2}" = IBM ThinkVantage Technologies Welcome Message
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = IBM DLA
"{1297C681-92D7-40EF-93BF-03F66EC5105C}" = Dienstprogramm 'IBM ThinkPad EasyEject'
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2111B23F-7FDA-4A41-8309-E5A1663CA296}" = Dienstprogramm 'IBM ThinkPad-Tastaturanpassung'
"{22B71A00-4DED-11D4-A5E5-0004AC564F43}" = IBM Access Connections
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 29
"{28DA872A-0848-48CF-B749-19A198157A2A}" = mDriver
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Security Suite CBE 11
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6CE96A14-61E2-48CC-837E-22710A953ADE}" = IBM Themes
"{6DE14BE4-6F04-4935-8ABD-A0A19FE2E55A}" = mCore
"{71C97545-E547-4A8B-B0C8-61FF853270AC}" = PaperPort
"{72806716-7088-41B2-8FA6-717A2A164DAB}" = IBM System für aktiven Festplattenschutz
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{82512BC9-BD5D-4C50-BE4D-B98E7DF78687}" = IBM ThinkPad-UltraNav-Assistent
"{8745DEAB-1126-42F5-9585-C66D5497B47B}" = EMEA Wallpaper
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver for Mobile
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8F55B163-7B42-42A3-9307-C7FCB9655225}" = PC-Doctor for Windows
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90535871-81B9-4D99-8A13-A7EE97F2D7FE}" = ThinkPad Integrated Bluetooth IV Software
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = IBM RecordNow!
"{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}" = IBM ThinkPad Energie-Manager
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-A70000000000}" = Adobe Reader 7.0 - Deutsch
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DFEBA70E-F169-4016-AB27-7230BCCDBD42}" = IBM Fingerprint Software 4.5.5
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E922961C-6DB6-41DE-9FEA-426DF3E9F81C}" = IBM 32-bit Runtime Environment for Java 2, v1.4.2
"{EA664480-3844-11D5-8C25-444553540000}" = Funktion "IBM TrackPoint-Eingabehilfen"
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EC6AF20D-4376-4070-BEE4-D3A0DFF7E140}" = Access IBM
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.8
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0F563C4-D4AD-41C4-A8A6-26664C027D11}" = Brother MFL-Pro Suite
"{F413B3A4-EE5D-457C-BAE5-6E58D9589ED5}" = Access IBM Message Center
"{FC081D4D-DF1B-4CF1-B530-027E4118D846}" = IBM ThinkPad-Konfiguration
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"ATI Display Driver" = ATI Display Driver
"Broadcom 802.11b Network Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_05591014" = IBM Integrated 56K Modem
"ESET Online Scanner" = ESET Online Scanner v3
"ie8" = Windows Internet Explorer 8
"InstallShield_{8F55B163-7B42-42A3-9307-C7FCB9655225}" = PC-Doctor for Windows
"InstallShield_{E922961C-6DB6-41DE-9FEA-426DF3E9F81C}" = IBM 32-bit Runtime Environment for Java 2, v1.4.2
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Security Suite CBE 11
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.0.1400
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)
"Mozilla Thunderbird 13.0.1 (x86 de)" = Mozilla Thunderbird 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"PhotoScape" = PhotoScape
"Power Management Driver" = IBM ThinkPad Power Management Driver
"Presentation Director" = IBM ThinkPad 'Präsentationsdirektor'
"ProInst" = Intel(R) PROSet/Wireless Software
"Smart Defrag 2_is1" = Smart Defrag 2
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"SynTPDeinstKey" = IBM ThinkPad UltraNav Driver
"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier
"ThinkPadSoftwareInstaller" = Software Installer
"Totalcmd" = Total Commander (Remove or Repair)
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"YTdetect" = Yahoo! Detect
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 22.08.2012 17:13:45 | Computer Name = NIKA | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 80821828
Error - 22.08.2012 17:13:48 | Computer Name = NIKA | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 22.08.2012 17:13:48 | Computer Name = NIKA | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 80824703
Error - 22.08.2012 17:13:48 | Computer Name = NIKA | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 80824703
Error - 26.08.2012 10:45:43 | Computer Name = NIKA | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 26.08.2012 16:11:33 | Computer Name = NIKA | Source = Microsoft Office 11 | ID = 5000
Description =
Error - 26.08.2012 16:34:22 | Computer Name = NIKA | Source = Microsoft Office 11 | ID = 5000
Description =
Error - 09.09.2012 11:10:43 | Computer Name = IBM | Source = crypt32 | ID = 131080
Description = Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer
von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
ist fehlgeschlagen mit dem Fehler: The server name or address could not be resolved
.
Error - 10.09.2012 06:57:48 | Computer Name = IBM | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung acrord32.exe, Version 7.0.0.0, fehlgeschlagenes
Modul acrord32.dll, Version 7.0.0.1333, Fehleradresse 0x000151e4.
Error - 16.09.2012 20:58:23 | Computer Name = IBM | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung excel.exe, Version 11.0.5612.0, fehlgeschlagenes
Modul excel.exe, Version 11.0.5612.0, Fehleradresse 0x001f52c0.
[ System Events ]
Error - 18.09.2012 05:01:18 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 18.09.2012 05:02:35 | Computer Name = IBM | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ANC Fips IBMTPCHK intelppm KLIF ShockMgr Smapint TDSMAPI TPHKDRV TPPWRIF TSMAPIP
Error - 18.09.2012 06:01:15 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 18.09.2012 06:10:16 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 18.09.2012 06:11:29 | Computer Name = IBM | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ANC Fips IBMTPCHK intelppm KLIF ShockMgr Smapint TDSMAPI TPHKDRV TPPWRIF TSMAPIP
Error - 18.09.2012 06:12:18 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 18.09.2012 06:13:52 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 18.09.2012 06:14:58 | Computer Name = IBM | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ANC Fips IBMTPCHK intelppm KLIF ShockMgr Smapint TDSMAPI TPHKDRV TPPWRIF TSMAPIP
Error - 18.09.2012 07:23:46 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "wuauserv"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error - 18.09.2012 07:57:32 | Computer Name = IBM | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
< End of report >
--- --- --- Schritt 3: gmer
(keine Warnungen wurden angezeigt)
[code]
GMER Logfile: Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-09-18 16:34:40
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 FUJITSU_MHV2060AH rev.00840096
Running: ob2ci48e.exe; Driver: C:\DOKUME~1\klatmany\LOKALE~1\Temp\ugtdrpob.sys
---- Devices - GMER 1.0.15 ----
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 TPInput.sys (IBM SATA Power Management Driver/IBM Corporation)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 TPInput.sys (IBM SATA Power Management Driver/IBM Corporation)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
Device \FileSystem\Fastfat \Fat F6077D20
---- EOF - GMER 1.0.15 ----
--- --- --- Schritt 4: Scan mit TDSS-Killer
Es wurden keine infizierte Objekte gefunden. Code:
16:52:25.0281 1180 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
16:52:27.0281 1180 ============================================================
16:52:27.0281 1180 Current date / time: 2012/09/18 16:52:27.0281
16:52:27.0281 1180 SystemInfo:
16:52:27.0281 1180
16:52:27.0281 1180 OS Version: 5.1.2600 ServicePack: 3.0
16:52:27.0281 1180 Product type: Workstation
16:52:27.0281 1180 ComputerName: IBM
16:52:27.0281 1180 UserName: klatmany
16:52:27.0281 1180 Windows directory: C:\WINDOWS
16:52:27.0281 1180 System windows directory: C:\WINDOWS
16:52:27.0281 1180 Processor architecture: Intel x86
16:52:27.0281 1180 Number of processors: 1
16:52:27.0281 1180 Page size: 0x1000
16:52:27.0281 1180 Boot type: Safe boot with network
16:52:27.0281 1180 ============================================================
16:52:29.0796 1180 Drive \Device\Harddisk0\DR0 - Size: 0xDF8F90000 (55.89 Gb), SectorSize: 0x200, Cylinders: 0x1E48, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054
16:52:29.0796 1180 ============================================================
16:52:29.0796 1180 \Device\Harddisk0\DR0:
16:52:29.0796 1180 MBR partitions:
16:52:29.0796 1180 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x6886FD1
16:52:29.0796 1180 ============================================================
16:52:29.0859 1180 C: <-> \Device\Harddisk0\DR0\Partition1
16:52:29.0890 1180 ============================================================
16:52:29.0890 1180 Initialize success
16:52:29.0890 1180 ============================================================
16:52:43.0046 0132 ============================================================
16:52:43.0046 0132 Scan started
16:52:43.0046 0132 Mode: Manual; TDLFS;
16:52:43.0046 0132 ============================================================
16:52:44.0140 0132 ================ Scan system memory ========================
16:52:44.0140 0132 System memory - ok
16:52:44.0140 0132 ================ Scan services =============================
16:52:44.0281 0132 Abiosdsk - ok
16:52:44.0343 0132 [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5 C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
16:52:44.0343 0132 abp480n5 - ok
16:52:44.0359 0132 [ 0F2D66D5F08EBE2F77BB904288DCF6F0 ] ac97intc C:\WINDOWS\system32\drivers\ac97intc.sys
16:52:44.0375 0132 ac97intc - ok
16:52:44.0421 0132 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
16:52:44.0437 0132 ACPI - ok
16:52:44.0437 0132 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
16:52:44.0453 0132 ACPIEC - ok
16:52:44.0515 0132 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
16:52:44.0515 0132 adpu160m - ok
16:52:44.0546 0132 [ CDE1F62FE63631B932ACE2249FB11DA0 ] aeaudio C:\WINDOWS\system32\drivers\aeaudio.sys
16:52:44.0562 0132 aeaudio - ok
16:52:44.0578 0132 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
16:52:44.0593 0132 aec - ok
16:52:44.0609 0132 [ F498FD605C08404B20A48954C722FF74 ] AegisP C:\WINDOWS\system32\DRIVERS\AegisP.sys
16:52:44.0609 0132 AegisP - ok
16:52:44.0656 0132 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
16:52:44.0656 0132 AFD - ok
16:52:44.0687 0132 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
16:52:44.0687 0132 agp440 - ok
16:52:44.0734 0132 [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
16:52:44.0734 0132 agpCPQ - ok
16:52:44.0765 0132 [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x C:\WINDOWS\system32\DRIVERS\aha154x.sys
16:52:44.0765 0132 Aha154x - ok
16:52:44.0812 0132 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
16:52:44.0812 0132 aic78u2 - ok
16:52:44.0843 0132 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
16:52:44.0843 0132 aic78xx - ok
16:52:44.0921 0132 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
16:52:44.0921 0132 Alerter - ok
16:52:44.0953 0132 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
16:52:44.0953 0132 ALG - ok
16:52:44.0968 0132 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
16:52:44.0968 0132 AliIde - ok
16:52:45.0015 0132 [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541 C:\WINDOWS\system32\DRIVERS\alim1541.sys
16:52:45.0015 0132 alim1541 - ok
16:52:45.0031 0132 [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp C:\WINDOWS\system32\DRIVERS\amdagp.sys
16:52:45.0031 0132 amdagp - ok
16:52:45.0109 0132 [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint C:\WINDOWS\system32\DRIVERS\amsint.sys
16:52:45.0109 0132 amsint - ok
16:52:45.0140 0132 [ 11AB185A7AF224800BBFB5B836974A17 ] ANC C:\WINDOWS\system32\drivers\ANC.SYS
16:52:45.0140 0132 ANC - ok
16:52:45.0265 0132 [ 7EF47644B74EBE721CC32211D3C35E76 ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
16:52:45.0265 0132 Apple Mobile Device - ok
16:52:45.0312 0132 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
16:52:45.0312 0132 AppMgmt - ok
16:52:45.0359 0132 [ 62D318E9A0C8FC9B780008E724283707 ] asc C:\WINDOWS\system32\DRIVERS\asc.sys
16:52:45.0359 0132 asc - ok
16:52:45.0375 0132 [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p C:\WINDOWS\system32\DRIVERS\asc3350p.sys
16:52:45.0375 0132 asc3350p - ok
16:52:45.0390 0132 [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550 C:\WINDOWS\system32\DRIVERS\asc3550.sys
16:52:45.0390 0132 asc3550 - ok
16:52:45.0546 0132 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
16:52:45.0578 0132 aspnet_state - ok
16:52:45.0609 0132 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
16:52:45.0609 0132 AsyncMac - ok
16:52:45.0656 0132 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
16:52:45.0656 0132 atapi - ok
16:52:45.0671 0132 Atdisk - ok
16:52:45.0750 0132 [ 9ACFE943E4C48544462990DCD0737203 ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
16:52:45.0750 0132 Ati HotKey Poller - ok
16:52:45.0828 0132 [ 1D60887E03E82ABB5E07CD8CB50FDABF ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
16:52:45.0875 0132 ati2mtag - ok
16:52:45.0937 0132 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
16:52:45.0937 0132 Atmarpc - ok
16:52:45.0968 0132 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
16:52:45.0968 0132 AudioSrv - ok
16:52:46.0000 0132 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
16:52:46.0000 0132 audstub - ok
16:52:46.0156 0132 [ 3CE83DAAF178E2A8DBB5A1A7CB6892EA ] AVP C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 11\avp.exe
16:52:46.0171 0132 AVP - ok
16:52:46.0218 0132 [ 241474D01380E9ED41D4C07F4F5FD401 ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
16:52:46.0234 0132 b57w2k - ok
16:52:46.0281 0132 [ E7DEBB46B9EF1F28932E533BE4A3D1A9 ] BCM43XX C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
16:52:46.0296 0132 BCM43XX - ok
16:52:46.0343 0132 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
16:52:46.0343 0132 Beep - ok
16:52:46.0390 0132 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
16:52:46.0468 0132 BITS - ok
16:52:46.0531 0132 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe
16:52:46.0546 0132 Bonjour Service - ok
16:52:46.0593 0132 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
16:52:46.0593 0132 Browser - ok
16:52:46.0640 0132 [ F9B7BF50BB2111019F00BCF168754B50 ] btaudio C:\WINDOWS\system32\drivers\btaudio.sys
16:52:46.0640 0132 btaudio - ok
16:52:46.0656 0132 [ 2EC53B652B8A425930611163C226788E ] BTDriver C:\WINDOWS\system32\DRIVERS\btport.sys
16:52:46.0656 0132 BTDriver - ok
16:52:46.0750 0132 [ 9EB1A41F33F834DEE770777A4F507EFF ] BTKRNL C:\WINDOWS\system32\drivers\btkrnl.sys
16:52:46.0812 0132 BTKRNL - ok
16:52:46.0890 0132 [ B3D534B804AFF54F0026F17106052104 ] btwdins C:\Programme\ThinkPad\Bluetooth Software\bin\btwdins.exe
16:52:46.0890 0132 btwdins - ok
16:52:46.0921 0132 [ 12BD8FA13F7BB232121402E543A8441B ] BTWDNDIS C:\WINDOWS\system32\DRIVERS\btwdndis.sys
16:52:46.0937 0132 BTWDNDIS - ok
16:52:46.0953 0132 [ 2B53DDCC571948DDF0FD89B2589DA435 ] BTWUSB C:\WINDOWS\system32\Drivers\btwusb.sys
16:52:46.0953 0132 BTWUSB - ok
16:52:47.0015 0132 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
16:52:47.0015 0132 cbidf - ok
16:52:47.0031 0132 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
16:52:47.0031 0132 cbidf2k - ok
16:52:47.0062 0132 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
16:52:47.0062 0132 CCDECODE - ok
16:52:47.0093 0132 [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
16:52:47.0093 0132 cd20xrnt - ok
16:52:47.0109 0132 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
16:52:47.0109 0132 Cdaudio - ok
16:52:47.0125 0132 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
16:52:47.0140 0132 Cdfs - ok
16:52:47.0171 0132 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
16:52:47.0171 0132 Cdrom - ok
16:52:47.0187 0132 Changer - ok
16:52:47.0218 0132 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
16:52:47.0218 0132 CiSvc - ok
16:52:47.0250 0132 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
16:52:47.0250 0132 ClipSrv - ok
16:52:47.0328 0132 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:52:47.0406 0132 clr_optimization_v2.0.50727_32 - ok
16:52:47.0421 0132 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
16:52:47.0421 0132 CmBatt - ok
16:52:47.0453 0132 [ C687F81290303D90099B027A6474F99F ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
16:52:47.0453 0132 CmdIde - ok
16:52:47.0484 0132 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
16:52:47.0484 0132 Compbatt - ok
16:52:47.0500 0132 COMSysApp - ok
16:52:47.0546 0132 [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray C:\WINDOWS\system32\DRIVERS\cpqarray.sys
16:52:47.0546 0132 Cpqarray - ok
16:52:47.0578 0132 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
16:52:47.0578 0132 CryptSvc - ok
16:52:47.0609 0132 [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
16:52:47.0609 0132 dac2w2k - ok
16:52:47.0640 0132 [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt C:\WINDOWS\system32\DRIVERS\dac960nt.sys
16:52:47.0640 0132 dac960nt - ok
16:52:47.0687 0132 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
16:52:47.0703 0132 DcomLaunch - ok
16:52:47.0765 0132 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
16:52:47.0781 0132 Dhcp - ok
16:52:47.0796 0132 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
16:52:47.0796 0132 Disk - ok
16:52:47.0812 0132 dmadmin - ok
16:52:47.0859 0132 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
16:52:47.0890 0132 dmboot - ok
16:52:47.0906 0132 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
16:52:47.0921 0132 dmio - ok
16:52:47.0953 0132 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
16:52:47.0953 0132 dmload - ok
16:52:47.0984 0132 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
16:52:47.0984 0132 dmserver - ok
16:52:48.0015 0132 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
16:52:48.0015 0132 DMusic - ok
16:52:48.0062 0132 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
16:52:48.0062 0132 Dnscache - ok
16:52:48.0156 0132 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
16:52:48.0156 0132 Dot3svc - ok
16:52:48.0187 0132 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
16:52:48.0187 0132 dpti2o - ok
16:52:48.0218 0132 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
16:52:48.0218 0132 drmkaud - ok
16:52:48.0250 0132 [ 24646242310499D75C6DB4B32768A3B3 ] drvmcdb C:\WINDOWS\system32\drivers\drvmcdb.sys
16:52:48.0265 0132 drvmcdb - ok
16:52:48.0281 0132 [ B295700E684ED1984DB1D6BE40354421 ] drvnddm C:\WINDOWS\system32\drivers\drvnddm.sys
16:52:48.0281 0132 drvnddm - ok
16:52:48.0328 0132 [ A6DE5342417FEC3C0AA8EFEBB899C431 ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
16:52:48.0328 0132 E100B - ok
16:52:48.0359 0132 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
16:52:48.0359 0132 EapHost - ok
16:52:48.0406 0132 [ 7F220875288944C9C7856E2BC8613B1F ] EGATHDRV C:\WINDOWS\Downloaded Program Files\EGATHDRV.SYS
16:52:48.0406 0132 EGATHDRV - ok
16:52:48.0453 0132 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
16:52:48.0453 0132 ERSvc - ok
16:52:48.0500 0132 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
16:52:48.0515 0132 Eventlog - ok
16:52:48.0562 0132 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
16:52:48.0562 0132 EventSystem - ok
16:52:48.0625 0132 [ 80AAA1C7520C86CA0641C69851E124AF ] EvtEng C:\Programme\Intel\Wireless\Bin\EvtEng.exe
16:52:48.0625 0132 EvtEng - ok
16:52:48.0671 0132 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
16:52:48.0671 0132 Fastfat - ok
16:52:48.0718 0132 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
16:52:48.0718 0132 FastUserSwitchingCompatibility - ok
16:52:48.0750 0132 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
16:52:48.0750 0132 Fdc - ok
16:52:48.0765 0132 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
16:52:48.0765 0132 Fips - ok
16:52:48.0796 0132 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
16:52:48.0796 0132 Flpydisk - ok
16:52:48.0843 0132 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
16:52:48.0859 0132 FltMgr - ok
16:52:48.0953 0132 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
16:52:48.0953 0132 FontCache3.0.0.0 - ok
16:52:48.0968 0132 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
16:52:48.0984 0132 Fs_Rec - ok
16:52:49.0000 0132 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
16:52:49.0000 0132 Ftdisk - ok
16:52:49.0031 0132 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
16:52:49.0031 0132 GEARAspiWDM - ok
16:52:49.0062 0132 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
16:52:49.0062 0132 Gpc - ok
16:52:49.0125 0132 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
16:52:49.0125 0132 helpsvc - ok
16:52:49.0140 0132 HidServ - ok
16:52:49.0187 0132 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
16:52:49.0187 0132 HidUsb - ok
16:52:49.0265 0132 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
16:52:49.0281 0132 hkmsvc - ok
16:52:49.0343 0132 [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn C:\WINDOWS\system32\DRIVERS\hpn.sys
16:52:49.0343 0132 hpn - ok
16:52:49.0390 0132 [ 7B555FF6647069BD1D68B4F9556A7B16 ] HSFHWICH C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys
16:52:49.0390 0132 HSFHWICH - ok
16:52:49.0437 0132 [ 43B60F94718841E13B9DD8905366BDBD ] HSF_DP C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
16:52:49.0484 0132 HSF_DP - ok
16:52:49.0500 0132 HTCAND32 - ok
16:52:49.0546 0132 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
16:52:49.0562 0132 HTTP - ok
16:52:49.0593 0132 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
16:52:49.0609 0132 HTTPFilter - ok
16:52:49.0671 0132 [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt C:\WINDOWS\system32\drivers\i2omgmt.sys
16:52:49.0671 0132 i2omgmt - ok
16:52:49.0718 0132 [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp C:\WINDOWS\system32\DRIVERS\i2omp.sys
16:52:49.0734 0132 i2omp - ok
16:52:49.0750 0132 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
16:52:49.0750 0132 i8042prt - ok
16:52:49.0812 0132 [ 643162FBC619E35D3F1A90A095A5BB42 ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
16:52:49.0875 0132 ialm - ok
16:52:49.0890 0132 [ 6207F110F2530F187BF876012EBEC664 ] IBMPMDRV C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys
16:52:49.0890 0132 IBMPMDRV - ok
16:52:49.0953 0132 [ BE5A1CAA43DD8D9BA44C516AFF001089 ] IBMPMSVC C:\WINDOWS\system32\ibmpmsvc.exe
16:52:49.0953 0132 IBMPMSVC - ok
16:52:49.0968 0132 [ 73893E9A62D869A0409DF9C12A0EBEFE ] IBMTPCHK C:\WINDOWS\system32\drivers\IBMBLDID.SYS
16:52:49.0968 0132 IBMTPCHK - ok
16:52:50.0062 0132 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
16:52:50.0078 0132 IDriverT - ok
16:52:50.0203 0132 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:52:50.0250 0132 idsvc - ok
16:52:50.0281 0132 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
16:52:50.0281 0132 Imapi - ok
16:52:50.0328 0132 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
16:52:50.0328 0132 ImapiService - ok
16:52:50.0359 0132 [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u C:\WINDOWS\system32\DRIVERS\ini910u.sys
16:52:50.0359 0132 ini910u - ok
16:52:50.0390 0132 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
16:52:50.0390 0132 IntelIde - ok
16:52:50.0437 0132 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
16:52:50.0437 0132 intelppm - ok
16:52:50.0468 0132 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
16:52:50.0468 0132 Ip6Fw - ok
16:52:50.0500 0132 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
16:52:50.0500 0132 IpFilterDriver - ok
16:52:50.0515 0132 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
16:52:50.0515 0132 IpInIp - ok
16:52:50.0562 0132 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
16:52:50.0562 0132 IpNat - ok
16:52:50.0578 0132 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
16:52:50.0578 0132 IPSec - ok
16:52:50.0609 0132 [ ACA5E7B54409F9CB5EED97ED0C81120E ] irda C:\WINDOWS\system32\DRIVERS\irda.sys
16:52:50.0609 0132 irda - ok
16:52:50.0640 0132 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
16:52:50.0640 0132 IRENUM - ok
16:52:50.0687 0132 [ 2EFE1DB1EC58A26B0C14BFDA122E246F ] Irmon C:\WINDOWS\System32\irmon.dll
16:52:50.0687 0132 Irmon - ok
16:52:50.0734 0132 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
16:52:50.0734 0132 isapnp - ok
16:52:50.0828 0132 [ 381B25DC8E958D905B33130D500BBF29 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
16:52:50.0828 0132 JavaQuickStarterService - ok
16:52:50.0859 0132 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
16:52:50.0859 0132 Kbdclass - ok
16:52:50.0937 0132 [ 94D67D49BD9503BB1D838405D80F2058 ] KL1 C:\WINDOWS\system32\DRIVERS\kl1.sys
16:52:50.0937 0132 KL1 - ok
16:52:50.0953 0132 [ 713576569667AC9E0F8556076004A96B ] kl2 C:\WINDOWS\system32\DRIVERS\kl2.sys
16:52:50.0968 0132 kl2 - ok
16:52:51.0046 0132 [ 44EC6B3DBE167C7FA818F9918D2CBF22 ] KLIF C:\WINDOWS\system32\DRIVERS\klif.sys
16:52:51.0062 0132 KLIF - ok
16:52:51.0109 0132 [ 8D6E11BFA9927978D25B1B8029554F07 ] klim5 C:\WINDOWS\system32\DRIVERS\klim5.sys
16:52:51.0109 0132 klim5 - ok
16:52:51.0125 0132 [ 3959530F69E19DA56F1F24F2C89F1E2C ] klmouflt C:\WINDOWS\system32\DRIVERS\klmouflt.sys
16:52:51.0125 0132 klmouflt - ok
16:52:51.0156 0132 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
16:52:51.0171 0132 kmixer - ok
16:52:51.0187 0132 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
16:52:51.0187 0132 KSecDD - ok
16:52:51.0234 0132 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
16:52:51.0234 0132 lanmanserver - ok
16:52:51.0250 0132 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
16:52:51.0296 0132 lanmanworkstation - ok
16:52:51.0312 0132 lbrtfdc - ok
16:52:51.0375 0132 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
16:52:51.0375 0132 LmHosts - ok
16:52:51.0406 0132 [ BEE76AC58BB524523A84000BA8EFE55A ] MDC8021X C:\WINDOWS\system32\DRIVERS\mdc8021x.sys
16:52:51.0406 0132 MDC8021X - ok
16:52:51.0421 0132 [ 3C318B9CD391371BED62126581EE9961 ] mdmxsdk C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
16:52:51.0421 0132 mdmxsdk - ok
16:52:51.0453 0132 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
16:52:51.0453 0132 Messenger - ok
16:52:51.0500 0132 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
16:52:51.0500 0132 mnmdd - ok
16:52:51.0546 0132 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
16:52:51.0546 0132 mnmsrvc - ok
16:52:51.0562 0132 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
16:52:51.0578 0132 Modem - ok
16:52:51.0609 0132 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
16:52:51.0609 0132 Mouclass - ok
16:52:51.0671 0132 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
16:52:51.0671 0132 mouhid - ok
16:52:51.0703 0132 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
16:52:51.0703 0132 MountMgr - ok
16:52:51.0796 0132 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
16:52:51.0796 0132 MozillaMaintenance - ok
16:52:51.0828 0132 [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x C:\WINDOWS\system32\DRIVERS\mraid35x.sys
16:52:51.0828 0132 mraid35x - ok
16:52:51.0859 0132 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
16:52:51.0859 0132 MRxDAV - ok
16:52:51.0921 0132 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
16:52:51.0937 0132 MRxSmb - ok
16:52:51.0953 0132 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
16:52:51.0953 0132 MSDTC - ok
16:52:51.0968 0132 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
16:52:51.0968 0132 Msfs - ok
16:52:51.0984 0132 MSIServer - ok
16:52:52.0015 0132 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
16:52:52.0015 0132 MSKSSRV - ok
16:52:52.0046 0132 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
16:52:52.0046 0132 MSPCLOCK - ok
16:52:52.0062 0132 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
16:52:52.0078 0132 MSPQM - ok
16:52:52.0093 0132 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
16:52:52.0093 0132 mssmbios - ok
16:52:52.0156 0132 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
16:52:52.0156 0132 MSTEE - ok
16:52:52.0187 0132 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
16:52:52.0187 0132 Mup - ok
16:52:52.0218 0132 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
16:52:52.0218 0132 NABTSFEC - ok
16:52:52.0281 0132 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
16:52:52.0296 0132 napagent - ok
16:52:52.0343 0132 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
16:52:52.0343 0132 NDIS - ok
16:52:52.0375 0132 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
16:52:52.0375 0132 NdisIP - ok
16:52:52.0421 0132 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
16:52:52.0421 0132 NdisTapi - ok
16:52:52.0453 0132 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
16:52:52.0453 0132 Ndisuio - ok
16:52:52.0468 0132 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
16:52:52.0468 0132 NdisWan - ok
16:52:52.0500 0132 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
16:52:52.0500 0132 NDProxy - ok
16:52:52.0546 0132 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
16:52:52.0546 0132 NetBIOS - ok
16:52:52.0578 0132 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
16:52:52.0578 0132 NetBT - ok
16:52:52.0625 0132 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
16:52:52.0625 0132 NetDDE - ok
16:52:52.0640 0132 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
16:52:52.0640 0132 NetDDEdsdm - ok
16:52:52.0671 0132 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
16:52:52.0671 0132 Netlogon - ok
16:52:52.0703 0132 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
16:52:52.0718 0132 Netman - ok
16:52:52.0765 0132 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:52:52.0765 0132 NetTcpPortSharing - ok
16:52:52.0796 0132 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
16:52:52.0812 0132 Nla - ok
16:52:52.0812 0132 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
16:52:52.0812 0132 Npfs - ok
16:52:52.0843 0132 [ 2ADC0CA9945C65284B3D19BC18765974 ] NSCIRDA C:\WINDOWS\system32\DRIVERS\nscirda.sys
16:52:52.0859 0132 NSCIRDA - ok
16:52:52.0921 0132 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
16:52:52.0953 0132 Ntfs - ok
16:52:52.0968 0132 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
16:52:52.0968 0132 NtLmSsp - ok
16:52:53.0015 0132 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
16:52:53.0031 0132 NtmsSvc - ok
16:52:53.0062 0132 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
16:52:53.0062 0132 Null - ok
16:52:53.0140 0132 [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
16:52:53.0218 0132 nv - ok
16:52:53.0296 0132 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
16:52:53.0296 0132 NwlnkFlt - ok
16:52:53.0312 0132 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
16:52:53.0312 0132 NwlnkFwd - ok
16:52:53.0375 0132 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
16:52:53.0375 0132 ose - ok
16:52:53.0406 0132 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
16:52:53.0406 0132 Parport - ok
16:52:53.0437 0132 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
16:52:53.0437 0132 PartMgr - ok
16:52:53.0468 0132 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
16:52:53.0468 0132 ParVdm - ok
16:52:53.0531 0132 [ 505CBA425DF3BB230F244E1C23221058 ] PcdrNdisuio C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys
16:52:53.0546 0132 PcdrNdisuio - ok
16:52:53.0562 0132 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
16:52:53.0562 0132 PCI - ok
16:52:53.0578 0132 PCIDump - ok
16:52:53.0593 0132 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
16:52:53.0593 0132 PCIIde - ok
16:52:53.0656 0132 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\DRIVERS\pcmcia.sys
16:52:53.0656 0132 Pcmcia - ok
16:52:53.0671 0132 PDCOMP - ok
16:52:53.0687 0132 PDFRAME - ok
16:52:53.0687 0132 PDRELI - ok
16:52:53.0703 0132 PDRFRAME - ok
16:52:53.0734 0132 [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2 C:\WINDOWS\system32\DRIVERS\perc2.sys
16:52:53.0734 0132 perc2 - ok
16:52:53.0781 0132 [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib C:\WINDOWS\system32\DRIVERS\perc2hib.sys
16:52:53.0781 0132 perc2hib - ok
16:52:53.0843 0132 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
16:52:53.0843 0132 PlugPlay - ok
16:52:53.0875 0132 [ FA292805788528C083F416E151B60AB6 ] PMEM C:\WINDOWS\SYSTEM32\Drivers\PMEMNT.SYS
16:52:53.0875 0132 PMEM - ok
16:52:53.0875 0132 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
16:52:53.0890 0132 PolicyAgent - ok
16:52:53.0921 0132 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
16:52:53.0921 0132 PptpMiniport - ok
16:52:53.0953 0132 [ 2CB55427C58679F49AD600FCCBA76360 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
16:52:53.0953 0132 Processor - ok
16:52:53.0968 0132 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
16:52:53.0968 0132 ProtectedStorage - ok
16:52:53.0984 0132 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
16:52:53.0984 0132 PSched - ok
16:52:54.0015 0132 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
16:52:54.0015 0132 Ptilink - ok
16:52:54.0031 0132 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
16:52:54.0031 0132 PxHelp20 - ok
16:52:54.0093 0132 [ 8127CD3D08A48793D2C155FB4D9AF8EF ] QCNDISIF C:\WINDOWS\system32\drivers\qcndisif.SYS
16:52:54.0093 0132 QCNDISIF - ok
16:52:54.0140 0132 [ 12B7B882E0087AA388EE24C4A4ADBB77 ] QCONSVC C:\WINDOWS\system32\QCONSVC.EXE
16:52:54.0140 0132 QCONSVC - ok
16:52:54.0171 0132 [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080 C:\WINDOWS\system32\DRIVERS\ql1080.sys
16:52:54.0171 0132 ql1080 - ok
16:52:54.0187 0132 [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
16:52:54.0187 0132 Ql10wnt - ok
16:52:54.0203 0132 [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160 C:\WINDOWS\system32\DRIVERS\ql12160.sys
16:52:54.0203 0132 ql12160 - ok
16:52:54.0218 0132 [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240 C:\WINDOWS\system32\DRIVERS\ql1240.sys
16:52:54.0218 0132 ql1240 - ok
16:52:54.0234 0132 [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280 C:\WINDOWS\system32\DRIVERS\ql1280.sys
16:52:54.0234 0132 ql1280 - ok
16:52:54.0265 0132 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
16:52:54.0265 0132 RasAcd - ok
16:52:54.0328 0132 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
16:52:54.0328 0132 RasAuto - ok
16:52:54.0343 0132 [ 0207D26DDF796A193CCD9F83047BB5FC ] Rasirda C:\WINDOWS\system32\DRIVERS\rasirda.sys
16:52:54.0343 0132 Rasirda - ok
16:52:54.0359 0132 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
16:52:54.0359 0132 Rasl2tp - ok
16:52:54.0406 0132 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
16:52:54.0421 0132 RasMan - ok
16:52:54.0437 0132 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
16:52:54.0437 0132 RasPppoe - ok
16:52:54.0453 0132 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
16:52:54.0453 0132 Raspti - ok
16:52:54.0500 0132 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
16:52:54.0500 0132 Rdbss - ok
16:52:54.0515 0132 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
16:52:54.0515 0132 RDPCDD - ok
16:52:54.0578 0132 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
16:52:54.0578 0132 rdpdr - ok
16:52:54.0625 0132 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
16:52:54.0625 0132 RDPWD - ok
16:52:54.0703 0132 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
16:52:54.0718 0132 RDSessMgr - ok
16:52:54.0734 0132 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
16:52:54.0734 0132 redbook - ok
16:52:54.0796 0132 [ F8489639E1D60D21F63F69A0605DD667 ] RegSrvc C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
16:52:54.0796 0132 RegSrvc - ok
16:52:54.0828 0132 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
16:52:54.0828 0132 RemoteAccess - ok
16:52:54.0859 0132 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
16:52:54.0859 0132 RemoteRegistry - ok
16:52:54.0875 0132 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
16:52:54.0875 0132 RpcLocator - ok
16:52:54.0937 0132 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
16:52:54.0953 0132 RpcSs - ok
16:52:54.0984 0132 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
16:52:54.0984 0132 RSVP - ok
16:52:55.0031 0132 [ 3962B7C74E9E335FAA419CCBF4BD1835 ] S24EventMonitor C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
16:52:55.0031 0132 S24EventMonitor - ok
16:52:55.0062 0132 [ 85A26A3BB748DFD3170CDBF45B0DD7FD ] s24trans C:\WINDOWS\system32\DRIVERS\s24trans.sys
16:52:55.0062 0132 s24trans - ok
16:52:55.0093 0132 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
16:52:55.0093 0132 SamSs - ok
16:52:55.0093 0132 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
16:52:55.0109 0132 SCardSvr - ok
16:52:55.0140 0132 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
16:52:55.0140 0132 Schedule - ok
16:52:55.0187 0132 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
16:52:55.0187 0132 Secdrv - ok
16:52:55.0203 0132 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
16:52:55.0203 0132 seclogon - ok
16:52:55.0218 0132 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
16:52:55.0218 0132 SENS - ok
16:52:55.0250 0132 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
16:52:55.0250 0132 serenum - ok
16:52:55.0281 0132 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
16:52:55.0281 0132 Serial - ok
16:52:55.0359 0132 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
16:52:55.0359 0132 Sfloppy - ok
16:52:55.0406 0132 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
16:52:55.0406 0132 SharedAccess - ok
16:52:55.0437 0132 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
16:52:55.0437 0132 ShellHWDetection - ok
16:52:55.0484 0132 [ 482DDB9F0F6D88F0503910E1B9728042 ] ShockMgr C:\WINDOWS\system32\drivers\ShockMgr.sys
16:52:55.0484 0132 ShockMgr - ok
16:52:55.0562 0132 [ E467B7D35E5DB9BD12E138CD5C7F4368 ] Shockprf C:\WINDOWS\system32\drivers\Shockprf.sys
16:52:55.0578 0132 Shockprf - ok
16:52:55.0593 0132 Simbad - ok
16:52:55.0625 0132 [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp C:\WINDOWS\system32\DRIVERS\sisagp.sys
16:52:55.0625 0132 sisagp - ok
16:52:55.0718 0132 [ 6128E98EAAED364ED1A32708D2FD22CB ] SkypeUpdate C:\Programme\Skype\Updater\Updater.exe
16:52:55.0718 0132 SkypeUpdate - ok
16:52:55.0796 0132 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
16:52:55.0796 0132 SLIP - ok
16:52:55.0812 0132 [ 26341D0DD225D19FD50E0EE3C3C77502 ] Smapint C:\WINDOWS\system32\drivers\Smapint.sys
16:52:55.0812 0132 Smapint - ok
16:52:55.0890 0132 [ 14BB60A4F1C5291217A05D5728C403E6 ] SmartDefragDriver C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys
16:52:55.0890 0132 SmartDefragDriver - ok
16:52:55.0968 0132 [ 3E28851C32B62F9739EACE6C8AF9CF95 ] SmiHlp C:\Programme\IBM fingerprint software\smihlp.sys
16:52:55.0968 0132 SmiHlp - ok
16:52:56.0015 0132 [ B09F23BF6E451B7A492B4A3D5EACFB24 ] smwdm C:\WINDOWS\system32\drivers\smwdm.sys
16:52:56.0015 0132 smwdm - ok
16:52:56.0453 0132 [ 11BB0E11D42CC3A43D741D9B30839BE1 ] SNPSTD3 C:\WINDOWS\system32\DRIVERS\snpstd3.sys
16:52:56.0843 0132 SNPSTD3 - ok
16:52:56.0890 0132 [ 3978F082274F723AD5A0A8058C2417DD ] SoundMAX Agent Service (default) C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
16:52:56.0890 0132 SoundMAX Agent Service (default) - ok
16:52:56.0953 0132 [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow C:\WINDOWS\system32\DRIVERS\sparrow.sys
16:52:56.0953 0132 Sparrow - ok
16:52:57.0000 0132 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
16:52:57.0000 0132 splitter - ok
16:52:57.0046 0132 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
16:52:57.0046 0132 Spooler - ok
16:52:57.0078 0132 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
16:52:57.0093 0132 sr - ok
16:52:57.0125 0132 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
16:52:57.0125 0132 srservice - ok
16:52:57.0187 0132 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
16:52:57.0187 0132 Srv - ok
16:52:57.0218 0132 [ D7968049BE0ADBB6A57CEE3960320911 ] sscdbhk5 C:\WINDOWS\system32\drivers\sscdbhk5.sys
16:52:57.0218 0132 sscdbhk5 - ok
16:52:57.0250 0132 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
16:52:57.0250 0132 SSDPSRV - ok
16:52:57.0265 0132 [ C3FFD65ABFB6441E7606CF74F1155273 ] ssrtln C:\WINDOWS\system32\drivers\ssrtln.sys
16:52:57.0281 0132 ssrtln - ok
16:52:57.0312 0132 [ A2DBCC4C8860449DF1AB758EA28B4DE0 ] StillCam C:\WINDOWS\system32\DRIVERS\serscan.sys
16:52:57.0312 0132 StillCam - ok
16:52:57.0359 0132 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
16:52:57.0375 0132 stisvc - ok
16:52:57.0406 0132 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
16:52:57.0406 0132 streamip - ok
16:52:57.0437 0132 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
16:52:57.0437 0132 swenum - ok
16:52:57.0468 0132 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
16:52:57.0468 0132 swmidi - ok
16:52:57.0468 0132 SwPrv - ok
16:52:57.0515 0132 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
16:52:57.0515 0132 symc810 - ok
16:52:57.0546 0132 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
16:52:57.0546 0132 symc8xx - ok
16:52:57.0562 0132 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
16:52:57.0562 0132 sym_hi - ok
16:52:57.0609 0132 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
16:52:57.0609 0132 sym_u3 - ok
16:52:57.0656 0132 [ 68775382C3B842E9CCBA64B7E13083E2 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
16:52:57.0656 0132 SynTP - ok
16:52:57.0687 0132 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
16:52:57.0687 0132 sysaudio - ok
16:52:57.0734 0132 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
16:52:57.0734 0132 SysmonLog - ok
16:52:57.0765 0132 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
16:52:57.0781 0132 TapiSrv - ok
16:52:57.0812 0132 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
16:52:57.0828 0132 Tcpip - ok
16:52:57.0843 0132 [ 63E7729E6EBC6F136F648D293B2FFAAC ] TcUsb C:\WINDOWS\system32\Drivers\tcusb.sys
16:52:57.0843 0132 TcUsb - ok
16:52:57.0875 0132 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
16:52:57.0875 0132 TDPIPE - ok
16:52:57.0890 0132 [ E9512AC82FFF83808549267078B38FE5 ] TDSMAPI C:\WINDOWS\system32\drivers\TDSMAPI.SYS
16:52:57.0890 0132 TDSMAPI - ok
16:52:57.0921 0132 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
16:52:57.0921 0132 TDTCP - ok
16:52:57.0953 0132 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
16:52:57.0953 0132 TermDD - ok
16:52:58.0000 0132 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
16:52:58.0000 0132 TermService - ok
16:52:58.0062 0132 [ 818BC02BFFB1370961092C6B5B61EFFD ] tfsnboio C:\WINDOWS\system32\dla\tfsnboio.sys
16:52:58.0062 0132 tfsnboio - ok
16:52:58.0078 0132 [ D416D123824BB68BD42337220EABD0F8 ] tfsncofs C:\WINDOWS\system32\dla\tfsncofs.sys
16:52:58.0078 0132 tfsncofs - ok
16:52:58.0093 0132 [ D727BA310C389B8AAF430C6EB43BB6CC ] tfsndrct C:\WINDOWS\system32\dla\tfsndrct.sys
16:52:58.0093 0132 tfsndrct - ok
16:52:58.0109 0132 [ 94C2DA1A19E170048799C00131BD540D ] tfsndres C:\WINDOWS\system32\dla\tfsndres.sys
16:52:58.0109 0132 tfsndres - ok
16:52:58.0125 0132 [ 8CD4967293437D61DA143BE54C4059F5 ] tfsnifs C:\WINDOWS\system32\dla\tfsnifs.sys
16:52:58.0140 0132 tfsnifs - ok
16:52:58.0156 0132 [ 8B99B4D9B8A63E2A4364654DFC371417 ] tfsnopio C:\WINDOWS\system32\dla\tfsnopio.sys
16:52:58.0156 0132 tfsnopio - ok
16:52:58.0171 0132 [ A7608FBE5C71E742CF22C622A4E143B2 ] tfsnpool C:\WINDOWS\system32\dla\tfsnpool.sys
16:52:58.0171 0132 tfsnpool - ok
16:52:58.0187 0132 [ B2F93BBA5135535F087808C50877D18D ] tfsnudf C:\WINDOWS\system32\dla\tfsnudf.sys
16:52:58.0187 0132 tfsnudf - ok
16:52:58.0203 0132 [ FF0251484AAEAE12263538EF877A5F4B ] tfsnudfa C:\WINDOWS\system32\dla\tfsnudfa.sys
16:52:58.0203 0132 tfsnudfa - ok
16:52:58.0218 0132 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
16:52:58.0234 0132 Themes - ok
16:52:58.0265 0132 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
16:52:58.0281 0132 TlntSvr - ok
16:52:58.0296 0132 [ D213A9247DC347F305A2D4CC9B951487 ] TosIde C:\WINDOWS\system32\DRIVERS\toside.sys
16:52:58.0296 0132 TosIde - ok
16:52:58.0328 0132 [ AC7543F9ADB2127F70DE192089DA9A1F ] TPDiskPM C:\WINDOWS\system32\drivers\TPDiskPM.sys
16:52:58.0328 0132 TPDiskPM - ok
16:52:58.0375 0132 [ F67908366F932BCF88096AF6B2CE3186 ] TPHDEXLGSVC C:\WINDOWS\system32\TPHDEXLG.EXE
16:52:58.0375 0132 TPHDEXLGSVC - ok
16:52:58.0390 0132 [ 63421F480E7CD375329ACE8588FED1AC ] TPHKDRV C:\WINDOWS\system32\drivers\TPHKDRV.sys
16:52:58.0390 0132 TPHKDRV - ok
16:52:58.0421 0132 [ F53589467C0A112BEC1835C72457A8A1 ] TPInput C:\WINDOWS\system32\DRIVERS\TPInput.sys
16:52:58.0421 0132 TPInput - ok
16:52:58.0453 0132 [ DFB268FF0A6DCB9280015FF527F892FF ] TpKmpSVC C:\WINDOWS\system32\TpKmpSVC.exe
16:52:58.0453 0132 TpKmpSVC - ok
16:52:58.0484 0132 [ 8DCAF6B264F8A701DE916ACE452C895D ] TPM11 C:\WINDOWS\system32\DRIVERS\nsctpm11.sys
16:52:58.0484 0132 TPM11 - ok
16:52:58.0515 0132 [ 44672DE6CEA9569C21C4B7A8D2560750 ] TPPWRIF C:\WINDOWS\system32\drivers\Tppwrif.sys
16:52:58.0515 0132 TPPWRIF - ok
16:52:58.0578 0132 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
16:52:58.0578 0132 TrkWks - ok
16:52:58.0593 0132 [ F2ABA3066D7921D7FCDBD66DEA88BE11 ] TSMAPIP C:\WINDOWS\system32\drivers\TSMAPIP.SYS
16:52:58.0593 0132 TSMAPIP - ok
16:52:58.0625 0132 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
16:52:58.0625 0132 Udfs - ok
16:52:58.0671 0132 [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra C:\WINDOWS\system32\DRIVERS\ultra.sys
16:52:58.0671 0132 ultra - ok
16:52:58.0718 0132 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
16:52:58.0734 0132 Update - ok
16:52:58.0750 0132 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
16:52:58.0750 0132 upnphost - ok
16:52:58.0781 0132 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
16:52:58.0781 0132 UPS - ok
16:52:58.0843 0132 [ EAFE1E00739AFE6C51487A050E772E17 ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys
16:52:58.0843 0132 USBAAPL - ok
16:52:58.0890 0132 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
16:52:58.0890 0132 usbaudio - ok
16:52:58.0921 0132 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
16:52:58.0921 0132 usbccgp - ok
16:52:58.0953 0132 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
16:52:58.0953 0132 usbehci - ok
16:52:59.0000 0132 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
16:52:59.0000 0132 usbhub - ok
16:52:59.0062 0132 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
16:52:59.0062 0132 usbscan - ok
16:52:59.0125 0132 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
16:52:59.0125 0132 USBSTOR - ok
16:52:59.0156 0132 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
16:52:59.0156 0132 usbuhci - ok
16:52:59.0187 0132 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
16:52:59.0187 0132 VgaSave - ok
16:52:59.0250 0132 [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp C:\WINDOWS\system32\DRIVERS\viaagp.sys
16:52:59.0250 0132 viaagp - ok
16:52:59.0296 0132 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
16:52:59.0312 0132 ViaIde - ok
16:52:59.0343 0132 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
16:52:59.0343 0132 VolSnap - ok
16:52:59.0390 0132 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
16:52:59.0406 0132 VSS - ok
16:52:59.0453 0132 [ CDE0FEA0DD3B4078865B6B1F37D865AB ] vtserver C:\Programme\Gemeinsame Dateien\Virtual Token\vtserver.exe
16:52:59.0453 0132 vtserver - ok
16:52:59.0609 0132 [ 39AC581F5B57E3074E3E5CDAB9E7DFF1 ] w29n51 C:\WINDOWS\system32\DRIVERS\w29n51.sys
16:52:59.0750 0132 w29n51 - ok
16:52:59.0765 0132 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
16:52:59.0781 0132 W32Time - ok
16:52:59.0828 0132 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
16:52:59.0828 0132 Wanarp - ok
16:52:59.0890 0132 [ 4769596D7CC0F5FA447D2BABC239672A ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
16:52:59.0890 0132 Wdf01000 - ok
16:52:59.0906 0132 WDICA - ok
16:52:59.0937 0132 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
16:52:59.0937 0132 wdmaud - ok
16:52:59.0984 0132 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
16:52:59.0984 0132 WebClient - ok
16:53:00.0046 0132 [ C3D9C524CD25E19D212CACBFB925EE1F ] winachsf C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
16:53:00.0078 0132 winachsf - ok
16:53:00.0156 0132 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
16:53:00.0156 0132 winmgmt - ok
16:53:00.0187 0132 WLTRYSVC - ok
16:53:00.0281 0132 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
16:53:00.0281 0132 WmdmPmSN - ok
16:53:00.0343 0132 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
16:53:00.0375 0132 Wmi - ok
16:53:00.0406 0132 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
16:53:00.0406 0132 WmiApSrv - ok
16:53:00.0546 0132 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
16:53:00.0593 0132 WMPNetworkSvc - ok
16:53:00.0640 0132 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\Drivers\wpdusb.sys
16:53:00.0640 0132 WpdUsb - ok
16:53:00.0687 0132 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
16:53:00.0687 0132 WS2IFSL - ok
16:53:00.0718 0132 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
16:53:00.0718 0132 WSTCODEC - ok
16:53:00.0765 0132 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
16:53:00.0812 0132 wuauserv - ok
16:53:00.0843 0132 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
16:53:00.0843 0132 WudfPf - ok
16:53:00.0906 0132 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
16:53:00.0906 0132 WudfRd - ok
16:53:00.0953 0132 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
16:53:00.0968 0132 WudfSvc - ok
16:53:01.0000 0132 wuwxb - ok
16:53:01.0125 0132 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
16:53:01.0140 0132 WZCSVC - ok
16:53:01.0187 0132 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
16:53:01.0187 0132 xmlprov - ok
16:53:01.0234 0132 ================ Scan global ===============================
16:53:01.0296 0132 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
16:53:01.0312 0132 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
16:53:01.0343 0132 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
16:53:01.0359 0132 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
16:53:01.0375 0132 [Global] - ok
16:53:01.0375 0132 ================ Scan MBR ==================================
16:53:01.0390 0132 [ 4661F953F30D48FD76A9DA73C4892179 ] \Device\Harddisk0\DR0
16:53:01.0640 0132 \Device\Harddisk0\DR0 - ok
16:53:01.0656 0132 ================ Scan VBR ==================================
16:53:01.0656 0132 [ 042328936BEAB87EE7DE6CA5BED0E384 ] \Device\Harddisk0\DR0\Partition1
16:53:01.0656 0132 \Device\Harddisk0\DR0\Partition1 - ok
16:53:01.0656 0132 ============================================================
16:53:01.0656 0132 Scan finished
16:53:01.0656 0132 ============================================================
16:53:01.0687 0192 Detected object count: 0
16:53:01.0687 0192 Actual detected object count: 0
Ich warte also auf weitere Hinweise.
Danke.
Gruss
Martin |
