Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   delta search eingefangen (https://www.trojaner-board.de/136569-delta-search-eingefangen.html)

Troxopog 14.06.2013 10:32
delta search eingefangen
 
Hallo zusammen,

auch ich habe mir "delta search" eingefangen, beim downloaden eines Programms.

In der Systemsteuerung habe ich das Programm delta search gelöscht, nur bei Mozilla taucht es immer auf, wenn ich einen weiteren Tab öffne.

Ich bin dann auf diese Seite gestossen und hoffe auf Hilfe.

Hier als Anhang die erforderlichen Textdateien.

Ich freue mich auf Antworten, Danke schon mal.

Grüße

markusg 14.06.2013 10:56
hi, poste uns die bisherigen adwcleaner logs.
Dann:
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Troxopog 14.06.2013 11:52
Hier die Txt datei von TDSKiller:

12:44:51.0076 1176 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
12:44:51.0389 1176 ============================================================
12:44:51.0389 1176 Current date / time: 2013/06/14 12:44:51.0389
12:44:51.0389 1176 SystemInfo:
12:44:51.0389 1176
12:44:51.0389 1176 OS Version: 6.0.6002 ServicePack: 2.0
12:44:51.0389 1176 Product type: Workstation
12:44:51.0389 1176 ComputerName: MICHAEL-PC
12:44:51.0390 1176 UserName: Michael
12:44:51.0390 1176 Windows directory: C:\Windows
12:44:51.0390 1176 System windows directory: C:\Windows
12:44:51.0390 1176 Processor architecture: Intel x86
12:44:51.0390 1176 Number of processors: 2
12:44:51.0390 1176 Page size: 0x1000
12:44:51.0390 1176 Boot type: Normal boot
12:44:51.0390 1176 ============================================================
12:44:52.0453 1176 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
12:44:52.0469 1176 ============================================================
12:44:52.0469 1176 \Device\Harddisk0\DR0:
12:44:52.0469 1176 MBR partitions:
12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x117D07C1
12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x117D0800, BlocksNum 0xF2C800
12:44:52.0469 1176 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x126FF000, BlocksNum 0x31A000
12:44:52.0470 1176 ============================================================
12:44:52.0476 1176 C: <-> \Device\Harddisk0\DR0\Partition1
12:44:52.0530 1176 D: <-> \Device\Harddisk0\DR0\Partition2
12:44:52.0623 1176 E: <-> \Device\Harddisk0\DR0\Partition3
12:44:52.0623 1176 ============================================================
12:44:52.0623 1176 Initialize success
12:44:52.0623 1176 ============================================================
12:45:04.0507 4944 ============================================================
12:45:04.0508 4944 Scan started
12:45:04.0508 4944 Mode: Manual; SigCheck; TDLFS;
12:45:04.0508 4944 ============================================================
12:45:06.0619 4944 ================ Scan system memory ========================
12:45:06.0619 4944 System memory - ok
12:45:06.0620 4944 ================ Scan services =============================
12:45:06.0857 4944 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
12:45:07.0069 4944 ACDaemon - ok
12:45:07.0206 4944 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
12:45:07.0234 4944 ACPI - ok
12:45:07.0293 4944 [ B30EE77D621A08891089B7D9712D8CD4 ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
12:45:07.0533 4944 ADIHdAudAddService - ok
12:45:07.0616 4944 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
12:45:07.0653 4944 AdobeARMservice - ok
12:45:07.0737 4944 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
12:45:07.0759 4944 AdobeFlashPlayerUpdateSvc - ok
12:45:07.0909 4944 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
12:45:08.0028 4944 adp94xx - ok
12:45:08.0069 4944 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
12:45:08.0127 4944 adpahci - ok
12:45:08.0168 4944 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
12:45:08.0220 4944 adpu160m - ok
12:45:08.0241 4944 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
12:45:08.0296 4944 adpu320 - ok
12:45:08.0347 4944 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:45:08.0461 4944 AeLookupSvc - ok
12:45:08.0550 4944 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
12:45:08.0633 4944 AFD - ok
12:45:08.0676 4944 [ 39E435C90C9C4F780FA0ED05CA3C3A1B ] AgereModemAudio C:\Windows\system32\agrsmsvc.exe
12:45:08.0771 4944 AgereModemAudio - ok
12:45:08.0890 4944 [ 2E3ABAACBF547ABBB5E73A504A56D05A ] AgereSoftModem C:\Windows\system32\DRIVERS\AGRSM.sys
12:45:09.0054 4944 AgereSoftModem - ok
12:45:09.0108 4944 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
12:45:09.0150 4944 agp440 - ok
12:45:09.0193 4944 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
12:45:09.0237 4944 aic78xx - ok
12:45:09.0289 4944 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
12:45:09.0518 4944 ALG - ok
12:45:09.0594 4944 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
12:45:09.0663 4944 aliide - ok
12:45:09.0713 4944 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
12:45:09.0756 4944 amdagp - ok
12:45:09.0765 4944 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
12:45:09.0796 4944 amdide - ok
12:45:09.0821 4944 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
12:45:10.0105 4944 AmdK7 - ok
12:45:10.0140 4944 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
12:45:10.0192 4944 AmdK8 - ok
12:45:10.0243 4944 [ D9A92E6DD41C5ADC045AE485026AA40C ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
12:45:10.0261 4944 AntiVirSchedulerService - ok
12:45:10.0290 4944 [ 66A7A38F7C439153B758548375EB9E5E ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
12:45:10.0308 4944 AntiVirService - ok
12:45:10.0362 4944 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
12:45:10.0431 4944 Appinfo - ok
12:45:10.0505 4944 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:45:10.0525 4944 Apple Mobile Device - ok
12:45:10.0592 4944 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
12:45:10.0641 4944 arc - ok
12:45:10.0681 4944 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
12:45:10.0729 4944 arcsas - ok
12:45:10.0775 4944 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:45:10.0864 4944 AsyncMac - ok
12:45:10.0906 4944 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
12:45:10.0925 4944 atapi - ok
12:45:10.0960 4944 [ 3481D12334F065BBA19C16399C9CB171 ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
12:45:11.0057 4944 Ati External Event Utility - ok
12:45:11.0147 4944 [ 4AA1EB65481C392955939E735D27118B ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie.sys
12:45:11.0196 4944 AtiPcie - ok
12:45:11.0256 4944 [ 293E8CC3C246A89F4CCA75B024AD757F ] ATSWPDRV C:\Windows\system32\DRIVERS\ATSwpDrv.sys
12:45:11.0307 4944 ATSWPDRV - ok
12:45:11.0367 4944 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:45:11.0427 4944 AudioEndpointBuilder - ok
12:45:11.0467 4944 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
12:45:11.0500 4944 Audiosrv - ok
12:45:11.0549 4944 [ 87425709A251386064C99B684BF96F72 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
12:45:11.0569 4944 avgntflt - ok
12:45:11.0604 4944 [ D50FBA68163BC498F2C136E0E5BA8E2F ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
12:45:11.0625 4944 avipbb - ok
12:45:11.0660 4944 [ CB8741CD7B126499FED40C9B197F6AC5 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
12:45:11.0679 4944 avkmgr - ok
12:45:11.0759 4944 [ 32795E299C3ABA589A5E04C83D531CDF ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
12:45:11.0859 4944 b57nd60x - ok
12:45:11.0936 4944 [ 509F672686AF40F95859FDE67108449B ] BCM43XV C:\Windows\system32\DRIVERS\bcmwl6.sys
12:45:12.0063 4944 BCM43XV - ok
12:45:12.0095 4944 [ 509F672686AF40F95859FDE67108449B ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl6.sys
12:45:12.0122 4944 BCM43XX - ok
12:45:12.0172 4944 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
12:45:12.0209 4944 Beep - ok
12:45:12.0294 4944 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
12:45:12.0363 4944 BFE - ok
12:45:12.0529 4944 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
12:45:12.0637 4944 BITS - ok
12:45:12.0644 4944 blbdrive - ok
12:45:12.0759 4944 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:45:12.0791 4944 Bonjour Service - ok
12:45:12.0837 4944 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:45:12.0885 4944 bowser - ok
12:45:12.0948 4944 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
12:45:13.0004 4944 BrFiltLo - ok
12:45:13.0032 4944 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
12:45:13.0116 4944 BrFiltUp - ok
12:45:13.0149 4944 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
12:45:13.0187 4944 Browser - ok
12:45:13.0239 4944 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
12:45:13.0354 4944 Brserid - ok
12:45:13.0376 4944 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
12:45:13.0483 4944 BrSerWdm - ok
12:45:13.0509 4944 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
12:45:13.0609 4944 BrUsbMdm - ok
12:45:13.0621 4944 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
12:45:13.0726 4944 BrUsbSer - ok
12:45:13.0778 4944 [ 6D39C954799B63BA866910234CF7D726 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
12:45:13.0856 4944 BthEnum - ok
12:45:13.0901 4944 [ 5FFA6988FF9597986FF2ADA736CC90C0 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
12:45:13.0988 4944 BTHMODEM - ok
12:45:14.0044 4944 [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
12:45:14.0139 4944 BthPan - ok
12:45:14.0201 4944 [ 611FF3F2F095C8D4A6D4CFD9DCC09793 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
12:45:14.0373 4944 BTHPORT - ok
12:45:14.0420 4944 [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ C:\Windows\System32\bthserv.dll
12:45:14.0492 4944 BthServ - ok
12:45:14.0519 4944 [ D330803EAB2A15CAEC7F011F1D4CB30E ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
12:45:14.0597 4944 BTHUSB - ok
12:45:14.0638 4944 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:45:14.0689 4944 cdfs - ok
12:45:14.0743 4944 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:45:14.0790 4944 cdrom - ok
12:45:14.0834 4944 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
12:45:14.0879 4944 CertPropSvc - ok
12:45:14.0920 4944 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
12:45:15.0041 4944 circlass - ok
12:45:15.0117 4944 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
12:45:15.0143 4944 CLFS - ok
12:45:15.0220 4944 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:45:15.0274 4944 clr_optimization_v2.0.50727_32 - ok
12:45:15.0341 4944 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:45:15.0393 4944 clr_optimization_v4.0.30319_32 - ok
12:45:15.0460 4944 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
12:45:15.0535 4944 CmBatt - ok
12:45:15.0582 4944 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
12:45:15.0644 4944 cmdide - ok
12:45:15.0735 4944 [ D8774ACE03B46C9B01A49818055F9AD4 ] Com4Qlb C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
12:45:15.0812 4944 Com4Qlb ( UnsignedFile.Multi.Generic ) - warning
12:45:15.0812 4944 Com4Qlb - detected UnsignedFile.Multi.Generic (1)
12:45:15.0853 4944 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:45:15.0875 4944 Compbatt - ok
12:45:15.0884 4944 COMSysApp - ok
12:45:15.0926 4944 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
12:45:15.0943 4944 crcdisk - ok
12:45:15.0959 4944 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
12:45:16.0072 4944 Crusoe - ok
12:45:16.0180 4944 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:45:16.0255 4944 CryptSvc - ok
12:45:16.0333 4944 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
12:45:16.0435 4944 DcomLaunch - ok
12:45:16.0475 4944 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:45:16.0536 4944 DfsC - ok
12:45:17.0104 4944 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
12:45:17.0449 4944 DFSR - ok
12:45:17.0510 4944 [ B575C523F537F24D66D31F8877E6BCAB ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
12:45:17.0568 4944 dg_ssudbus - ok
12:45:17.0630 4944 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
12:45:17.0694 4944 Dhcp - ok
12:45:17.0801 4944 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
12:45:17.0854 4944 disk - ok
12:45:17.0920 4944 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:45:18.0009 4944 Dnscache - ok
12:45:18.0064 4944 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
12:45:18.0103 4944 dot3svc - ok
12:45:18.0147 4944 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
12:45:18.0202 4944 DPS - ok
12:45:18.0245 4944 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:45:18.0296 4944 drmkaud - ok
12:45:18.0453 4944 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:45:18.0527 4944 DXGKrnl - ok
12:45:18.0564 4944 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
12:45:18.0666 4944 E1G60 - ok
12:45:18.0707 4944 [ E88B0CFCECF745211BBA87F44F85D0DD ] eabfiltr C:\Windows\system32\DRIVERS\eabfiltr.sys
12:45:18.0783 4944 eabfiltr - ok
12:45:18.0827 4944 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
12:45:18.0878 4944 EapHost - ok
12:45:18.0943 4944 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
12:45:18.0967 4944 Ecache - ok
12:45:19.0092 4944 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
12:45:19.0204 4944 elxstor - ok
12:45:19.0360 4944 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
12:45:19.0483 4944 EMDMgmt - ok
12:45:19.0541 4944 [ 01CE484FF6D70A39479BC6D619DE7ED6 ] EsgScanner C:\Windows\system32\DRIVERS\EsgScanner.sys
12:45:19.0586 4944 EsgScanner - ok
12:45:19.0679 4944 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
12:45:19.0761 4944 EventSystem - ok
12:45:19.0822 4944 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
12:45:19.0927 4944 exfat - ok
12:45:20.0046 4944 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:45:20.0138 4944 fastfat - ok
12:45:20.0157 4944 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
12:45:20.0243 4944 fdc - ok
12:45:20.0284 4944 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
12:45:20.0352 4944 fdPHost - ok
12:45:20.0382 4944 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
12:45:20.0492 4944 FDResPub - ok
12:45:20.0538 4944 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:45:20.0568 4944 FileInfo - ok
12:45:20.0614 4944 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:45:20.0703 4944 Filetrace - ok
12:45:20.0743 4944 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
12:45:20.0870 4944 flpydisk - ok
12:45:20.0982 4944 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:45:21.0053 4944 FltMgr - ok
12:45:21.0265 4944 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
12:45:21.0429 4944 FontCache - ok
12:45:21.0556 4944 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
12:45:21.0640 4944 FontCache3.0.0.0 - ok
12:45:21.0698 4944 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:45:21.0760 4944 Fs_Rec - ok
12:45:21.0790 4944 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
12:45:21.0842 4944 gagp30kx - ok
12:45:21.0903 4944 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:45:21.0916 4944 GEARAspiWDM - ok
12:45:21.0989 4944 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
12:45:22.0060 4944 gpsvc - ok
12:45:22.0176 4944 [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9cb2464c5f232 C:\Program Files\Google\Update\GoogleUpdate.exe
12:45:22.0192 4944 gupdate1c9cb2464c5f232 - ok
12:45:22.0217 4944 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
12:45:22.0233 4944 gupdatem - ok
12:45:22.0272 4944 [ DE15777902A5D9121857D155873A1D1B ] HBtnKey C:\Windows\system32\DRIVERS\cpqbttn.sys
12:45:22.0313 4944 HBtnKey - ok
12:45:22.0363 4944 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:45:22.0524 4944 HdAudAddService - ok
12:45:22.0646 4944 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:45:22.0718 4944 HDAudBus - ok
12:45:22.0756 4944 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
12:45:22.0891 4944 HidBth - ok
12:45:22.0921 4944 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
12:45:23.0001 4944 HidIr - ok
12:45:23.0062 4944 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
12:45:23.0102 4944 hidserv - ok
12:45:23.0122 4944 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:45:23.0197 4944 HidUsb - ok
12:45:23.0232 4944 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:45:23.0273 4944 hkmsvc - ok
12:45:23.0374 4944 [ 2CEEB349216FEBD91A907013D4ABCFF7 ] HP Health Check Service C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
12:45:23.0413 4944 HP Health Check Service - ok
12:45:23.0448 4944 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
12:45:23.0506 4944 HpCISSs - ok
12:45:23.0613 4944 [ 04C1DCBB226C6AE647B794833CE3CEB6 ] hpqwmiex C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
12:45:23.0632 4944 hpqwmiex ( UnsignedFile.Multi.Generic ) - warning
12:45:23.0632 4944 hpqwmiex - detected UnsignedFile.Multi.Generic (1)
12:45:23.0774 4944 [ 46D67209550973257601A533E2AC5785 ] HSFHWAZL C:\Windows\system32\DRIVERS\VSTAZL3.SYS
12:45:23.0918 4944 HSFHWAZL - ok
12:45:24.0131 4944 [ EC36F1D542ED4252390D446BF6D4DFD0 ] HSF_DPV C:\Windows\system32\DRIVERS\VSTDPV3.SYS
12:45:24.0275 4944 HSF_DPV - ok
12:45:24.0377 4944 [ 0EEECA26C8D4BDE2A4664DB058A81937 ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:45:24.0463 4944 HTTP - ok
12:45:24.0505 4944 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
12:45:24.0556 4944 i2omp - ok
12:45:24.0636 4944 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:45:24.0677 4944 i8042prt - ok
12:45:24.0702 4944 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
12:45:24.0766 4944 iaStorV - ok
12:45:24.0828 4944 [ 6F95324909B502E2651442C1548AB12F ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
12:45:24.0874 4944 IDriverT ( UnsignedFile.Multi.Generic ) - warning
12:45:24.0874 4944 IDriverT - detected UnsignedFile.Multi.Generic (1)
12:45:25.0110 4944 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
12:45:25.0388 4944 idsvc - ok
12:45:25.0460 4944 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
12:45:25.0499 4944 iirsp - ok
12:45:25.0563 4944 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
12:45:25.0611 4944 IKEEXT - ok
12:45:25.0654 4944 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
12:45:25.0748 4944 intelide - ok
12:45:25.0820 4944 [ CE44CC04262F28216DD4341E9E36A16F ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:45:25.0959 4944 intelppm - ok
12:45:26.0046 4944 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:45:26.0157 4944 IPBusEnum - ok
12:45:26.0219 4944 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:45:26.0260 4944 IpFilterDriver - ok
12:45:26.0288 4944 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:45:26.0346 4944 iphlpsvc - ok
12:45:26.0354 4944 IpInIp - ok
12:45:26.0373 4944 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
12:45:26.0464 4944 IPMIDRV - ok
12:45:26.0502 4944 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
12:45:26.0548 4944 IPNAT - ok
12:45:26.0655 4944 [ E3E71649A926CB34FA4D7AB75DCE126C ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:45:26.0690 4944 iPod Service - ok
12:45:26.0739 4944 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:45:26.0816 4944 IRENUM - ok
12:45:26.0861 4944 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
12:45:26.0911 4944 isapnp - ok
12:45:26.0961 4944 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
12:45:26.0983 4944 iScsiPrt - ok
12:45:27.0016 4944 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
12:45:27.0052 4944 iteatapi - ok
12:45:27.0106 4944 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
12:45:27.0141 4944 iteraid - ok
12:45:27.0205 4944 [ 213822072085B5BBAD9AF30AB577D817 ] IviRegMgr C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
12:45:27.0234 4944 IviRegMgr - ok
12:45:27.0257 4944 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:45:27.0286 4944 kbdclass - ok
12:45:27.0330 4944 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:45:27.0382 4944 kbdhid - ok
12:45:27.0425 4944 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
12:45:27.0486 4944 KeyIso - ok
12:45:27.0619 4944 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:45:27.0677 4944 KSecDD - ok
12:45:27.0730 4944 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
12:45:27.0795 4944 KtmRm - ok
12:45:27.0845 4944 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
12:45:27.0900 4944 LanmanServer - ok
12:45:27.0950 4944 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:45:28.0014 4944 LanmanWorkstation - ok
12:45:28.0078 4944 [ 31D8B705DCD5F2366186E731F87C7A71 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
12:45:28.0095 4944 LightScribeService - ok
12:45:28.0159 4944 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:45:28.0221 4944 lltdio - ok
12:45:28.0262 4944 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:45:28.0337 4944 lltdsvc - ok
12:45:28.0370 4944 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
12:45:28.0441 4944 lmhosts - ok
12:45:28.0482 4944 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
12:45:28.0526 4944 LSI_FC - ok
12:45:28.0559 4944 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
12:45:28.0595 4944 LSI_SAS - ok
12:45:28.0616 4944 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
12:45:28.0652 4944 LSI_SCSI - ok
12:45:28.0705 4944 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
12:45:28.0747 4944 luafv - ok
12:45:28.0780 4944 lxcg_device - ok
12:45:28.0868 4944 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
12:45:28.0891 4944 McComponentHostService - ok
12:45:28.0934 4944 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
12:45:28.0998 4944 megasas - ok
12:45:29.0053 4944 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
12:45:29.0125 4944 MMCSS - ok
12:45:29.0167 4944 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
12:45:29.0235 4944 Modem - ok
12:45:29.0292 4944 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:45:29.0342 4944 monitor - ok
12:45:29.0350 4944 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:45:29.0367 4944 mouclass - ok
12:45:29.0385 4944 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:45:29.0440 4944 mouhid - ok
12:45:29.0473 4944 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
12:45:29.0491 4944 MountMgr - ok
12:45:29.0536 4944 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
12:45:29.0613 4944 mpio - ok
12:45:29.0669 4944 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:45:29.0719 4944 mpsdrv - ok
12:45:29.0919 4944 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
12:45:29.0973 4944 MpsSvc - ok
12:45:30.0014 4944 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
12:45:30.0059 4944 Mraid35x - ok
12:45:30.0097 4944 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:45:30.0125 4944 MRxDAV - ok
12:45:30.0160 4944 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:45:30.0207 4944 mrxsmb - ok
12:45:30.0248 4944 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:45:30.0279 4944 mrxsmb10 - ok
12:45:30.0301 4944 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:45:30.0320 4944 mrxsmb20 - ok
12:45:30.0344 4944 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
12:45:30.0388 4944 msahci - ok
12:45:30.0471 4944 [ 514CF97979C166A47B82128DC344D80E ] MSCamSvc C:\Program Files\Microsoft LifeCam\MSCamS32.exe
12:45:30.0493 4944 MSCamSvc - ok
12:45:30.0533 4944 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
12:45:30.0578 4944 msdsm - ok
12:45:30.0654 4944 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
12:45:30.0734 4944 MSDTC - ok
12:45:30.0768 4944 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:45:30.0824 4944 Msfs - ok
12:45:30.0863 4944 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
12:45:30.0881 4944 msisadrv - ok
12:45:30.0933 4944 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:45:31.0018 4944 MSiSCSI - ok
12:45:31.0028 4944 msiserver - ok
12:45:31.0058 4944 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:45:31.0128 4944 MSKSSRV - ok
12:45:31.0179 4944 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:45:31.0237 4944 MSPCLOCK - ok
12:45:31.0268 4944 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:45:31.0356 4944 MSPQM - ok
12:45:31.0383 4944 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:45:31.0406 4944 MsRPC - ok
12:45:31.0434 4944 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:45:31.0454 4944 mssmbios - ok
12:45:31.0472 4944 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:45:31.0535 4944 MSTEE - ok
12:45:31.0588 4944 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
12:45:31.0609 4944 Mup - ok
12:45:31.0653 4944 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
12:45:31.0688 4944 napagent - ok
12:45:31.0711 4944 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:45:31.0747 4944 NativeWifiP - ok
12:45:31.0802 4944 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:45:31.0850 4944 NDIS - ok
12:45:31.0901 4944 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:45:31.0940 4944 NdisTapi - ok
12:45:31.0984 4944 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:45:32.0029 4944 Ndisuio - ok
12:45:32.0058 4944 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:45:32.0103 4944 NdisWan - ok
12:45:32.0130 4944 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:45:32.0156 4944 NDProxy - ok
12:45:32.0184 4944 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:45:32.0219 4944 NetBIOS - ok
12:45:32.0265 4944 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
12:45:32.0303 4944 netbt - ok
12:45:32.0322 4944 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
12:45:32.0342 4944 Netlogon - ok
12:45:32.0378 4944 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
12:45:32.0444 4944 Netman - ok
12:45:32.0488 4944 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
12:45:32.0549 4944 netprofm - ok
12:45:32.0631 4944 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
12:45:32.0664 4944 NetTcpPortSharing - ok
12:45:32.0710 4944 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
12:45:32.0756 4944 nfrd960 - ok
12:45:32.0843 4944 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
12:45:32.0898 4944 NlaSvc - ok
12:45:32.0958 4944 [ B0A67DE1A128389AEA4D42C5A56215FD ] nmwcd C:\Windows\system32\drivers\ccdcmb.sys
12:45:33.0043 4944 nmwcd - ok
12:45:33.0073 4944 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:45:33.0122 4944 Npfs - ok
12:45:33.0162 4944 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
12:45:33.0219 4944 nsi - ok
12:45:33.0251 4944 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:45:33.0300 4944 nsiproxy - ok
12:45:33.0379 4944 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:45:33.0464 4944 Ntfs - ok
12:45:33.0545 4944 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
12:45:33.0631 4944 ntrigdigi - ok
12:45:33.0675 4944 [ CF7E041663119E09D2E118521ADA9300 ] NuidFltr C:\Windows\system32\DRIVERS\NuidFltr.sys
12:45:33.0713 4944 NuidFltr - ok
12:45:33.0745 4944 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
12:45:33.0800 4944 Null - ok
12:45:33.0838 4944 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:45:33.0869 4944 nvraid - ok
12:45:33.0882 4944 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:45:33.0927 4944 nvstor - ok
12:45:33.0962 4944 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
12:45:34.0007 4944 nv_agp - ok
12:45:34.0016 4944 NwlnkFlt - ok
12:45:34.0025 4944 NwlnkFwd - ok
12:45:34.0066 4944 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
12:45:34.0174 4944 ohci1394 - ok
12:45:34.0232 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
12:45:34.0312 4944 p2pimsvc - ok
12:45:34.0354 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
12:45:34.0403 4944 p2psvc - ok
12:45:34.0454 4944 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\DRIVERS\parport.sys
12:45:34.0530 4944 Parport - ok
12:45:34.0590 4944 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:45:34.0608 4944 partmgr - ok
12:45:34.0616 4944 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
12:45:34.0721 4944 Parvdm - ok
12:45:34.0765 4944 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
12:45:34.0832 4944 PcaSvc - ok
12:45:34.0871 4944 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
12:45:34.0892 4944 pci - ok
12:45:34.0926 4944 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
12:45:34.0944 4944 pciide - ok
12:45:35.0008 4944 [ 3BB2244F343B610C29C98035504C9B75 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
12:45:35.0031 4944 pcmcia - ok
12:45:35.0082 4944 pdfcDispatcher - ok
12:45:35.0158 4944 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:45:35.0340 4944 PEAUTH - ok
12:45:35.0426 4944 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
12:45:35.0649 4944 pla - ok
12:45:35.0704 4944 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:45:35.0786 4944 PlugPlay - ok
12:45:35.0886 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
12:45:35.0966 4944 PNRPAutoReg - ok
12:45:36.0130 4944 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
12:45:36.0191 4944 PNRPsvc - ok
12:45:36.0229 4944 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:45:36.0326 4944 PolicyAgent - ok
12:45:36.0371 4944 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:45:36.0412 4944 PptpMiniport - ok
12:45:36.0448 4944 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
12:45:36.0572 4944 Processor - ok
12:45:36.0647 4944 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
12:45:36.0724 4944 ProfSvc - ok
12:45:36.0752 4944 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
12:45:36.0771 4944 ProtectedStorage - ok
12:45:36.0808 4944 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
12:45:36.0853 4944 PSched - ok
12:45:36.0912 4944 [ FEFFCFDC528764A04C8ED63D5FA6E711 ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
12:45:36.0934 4944 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
12:45:36.0934 4944 PxHelp20 - detected UnsignedFile.Multi.Generic (1)
12:45:36.0997 4944 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
12:45:37.0095 4944 ql2300 - ok
12:45:37.0141 4944 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
12:45:37.0198 4944 ql40xx - ok
12:45:37.0338 4944 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
12:45:37.0422 4944 QWAVE - ok
12:45:37.0450 4944 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:45:37.0470 4944 QWAVEdrv - ok
12:45:37.0674 4944 [ 252826C4BC88B01E945C2D3C6603F3B0 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys
12:45:37.0874 4944 R300 - ok
12:45:37.0909 4944 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:45:37.0986 4944 RasAcd - ok
12:45:38.0032 4944 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
12:45:38.0094 4944 RasAuto - ok
12:45:38.0147 4944 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:45:38.0183 4944 Rasl2tp - ok
12:45:38.0263 4944 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
12:45:38.0309 4944 RasMan - ok
12:45:38.0354 4944 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:45:38.0383 4944 RasPppoe - ok
12:45:38.0432 4944 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:45:38.0480 4944 RasSstp - ok
12:45:38.0545 4944 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:45:38.0596 4944 rdbss - ok
12:45:38.0622 4944 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:45:38.0701 4944 RDPCDD - ok
12:45:38.0737 4944 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
12:45:38.0863 4944 rdpdr - ok
12:45:38.0881 4944 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:45:38.0946 4944 RDPENCDD - ok
12:45:39.0018 4944 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:45:39.0137 4944 RDPWD - ok
12:45:39.0238 4944 [ A0FF419B61AE47E26ADF3BB15DB4F2FE ] RealNetworks Downloader Resolver Service C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
12:45:39.0268 4944 RealNetworks Downloader Resolver Service - ok
12:45:39.0304 4944 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
12:45:39.0362 4944 RemoteAccess - ok
12:45:39.0401 4944 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:45:39.0457 4944 RemoteRegistry - ok
12:45:39.0536 4944 [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
12:45:39.0652 4944 RFCOMM - ok
12:45:40.0056 4944 [ AD1411A7EA50F2F97A73A3F51153066E ] RoxMediaDB9 c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
12:45:40.0241 4944 RoxMediaDB9 - ok
12:45:40.0280 4944 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
12:45:40.0340 4944 RpcLocator - ok
12:45:40.0381 4944 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
12:45:40.0449 4944 RpcSs - ok
12:45:40.0484 4944 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:45:40.0530 4944 rspndr - ok
12:45:40.0541 4944 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
12:45:40.0561 4944 SamSs - ok
12:45:40.0588 4944 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
12:45:40.0633 4944 sbp2port - ok
12:45:40.0685 4944 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:45:40.0712 4944 SCardSvr - ok
12:45:40.0757 4944 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
12:45:40.0850 4944 Schedule - ok
12:45:40.0871 4944 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
12:45:40.0897 4944 SCPolicySvc - ok
12:45:40.0927 4944 [ 4339A2585708C7D9B0C0CE5AAD3DD6FF ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
12:45:41.0012 4944 sdbus - ok
12:45:41.0041 4944 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:45:41.0103 4944 SDRSVC - ok
12:45:41.0122 4944 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:45:41.0251 4944 secdrv - ok
12:45:41.0305 4944 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
12:45:41.0359 4944 seclogon - ok
12:45:41.0414 4944 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
12:45:41.0466 4944 SENS - ok
12:45:41.0498 4944 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
12:45:41.0592 4944 Serenum - ok
12:45:41.0636 4944 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
12:45:41.0759 4944 Serial - ok
12:45:41.0812 4944 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
12:45:41.0918 4944 sermouse - ok
12:45:41.0960 4944 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
12:45:42.0002 4944 SessionEnv - ok
12:45:42.0038 4944 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
12:45:42.0142 4944 sffdisk - ok
12:45:42.0166 4944 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
12:45:42.0255 4944 sffp_mmc - ok
12:45:42.0279 4944 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
12:45:42.0376 4944 sffp_sd - ok
12:45:42.0393 4944 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
12:45:42.0452 4944 sfloppy - ok
12:45:42.0483 4944 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:45:42.0548 4944 SharedAccess - ok
12:45:42.0616 4944 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:45:42.0689 4944 ShellHWDetection - ok
12:45:42.0724 4944 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
12:45:42.0779 4944 sisagp - ok
12:45:42.0813 4944 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
12:45:42.0862 4944 SiSRaid2 - ok
12:45:42.0898 4944 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
12:45:42.0956 4944 SiSRaid4 - ok
12:45:43.0000 4944 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
12:45:43.0020 4944 SkypeUpdate - ok
12:45:43.0163 4944 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
12:45:43.0600 4944 slsvc - ok
12:45:43.0654 4944 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
12:45:43.0701 4944 SLUINotify - ok
12:45:43.0732 4944 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:45:43.0785 4944 Smb - ok
12:45:43.0823 4944 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:45:43.0855 4944 SNMPTRAP - ok
12:45:43.0875 4944 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
12:45:43.0905 4944 spldr - ok
12:45:43.0950 4944 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
12:45:44.0017 4944 Spooler - ok
12:45:44.0079 4944 [ 85CD5B92052C3D285CC91244C593A1AC ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
12:45:44.0196 4944 SpyHunter 4 Service - ok
12:45:44.0243 4944 [ 54902536AAD0E9B99BC65F89C0CAF93F ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
12:45:44.0274 4944 SQLWriter - ok
12:45:44.0318 4944 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
12:45:44.0376 4944 srv - ok
12:45:44.0418 4944 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:45:44.0483 4944 srv2 - ok
12:45:44.0505 4944 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:45:44.0538 4944 srvnet - ok
12:45:44.0564 4944 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:45:44.0637 4944 SSDPSRV - ok
12:45:44.0684 4944 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
12:45:44.0713 4944 ssmdrv - ok
12:45:44.0761 4944 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:45:44.0820 4944 SstpSvc - ok
12:45:44.0881 4944 [ CA22092117F4F8BA3700B4BF9962444A ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
12:45:44.0913 4944 ssudmdm - ok
12:45:44.0963 4944 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
12:45:45.0013 4944 stisvc - ok
12:45:45.0032 4944 stllssvr - ok
12:45:45.0069 4944 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:45:45.0124 4944 swenum - ok
12:45:45.0163 4944 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
12:45:45.0238 4944 swprv - ok
12:45:45.0269 4944 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
12:45:45.0316 4944 Symc8xx - ok
12:45:45.0339 4944 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
12:45:45.0398 4944 Sym_hi - ok
12:45:45.0425 4944 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
12:45:45.0466 4944 Sym_u3 - ok
12:45:45.0513 4944 [ 8327106D1C93E9A7B98E63B9FCC24BB7 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
12:45:45.0536 4944 SynTP - ok
12:45:45.0599 4944 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
12:45:45.0690 4944 SysMain - ok
12:45:45.0743 4944 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:45:45.0783 4944 TabletInputService - ok
12:45:45.0839 4944 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
12:45:45.0877 4944 TapiSrv - ok
12:45:45.0897 4944 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
12:45:45.0953 4944 TBS - ok
12:45:46.0012 4944 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:45:46.0068 4944 Tcpip - ok
12:45:46.0145 4944 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
12:45:46.0191 4944 Tcpip6 - ok
12:45:46.0213 4944 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:45:46.0293 4944 tcpipreg - ok
12:45:46.0383 4944 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:45:46.0456 4944 TDPIPE - ok
12:45:46.0502 4944 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:45:46.0577 4944 TDTCP - ok
12:45:46.0626 4944 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:45:46.0664 4944 tdx - ok
12:45:46.0683 4944 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:45:46.0704 4944 TermDD - ok
12:45:46.0739 4944 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
12:45:46.0811 4944 TermService - ok
12:45:46.0837 4944 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
12:45:46.0899 4944 Themes - ok
12:45:46.0918 4944 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
12:45:46.0959 4944 THREADORDER - ok
12:45:47.0006 4944 [ 6D9AD3534A9CF7E4B86C6EAE8BC335F6 ] TPM C:\Windows\system32\drivers\tpm.sys
12:45:47.0045 4944 TPM - ok
12:45:47.0078 4944 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
12:45:47.0132 4944 TrkWks - ok
12:45:47.0198 4944 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:45:47.0225 4944 TrustedInstaller - ok
12:45:47.0273 4944 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:45:47.0350 4944 tssecsrv - ok
12:45:47.0402 4944 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
12:45:47.0441 4944 tunmp - ok
12:45:47.0484 4944 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:45:47.0522 4944 tunnel - ok
12:45:47.0563 4944 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
12:45:47.0594 4944 uagp35 - ok
12:45:47.0637 4944 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:45:47.0672 4944 udfs - ok
12:45:47.0704 4944 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:45:47.0745 4944 UI0Detect - ok
12:45:47.0779 4944 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
12:45:47.0820 4944 uliagpkx - ok
12:45:47.0853 4944 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
12:45:47.0905 4944 uliahci - ok
12:45:47.0932 4944 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
12:45:47.0971 4944 UlSata - ok
12:45:48.0000 4944 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
12:45:48.0043 4944 ulsata2 - ok
12:45:48.0071 4944 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:45:48.0119 4944 umbus - ok
12:45:48.0171 4944 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
12:45:48.0213 4944 upnphost - ok
12:45:48.0293 4944 [ 62E22A4FA518BAFEF35BDC17BC5B2819 ] USB28xxBGA C:\Windows\system32\DRIVERS\emBDA.sys
12:45:48.0399 4944 USB28xxBGA - ok
12:45:48.0441 4944 [ 9D055ED70E584DF1563B745A7B86DE59 ] USB28xxOEM C:\Windows\system32\DRIVERS\emOEM.sys
12:45:48.0562 4944 USB28xxOEM - ok
12:45:48.0618 4944 [ 6E421CCC57059B0186C6259CA3B6DFC9 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
12:45:48.0702 4944 USBAAPL - ok
12:45:48.0783 4944 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:45:48.0841 4944 usbaudio - ok
12:45:48.0883 4944 [ 9419FAAC6552A51542DBBA02971C841C ] usbbus C:\Windows\system32\DRIVERS\lgusbbus.sys
12:45:48.0951 4944 usbbus - ok
12:45:49.0016 4944 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:45:49.0124 4944 usbccgp - ok
12:45:49.0174 4944 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
12:45:49.0297 4944 usbcir - ok
12:45:49.0346 4944 [ C0A466FA4FFEC464320E159BC1BBDC0C ] UsbDiag C:\Windows\system32\DRIVERS\lgusbdiag.sys
12:45:49.0409 4944 UsbDiag - ok
12:45:49.0439 4944 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
12:45:49.0466 4944 usbehci - ok
12:45:49.0489 4944 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:45:49.0536 4944 usbhub - ok
12:45:49.0583 4944 [ F74A54774A9B0AFEB3C40ADEC68AA600 ] USBModem C:\Windows\system32\DRIVERS\lgusbmodem.sys
12:45:49.0657 4944 USBModem - ok
12:45:49.0676 4944 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
12:45:49.0726 4944 usbohci - ok
12:45:49.0764 4944 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
12:45:49.0850 4944 usbprint - ok
12:45:49.0889 4944 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:45:49.0956 4944 usbscan - ok
12:45:50.0001 4944 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:45:50.0044 4944 USBSTOR - ok
12:45:50.0071 4944 [ 325DBBACB8A36AF9988CCF40EAC228CC ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
12:45:50.0156 4944 usbuhci - ok
12:45:50.0201 4944 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
12:45:50.0232 4944 UxSms - ok
12:45:50.0280 4944 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
12:45:50.0349 4944 vds - ok
12:45:50.0400 4944 [ 7D92BE0028ECDEDEC74617009084B5EF ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:45:50.0527 4944 vga - ok
12:45:50.0555 4944 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
12:45:50.0593 4944 VgaSave - ok
12:45:50.0624 4944 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
12:45:50.0684 4944 viaagp - ok
12:45:50.0721 4944 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
12:45:50.0806 4944 ViaC7 - ok
12:45:50.0830 4944 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
12:45:50.0869 4944 viaide - ok
12:45:50.0905 4944 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
12:45:50.0925 4944 volmgr - ok
12:45:50.0987 4944 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:45:51.0016 4944 volmgrx - ok
12:45:51.0070 4944 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
12:45:51.0097 4944 volsnap - ok
12:45:51.0124 4944 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
12:45:51.0170 4944 vsmraid - ok
12:45:51.0240 4944 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
12:45:51.0338 4944 VSS - ok
12:45:51.0533 4944 [ 3D96EF51524E99680E89929E953A5495 ] VX3000 C:\Windows\system32\DRIVERS\VX3000.sys
12:45:51.0774 4944 VX3000 - ok
12:45:51.0848 4944 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
12:45:51.0905 4944 W32Time - ok
12:45:51.0954 4944 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
12:45:52.0059 4944 WacomPen - ok
12:45:52.0094 4944 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
12:45:52.0123 4944 Wanarp - ok
12:45:52.0138 4944 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:45:52.0167 4944 Wanarpv6 - ok
12:45:52.0211 4944 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:45:52.0278 4944 wcncsvc - ok
12:45:52.0313 4944 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:45:52.0349 4944 WcsPlugInService - ok
12:45:52.0385 4944 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
12:45:52.0420 4944 Wd - ok
12:45:52.0472 4944 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:45:52.0522 4944 Wdf01000 - ok
12:45:52.0566 4944 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:45:52.0620 4944 WdiServiceHost - ok
12:45:52.0626 4944 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:45:52.0665 4944 WdiSystemHost - ok
12:45:52.0704 4944 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
12:45:52.0743 4944 WebClient - ok
12:45:52.0784 4944 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:45:52.0822 4944 Wecsvc - ok
12:45:52.0855 4944 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:45:52.0884 4944 wercplsupport - ok
12:45:52.0916 4944 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
12:45:52.0973 4944 WerSvc - ok
12:45:53.0011 4944 [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys
12:45:53.0063 4944 WimFltr - ok
12:45:53.0133 4944 [ 5C7BDCF5864DB00323FE2D90FA26A8A2 ] winachsf C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
12:45:53.0245 4944 winachsf - ok
12:45:53.0425 4944 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
12:45:53.0471 4944 WinDefend - ok
12:45:53.0481 4944 WinHttpAutoProxySvc - ok
12:45:53.0594 4944 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:45:53.0623 4944 Winmgmt - ok
12:45:53.0686 4944 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
12:45:53.0775 4944 WinRM - ok
12:45:53.0898 4944 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
12:45:53.0986 4944 Wlansvc - ok
12:45:54.0050 4944 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
12:45:54.0145 4944 WmiAcpi - ok
12:45:54.0214 4944 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:45:54.0276 4944 wmiApSrv - ok
12:45:54.0464 4944 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
12:45:54.0589 4944 WMPNetworkSvc - ok
12:45:54.0626 4944 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:45:54.0682 4944 WPCSvc - ok
12:45:54.0730 4944 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:45:54.0757 4944 WPDBusEnum - ok
12:45:54.0815 4944 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
12:45:54.0861 4944 WpdUsb - ok
12:45:54.0970 4944 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
12:45:55.0064 4944 WPFFontCache_v0400 - ok
12:45:55.0130 4944 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:45:55.0195 4944 ws2ifsl - ok
12:45:55.0248 4944 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\System32\wscsvc.dll
12:45:55.0283 4944 wscsvc - ok
12:45:55.0291 4944 WSearch - ok
12:45:55.0436 4944 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
12:45:55.0655 4944 wuauserv - ok
12:45:55.0698 4944 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:45:55.0752 4944 WudfPf - ok
12:45:55.0794 4944 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:45:55.0816 4944 WUDFRd - ok
12:45:55.0852 4944 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:45:55.0875 4944 wudfsvc - ok
12:45:55.0917 4944 ================ Scan global ===============================
12:45:55.0970 4944 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
12:45:56.0034 4944 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
12:45:56.0057 4944 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
12:45:56.0107 4944 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
12:45:56.0117 4944 [Global] - ok
12:45:56.0118 4944 ================ Scan MBR ==================================
12:45:56.0132 4944 [ 97B45F8522380F396E142A324FDCBB82 ] \Device\Harddisk0\DR0
12:45:57.0526 4944 \Device\Harddisk0\DR0 - ok
12:45:57.0527 4944 ================ Scan VBR ==================================
12:45:57.0564 4944 [ 43D6FE2D0345951F003C04F35F764CD4 ] \Device\Harddisk0\DR0\Partition1
12:45:57.0568 4944 \Device\Harddisk0\DR0\Partition1 - ok
12:45:57.0604 4944 [ 6ACC6690B95410367538C39DB70DD312 ] \Device\Harddisk0\DR0\Partition2
12:45:57.0606 4944 \Device\Harddisk0\DR0\Partition2 - ok
12:45:57.0637 4944 [ 8753FB840717A7823286B8FED1B4ECF3 ] \Device\Harddisk0\DR0\Partition3
12:45:57.0641 4944 \Device\Harddisk0\DR0\Partition3 - ok
12:45:57.0643 4944 ============================================================
12:45:57.0643 4944 Scan finished
12:45:57.0643 4944 ============================================================
12:45:57.0695 5980 Detected object count: 4
12:45:57.0695 5980 Actual detected object count: 4
12:47:02.0541 5980 Com4Qlb ( UnsignedFile.Multi.Generic ) - skipped by user
12:47:02.0542 5980 Com4Qlb ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:47:02.0545 5980 hpqwmiex ( UnsignedFile.Multi.Generic ) - skipped by user
12:47:02.0545 5980 hpqwmiex ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:47:02.0549 5980 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
12:47:02.0549 5980 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
12:47:02.0553 5980 PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user
12:47:02.0553 5980 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip



Bin gespannt

Grüße

markusg 14.06.2013 12:03
Hi,
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Troxopog 14.06.2013 12:40
Combofix Logfile:
Code:
ComboFix 13-06-13.01 - Michael 14.06.2013  13:18:30.1.2 - x86
Microsoft® Windows Vista™ Home Basic  6.0.6002.2.1252.49.1031.18.1919.848 [GMT 2:00]
ausgeführt von:: c:\users\Noknoi\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Naver
c:\program files\Naver\LINE\amp-dll.dll
c:\program files\Naver\LINE\CommLib.dll
c:\program files\Naver\LINE\CommModule.dll
c:\program files\Naver\LINE\DataModule.dll
c:\program files\Naver\LINE\dbghelp.dll
c:\program files\Naver\LINE\Line.exe
c:\program files\Naver\LINE\LineAppMgr.exe
c:\program files\Naver\LINE\LineUnInst.exe
c:\program files\Naver\LINE\LineUpgrader.exe
c:\program files\Naver\LINE\MediaInfo.dll
c:\program files\Naver\LINE\Microsoft.VC90.CRT.manifest
c:\program files\Naver\LINE\msvcp90.dll
c:\program files\Naver\LINE\msvcr90.dll
c:\program files\Naver\LINE\NELO.dll
c:\program files\Naver\LINE\NELO_CrashReporter.exe
c:\program files\Naver\LINE\README.license
c:\program files\Naver\LINE\res\locale\en-US\strings.xml
c:\program files\Naver\LINE\res\locale\ja-JP\strings.xml
c:\program files\Naver\LINE\res\locale\ko-KR\strings.xml
c:\program files\Naver\LINE\res\locale\zh-CN\strings.xml
c:\program files\Naver\LINE\res\locale\zh-TW\strings.xml
c:\program files\Naver\LINE\res\skin\basic\about.nxul
c:\program files\Naver\LINE\res\skin\basic\buddyInfo.nxul
c:\program files\Naver\LINE\res\skin\basic\chatMember.nxul
c:\program files\Naver\LINE\res\skin\basic\chatRoom.nxul
c:\program files\Naver\LINE\res\skin\basic\css\buddyInfo.css
c:\program files\Naver\LINE\res\skin\basic\css\chatMember.css
c:\program files\Naver\LINE\res\skin\basic\css\chatRoom.css
c:\program files\Naver\LINE\res\skin\basic\css\chatRoomMessage.css
c:\program files\Naver\LINE\res\skin\basic\css\common.css
c:\program files\Naver\LINE\res\skin\basic\css\emoji.css
c:\program files\Naver\LINE\res\skin\basic\css\emojiIcon.css
c:\program files\Naver\LINE\res\skin\basic\css\emojiLetter.css
c:\program files\Naver\LINE\res\skin\basic\css\groupMake.css
c:\program files\Naver\LINE\res\skin\basic\css\groupModify.css
c:\program files\Naver\LINE\res\skin\basic\css\invite.css
c:\program files\Naver\LINE\res\skin\basic\css\login.css
c:\program files\Naver\LINE\res\skin\basic\css\loginHelp.css
c:\program files\Naver\LINE\res\skin\basic\css\makeGroup.css
c:\program files\Naver\LINE\res\skin\basic\css\myInfo.css
c:\program files\Naver\LINE\res\skin\basic\css\needQRCodeLogin.css
c:\program files\Naver\LINE\res\skin\basic\css\setting.css
c:\program files\Naver\LINE\res\skin\basic\css\settingBasic.css
c:\program files\Naver\LINE\res\skin\basic\css\settingPrivacy.css
c:\program files\Naver\LINE\res\skin\basic\css\sticker.css
c:\program files\Naver\LINE\res\skin\basic\css\talk.css
c:\program files\Naver\LINE\res\skin\basic\css\talkAddBuddy.css
c:\program files\Naver\LINE\res\skin\basic\css\talkBuddyList.css
c:\program files\Naver\LINE\res\skin\basic\css\talkChatList.css
c:\program files\Naver\LINE\res\skin\basic\css\toast.css
c:\program files\Naver\LINE\res\skin\basic\css\voip.css
c:\program files\Naver\LINE\res\skin\basic\emoji.nxul
c:\program files\Naver\LINE\res\skin\basic\emojiIcon.nxul
c:\program files\Naver\LINE\res\skin\basic\emojiLetter.nxul
c:\program files\Naver\LINE\res\skin\basic\groupMake.nxul
c:\program files\Naver\LINE\res\skin\basic\groupModify.nxul
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_audio.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_btn_box.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_bubble_gray.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_bubble_gray2.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_image_frame.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_buddy_video.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_call.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_date_bubble.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_img_err.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_layer.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_menu_line.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_more.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_green.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_green2.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_bubble_light_green.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_image_frame.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_my_video.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_new_buddy.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_sep.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_splitter.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_top.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\bg_video.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_l.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_m.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_btm_r.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_line.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_top_l.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\br_top_r.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_addblock.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_arrow_down.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_canel.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_chat_type1.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_close.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_emoji.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_file.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_max.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_menu.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_min.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\btn_room_name.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style1.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style2.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3_x.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\check_style3_xx.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\flag.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_alarm_off.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_error_sticker.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_fail.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\ico_person.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\icon_voip.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\icon_voip_disable.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\loading.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\loading_small.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_l.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_m.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\nick_bubble_r.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\slider_bar.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\slider_thumb.png
c:\program files\Naver\LINE\res\skin\basic\images\chat\thumnail_box.png
c:\program files\Naver\LINE\res\skin\basic\images\common\bar_01.png
c:\program files\Naver\LINE\res\skin\basic\images\common\bar_02.png
c:\program files\Naver\LINE\res\skin\basic\images\common\bg_dlg_title.png
c:\program files\Naver\LINE\res\skin\basic\images\common\br_btm_l.png
c:\program files\Naver\LINE\res\skin\basic\images\common\br_btm_r.png
c:\program files\Naver\LINE\res\skin\basic\images\common\br_line.png
c:\program files\Naver\LINE\res\skin\basic\images\common\br_top_l.png
c:\program files\Naver\LINE\res\skin\basic\images\common\br_top_r.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_close_01.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_close_02.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_system.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type1.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type2.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_type3.png
c:\program files\Naver\LINE\res\skin\basic\images\common\btn_update.png
c:\program files\Naver\LINE\res\skin\basic\images\common\check_type1.png
c:\program files\Naver\LINE\res\skin\basic\images\common\checkbox_01.png
c:\program files\Naver\LINE\res\skin\basic\images\common\ico_close.png
c:\program files\Naver\LINE\res\skin\basic\images\common\ico_dot01.png
c:\program files\Naver\LINE\res\skin\basic\images\common\ico_return.png
c:\program files\Naver\LINE\res\skin\basic\images\common\icon_clear.png
c:\program files\Naver\LINE\res\skin\basic\images\common\input_box.png
c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close.png
c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_all.png
c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_click.png
c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_close_over.png
c:\program files\Naver\LINE\res\skin\basic\images\common\layer_btn_search_1.png
c:\program files\Naver\LINE\res\skin\basic\images\common\Line.ico
c:\program files\Naver\LINE\res\skin\basic\images\common\line_about.png
c:\program files\Naver\LINE\res\skin\basic\images\common\line_about_btn.png
c:\program files\Naver\LINE\res\skin\basic\images\common\loading.png
c:\program files\Naver\LINE\res\skin\basic\images\common\profile_frame.png
c:\program files\Naver\LINE\res\skin\basic\images\common\spin_down.png
c:\program files\Naver\LINE\res\skin\basic\images\common\spin_up.png
c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_01.png
c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_02.png
c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_03.png
c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_04.png
c:\program files\Naver\LINE\res\skin\basic\images\common\thumnail_05.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\bg_tab.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_icon_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_index.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_latest.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_left.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_letter.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_right.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_sticker_arrow1.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\btn_sticker_arrow2.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_bottom.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_select.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\emoji_top_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_emoticon.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_kaomoji.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\select_sticker.png
c:\program files\Naver\LINE\res\skin\basic\images\emoji\stiker_btn_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\group\bg_add_profile_frame.png
c:\program files\Naver\LINE\res\skin\basic\images\group\bg_teamlayer_top_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_plus_02.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_radio_off_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_radio_on_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_cancel_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_invite_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_make_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_member_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_no_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_save_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_talk_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_write_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\btn_teampopup_yes_01.png
c:\program files\Naver\LINE\res\skin\basic\images\group\check_style1.png
c:\program files\Naver\LINE\res\skin\basic\images\group\check_style3.png
c:\program files\Naver\LINE\res\skin\basic\images\group\group_edit_select.png
c:\program files\Naver\LINE\res\skin\basic\images\login\btn_close.png
c:\program files\Naver\LINE\res\skin\basic\images\login\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\btn_max.png
c:\program files\Naver\LINE\res\skin\basic\images\login\btn_min.png
c:\program files\Naver\LINE\res\skin\basic\images\login\btn_qrcode_refresh.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\01_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\02_email.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\03_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\04_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\en-US\btn_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ico_q.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ico_step01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ico_step02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\01_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\02_email.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\03_jp_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\04_jp_setting.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\05_app_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\06_app_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\07_wap_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\08_wap_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ja-JP\btn_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\01_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\02_email.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\03_naver.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\04_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\05_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_international.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\ko-KR\btn_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\login\line_logo.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_bg1.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_bg2.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_btm.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_bullet.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_bullet2.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_line.png
c:\program files\Naver\LINE\res\skin\basic\images\login\login_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\login\popup_img_qrsorry.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\01_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\02_email.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\03_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\04_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-CN\btn_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\01_main.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\02_email.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\03_qr01.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\04_qr02.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\btn_login.png
c:\program files\Naver\LINE\res\skin\basic\images\login\zh-TW\btn_qrcode.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_l.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_m.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_bottom_r.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_check.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_middle_l.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_middle_r.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_l.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_m.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_top_r.png
c:\program files\Naver\LINE\res\skin\basic\images\menu\menu_uncheck.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_big.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_group.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_group_big.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\img_default_makegroup.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default_group.png
c:\program files\Naver\LINE\res\skin\basic\images\profile\list_img_default_makegroup.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_btm.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_line.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_top.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_topleft.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\bg_setting_topright.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\btn_block_user.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\btn_select.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\ico_arrow.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\layer_btn_close_all.png
c:\program files\Naver\LINE\res\skin\basic\images\setting\tab_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_badge.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_subpanel.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_tab.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\bg_top.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_add_friend.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_chat.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_close.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_list_option.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_max.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_menu.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_min.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\btn_top_friendtalk_01.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\check_addbuddy.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\check_group_show.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\group_member_count_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab01.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab02.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\ico_tab03.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\icon_search.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_1.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_2.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\img_no_data_3.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\input_cursor.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\list_tab_bar.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_l.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_m.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\nick_bubble_r.png
c:\program files\Naver\LINE\res\skin\basic\images\talk\status_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_accept.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_bg.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_btn_call_refuse.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_close.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_icon_call_accept.png
c:\program files\Naver\LINE\res\skin\basic\images\toast\toast_icon_call_refuse.png
c:\program files\Naver\LINE\res\skin\basic\images\tray\line_off.ico
c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_new.ico
c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_offline.ico
c:\program files\Naver\LINE\res\skin\basic\images\tray\tray_icon_online.ico
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_call_accept.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_call_refuse.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_mic.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_mic_dim.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_dim.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_gray.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_icon_vol_green.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_btn.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_thumnail_110.png
c:\program files\Naver\LINE\res\skin\basic\images\voip\voip_win_thumnail_bg.png
c:\program files\Naver\LINE\res\skin\basic\invite.nxul
c:\program files\Naver\LINE\res\skin\basic\login.nxul
c:\program files\Naver\LINE\res\skin\basic\loginHelp.nxul
c:\program files\Naver\LINE\res\skin\basic\loginKickout.nxul
c:\program files\Naver\LINE\res\skin\basic\macUpgradeNotice.nxul
c:\program files\Naver\LINE\res\skin\basic\myInfo.nxul
c:\program files\Naver\LINE\res\skin\basic\needQRCodeLogin.nxul
c:\program files\Naver\LINE\res\skin\basic\notice.nxul
c:\program files\Naver\LINE\res\skin\basic\picturePopup.nxul
c:\program files\Naver\LINE\res\skin\basic\QRCodeHelp.nxul
c:\program files\Naver\LINE\res\skin\basic\setting.nxul
c:\program files\Naver\LINE\res\skin\basic\settingBasic.nxul
c:\program files\Naver\LINE\res\skin\basic\settingPrivacy.nxul
c:\program files\Naver\LINE\res\skin\basic\skinMsgBox.nxul
c:\program files\Naver\LINE\res\skin\basic\sticker.nxul
c:\program files\Naver\LINE\res\skin\basic\talk.nxul
c:\program files\Naver\LINE\res\skin\basic\talkAddBuddy.nxul
c:\program files\Naver\LINE\res\skin\basic\talkBuddyList.nxul
c:\program files\Naver\LINE\res\skin\basic\talkChatList.nxul
c:\program files\Naver\LINE\res\skin\basic\test.nxul
c:\program files\Naver\LINE\res\skin\basic\toast.nxul
c:\program files\Naver\LINE\res\skin\basic\uploadPicture.nxul
c:\program files\Naver\LINE\res\skin\basic\voip.nxul
c:\program files\Naver\LINE\res\skin\basic\windowPositionHelperTester.nxul
c:\program files\Naver\LINE\res\skin\emoji\emoji_facemark.csv
c:\program files\Naver\LINE\res\skin\emoji\emoji_icon.csv
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_001.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_002.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_003.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_004.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_005.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_006.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_007.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_008.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoji_w_009.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_01s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_02s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_03s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_04s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_05s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_06s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_07s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_08s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_09s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_10s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_11s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_12s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_13s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_14s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_15s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_16s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_17s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_18s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_19s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_20s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_02_21s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_01s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_02s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_03s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_04s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_05s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_06s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_07s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_08s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_09s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_10s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_11s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_03_12s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_01s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_02s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_03s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_04s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_05s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_06s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_07s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_08s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_09s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_10s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_11s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_12s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_04_13s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_01s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_02s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_03s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_04s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_05s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_06s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_07s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_08s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_09s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_10s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_11s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_12s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_13s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_14s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_05_15s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_01s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_02s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_03s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_04s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_05s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_06s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_07s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_08s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_09s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_10s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_11s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_12s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_13s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_14s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_15s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_16s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_17s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_18s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_19s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_20s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_06_21s.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_01.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_02.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_03.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_04.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_05.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_06.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_07.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_08.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_09.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_10.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_11.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_12.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_13.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_14.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_15.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_16.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_17.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_18.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_19.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_20.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_01_21.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_01.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_02.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_03.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_04.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_05.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_06.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_07.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_08.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_09.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_10.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_11.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_12.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_13.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_14.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_15.png
c:\program files\Naver\LINE\res\skin\emoji\icon\emoticon_face_02_16.png
c:\program files\Naver\LINE\res\skin\sticker\gift\gift_1.png
c:\program files\Naver\LINE\res\skin\sticker\gift\gift_2.png
c:\program files\Naver\LINE\res\skin\sticker\gift\gift_3.png
c:\program files\Naver\LINE\res\skin\sticker\gift\gift_4.png
c:\program files\Naver\LINE\res\skin\sticker\tab\tab00_off.png
c:\program files\Naver\LINE\res\skin\sticker\tab\tab00_on.png
c:\program files\Naver\LINE\res\sounds\Bell.wav
c:\program files\Naver\LINE\res\sounds\VoipEnd.wav
c:\program files\Naver\LINE\res\sounds\VoipRing.wav
c:\program files\Naver\LINE\res\sounds\VoipRingback.wav
c:\program files\OpenOffice.org 2.4\program\spl680mi.dll
c:\programdata\SPL1CEB.tmp
c:\windows\IsUn0407.exe
D:\Autorun.inf
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-05-14 bis 2013-06-14  ))))))))))))))))))))))))))))))
.
.
2013-06-14 11:30 . 2013-06-14 11:30        --------        d-----w-        c:\users\Noknoi\AppData\Local\temp
2013-06-14 11:30 . 2013-06-14 11:30        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-06-14 11:30 . 2013-06-14 11:31        --------        d-----w-        c:\users\Michael\AppData\Local\temp
2013-06-13 04:32 . 2013-05-08 04:37        905576        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-06-13 04:32 . 2013-05-02 04:04        443904        ----a-w-        c:\windows\system32\win32spl.dll
2013-06-13 04:32 . 2013-05-02 04:03        37376        ----a-w-        c:\windows\system32\printcom.dll
2013-06-13 04:32 . 2013-04-24 01:46        812544        ----a-w-        c:\windows\system32\certutil.exe
2013-06-13 04:32 . 2013-04-24 04:00        985600        ----a-w-        c:\windows\system32\crypt32.dll
2013-06-13 04:32 . 2013-04-24 04:00        98304        ----a-w-        c:\windows\system32\cryptnet.dll
2013-06-13 04:32 . 2013-04-24 04:00        133120        ----a-w-        c:\windows\system32\cryptsvc.dll
2013-06-13 04:32 . 2013-04-24 04:00        41984        ----a-w-        c:\windows\system32\certenc.dll
2013-06-13 04:32 . 2013-05-02 22:03        3603832        ----a-w-        c:\windows\system32\ntkrnlpa.exe
2013-06-13 04:32 . 2013-05-02 22:03        3551096        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-06-13 04:31 . 2013-04-17 12:30        24576        ----a-w-        c:\windows\system32\cryptdlg.dll
2013-06-11 18:09 . 2013-06-11 18:09        17617288        ----a-w-        c:\windows\system32\FlashPlayerInstaller.exe
2013-05-26 16:44 . 2013-05-26 16:44        --------        d-----w-        c:\users\Noknoi\AppData\Local\Samsung
2013-05-26 16:43 . 2013-05-26 16:43        --------        d-----w-        c:\users\Noknoi\AppData\Roaming\Samsung
2013-05-26 16:32 . 2013-04-03 07:58        83864        ----a-w-        c:\windows\system32\drivers\ssudbus.sys
2013-05-26 16:32 . 2013-04-03 07:58        181912        ----a-w-        c:\windows\system32\drivers\ssudmdm.sys
2013-05-26 16:29 . 2013-05-26 16:29        --------        d-----w-        c:\program files\MyFree Codec
2013-05-26 15:35 . 2013-04-18 17:08        4659712        ----a-w-        c:\windows\system32\Redemption.dll
2013-05-26 15:34 . 2013-04-18 17:06        821824        ----a-w-        c:\windows\system32\dgderapi.dll
2013-05-26 15:34 . 2013-04-18 17:06        319456        ----a-w-        c:\windows\system32\DIFxAPI.dll
2013-05-26 15:34 . 2013-04-18 17:06        20032        ----a-w-        c:\windows\system32\drivers\dgderdrv.sys
2013-05-26 15:32 . 2013-05-26 16:31        --------        d-----w-        c:\program files\Samsung
2013-05-26 15:32 . 2013-05-26 16:29        --------        d-----w-        c:\programdata\Samsung
2013-05-26 15:18 . 2013-05-26 15:18        --------        d-----w-        c:\users\Michael\AppData\Local\Downloaded Installations
2013-05-26 13:33 . 2013-05-26 13:33        --------        d-----w-        c:\program files\iPod
2013-05-26 13:33 . 2013-05-26 13:34        --------        d-----w-        c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-05-26 13:33 . 2013-05-26 13:34        --------        d-----w-        c:\program files\iTunes
2013-05-18 13:15 . 2013-05-18 13:15        110080        ----a-r-        c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconCF33A0CE.exe
2013-05-18 13:15 . 2013-05-18 13:15        110080        ----a-r-        c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconF7A21AF7.exe
2013-05-18 13:15 . 2013-05-18 13:15        110080        ----a-r-        c:\users\Michael\AppData\Roaming\Microsoft\Installer\{4941BFEB-62C0-47A2-801E-998FC469CC2C}\IconD7F16134.exe
2013-05-18 13:15 . 2013-05-18 13:53        --------        d-----w-        C:\sh4ldr
2013-05-18 13:15 . 2013-05-18 13:15        --------        d-----w-        c:\program files\Enigma Software Group
2013-05-18 13:13 . 2013-05-18 13:15        --------        d-----w-        c:\windows\4941BFEB62C047A2801E998FC469CC2C.TMP
2013-05-18 13:12 . 2013-05-18 13:13        --------        d-----w-        c:\program files\Common Files\Wise Installation Wizard
2013-05-18 09:41 . 2013-05-18 09:42        97        ----a-w-        c:\windows\DeleteOnReboot.bat
2013-05-18 06:41 . 2013-05-18 06:41        --------        d-----w-        c:\progra~2\C28F~1
2013-05-16 03:54 . 2013-05-16 03:54        --------        d-----w-        c:\progra~2\C6FF~1
2013-05-15 15:42 . 2013-05-15 15:42        --------        d-----w-        c:\progra~2\01C4~1
2013-05-15 15:15 . 2013-04-15 14:20        638328        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys
2013-05-15 15:15 . 2013-04-13 10:56        37376        ----a-w-        c:\windows\system32\cdd.dll
2013-05-15 15:14 . 2013-04-09 01:36        2049024        ----a-w-        c:\windows\system32\win32k.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-11 18:09 . 2012-04-26 16:19        692104        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2013-06-11 18:09 . 2011-08-26 16:47        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-18 17:07 . 2013-04-18 17:07        90112        ----a-w-        c:\windows\MAMCityDownload.ocx
2013-04-18 17:07 . 2013-04-18 17:07        330240        ----a-w-        c:\windows\MASetupCaller.dll
2013-04-18 17:07 . 2013-04-18 17:07        30568        ----a-w-        c:\windows\MusiccityDownload.exe
2013-04-18 17:06 . 2013-04-18 17:06        974848        ----a-w-        c:\windows\system32\cis-2.4.dll
2013-04-18 17:06 . 2013-04-18 17:06        81920        ----a-w-        c:\windows\system32\issacapi_bs-2.3.dll
2013-04-18 17:06 . 2013-04-18 17:06        65536        ----a-w-        c:\windows\system32\issacapi_pe-2.3.dll
2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\MTXSYNCICON.dll
2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\MK_Lyric.dll
2013-04-18 17:06 . 2013-04-18 17:06        57344        ----a-w-        c:\windows\system32\issacapi_se-2.3.dll
2013-04-18 17:06 . 2013-04-18 17:06        569344        ----a-w-        c:\windows\system32\muzdecode.ax
2013-04-18 17:06 . 2013-04-18 17:06        491520        ----a-w-        c:\windows\system32\muzapp.dll
2013-04-18 17:06 . 2013-04-18 17:06        49152        ----a-w-        c:\windows\system32\MaJGUILib.dll
2013-04-18 17:06 . 2013-04-18 17:06        45320        ----a-w-        c:\windows\system32\MAMACExtract.dll
2013-04-18 17:06 . 2013-04-18 17:06        45056        ----a-w-        c:\windows\system32\MaXMLProto.dll
2013-04-18 17:06 . 2013-04-18 17:06        45056        ----a-w-        c:\windows\system32\MACXMLProto.dll
2013-04-18 17:06 . 2013-04-18 17:06        40960        ----a-w-        c:\windows\system32\MTTELECHIP.dll
2013-04-18 17:06 . 2013-04-18 17:06        352256        ----a-w-        c:\windows\system32\MSLUR71.dll
2013-04-18 17:06 . 2013-04-18 17:06        258048        ----a-w-        c:\windows\system32\muzoggsp.ax
2013-04-18 17:06 . 2013-04-18 17:06        245760        ----a-w-        c:\windows\system32\MSCLib.dll
2013-04-18 17:06 . 2013-04-18 17:06        24576        ----a-w-        c:\windows\system32\MASetupCleaner.exe
2013-04-18 17:06 . 2013-04-18 17:06        200704        ----a-w-        c:\windows\system32\muzwmts.dll
2013-04-18 17:06 . 2013-04-18 17:06        172032        ----a-w-        c:\windows\system32\muzapp.exe
2013-04-18 17:06 . 2013-04-18 17:06        155648        ----a-w-        c:\windows\system32\MSFLib.dll
2013-04-18 17:06 . 2013-04-18 17:06        143360        ----a-w-        c:\windows\system32\3DAudio.ax
2013-04-18 17:06 . 2013-04-18 17:06        135168        ----a-w-        c:\windows\system32\muzaf1.dll
2013-04-18 17:06 . 2013-04-18 17:06        131072        ----a-w-        c:\windows\system32\muzmpgsp.ax
2013-04-18 17:06 . 2013-04-18 17:06        122880        ----a-w-        c:\windows\system32\muzeffect.ax
2013-04-18 17:06 . 2013-04-18 17:06        118784        ----a-w-        c:\windows\system32\MaDRM.dll
2013-04-18 17:06 . 2013-04-18 17:06        110592        ----a-w-        c:\windows\system32\muzmp4sp.ax
2013-04-06 16:22 . 2013-04-06 16:22        94112        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll
2013-04-06 16:22 . 2012-06-24 08:52        861088        ----a-w-        c:\windows\system32\npDeployJava1.dll
2013-04-06 16:22 . 2010-06-26 13:01        782240        ----a-w-        c:\windows\system32\deployJava1.dll
2013-03-28 03:37 . 2012-11-03 16:00        37352        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2013-03-28 03:37 . 2012-11-03 16:00        135136        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2013-03-28 03:37 . 2012-11-03 16:00        84744        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-04-19 484904]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"GoogleChromeAutoLaunch_1D7305B07635F8E0A4CF4B02D1C53C4D"="c:\program files\Google\Chrome\Application\chrome.exe" [2013-05-29 825808]
"KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2013-04-23 1561968]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-12 827392]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-05-02 163840]
"VX3000"="c:\windows\vVX3000.exe" [2008-08-04 721936]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2008-08-04 160800]
"LXCGCATS"="c:\windows\system32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2007-02-22 73728]
"lxcgmon.exe"="c:\program files\Lexmark 2300 Series\lxcgmon.exe" [2007-04-29 205744]
"EzPrint"="c:\program files\Lexmark 2300 Series\ezprint.exe" [2007-04-29 103344]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-15 1097728]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2011-01-12 49208]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-05-08 345312]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2013-01-25 295072]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-15 152392]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2013-04-23 311152]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"="c:\windows\SYSTEM32\WerFault.exe" [2009-04-11 217088]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 81723331
*Deregistered* - 81723331
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork        REG_MULTI_SZ          PLA DPS BFE mpssvc
bthsvcs        REG_MULTI_SZ          BthServ
LocalServiceAndNoImpersonation        REG_MULTI_SZ          FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2007-04-19 11:23        452136        ----a-w-        c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-07 04:38        1165776        ----a-w-        c:\program files\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-26 18:50]
.
2013-06-13 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-02 13:38]
.
2013-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-02 12:48]
.
2013-06-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-05-02 12:48]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = https://www.google.de/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DE_DE&c=none&bd=smb&pf=laptop
uSearchURL,(Default) = hxxp://go.web.de/suchbox/webdesuche?su=%s
IE: Free YouTube to Mp3 Converter - c:\users\Michael\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: Interfaces\{FBDDC9ED-E58C-48F4-BD05-DFEB479848B1}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe
HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre7\bin\jusched.exe
SafeBoot-WudfPf
SafeBoot-WudfRd
HKLM_ActiveSetup-ccc-core-static - msiexec
AddRemove-ElsterFormular für Privatanwender und Unternehmer 12.0.0.5880k - c:\program files\ElsterFormular\uninstall.exe
AddRemove-Free Audio CD Burner_is1 - c:\program files\DVDVideoSoft\Free Audio CD Burner\unins000.exe
AddRemove-Free Studio_is1 - c:\program files\DVDVideoSoft\Free Studio\unins000.exe
AddRemove-LINE - c:\program files\Naver\LINE\LineUnInst.exe
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2013-06-14 13:31
Windows 6.0.6002 Service Pack 2 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  LXCGCATS = rundll32 c:\windows\system32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\pdfcDispatcher]
"ImagePath"="c:\program files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Zeit der Fertigstellung: 2013-06-14  13:35:12
ComboFix-quarantined-files.txt  2013-06-14 11:35
.
Vor Suchlauf: 20 Verzeichnis(se), 20.770.516.992 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 22.568.890.368 Bytes frei
.
- - End Of File - - 31A407E8542A38FE1B3BBCE3A68D4B99
--- --- ---
97B45F8522380F396E142A324FDCBB82

markusg 14.06.2013 13:56
Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Troxopog 14.06.2013 14:18
Was hälst du von Spy Hunter 4 ?

Grüße

markusg 14.06.2013 14:33
nichts, sonst hätte ich das hier genannt. poste bitte das angeforderte Log

Troxopog 14.06.2013 15:04
alles klar



Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.06.14.03

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Michael :: MICHAEL-PC [limitiert]

Schutz: Aktiviert

14.06.2013 15:52:13
mbam-log-2013-06-14 (15-52-13).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 237980
Laufzeit: 9 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

markusg 14.06.2013 19:04
Hi,

lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Troxopog 15.06.2013 00:50
Code:
ABBYY FineReader 6.0 Sprint        ABBYY Software House        14.07.2010        119MB        6.00.1395.4512        notwendig
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        11.06.2013                11.7.700.224        notwendig
Adobe Reader X (10.1.6) - Deutsch        Adobe Systems Incorporated        21.02.2013        167MB        10.1.6        notwendig
Agere Systems HDA Modem        Agere Systems        30.06.2007                unbekannt
Alice Software 4.10.0        HanseNet Telekommunikation GmbH        23.04.2008        14,7MB        4.10.0        notwendig
Apple Application Support        Apple Inc.        26.05.2013        64,7MB        2.3.4        unbekannt
Apple Mobile Device Support        Apple Inc.        22.02.2013        24,6MB        6.1.0.13        unbekannt
Apple Software Update        Apple Inc.        18.06.2012        2,38MB        2.1.3.127        unbekannt
Application Installer 4.00.B14        Hewlett-Packard Company        23.04.2008        916KB        4.00.B14        unbekannt
ArcSoft ShowBiz        ArcSoft        28.03.2011        309MB        unnötig
ATI Catalyst Install Manager        ATI Technologies, Inc.        27.04.2008        13,8MB        3.0.641.0                unbekannt
ATI Uninstaller        ATI Technologies, Inc.        23.04.2008        13,8MB        unbekannt
Avira Free Antivirus        Avira        08.05.2013        132MB        13.0.0.3640        notwendig
Bonjour        Apple Inc.        05.01.2013        1,14MB        3.0.0.10        unbekannt
CCleaner        Piriform        24.05.2013        5,62MB        4.02        notwendig
DHTML Editing Component        Microsoft Corporation        14.01.2010        462KB        6.02.0001        unbekannt
DivX Web Player        DivX,Inc.        18.12.2008        3,54MB        1.4.2        unnötig
Druckerdeinstallation für EPSON Stylus SX400 Series        SEIKO EPSON Corporation        03.04.2012        notwendig       
Druckerdeinstallation für EPSON Stylus TX400 Series        SEIKO EPSON Corporation        03.05.2012        notwendig       
ElsterFormular        Landesfinanzdirektion Thüringen        14.06.2013        280MB        13.1.1.8531u        notwendig
EPSON Scan                14.07.2010        15,6MB        notwendig
ESU for Microsoft Vista        Hewlett-Packard        30.06.2007        3,78MB        1.0.10.1        unbekannt
GMX MultiMessenger        GMX GmbH        01.05.2009        30,1MB        3.70.2804        notwendig
Google Chrome        Google Inc.        02.05.2009        53,6MB        27.0.1453.110        notwendig
Google Earth        Google        23.03.2013        173MB        7.0.3.8542        notwendig
Google Earth Plug-in        Google        01.06.2013        83,6MB        7.1.1.1580 unbekannt
Google Updater        Google Inc.        02.05.2009        3,59MB        2.4.1536.6592        unnötig
HP BIOS Configuration for ProtectTools        Hewlett-Packard        30.06.2007        2,56MB        3.00 C1        notwendig
HP Customer Experience Enhancements        Hewlett-Packard        30.06.2007                5.0.0.2258        notwendig
HP Easy Setup - Core        Hewlett-Packard        30.06.2007        1,02MB        5.0.0.2258        notwendig
HP Easy Setup - Frontend        Hewlett-Packard        30.06.2007        1,43MB        5.0.0.2258        notwendig
HP Help and Support        Hewlett-Packard        30.06.2007        20,9MB        1.0.0        notwendig
HP Notebook Accessories Product Tour        Hewlett-Packard        30.06.2007        10,0MB        13.0.0        unbekannt
HP ProtectTools Security Manager        Hewlett-Packard        30.06.2007        7,09MB        3.00 A10        notwendig
HP Quick Launch Buttons 6.20 F2        Hewlett-Packard        30.06.2007        23,9MB        6.20 F2        unbekannt
HP Update        Hewlett-Packard        28.03.2011        3,96MB        5.002.007.004        notwendig
HP Wireless Assistant        Hewlett-Packard        30.06.2007        3,94MB        3.00 F1        notwendig
InterVideo DVD Check                23.04.2008        188KB        notwendig
InterVideo WinDVD        InterVideo Inc.        23.04.2008        46,0MB        5.0-B11.1164        notwendig
iTunes        Apple Inc.        26.05.2013        186MB        11.0.3.42        notwendig
Java 7 Update 17        Oracle        06.04.2013        129MB        7.0.170        notwendig
JavaFX 2.1.1        Oracle Corporation        24.06.2012        20,8MB        2.1.1        unbekannt
Lexmark 2300 Series        Lexmark International, Inc.        19.04.2009        78,6MB        notwendig
LG PC Suite II        LG PC Suite        13.07.2010        166MB        2.00.0000        notwendig
LG USB Modem driver        LG Electronics        13.07.2010        1,18MB        4.9.4        notwendig
Malwarebytes Anti-Malware Version 1.75.0.1300        Malwarebytes Corporation        14.06.2013        13,3MB        1.75.0.1300        notwendig
McAfee Security Scan Plus        McAfee, Inc.        27.02.2013        2,32MB        3.0.318.3        notwendig
Microsoft .NET Framework 1.1                27.04.2008                unbekannt
Microsoft .NET Framework 1.1 German Language Pack        Microsoft        30.06.2007        3,01MB        1.1.4322        unbekannt
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU        Microsoft Corporation        08.08.2009        36,9MB        unbekannt
Microsoft .NET Framework 3.5 SP1        Microsoft Corporation        26.06.2009        36,9MB        unbekannt
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        26.05.2013        120MB        4.0.30320        unbekannt
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        26.05.2013        24,5MB        4.0.30320        unbekannt
Microsoft LifeCam        Microsoft Corporation        25.01.2009        92,0MB        2.4.542.0                        unbekannt
Microsoft Silverlight        Microsoft Corporation        12.03.2013        80,0MB        5.1.20125.0        unbekannt
Microsoft SQL Server Native Client        Microsoft Corporation        23.01.2009        2,62MB        9.00.3042.00        unbekannt
Microsoft SQL Server VSS Writer        Microsoft Corporation        23.01.2009        711KB        9.00.3042.00        unbekannt
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        29.07.2009        251KB        8.0.50727.4053        unbekannt
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        16.06.2011        294KB        8.0.61001        unbekannt
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148        Microsoft Corporation        29.07.2009        199KB        9.0.30729.4148        unbekannt
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        19.04.2011        592KB        9.0.30729.5570        unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729        Microsoft Corporation        26.02.2010        597KB        9.0.30729        unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        23.07.2009        590KB        9.0.30729        unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        02.04.2010        589KB        9.0.30729.4148        unbekannt
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        16.06.2011        594KB        9.0.30729.6161        unbekannt
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219        Microsoft Corporation        06.06.2012        12,2MB        10.0.40219        unbekannt
MSCU for Microsoft Vista        Hewlett-Packard        30.06.2007        72,9MB        1.0.1.3        notwendig
MSXML 4.0 SP2 (KB936181)        Microsoft Corporation        27.04.2008        1,26MB        4.20.9848.0        unbekannt
MSXML 4.0 SP2 (KB941833)        Microsoft Corporation        28.04.2008        1,26MB        4.20.9849.0        unbekannt
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        13.11.2008        1,27MB        4.20.9870.0        unbekannt
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        24.11.2009        1,33MB        4.20.9876.0        unbekannt
MyFreeCodec                26.05.2013        10,6MB        unbekannt
Nokia Connectivity Cable Driver                26.05.2013                7.1.32.69                unnötig
OpenOffice.org 2.4        OpenOffice.org        23.06.2008        342MB        2.4.9310        notwendig
PDF Complete                23.04.2008        24,7MB                notwendig
Pictomio        Pictomio GmbH        05.10.2008        13,9MB                notwendig
QuickTime        Apple Inc.        05.01.2013        73,1MB        7.73.80.64        unbekannt
RealPlayer        RealNetworks        24.01.2013        119MB        16.0.0                notwendig
Roxio Creator Audio        Roxio        30.06.2007        1,08MB        3.3.0                unbekannt
Roxio Creator Copy        Roxio        30.06.2007        648KB        3.3.0                unbekannt
Roxio Creator Data        Roxio        30.06.2007        980KB        3.3.0                        unbekannt
Roxio Creator Tools        Roxio        30.06.2007        345KB        3.3.0                unbekannt
Roxio MyDVD Basic v9        Roxio        30.06.2007        297MB        9.0.116                unbekannt
Samsung Kies        Samsung Electronics Co., Ltd.        26.05.2013        175MB        2.5.3.13043_14        notwendig
SAMSUNG USB Driver for Mobile Phones        SAMSUNG Electronics Co., Ltd.        14.06.2013        34,6MB        1.5.23.0        notwendig
Skype™ 5.10        Skype Technologies S.A.        13.09.2012        19,4MB        5.10.116        notwendig
SoundMAX        Analog Devices        30.06.2007        56,0KB        6.10.1.5180        notwendig
SpyHunter        Enigma Software Group USA, LLC        18.05.2013        47,0MB        4.13.6.4253        unnötig
ST Wiederherstellungs- & Sicherungsprogramme        Hewlett-Packard Company        30.06.2007        7,93GB        4.0.14        notwendig
Synaptics Pointing Device Driver        Synaptics        30.06.2007        12,8MB        9.1.11.0        unbekannt
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)        Microsoft Corporation        23.01.2009        30,8MB        9.00.3042.00        unbekannt
USB Video/Audio Device Driver        Ihr Firmenname        28.03.2011        5,73MB        1.00.0000        notwendig
Vista Default Settings        Hewlett-Packard        30.06.2007        281KB        1.0.5.1        unbekannt
VoipDiscount        Finarea S.A. Switzerland        26.12.2010        10,7MB        4.07 build 629        notwendig
Windows Live Anmelde-Assistent        Microsoft Corporation        20.02.2009        1,93MB        5.000.818.5        unbekannt
Windows Live Essentials        Microsoft Corporation        12.02.2011        44,0MB        14.0.8117.0416                unbekannt
Windows Live-Uploadtool        Microsoft Corporation        21.01.2009        225KB        14.0.8014.1029                unbekannt
Windows Media Player Firefox Plugin        Microsoft Corp        27.04.2008        296KB        1.0.0.8                        notwendig
WinRAR                09.01.2009        3,72MB                notwendig

markusg 15.06.2013 14:18
deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen
bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
Sicherheit (erweitert)
Erweiterte Sicherheit anhaken
und alle Dateien auswählen.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
ArcSoft
DivX
Google Updater
Java : beide
downloade Java jre:
Java-Downloads für alle Betriebssysteme
klicke:
Download der Java-Software für Windows Offline
laden, und instalieren
deinstaliere:
Nokia
SpyHunter

Öffne CCleaner, analysieren, starten, pc neustarten
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Troxopog 15.06.2013 18:59
Adobe Reader-Installationsfehler

Ungültiges Laufwerk: G:\
bricht immer wieder bei ca 82 % ab

markusg 15.06.2013 19:02
hast du ihn denn auf c: instaliert?

Troxopog 15.06.2013 21:19
Adobe installiert nach Doppelklick auf die heruntergeladene Datei eigenständig

hab ich jetzt mehrfach versucht, auch nach Neustart des Rechners


hier erstmal die Datei und delta search erscheint nicht mehr im 2ten und weiteren Tabs.

Danke


Code:
# AdwCleaner v2.303 - Datei am 15/06/2013 um 21:48:28 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Benutzer : Michael - MICHAEL-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Michael\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-10.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-4.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-5.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-6.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-7.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-8.xml
Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\searchplugins\icqplugin-9.xml

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16490

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v21.0 (de)

Datei : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\lmnsu73i.default\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\Noknoi\AppData\Roaming\Mozilla\Firefox\Profiles\jwhhut2j.default-1357985151241\prefs.js

Gelöscht : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?affID=121562&tt=gc_&babsrc=NT_ss&mntr[...]
Gelöscht : user_pref("browser.search.order.1", "Delta Search");

-\\ Google Chrome v27.0.1453.110

Datei : C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

Datei : C:\Users\Noknoi\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [6146 octets] - [18/05/2013 11:40:17]
AdwCleaner[R2].txt - [1674 octets] - [18/05/2013 13:44:21]
AdwCleaner[R3].txt - [2772 octets] - [15/06/2013 21:48:02]
AdwCleaner[S1].txt - [6351 octets] - [18/05/2013 11:41:02]
AdwCleaner[S2].txt - [1736 octets] - [18/05/2013 13:46:57]
AdwCleaner[S3].txt - [2705 octets] - [15/06/2013 21:48:28]

########## EOF - C:\AdwCleaner[S3].txt - [2765 octets] ##########
Ich seh gerade, dass ich PDF Vista auf dem Rechner habe und das dürfte reichen, ich kann damit PDF s öffnen und anschauen.


Grüße


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:24 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131