Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Windows-Systemblockierung paysave (https://www.trojaner-board.de/112359-windows-systemblockierung-paysave.html)

cosinus 03.04.2012 14:17
Und du hast das Fixlog nicht gepostet :(

MR_FRE 03.04.2012 22:05
hier die fix-log

cosinus 04.04.2012 11:29
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten, Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C:) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtkwmtcxexhp/setting...8_16-25-18.jpg

MR_FRE 04.04.2012 13:12
Code:
14:09:50.0570 5848        TDSS rootkit removing tool 2.7.25.0 Apr  3 2012 13:42:32
14:09:50.0835 5848        ============================================================
14:09:50.0835 5848        Current date / time: 2012/04/04 14:09:50.0835
14:09:50.0835 5848        SystemInfo:
14:09:50.0835 5848       
14:09:50.0835 5848        OS Version: 6.1.7601 ServicePack: 1.0
14:09:50.0835 5848        Product type: Workstation
14:09:50.0835 5848        ComputerName: EFFENBERGER-PC
14:09:50.0835 5848        UserName: Effenberger
14:09:50.0835 5848        Windows directory: C:\Windows
14:09:50.0835 5848        System windows directory: C:\Windows
14:09:50.0835 5848        Running under WOW64
14:09:50.0835 5848        Processor architecture: Intel x64
14:09:50.0835 5848        Number of processors: 4
14:09:50.0835 5848        Page size: 0x1000
14:09:50.0835 5848        Boot type: Normal boot
14:09:50.0835 5848        ============================================================
14:09:51.0069 5848        Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:09:51.0085 5848        \Device\Harddisk0\DR0:
14:09:51.0085 5848        MBR used
14:09:51.0085 5848        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
14:09:51.0085 5848        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x33D53000
14:09:51.0085 5848        \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x33D85800, BlocksNum 0x6400000
14:09:51.0147 5848        Initialize success
14:09:51.0147 5848        ============================================================
14:10:04.0064 3580        ============================================================
14:10:04.0064 3580        Scan started
14:10:04.0064 3580        Mode: Manual; SigCheck; TDLFS;
14:10:04.0064 3580        ============================================================
14:10:04.0329 3580        1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
14:10:04.0423 3580        1394ohci - ok
14:10:04.0454 3580        ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
14:10:04.0470 3580        ACPI - ok
14:10:04.0485 3580        AcpiPmi        (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
14:10:04.0548 3580        AcpiPmi - ok
14:10:04.0641 3580        AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:10:04.0641 3580        AdobeARMservice - ok
14:10:04.0735 3580        adp94xx        (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
14:10:04.0766 3580        adp94xx - ok
14:10:04.0797 3580        adpahci        (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
14:10:04.0813 3580        adpahci - ok
14:10:04.0844 3580        adpu320        (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
14:10:04.0860 3580        adpu320 - ok
14:10:04.0891 3580        AeLookupSvc    (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
14:10:05.0031 3580        AeLookupSvc - ok
14:10:05.0125 3580        AFD            (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
14:10:05.0156 3580        AFD - ok
14:10:05.0218 3580        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
14:10:05.0218 3580        agp440 - ok
14:10:05.0250 3580        ALG            (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
14:10:05.0312 3580        ALG - ok
14:10:05.0343 3580        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
14:10:05.0359 3580        aliide - ok
14:10:05.0421 3580        AMD External Events Utility (c08ade825268d291afe06eda71415c7d) C:\Windows\system32\atiesrxx.exe
14:10:05.0484 3580        AMD External Events Utility - ok
14:10:05.0593 3580        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
14:10:05.0593 3580        amdide - ok
14:10:05.0640 3580        AmdK8          (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
14:10:05.0655 3580        AmdK8 - ok
14:10:05.0842 3580        amdkmdag        (f59a32a90c4f96189cd74473f7be572b) C:\Windows\system32\DRIVERS\atikmdag.sys
14:10:06.0030 3580        amdkmdag - ok
14:10:06.0061 3580        amdkmdap        (0327723d45a7bb7c1fe4835eb784ac61) C:\Windows\system32\DRIVERS\atikmpag.sys
14:10:06.0092 3580        amdkmdap - ok
14:10:06.0139 3580        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
14:10:06.0154 3580        AmdPPM - ok
14:10:06.0201 3580        amdsata        (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
14:10:06.0217 3580        amdsata - ok
14:10:06.0248 3580        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
14:10:06.0248 3580        amdsbs - ok
14:10:06.0279 3580        amdxata        (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
14:10:06.0295 3580        amdxata - ok
14:10:06.0451 3580        AntiVirSchedulerService (a122d68ea2541453f787f341877cb40b) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
14:10:06.0466 3580        AntiVirSchedulerService - ok
14:10:06.0498 3580        AntiVirService  (2fe359edeb34efcf42574752f8aebd3f) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
14:10:06.0498 3580        AntiVirService - ok
14:10:06.0576 3580        AppID          (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
14:10:06.0732 3580        AppID - ok
14:10:06.0747 3580        AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
14:10:06.0778 3580        AppIDSvc - ok
14:10:06.0810 3580        Appinfo        (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
14:10:06.0872 3580        Appinfo - ok
14:10:06.0950 3580        Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:10:06.0950 3580        Apple Mobile Device - ok
14:10:07.0028 3580        arc            (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
14:10:07.0044 3580        arc - ok
14:10:07.0059 3580        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
14:10:07.0059 3580        arcsas - ok
14:10:07.0106 3580        asmthub3        (d6d2bb2f4f5868549dde75f3146bc84e) C:\Windows\system32\drivers\asmthub3.sys
14:10:07.0402 3580        asmthub3 - ok
14:10:07.0434 3580        asmtxhci        (1e758172367dc2a3653f16586d62a3f0) C:\Windows\system32\drivers\asmtxhci.sys
14:10:07.0449 3580        asmtxhci - ok
14:10:07.0527 3580        aspnet_state    (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
14:10:07.0527 3580        aspnet_state - ok
14:10:07.0558 3580        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
14:10:07.0605 3580        AsyncMac - ok
14:10:07.0652 3580        atapi          (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
14:10:07.0668 3580        atapi - ok
14:10:07.0730 3580        AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
14:10:07.0746 3580        AtiHDAudioService - ok
14:10:07.0777 3580        AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:10:07.0855 3580        AudioEndpointBuilder - ok
14:10:07.0855 3580        AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
14:10:07.0886 3580        AudioSrv - ok
14:10:07.0980 3580        Autodesk Content Service (1992c2a1867d95aa3a0802539358d162) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
14:10:07.0980 3580        Autodesk Content Service - ok
14:10:08.0073 3580        avgntflt        (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys
14:10:08.0073 3580        avgntflt - ok
14:10:08.0120 3580        avipbb          (852e3c0a60d368c487949e55ad52a47f) C:\Windows\system32\DRIVERS\avipbb.sys
14:10:08.0136 3580        avipbb - ok
14:10:08.0136 3580        avkmgr          (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
14:10:08.0151 3580        avkmgr - ok
14:10:08.0182 3580        AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
14:10:08.0260 3580        AxInstSV - ok
14:10:08.0307 3580        b06bdrv        (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
14:10:08.0338 3580        b06bdrv - ok
14:10:08.0370 3580        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
14:10:08.0401 3580        b57nd60a - ok
14:10:08.0448 3580        BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
14:10:08.0479 3580        BDESVC - ok
14:10:08.0510 3580        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
14:10:08.0572 3580        Beep - ok
14:10:08.0619 3580        BFE            (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
14:10:08.0682 3580        BFE - ok
14:10:08.0728 3580        BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
14:10:08.0775 3580        BITS - ok
14:10:08.0806 3580        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\drivers\blbdrive.sys
14:10:08.0838 3580        blbdrive - ok
14:10:08.0916 3580        Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
14:10:08.0947 3580        Bonjour Service - ok
14:10:08.0994 3580        bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
14:10:09.0025 3580        bowser - ok
14:10:09.0072 3580        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
14:10:09.0103 3580        BrFiltLo - ok
14:10:09.0134 3580        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
14:10:09.0150 3580        BrFiltUp - ok
14:10:09.0181 3580        Browser        (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
14:10:09.0228 3580        Browser - ok
14:10:09.0259 3580        Brserid        (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
14:10:09.0274 3580        Brserid - ok
14:10:09.0306 3580        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
14:10:09.0337 3580        BrSerWdm - ok
14:10:09.0368 3580        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
14:10:09.0399 3580        BrUsbMdm - ok
14:10:09.0415 3580        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
14:10:09.0446 3580        BrUsbSer - ok
14:10:09.0477 3580        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
14:10:09.0493 3580        BTHMODEM - ok
14:10:09.0524 3580        bthserv        (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
14:10:09.0555 3580        bthserv - ok
14:10:09.0586 3580        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
14:10:09.0649 3580        cdfs - ok
14:10:09.0680 3580        cdrom          (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
14:10:09.0711 3580        cdrom - ok
14:10:09.0742 3580        CertPropSvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:10:09.0805 3580        CertPropSvc - ok
14:10:09.0836 3580        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
14:10:09.0867 3580        circlass - ok
14:10:09.0914 3580        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
14:10:09.0930 3580        CLFS - ok
14:10:09.0976 3580        clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:10:09.0992 3580        clr_optimization_v2.0.50727_32 - ok
14:10:10.0039 3580        clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
14:10:10.0054 3580        clr_optimization_v2.0.50727_64 - ok
14:10:10.0101 3580        clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:10:10.0117 3580        clr_optimization_v4.0.30319_32 - ok
14:10:10.0132 3580        clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
14:10:10.0148 3580        clr_optimization_v4.0.30319_64 - ok
14:10:10.0210 3580        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys
14:10:10.0242 3580        CmBatt - ok
14:10:10.0257 3580        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
14:10:10.0273 3580        cmdide - ok
14:10:10.0304 3580        CNG            (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
14:10:10.0335 3580        CNG - ok
14:10:10.0366 3580        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
14:10:10.0382 3580        Compbatt - ok
14:10:10.0413 3580        CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
14:10:10.0444 3580        CompositeBus - ok
14:10:10.0460 3580        COMSysApp - ok
14:10:10.0491 3580        crcdisk        (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
14:10:10.0507 3580        crcdisk - ok
14:10:10.0538 3580        CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
14:10:10.0585 3580        CryptSvc - ok
14:10:10.0616 3580        DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:10:10.0663 3580        DcomLaunch - ok
14:10:10.0678 3580        defragsvc      (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
14:10:10.0741 3580        defragsvc - ok
14:10:10.0788 3580        DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
14:10:10.0819 3580        DfsC - ok
14:10:10.0834 3580        Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
14:10:10.0897 3580        Dhcp - ok
14:10:10.0912 3580        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
14:10:10.0959 3580        discache - ok
14:10:11.0006 3580        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
14:10:11.0022 3580        Disk - ok
14:10:11.0053 3580        Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
14:10:11.0084 3580        Dnscache - ok
14:10:11.0115 3580        dot3svc        (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
14:10:11.0178 3580        dot3svc - ok
14:10:11.0178 3580        DPS            (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
14:10:11.0209 3580        DPS - ok
14:10:11.0256 3580        drmkaud        (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
14:10:11.0271 3580        drmkaud - ok
14:10:11.0318 3580        DXGKrnl        (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
14:10:11.0349 3580        DXGKrnl - ok
14:10:11.0365 3580        EapHost        (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
14:10:11.0396 3580        EapHost - ok
14:10:11.0474 3580        ebdrv          (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
14:10:11.0536 3580        ebdrv - ok
14:10:11.0583 3580        EFS            (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
14:10:11.0614 3580        EFS - ok
14:10:11.0677 3580        ehRecvr        (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
14:10:11.0739 3580        ehRecvr - ok
14:10:11.0755 3580        ehSched        (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
14:10:11.0802 3580        ehSched - ok
14:10:11.0864 3580        elxstor        (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
14:10:11.0895 3580        elxstor - ok
14:10:11.0911 3580        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
14:10:11.0942 3580        ErrDev - ok
14:10:11.0973 3580        EventSystem    (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
14:10:12.0036 3580        EventSystem - ok
14:10:12.0082 3580        exfat          (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
14:10:12.0129 3580        exfat - ok
14:10:12.0160 3580        fastfat        (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
14:10:12.0176 3580        fastfat - ok
14:10:12.0207 3580        Fax            (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
14:10:12.0238 3580        Fax - ok
14:10:12.0270 3580        fdc            (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
14:10:12.0301 3580        fdc - ok
14:10:12.0332 3580        fdPHost        (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
14:10:12.0379 3580        fdPHost - ok
14:10:12.0394 3580        FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
14:10:12.0426 3580        FDResPub - ok
14:10:12.0472 3580        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
14:10:12.0472 3580        FileInfo - ok
14:10:12.0488 3580        Filetrace      (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
14:10:12.0519 3580        Filetrace - ok
14:10:12.0597 3580        FLEXnet Licensing Service 64 (5cee6cd43ae5844c49300ea0b1e557ee) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
14:10:12.0644 3580        FLEXnet Licensing Service 64 - ok
14:10:12.0706 3580        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
14:10:12.0738 3580        flpydisk - ok
14:10:12.0769 3580        FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
14:10:12.0784 3580        FltMgr - ok
14:10:12.0816 3580        FontCache      (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
14:10:12.0847 3580        FontCache - ok
14:10:12.0925 3580        FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:10:12.0940 3580        FontCache3.0.0.0 - ok
14:10:12.0972 3580        FsDepends      (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
14:10:12.0972 3580        FsDepends - ok
14:10:13.0003 3580        Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
14:10:13.0018 3580        Fs_Rec - ok
14:10:13.0050 3580        fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
14:10:13.0065 3580        fvevol - ok
14:10:13.0096 3580        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
14:10:13.0112 3580        gagp30kx - ok
14:10:13.0128 3580        GEARAspiWDM    (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
14:10:13.0143 3580        GEARAspiWDM - ok
14:10:13.0174 3580        gpsvc          (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
14:10:13.0252 3580        gpsvc - ok
14:10:13.0346 3580        gupdate        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:10:13.0346 3580        gupdate - ok
14:10:13.0362 3580        gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:10:13.0377 3580        gupdatem - ok
14:10:13.0377 3580        gusvc          (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
14:10:13.0393 3580        gusvc - ok
14:10:13.0471 3580        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
14:10:13.0502 3580        hcw85cir - ok
14:10:13.0549 3580        HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
14:10:13.0580 3580        HdAudAddService - ok
14:10:13.0627 3580        HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
14:10:13.0658 3580        HDAudBus - ok
14:10:13.0689 3580        HidBatt        (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
14:10:13.0720 3580        HidBatt - ok
14:10:13.0736 3580        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
14:10:13.0767 3580        HidBth - ok
14:10:13.0798 3580        HidIr          (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
14:10:13.0830 3580        HidIr - ok
14:10:13.0845 3580        hidserv        (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
14:10:13.0908 3580        hidserv - ok
14:10:13.0939 3580        HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
14:10:13.0954 3580        HidUsb - ok
14:10:13.0970 3580        hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
14:10:14.0032 3580        hkmsvc - ok
14:10:14.0064 3580        HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
14:10:14.0095 3580        HomeGroupListener - ok
14:10:14.0126 3580        HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
14:10:14.0157 3580        HomeGroupProvider - ok
14:10:14.0188 3580        HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
14:10:14.0204 3580        HpSAMD - ok
14:10:14.0251 3580        HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
14:10:14.0313 3580        HTTP - ok
14:10:14.0344 3580        hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
14:10:14.0344 3580        hwpolicy - ok
14:10:14.0376 3580        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
14:10:14.0391 3580        i8042prt - ok
14:10:14.0422 3580        iaStor          (2fdaec4b02729c48c0fd1b0b4695995b) C:\Windows\system32\drivers\iaStor.sys
14:10:14.0438 3580        iaStor - ok
14:10:14.0532 3580        IAStorDataMgrSvc (d41861e56e7552c13674d7f147a02464) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
14:10:14.0547 3580        IAStorDataMgrSvc - ok
14:10:14.0594 3580        iaStorV        (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
14:10:14.0610 3580        iaStorV - ok
14:10:14.0688 3580        idsvc          (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
14:10:14.0719 3580        idsvc - ok
14:10:14.0844 3580        igfx            (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys
14:10:14.0984 3580        igfx - ok
14:10:15.0031 3580        iirsp          (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
14:10:15.0031 3580        iirsp - ok
14:10:15.0078 3580        IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
14:10:15.0156 3580        IKEEXT - ok
14:10:15.0280 3580        IntcAzAudAddService (cb7dadef3d83fe2c12655a0bdcba99f2) C:\Windows\system32\drivers\RTKVHD64.sys
14:10:15.0390 3580        IntcAzAudAddService - ok
14:10:15.0421 3580        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
14:10:15.0436 3580        intelide - ok
14:10:15.0468 3580        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
14:10:15.0483 3580        intelppm - ok
14:10:15.0514 3580        IPBusEnum      (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
14:10:15.0577 3580        IPBusEnum - ok
14:10:15.0592 3580        IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:10:15.0639 3580        IpFilterDriver - ok
14:10:15.0686 3580        iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
14:10:15.0733 3580        iphlpsvc - ok
14:10:15.0764 3580        IPMIDRV        (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
14:10:15.0795 3580        IPMIDRV - ok
14:10:15.0811 3580        IPNAT          (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
14:10:15.0858 3580        IPNAT - ok
14:10:15.0936 3580        iPod Service    (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe
14:10:15.0967 3580        iPod Service - ok
14:10:16.0045 3580        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
14:10:16.0076 3580        IRENUM - ok
14:10:16.0123 3580        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
14:10:16.0123 3580        isapnp - ok
14:10:16.0154 3580        iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
14:10:16.0170 3580        iScsiPrt - ok
14:10:16.0216 3580        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
14:10:16.0232 3580        kbdclass - ok
14:10:16.0263 3580        kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
14:10:16.0294 3580        kbdhid - ok
14:10:16.0310 3580        KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:16.0326 3580        KeyIso - ok
14:10:16.0341 3580        KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
14:10:16.0357 3580        KSecDD - ok
14:10:16.0372 3580        KSecPkg        (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
14:10:16.0388 3580        KSecPkg - ok
14:10:16.0435 3580        ksthunk        (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
14:10:16.0482 3580        ksthunk - ok
14:10:16.0528 3580        KtmRm          (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
14:10:16.0575 3580        KtmRm - ok
14:10:16.0606 3580        LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
14:10:16.0638 3580        LanmanServer - ok
14:10:16.0653 3580        LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
14:10:16.0716 3580        LanmanWorkstation - ok
14:10:16.0762 3580        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
14:10:16.0809 3580        lltdio - ok
14:10:16.0840 3580        lltdsvc        (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
14:10:16.0872 3580        lltdsvc - ok
14:10:16.0903 3580        lmhosts        (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
14:10:16.0965 3580        lmhosts - ok
14:10:17.0028 3580        LMS            (1584deeae5aa0e3fb045f3d0eac585ea) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:10:17.0043 3580        LMS - ok
14:10:17.0074 3580        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
14:10:17.0090 3580        LSI_FC - ok
14:10:17.0121 3580        LSI_SAS        (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
14:10:17.0137 3580        LSI_SAS - ok
14:10:17.0152 3580        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
14:10:17.0168 3580        LSI_SAS2 - ok
14:10:17.0184 3580        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
14:10:17.0199 3580        LSI_SCSI - ok
14:10:17.0230 3580        luafv          (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
14:10:17.0277 3580        luafv - ok
14:10:17.0324 3580        Mcx2Svc        (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
14:10:17.0355 3580        Mcx2Svc - ok
14:10:17.0386 3580        megasas        (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
14:10:17.0386 3580        megasas - ok
14:10:17.0433 3580        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
14:10:17.0449 3580        MegaSR - ok
14:10:17.0480 3580        MEIx64          (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\drivers\HECIx64.sys
14:10:17.0496 3580        MEIx64 - ok
14:10:17.0542 3580        MemeoBackgroundService (8a43d23ace2e8c95a2d87b6e9599deda) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
14:10:17.0542 3580        MemeoBackgroundService - ok
14:10:17.0574 3580        MMCSS          (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:10:17.0636 3580        MMCSS - ok
14:10:17.0683 3580        Modem          (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
14:10:17.0730 3580        Modem - ok
14:10:17.0761 3580        monitor        (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
14:10:17.0792 3580        monitor - ok
14:10:17.0839 3580        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
14:10:17.0854 3580        mouclass - ok
14:10:17.0886 3580        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
14:10:17.0917 3580        mouhid - ok
14:10:17.0964 3580        mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
14:10:17.0979 3580        mountmgr - ok
14:10:17.0995 3580        mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
14:10:18.0010 3580        mpio - ok
14:10:18.0026 3580        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
14:10:18.0088 3580        mpsdrv - ok
14:10:18.0135 3580        MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
14:10:18.0182 3580        MpsSvc - ok
14:10:18.0213 3580        MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
14:10:18.0244 3580        MRxDAV - ok
14:10:18.0260 3580        mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
14:10:18.0307 3580        mrxsmb - ok
14:10:18.0338 3580        mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:10:18.0385 3580        mrxsmb10 - ok
14:10:18.0400 3580        mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:10:18.0432 3580        mrxsmb20 - ok
14:10:18.0463 3580        msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
14:10:18.0463 3580        msahci - ok
14:10:18.0494 3580        msdsm          (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
14:10:18.0510 3580        msdsm - ok
14:10:18.0541 3580        MSDTC          (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
14:10:18.0556 3580        MSDTC - ok
14:10:18.0588 3580        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
14:10:18.0634 3580        Msfs - ok
14:10:18.0681 3580        mshidkmdf      (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
14:10:18.0728 3580        mshidkmdf - ok
14:10:18.0759 3580        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
14:10:18.0759 3580        msisadrv - ok
14:10:18.0790 3580        MSiSCSI        (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
14:10:18.0806 3580        MSiSCSI - ok
14:10:18.0822 3580        msiserver - ok
14:10:18.0853 3580        MSKSSRV        (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
14:10:18.0900 3580        MSKSSRV - ok
14:10:18.0931 3580        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
14:10:18.0978 3580        MSPCLOCK - ok
14:10:19.0009 3580        MSPQM          (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
14:10:19.0024 3580        MSPQM - ok
14:10:19.0056 3580        MsRPC          (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
14:10:19.0071 3580        MsRPC - ok
14:10:19.0102 3580        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
14:10:19.0102 3580        mssmbios - ok
14:10:19.0134 3580        MSTEE          (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
14:10:19.0149 3580        MSTEE - ok
14:10:19.0180 3580        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
14:10:19.0196 3580        MTConfig - ok
14:10:19.0227 3580        Mup            (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
14:10:19.0227 3580        Mup - ok
14:10:19.0258 3580        napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
14:10:19.0305 3580        napagent - ok
14:10:19.0336 3580        NativeWifiP    (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
14:10:19.0383 3580        NativeWifiP - ok
14:10:19.0430 3580        NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
14:10:19.0461 3580        NDIS - ok
14:10:19.0477 3580        NdisCap        (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
14:10:19.0508 3580        NdisCap - ok
14:10:19.0524 3580        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
14:10:19.0570 3580        NdisTapi - ok
14:10:19.0602 3580        Ndisuio        (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
14:10:19.0633 3580        Ndisuio - ok
14:10:19.0664 3580        NdisWan        (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
14:10:19.0726 3580        NdisWan - ok
14:10:19.0742 3580        NDProxy        (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
14:10:19.0789 3580        NDProxy - ok
14:10:19.0820 3580        NetBIOS        (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
14:10:19.0882 3580        NetBIOS - ok
14:10:19.0898 3580        NetBT          (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
14:10:19.0960 3580        NetBT - ok
14:10:19.0992 3580        Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:20.0007 3580        Netlogon - ok
14:10:20.0038 3580        Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
14:10:20.0085 3580        Netman - ok
14:10:20.0163 3580        NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0179 3580        NetMsmqActivator - ok
14:10:20.0194 3580        NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0210 3580        NetPipeActivator - ok
14:10:20.0241 3580        netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
14:10:20.0304 3580        netprofm - ok
14:10:20.0382 3580        NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0382 3580        NetTcpActivator - ok
14:10:20.0382 3580        NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:10:20.0397 3580        NetTcpPortSharing - ok
14:10:20.0444 3580        nfrd960        (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
14:10:20.0460 3580        nfrd960 - ok
14:10:20.0491 3580        NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
14:10:20.0553 3580        NlaSvc - ok
14:10:20.0584 3580        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
14:10:20.0631 3580        Npfs - ok
14:10:20.0647 3580        nsi            (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
14:10:20.0709 3580        nsi - ok
14:10:20.0725 3580        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
14:10:20.0772 3580        nsiproxy - ok
14:10:20.0803 3580        Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
14:10:20.0865 3580        Ntfs - ok
14:10:20.0881 3580        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
14:10:20.0896 3580        Null - ok
14:10:20.0943 3580        nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
14:10:20.0943 3580        nvraid - ok
14:10:20.0959 3580        nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
14:10:20.0974 3580        nvstor - ok
14:10:21.0006 3580        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
14:10:21.0021 3580        nv_agp - ok
14:10:21.0037 3580        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
14:10:21.0068 3580        ohci1394 - ok
14:10:21.0115 3580        p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:10:21.0130 3580        p2pimsvc - ok
14:10:21.0177 3580        p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
14:10:21.0208 3580        p2psvc - ok
14:10:21.0224 3580        Parport        (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
14:10:21.0255 3580        Parport - ok
14:10:21.0286 3580        partmgr        (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
14:10:21.0302 3580        partmgr - ok
14:10:21.0318 3580        PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
14:10:21.0349 3580        PcaSvc - ok
14:10:21.0380 3580        pci            (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
14:10:21.0380 3580        pci - ok
14:10:21.0396 3580        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
14:10:21.0411 3580        pciide - ok
14:10:21.0427 3580        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
14:10:21.0442 3580        pcmcia - ok
14:10:21.0474 3580        pcw            (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
14:10:21.0489 3580        pcw - ok
14:10:21.0505 3580        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
14:10:21.0583 3580        PEAUTH - ok
14:10:21.0630 3580        PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
14:10:21.0661 3580        PerfHost - ok
14:10:21.0708 3580        pla            (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
14:10:21.0786 3580        pla - ok
14:10:21.0832 3580        PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
14:10:21.0879 3580        PlugPlay - ok
14:10:21.0910 3580        PNRPAutoReg    (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
14:10:21.0942 3580        PNRPAutoReg - ok
14:10:21.0973 3580        PNRPsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
14:10:21.0988 3580        PNRPsvc - ok
14:10:22.0020 3580        PolicyAgent    (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
14:10:22.0066 3580        PolicyAgent - ok
14:10:22.0082 3580        Power          (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
14:10:22.0113 3580        Power - ok
14:10:22.0160 3580        PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
14:10:22.0207 3580        PptpMiniport - ok
14:10:22.0238 3580        Processor      (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
14:10:22.0254 3580        Processor - ok
14:10:22.0285 3580        ProfSvc        (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
14:10:22.0332 3580        ProfSvc - ok
14:10:22.0363 3580        ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:22.0378 3580        ProtectedStorage - ok
14:10:22.0410 3580        Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
14:10:22.0425 3580        Psched - ok
14:10:22.0488 3580        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
14:10:22.0534 3580        ql2300 - ok
14:10:22.0566 3580        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
14:10:22.0581 3580        ql40xx - ok
14:10:22.0612 3580        QWAVE          (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
14:10:22.0628 3580        QWAVE - ok
14:10:22.0644 3580        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
14:10:22.0675 3580        QWAVEdrv - ok
14:10:22.0706 3580        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
14:10:22.0753 3580        RasAcd - ok
14:10:22.0784 3580        RasAgileVpn    (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
14:10:22.0846 3580        RasAgileVpn - ok
14:10:22.0878 3580        RasAuto        (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
14:10:22.0924 3580        RasAuto - ok
14:10:22.0956 3580        Rasl2tp        (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
14:10:22.0987 3580        Rasl2tp - ok
14:10:23.0034 3580        RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
14:10:23.0065 3580        RasMan - ok
14:10:23.0096 3580        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
14:10:23.0143 3580        RasPppoe - ok
14:10:23.0174 3580        RasSstp        (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
14:10:23.0205 3580        RasSstp - ok
14:10:23.0221 3580        rdbss          (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
14:10:23.0252 3580        rdbss - ok
14:10:23.0268 3580        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
14:10:23.0299 3580        rdpbus - ok
14:10:23.0330 3580        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
14:10:23.0392 3580        RDPCDD - ok
14:10:23.0408 3580        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
14:10:23.0439 3580        RDPENCDD - ok
14:10:23.0486 3580        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
14:10:23.0533 3580        RDPREFMP - ok
14:10:23.0564 3580        RDPWD          (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
14:10:23.0580 3580        RDPWD - ok
14:10:23.0626 3580        rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
14:10:23.0642 3580        rdyboost - ok
14:10:23.0673 3580        RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
14:10:23.0720 3580        RemoteAccess - ok
14:10:23.0751 3580        RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
14:10:23.0798 3580        RemoteRegistry - ok
14:10:23.0829 3580        RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
14:10:23.0860 3580        RpcEptMapper - ok
14:10:23.0892 3580        RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
14:10:23.0923 3580        RpcLocator - ok
14:10:23.0954 3580        RpcSs          (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
14:10:24.0001 3580        RpcSs - ok
14:10:24.0032 3580        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
14:10:24.0094 3580        rspndr - ok
14:10:24.0141 3580        RTL8167        (ee082e06a82ff630351d1e0ebbd3d8d0) C:\Windows\system32\DRIVERS\Rt64win7.sys
14:10:24.0157 3580        RTL8167 - ok
14:10:24.0204 3580        RTL8192su      (b3f36b4b3f192ea87ddc119f3a0b3e45) C:\Windows\system32\DRIVERS\RTL8192su.sys
14:10:24.0219 3580        RTL8192su - ok
14:10:24.0250 3580        SamSs          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:24.0266 3580        SamSs - ok
14:10:24.0282 3580        sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
14:10:24.0297 3580        sbp2port - ok
14:10:24.0344 3580        SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
14:10:24.0375 3580        SCardSvr - ok
14:10:24.0406 3580        scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
14:10:24.0438 3580        scfilter - ok
14:10:24.0469 3580        Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
14:10:24.0516 3580        Schedule - ok
14:10:24.0547 3580        SCPolicySvc    (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
14:10:24.0578 3580        SCPolicySvc - ok
14:10:24.0594 3580        SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
14:10:24.0625 3580        SDRSVC - ok
14:10:24.0687 3580        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
14:10:24.0734 3580        secdrv - ok
14:10:24.0765 3580        seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
14:10:24.0796 3580        seclogon - ok
14:10:24.0828 3580        SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
14:10:24.0859 3580        SENS - ok
14:10:24.0890 3580        SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
14:10:24.0906 3580        SensrSvc - ok
14:10:24.0968 3580        Serenum        (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
14:10:24.0984 3580        Serenum - ok
14:10:25.0030 3580        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
14:10:25.0046 3580        Serial - ok
14:10:25.0108 3580        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
14:10:25.0124 3580        sermouse - ok
14:10:25.0171 3580        SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
14:10:25.0233 3580        SessionEnv - ok
14:10:25.0264 3580        sffdisk        (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
14:10:25.0280 3580        sffdisk - ok
14:10:25.0296 3580        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
14:10:25.0311 3580        sffp_mmc - ok
14:10:25.0327 3580        sffp_sd        (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
14:10:25.0358 3580        sffp_sd - ok
14:10:25.0405 3580        sfloppy        (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
14:10:25.0436 3580        sfloppy - ok
14:10:25.0467 3580        SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
14:10:25.0514 3580        SharedAccess - ok
14:10:25.0545 3580        ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
14:10:25.0592 3580        ShellHWDetection - ok
14:10:25.0639 3580        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
14:10:25.0639 3580        SiSRaid2 - ok
14:10:25.0670 3580        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
14:10:25.0670 3580        SiSRaid4 - ok
14:10:25.0701 3580        Smb            (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
14:10:25.0764 3580        Smb - ok
14:10:25.0810 3580        SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
14:10:25.0842 3580        SNMPTRAP - ok
14:10:25.0873 3580        spldr          (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
14:10:25.0873 3580        spldr - ok
14:10:25.0888 3580        Spooler        (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
14:10:25.0935 3580        Spooler - ok
14:10:25.0982 3580        sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
14:10:26.0044 3580        sppsvc - ok
14:10:26.0060 3580        sppuinotify    (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
14:10:26.0091 3580        sppuinotify - ok
14:10:26.0138 3580        srv            (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
14:10:26.0200 3580        srv - ok
14:10:26.0216 3580        srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
14:10:26.0247 3580        srv2 - ok
14:10:26.0278 3580        srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
14:10:26.0294 3580        srvnet - ok
14:10:26.0325 3580        SSDPSRV        (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
14:10:26.0388 3580        SSDPSRV - ok
14:10:26.0403 3580        SstpSvc        (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
14:10:26.0466 3580        SstpSvc - ok
14:10:26.0497 3580        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
14:10:26.0512 3580        stexstor - ok
14:10:26.0544 3580        stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
14:10:26.0575 3580        stisvc - ok
14:10:26.0622 3580        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
14:10:26.0637 3580        swenum - ok
14:10:26.0653 3580        swprv          (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
14:10:26.0731 3580        swprv - ok
14:10:26.0762 3580        SysMain        (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
14:10:26.0840 3580        SysMain - ok
14:10:26.0856 3580        TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
14:10:26.0902 3580        TabletInputService - ok
14:10:26.0934 3580        TapiSrv        (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
14:10:26.0996 3580        TapiSrv - ok
14:10:27.0012 3580        TBS            (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
14:10:27.0043 3580        TBS - ok
14:10:27.0121 3580        Tcpip          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
14:10:27.0168 3580        Tcpip - ok
14:10:27.0214 3580        TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
14:10:27.0246 3580        TCPIP6 - ok
14:10:27.0277 3580        tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
14:10:27.0324 3580        tcpipreg - ok
14:10:27.0339 3580        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
14:10:27.0355 3580        TDPIPE - ok
14:10:27.0402 3580        TDTCP          (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
14:10:27.0417 3580        TDTCP - ok
14:10:27.0433 3580        tdx            (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
14:10:27.0480 3580        tdx - ok
14:10:27.0526 3580        TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
14:10:27.0542 3580        TermDD - ok
14:10:27.0573 3580        TermService    (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
14:10:27.0636 3580        TermService - ok
14:10:27.0667 3580        Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
14:10:27.0667 3580        Themes - ok
14:10:27.0698 3580        THREADORDER    (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
14:10:27.0729 3580        THREADORDER - ok
14:10:27.0745 3580        TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
14:10:27.0776 3580        TrkWks - ok
14:10:27.0823 3580        TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
14:10:27.0870 3580        TrustedInstaller - ok
14:10:27.0916 3580        tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
14:10:27.0979 3580        tssecsrv - ok
14:10:28.0010 3580        TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
14:10:28.0041 3580        TsUsbFlt - ok
14:10:28.0072 3580        TsUsbGD        (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
14:10:28.0088 3580        TsUsbGD - ok
14:10:28.0119 3580        tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
14:10:28.0166 3580        tunnel - ok
14:10:28.0182 3580        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
14:10:28.0197 3580        uagp35 - ok
14:10:28.0213 3580        udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
14:10:28.0275 3580        udfs - ok
14:10:28.0306 3580        UI0Detect      (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
14:10:28.0338 3580        UI0Detect - ok
14:10:28.0384 3580        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
14:10:28.0384 3580        uliagpkx - ok
14:10:28.0431 3580        umbus          (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
14:10:28.0462 3580        umbus - ok
14:10:28.0494 3580        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
14:10:28.0509 3580        UmPass - ok
14:10:28.0618 3580        UNS            (fc43877b4625f6eb773c98233eb625c5) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
14:10:28.0681 3580        UNS - ok
14:10:28.0696 3580        upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
14:10:28.0759 3580        upnphost - ok
14:10:28.0821 3580        USBAAPL64      (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
14:10:28.0837 3580        USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning
14:10:28.0837 3580        USBAAPL64 - detected UnsignedFile.Multi.Generic (1)
14:10:28.0884 3580        usbccgp        (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
14:10:28.0930 3580        usbccgp - ok
14:10:28.0962 3580        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
14:10:28.0993 3580        usbcir - ok
14:10:29.0008 3580        usbehci        (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
14:10:29.0040 3580        usbehci - ok
14:10:29.0071 3580        usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
14:10:29.0086 3580        usbhub - ok
14:10:29.0118 3580        usbohci        (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
14:10:29.0133 3580        usbohci - ok
14:10:29.0180 3580        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
14:10:29.0211 3580        usbprint - ok
14:10:29.0274 3580        usbscan        (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
14:10:29.0305 3580        usbscan - ok
14:10:29.0320 3580        USBSTOR        (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:10:29.0367 3580        USBSTOR - ok
14:10:29.0398 3580        usbuhci        (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
14:10:29.0430 3580        usbuhci - ok
14:10:29.0461 3580        UxSms          (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
14:10:29.0492 3580        UxSms - ok
14:10:29.0523 3580        VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
14:10:29.0523 3580        VaultSvc - ok
14:10:29.0554 3580        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
14:10:29.0570 3580        vdrvroot - ok
14:10:29.0586 3580        vds            (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
14:10:29.0632 3580        vds - ok
14:10:29.0664 3580        vga            (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
14:10:29.0679 3580        vga - ok
14:10:29.0710 3580        VgaSave        (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
14:10:29.0773 3580        VgaSave - ok
14:10:29.0804 3580        vhdmp          (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
14:10:29.0820 3580        vhdmp - ok
14:10:29.0851 3580        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
14:10:29.0851 3580        viaide - ok
14:10:29.0898 3580        volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
14:10:29.0913 3580        volmgr - ok
14:10:29.0944 3580        volmgrx        (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
14:10:29.0960 3580        volmgrx - ok
14:10:29.0991 3580        volsnap        (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
14:10:30.0007 3580        volsnap - ok
14:10:30.0038 3580        vsmraid        (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
14:10:30.0054 3580        vsmraid - ok
14:10:30.0100 3580        VSS            (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
14:10:30.0178 3580        VSS - ok
14:10:30.0225 3580        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
14:10:30.0256 3580        vwifibus - ok
14:10:30.0288 3580        vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
14:10:30.0319 3580        vwififlt - ok
14:10:30.0366 3580        W32Time        (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
14:10:30.0412 3580        W32Time - ok
14:10:30.0444 3580        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
14:10:30.0459 3580        WacomPen - ok
14:10:30.0506 3580        WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:10:30.0568 3580        WANARP - ok
14:10:30.0584 3580        Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
14:10:30.0615 3580        Wanarpv6 - ok
14:10:30.0662 3580        watchmi        (261a725f8acedda695c7fff6d6ede6b5) C:\Program Files (x86)\watchmi\TvdService.exe
14:10:30.0693 3580        watchmi ( UnsignedFile.Multi.Generic ) - warning
14:10:30.0693 3580        watchmi - detected UnsignedFile.Multi.Generic (1)
14:10:30.0740 3580        wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
14:10:30.0802 3580        wbengine - ok
14:10:30.0834 3580        WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
14:10:30.0849 3580        WbioSrvc - ok
14:10:30.0865 3580        wcncsvc        (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
14:10:30.0896 3580        wcncsvc - ok
14:10:30.0912 3580        WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
14:10:30.0958 3580        WcsPlugInService - ok
14:10:31.0005 3580        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
14:10:31.0005 3580        Wd - ok
14:10:31.0052 3580        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
14:10:31.0083 3580        Wdf01000 - ok
14:10:31.0099 3580        WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:10:31.0177 3580        WdiServiceHost - ok
14:10:31.0177 3580        WdiSystemHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
14:10:31.0192 3580        WdiSystemHost - ok
14:10:31.0224 3580        WebClient      (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
14:10:31.0255 3580        WebClient - ok
14:10:31.0255 3580        Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
14:10:31.0286 3580        Wecsvc - ok
14:10:31.0317 3580        wercplsupport  (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
14:10:31.0364 3580        wercplsupport - ok
14:10:31.0395 3580        WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
14:10:31.0426 3580        WerSvc - ok
14:10:31.0489 3580        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
14:10:31.0520 3580        WfpLwf - ok
14:10:31.0536 3580        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
14:10:31.0536 3580        WIMMount - ok
14:10:31.0567 3580        WinDefend - ok
14:10:31.0567 3580        WinHttpAutoProxySvc - ok
14:10:31.0629 3580        Winmgmt        (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
14:10:31.0676 3580        Winmgmt - ok
14:10:31.0738 3580        WinRM          (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
14:10:31.0801 3580        WinRM - ok
14:10:31.0848 3580        WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
14:10:31.0879 3580        WinUsb - ok
14:10:31.0926 3580        Wlansvc        (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
14:10:31.0972 3580        Wlansvc - ok
14:10:32.0019 3580        wlcrasvc        (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
14:10:32.0035 3580        wlcrasvc - ok
14:10:32.0113 3580        wlidsvc        (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:10:32.0175 3580        wlidsvc - ok
14:10:32.0238 3580        WmiAcpi        (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
14:10:32.0269 3580        WmiAcpi - ok
14:10:32.0331 3580        wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
14:10:32.0362 3580        wmiApSrv - ok
14:10:32.0409 3580        WMPNetworkSvc - ok
14:10:32.0425 3580        WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
14:10:32.0456 3580        WPCSvc - ok
14:10:32.0472 3580        WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
14:10:32.0487 3580        WPDBusEnum - ok
14:10:32.0534 3580        ws2ifsl        (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
14:10:32.0596 3580        ws2ifsl - ok
14:10:32.0612 3580        wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
14:10:32.0628 3580        wscsvc - ok
14:10:32.0643 3580        WSearch - ok
14:10:32.0659 3580        wsvd            (82e8f5aa03df7dbdb8a33f700d5d8cda) C:\Windows\system32\DRIVERS\wsvd.sys
14:10:32.0674 3580        wsvd - ok
14:10:32.0721 3580        wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
14:10:32.0830 3580        wuauserv - ok
14:10:32.0862 3580        WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
14:10:32.0893 3580        WudfPf - ok
14:10:32.0924 3580        WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
14:10:32.0955 3580        WUDFRd - ok
14:10:32.0986 3580        wudfsvc        (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
14:10:33.0002 3580        wudfsvc - ok
14:10:33.0018 3580        WwanSvc        (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
14:10:33.0049 3580        WwanSvc - ok
14:10:33.0080 3580        MBR (0x1B8)    (eb2571b16b316c9fe5aa1c4797ff61ee) \Device\Harddisk0\DR0
14:10:34.0671 3580        \Device\Harddisk0\DR0 - ok
14:10:34.0702 3580        Boot (0x1200)  (619a03a875d85497d559fa3e19e9de27) \Device\Harddisk0\DR0\Partition0
14:10:34.0702 3580        \Device\Harddisk0\DR0\Partition0 - ok
14:10:34.0718 3580        Boot (0x1200)  (dc01d6940eccfb560d0027e5a877383b) \Device\Harddisk0\DR0\Partition1
14:10:34.0718 3580        \Device\Harddisk0\DR0\Partition1 - ok
14:10:34.0734 3580        Boot (0x1200)  (60493bfdb0879334bfeb5a7cca6fd67a) \Device\Harddisk0\DR0\Partition2
14:10:34.0734 3580        \Device\Harddisk0\DR0\Partition2 - ok
14:10:34.0734 3580        ============================================================
14:10:34.0734 3580        Scan finished
14:10:34.0734 3580        ============================================================
14:10:34.0749 4860        Detected object count: 2
14:10:34.0749 4860        Actual detected object count: 2
14:10:50.0833 4860        USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user
14:10:50.0833 4860        USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip
14:10:50.0833 4860        watchmi ( UnsignedFile.Multi.Generic ) - skipped by user
14:10:50.0833 4860        watchmi ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 04.04.2012 13:25
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

MR_FRE 04.04.2012 16:21
Code:
ComboFix 12-04-04.02 - Effenberger 04.04.2012  16:35:43.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.6126.4599 [GMT 2:00]
ausgeführt von:: c:\users\Effenberger\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-03-04 bis 2012-04-04  ))))))))))))))))))))))))))))))
.
.
2012-04-04 14:39 . 2012-04-04 14:39        --------        d-----w-        c:\users\Default\AppData\Local\temp
2012-04-04 14:31 . 2002-07-25 15:06        282624        ----a-w-        c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe
2012-04-04 14:30 . 2012-04-04 14:30        --------        d-----w-        c:\programdata\UDL
2012-04-04 14:29 . 2012-04-04 14:29        --------        d-----w-        c:\program files (x86)\EPSON Print CD
2012-04-04 14:28 . 2003-02-27 14:12        696320        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-04-04 14:28 . 2002-12-05 12:10        155648        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-04-04 14:28 . 2002-12-02 13:22        5632        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-04-04 14:28 . 2002-12-02 11:33        57344        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-04-04 14:28 . 2002-12-02 11:33        237568        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-04-04 14:28 . 2012-04-04 14:28        282756        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2012-04-04 14:28 . 2012-04-04 14:28        163972        ----a-w-        c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-04-04 12:59 . 2006-10-30 22:10        120992        ----a-w-        c:\windows\SysWow64\EpPicPrt.dll
2012-04-04 12:59 . 2006-10-19 22:10        80024        ----a-w-        c:\windows\SysWow64\PICSDK.dll
2012-04-04 12:59 . 2006-10-19 22:10        501912        ----a-w-        c:\windows\SysWow64\PICSDK2.dll
2012-04-04 12:59 . 2006-10-19 22:10        108704        ----a-w-        c:\windows\SysWow64\PICEntry.dll
2012-04-04 12:59 . 2006-10-30 22:10        71840        ----a-w-        c:\windows\SysWow64\EPPicMgr.dll
2012-04-04 12:59 . 2012-04-04 12:59        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\InstallShield
2012-04-04 12:51 . 2012-04-04 12:51        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\EPSON
2012-04-04 12:27 . 2012-04-04 12:27        --------        d-----w-        c:\program files\EPSON
2012-04-04 12:26 . 2012-04-04 14:29        --------        d-----w-        c:\program files (x86)\epson
2012-04-04 12:26 . 2007-04-17 22:00        101888        ----a-w-        c:\windows\system32\esxcwiad.dll
2012-04-03 20:55 . 2012-04-03 20:55        --------        d-----w-        c:\program files (x86)\7-Zip
2012-04-03 20:54 . 2012-03-20 01:51        8669240        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{1F2AE9E3-EAB6-44A2-9261-F33BBED2E3DD}\mpengine.dll
2012-04-02 19:35 . 2012-04-02 19:35        --------        d-----w-        C:\_OTL
2012-04-02 19:30 . 2012-04-02 19:30        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\Avira
2012-04-02 19:25 . 2012-01-31 06:56        97312        ----a-w-        c:\windows\system32\drivers\avgntflt.sys
2012-04-02 19:25 . 2012-01-31 06:56        132320        ----a-w-        c:\windows\system32\drivers\avipbb.sys
2012-04-02 19:25 . 2011-09-16 14:08        27760        ----a-w-        c:\windows\system32\drivers\avkmgr.sys
2012-04-02 19:25 . 2012-04-02 19:25        --------        d-----w-        c:\programdata\Avira
2012-04-02 19:25 . 2012-04-02 19:25        --------        d-----w-        c:\program files (x86)\Avira
2012-04-02 19:18 . 2012-04-02 19:18        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\OpenOffice.org
2012-04-02 19:17 . 2012-04-02 19:17        --------        d-----w-        c:\program files (x86)\OpenOffice.org 3
2012-04-02 10:27 . 2012-04-02 10:27        --------        d-----w-        c:\program files\iPod
2012-04-02 10:27 . 2012-04-02 10:28        --------        d-----w-        c:\program files\iTunes
2012-04-02 10:27 . 2012-04-02 10:28        --------        d-----w-        c:\program files (x86)\iTunes
2012-03-28 10:06 . 2012-03-28 10:06        592824        ----a-w-        c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-28 10:06 . 2012-03-28 10:06        44472        ----a-w-        c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-27 13:21 . 2012-03-27 13:21        --------        d-----w-        c:\program files (x86)\ESET
2012-03-27 12:45 . 2012-03-27 12:45        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\Malwarebytes
2012-03-27 12:45 . 2012-03-27 12:45        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2012-03-27 12:45 . 2012-03-27 12:45        --------        d-----w-        c:\programdata\Malwarebytes
2012-03-27 12:45 . 2011-12-10 13:24        23152        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-03-27 12:41 . 2012-03-27 12:41        --------        d-----w-        c:\users\Effenberger\AppData\Local\ElevatedDiagnostics
2012-03-26 15:50 . 2012-03-26 15:50        --------        d-----w-        c:\users\Effenberger\AppData\Local\Diagnostics
2012-03-26 15:35 . 2009-07-30 00:36        540192        ----a-w-        c:\windows\system32\NVUNINST.EXE
2012-03-22 15:12 . 2012-03-22 16:01        --------        d-----w-        c:\users\Effenberger\AppData\Roaming\CyberLink
2012-03-21 19:35 . 2012-03-14 16:23        65024        ----a-w-        c:\windows\system32\pdfcmon.dll
2012-03-21 19:35 . 2005-04-15 18:58        1071088        ----a-w-        c:\windows\SysWow64\MSCOMCTL.OCX
2012-03-21 19:35 . 2004-03-08 23:00        662288        ----a-w-        c:\windows\SysWow64\MSCOMCT2.OCX
2012-03-21 19:35 . 1998-06-23 23:00        137000        ----a-w-        c:\windows\SysWow64\MSMAPI32.OCX
2012-03-21 19:35 . 2012-03-21 19:35        --------        d-----w-        c:\program files (x86)\PDFCreator
2012-03-21 19:35 . 1998-07-06 16:56        125712        ----a-w-        c:\windows\SysWow64\VB6DE.DLL
2012-03-21 19:35 . 1998-07-06 16:55        158208        ----a-w-        c:\windows\SysWow64\MSCMCDE.DLL
2012-03-21 19:35 . 1998-07-06 16:55        64512        ----a-w-        c:\windows\SysWow64\MSCC2DE.DLL
2012-03-21 19:35 . 1998-07-05 23:00        23552        ----a-w-        c:\windows\SysWow64\MSMPIDE.DLL
2012-03-21 02:08 . 2012-03-21 02:08        --------        d-----w-        c:\program files (x86)\GUM4AD7.tmp
2012-03-14 04:40 . 2011-11-19 15:20        5559152        ----a-w-        c:\windows\system32\ntoskrnl.exe
2012-03-14 04:40 . 2011-11-19 14:50        3968368        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2012-03-14 04:40 . 2011-11-19 14:50        3913584        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2012-03-14 04:31 . 2012-02-03 04:34        3145728        ----a-w-        c:\windows\system32\win32k.sys
2012-03-14 04:31 . 2012-02-10 06:36        1544192        ----a-w-        c:\windows\system32\DWrite.dll
2012-03-14 04:31 . 2012-02-10 05:38        1077248        ----a-w-        c:\windows\SysWow64\DWrite.dll
2012-03-13 17:38 . 2012-02-17 06:38        1031680        ----a-w-        c:\windows\system32\rdpcore.dll
2012-03-13 17:38 . 2012-02-17 05:34        826880        ----a-w-        c:\windows\SysWow64\rdpcore.dll
2012-03-13 17:38 . 2012-02-17 04:58        210944        ----a-w-        c:\windows\system32\drivers\rdpwd.sys
2012-03-13 17:38 . 2012-02-17 04:57        23552        ----a-w-        c:\windows\system32\drivers\tdtcp.sys
2012-03-13 17:38 . 2012-01-25 06:38        77312        ----a-w-        c:\windows\system32\rdpwsx.dll
2012-03-13 17:38 . 2012-01-25 06:38        149504        ----a-w-        c:\windows\system32\rdpcorekmts.dll
2012-03-13 17:38 . 2012-01-25 06:33        9216        ----a-w-        c:\windows\system32\rdrmemptylst.exe
2012-03-12 18:36 . 2012-03-12 18:36        --------        d-----w-        c:\program files (x86)\Common Files\McNeel Shared
2012-03-12 18:36 . 2012-03-12 18:36        --------        d-----w-        c:\program files (x86)\Rhinoceros 4.0
2012-03-10 12:29 . 2012-03-10 12:29        --------        d-----w-        c:\programdata\McAfee
2012-03-10 12:29 . 2012-03-10 12:29        --------        d-----w-        c:\windows\system32\Macromed
2012-03-05 14:46 . 2012-03-05 14:46        --------        d-----w-        c:\users\Effenberger\AppData\Local\Mozilla
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-10 12:29 . 2011-08-22 17:09        414368        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 07:18 . 2010-11-21 03:27        279656        ------w-        c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-02-18 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-05-20 284440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-14 343168]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2010-08-03 107816]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-01-31 258512]
.
c:\users\Effenberger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
watchmi tray.lnk - c:\windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe [2012-2-18 300928]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages        REG_MULTI_SZ          kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 136176]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-02-20 1431888]
R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 136176]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-01-31 86224]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-20 13592]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-09-28 25824]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-03-11 2656280]
S2 watchmi;watchmi service;c:\program files (x86)\watchmi\TvdService.exe [2011-10-07 70144]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 12:47]
.
2012-04-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-18 12:47]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-16 12673128]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Effenberger\AppData\Roaming\Mozilla\Firefox\Profiles\qxrl2vay.default\
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-04-04  16:43:54 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-04-04 14:43
.
Vor Suchlauf: 8 Verzeichnis(se), 381.736.480.768 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 381.575.446.528 Bytes frei
.
- - End Of File - - 61EC623981052EAC03FE2EEAA279DA77

cosinus 04.04.2012 21:53
Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!
  • Starte die aswMBR.exe Vista und Win7 User aswMBR per Rechtsklick "als Administrator ausführen"
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

MR_FRE 05.04.2012 12:32
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-04-05 13:15:36
-----------------------------
13:15:36.094    OS Version: Windows x64 6.1.7601 Service Pack 1
13:15:36.094    Number of processors: 4 586 0x2A07
13:15:36.094    ComputerName: EFFENBERGER-PC  UserName: Effenberger
13:15:38.184    Initialize success
13:19:18.140    AVAST engine defs: 12040500
13:24:09.189    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:24:09.189    Disk 0 Vendor: WDC_WD50 15.0 Size: 476940MB BusType: 3
13:24:09.205    Disk 0 MBR read successfully
13:24:09.205    Disk 0 MBR scan
13:24:09.205    Disk 0 unknown MBR code
13:24:09.220    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
13:24:09.236    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS      424614 MB offset 206848
13:24:09.252    Disk 0 Partition 3 00    07    HPFS/NTFS NTFS        51200 MB offset 869816320
13:24:09.267    Disk 0 Partition 4 00    12  Compaq diag NTFS        1024 MB offset 974673920
13:24:09.314    Disk 0 scanning C:\Windows\system32\drivers
13:24:15.850    Service scanning
13:24:30.312    Modules scanning
13:24:30.312    Disk 0 trace - called modules:
13:24:30.327    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
13:24:30.327    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80087d5060]
13:24:30.343    3 CLASSPNP.SYS[fffff88001d6f43f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005f5f050]
13:24:31.279    AVAST engine scan C:\Windows
13:24:33.120    AVAST engine scan C:\Windows\system32
13:26:12.570    AVAST engine scan C:\Windows\system32\drivers
13:26:20.479    AVAST engine scan C:\Users\Effenberger
13:27:02.053    AVAST engine scan C:\ProgramData
13:27:54.937    Scan finished successfully
13:31:01.358    Disk 0 MBR has been saved successfully to "C:\Users\Effenberger\Desktop\MBR.dat"
13:31:01.358    The log file has been saved successfully to "C:\Users\Effenberger\Desktop\aswMBR.txt"

cosinus 05.04.2012 14:01
Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast

Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

MR_FRE 06.04.2012 15:43
Code:
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-04-06 16:30:52
-----------------------------
16:30:52.068    OS Version: Windows x64 6.1.7601 Service Pack 1
16:30:52.068    Number of processors: 4 586 0x2A07
16:30:52.068    ComputerName: EFFENBERGER-PC  UserName: Effenberger
16:30:54.112    Initialize success
16:30:57.404    AVAST engine defs: 12040500
16:31:04.564    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
16:31:04.564    Disk 0 Vendor: WDC_WD50 15.0 Size: 476940MB BusType: 3
16:31:04.580    Disk 0 MBR read successfully
16:31:04.580    Disk 0 MBR scan
16:31:04.595    Disk 0 Windows 7 default MBR code
16:31:04.595    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
16:31:04.595    Disk 0 Partition 2 00    07    HPFS/NTFS NTFS      424614 MB offset 206848
16:31:04.626    Disk 0 Partition 3 00    07    HPFS/NTFS NTFS        51200 MB offset 869816320
16:31:04.642    Disk 0 Partition 4 00    12  Compaq diag NTFS        1024 MB offset 974673920
16:31:04.689    Disk 0 scanning C:\Windows\system32\drivers
16:31:12.146    Service scanning
16:31:29.633    Modules scanning
16:31:29.633    Disk 0 trace - called modules:
16:31:29.649    ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
16:31:29.649    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa80087d7060]
16:31:29.664    3 CLASSPNP.SYS[fffff88001da043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005f0f050]
16:31:31.521    AVAST engine scan C:\Windows
16:31:34.048    AVAST engine scan C:\Windows\system32
16:33:31.173    AVAST engine scan C:\Windows\system32\drivers
16:33:39.815    AVAST engine scan C:\Users\Effenberger
16:34:29.704    AVAST engine scan C:\ProgramData
16:35:25.084    Scan finished successfully
16:42:04.821    Disk 0 MBR has been saved successfully to "C:\Users\Effenberger\Desktop\MBR.dat"
16:42:04.821    The log file has been saved successfully to "C:\Users\Effenberger\Desktop\aswMBR1.txt"

cosinus 06.04.2012 15:46
Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

MR_FRE 06.04.2012 16:42
Code:
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.04.06.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Effenberger :: EFFENBERGER-PC [Administrator]

06.04.2012 17:05:32
mbam-log-2012-04-06 (17-05-32).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 365309
Laufzeit: 24 Minute(n), 44 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 06.04.2012 16:54
Ok, fehlt noch das andere Log

MR_FRE 06.04.2012 19:02
Code:
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 04/06/2012 at 06:43 PM

Application Version : 5.0.1146

Core Rules Database Version : 8424
Trace Rules Database Version: 6236

Scan type      : Complete Scan
Total Scan Time : 00:57:46

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned      : 853
Memory threats detected  : 0
Registry items scanned    : 66628
Registry threats detected : 0
File items scanned        : 253138
File threats detected    : 289

Adware.Tracking Cookie
        C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\KAZP2L02.txt [ /mediaplex.com ]
        C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\K60P8Q68.txt [ /tracking.quisma.com ]
        C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\FQKUU9R2.txt [ /apmebf.com ]
        C:\Users\Effenberger\AppData\Roaming\Microsoft\Windows\Cookies\NKGWTI2E.txt [ /fastclick.net ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\DIA3CCT3.txt [ Cookie:effenberger@smartadserver.com/ ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\7KTD8LWU.txt [ Cookie:effenberger@eas4.emediate.eu/ ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\WFTH0W60.txt [ Cookie:effenberger@im.banner.t-online.de/ ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\15QM6D3I.txt [ Cookie:effenberger@adtech.de/ ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\L3LCGH82.txt [ Cookie:effenberger@adfarm1.adition.com/ ]
        C:\USERS\EFFENBERGER\AppData\Roaming\Microsoft\Windows\Cookies\Low\2K1Y0ATZ.txt [ Cookie:effenberger@ad3.adfarm1.adition.com/ ]
        C:\USERS\EFFENBERGER\Cookies\K60P8Q68.txt [ Cookie:effenberger@tracking.quisma.com/ ]
        C:\USERS\EFFENBERGER\Cookies\FQKUU9R2.txt [ Cookie:effenberger@apmebf.com/ ]
        C:\USERS\EFFENBERGER\Cookies\NKGWTI2E.txt [ Cookie:effenberger@fastclick.net/ ]
        www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .enoratraffic.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        www.googleadservices.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        www.sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .sunporno.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .exoclick.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        accounts.google.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        accounts.youtube.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .xiti.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad4.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad2.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .amazon-adsystem.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .amazon-adsystem.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        www.googleadservices.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .zanox.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        ad.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.mlsat02.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.mindshare.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .specificclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tradetracker.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .imrworldwide.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tribalfusion.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .ru4.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .media6degrees.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .atdmt.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .euros4click.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        www.netdebit-counter.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .insightexpressai.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        www.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        www.pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .exoclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .pornhub.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ads.trafficjunky.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adx.chip.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad3.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .smartadserver.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .mediaplex.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        www.zanox-affiliate.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adxvalue.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .apmebf.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        count.asnetworks.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .trafficmp.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .collective-media.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adserver.adtechus.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zedo.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adbrite.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        network.realmedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .trafficmp.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .interclick.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        tracking.mobile.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .clickfuse.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .invitemedia.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad2.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .bs.serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .questionmarket.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        a.visualrevenue.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .im.banner.t-online.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad4.adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        track.effiliation.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .serving-sys.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .revsci.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zanox.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .zanox-affiliate.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.dyntracker.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .webmasterplan.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tradedoubler.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .unitymedia.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .tracking.quisma.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .traffictrack.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.yieldmanager.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        eas.apm.emediate.eu [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adfarm1.adition.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .adtech.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        .fastclick.net [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ww251.smartadserver.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        adserver.flughafen-stuttgart.de [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]
        ad.zanox.com [ C:\USERS\EFFENBERGER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QXRL2VAY.DEFAULT\COOKIES.SQLITE ]

cosinus 06.04.2012 20:03
Sieht ok aus, da wurden nur Cookies gefunden.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:46 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19