Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Malwarebytes bricht ab - Rechner infiziert? (https://www.trojaner-board.de/123542-malwarebytes-bricht-ab-rechner-infiziert.html)

cosinus 17.09.2012 10:45
Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

Boogie 18.09.2012 14:11
Bitte sehr:

Code:

15:04:35.0609 1828  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
15:04:35.0812 1828  ============================================================
15:04:35.0812 1828  Current date / time: 2012/09/18 15:04:35.0812
15:04:35.0812 1828  SystemInfo:
15:04:35.0812 1828 
15:04:35.0812 1828  OS Version: 5.1.2600 ServicePack: 3.0
15:04:35.0812 1828  Product type: Workstation
15:04:35.0812 1828  ComputerName: MARKUS
15:04:35.0812 1828  UserName: Markus Ruffing
15:04:35.0812 1828  Windows directory: C:\WINDOWS
15:04:35.0812 1828  System windows directory: C:\WINDOWS
15:04:35.0812 1828  Processor architecture: Intel x86
15:04:35.0812 1828  Number of processors: 2
15:04:35.0812 1828  Page size: 0x1000
15:04:35.0812 1828  Boot type: Normal boot
15:04:35.0812 1828  ============================================================
15:04:37.0500 1828  Drive \Device\Harddisk0\DR0 - Size: 0x12A05F2000 (74.51 Gb), SectorSize: 0x200, Cylinders: 0x25FE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
15:04:37.0531 1828  Drive \Device\Harddisk1\DR4 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
15:04:38.0000 1828  ============================================================
15:04:38.0000 1828  \Device\Harddisk0\DR0:
15:04:38.0000 1828  MBR partitions:
15:04:38.0000 1828  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1F608, BlocksNum 0x8ED9D6C
15:04:38.0000 1828  \Device\Harddisk1\DR4:
15:04:38.0000 1828  MBR partitions:
15:04:38.0000 1828  \Device\Harddisk1\DR4\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x74705982
15:04:38.0000 1828  ============================================================
15:04:38.0062 1828  C: <-> \Device\Harddisk0\DR0\Partition1
15:04:38.0062 1828  F: <-> \Device\Harddisk1\DR4\Partition1
15:04:38.0062 1828  ============================================================
15:04:38.0062 1828  Initialize success
15:04:38.0062 1828  ============================================================
15:06:00.0593 2780  ============================================================
15:06:00.0593 2780  Scan started
15:06:00.0593 2780  Mode: Manual; SigCheck; TDLFS;
15:06:00.0593 2780  ============================================================
15:06:01.0546 2780  ================ Scan system memory ========================
15:06:01.0562 2780  System memory - ok
15:06:01.0562 2780  ================ Scan services =============================
15:06:02.0062 2780  Abiosdsk - ok
15:06:02.0109 2780  [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5        C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
15:06:04.0484 2780  abp480n5 - ok
15:06:04.0515 2780  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
15:06:04.0687 2780  ACPI - ok
15:06:04.0718 2780  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
15:06:04.0859 2780  ACPIEC - ok
15:06:04.0875 2780  ADILOADER - ok
15:06:04.0875 2780  adiusbae - ok
15:06:04.0921 2780  [ 9A11864873DA202C996558B2106B0BBC ] adpu160m        C:\WINDOWS\system32\DRIVERS\adpu160m.sys
15:06:05.0062 2780  adpu160m - ok
15:06:05.0125 2780  [ 8BED39E3C35D6A489438B8141717A557 ] aec            C:\WINDOWS\system32\drivers\aec.sys
15:06:05.0328 2780  aec - ok
15:06:05.0359 2780  [ 93034CE0CD3578D68DA550FC2BCA3080 ] AegisP          C:\WINDOWS\system32\DRIVERS\AegisP.sys
15:06:05.0390 2780  AegisP ( UnsignedFile.Multi.Generic ) - warning
15:06:05.0390 2780  AegisP - detected UnsignedFile.Multi.Generic (1)
15:06:05.0437 2780  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD            C:\WINDOWS\System32\drivers\afd.sys
15:06:05.0484 2780  AFD - ok
15:06:05.0515 2780  [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440          C:\WINDOWS\system32\DRIVERS\agp440.sys
15:06:05.0640 2780  agp440 - ok
15:06:05.0656 2780  [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ          C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
15:06:05.0812 2780  agpCPQ - ok
15:06:05.0828 2780  [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x        C:\WINDOWS\system32\DRIVERS\aha154x.sys
15:06:05.0906 2780  Aha154x - ok
15:06:05.0953 2780  [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2        C:\WINDOWS\system32\DRIVERS\aic78u2.sys
15:06:06.0093 2780  aic78u2 - ok
15:06:06.0125 2780  [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx        C:\WINDOWS\system32\DRIVERS\aic78xx.sys
15:06:06.0265 2780  aic78xx - ok
15:06:06.0312 2780  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter        C:\WINDOWS\system32\alrsvc.dll
15:06:06.0453 2780  Alerter - ok
15:06:06.0468 2780  [ 190CD73D4984F94D823F9444980513E5 ] ALG            C:\WINDOWS\System32\alg.exe
15:06:07.0046 2780  ALG - ok
15:06:07.0078 2780  [ 1140AB9938809700B46BB88E46D72A96 ] AliIde          C:\WINDOWS\system32\DRIVERS\aliide.sys
15:06:07.0203 2780  AliIde - ok
15:06:07.0234 2780  [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541        C:\WINDOWS\system32\DRIVERS\alim1541.sys
15:06:07.0375 2780  alim1541 - ok
15:06:07.0390 2780  [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp          C:\WINDOWS\system32\DRIVERS\amdagp.sys
15:06:07.0546 2780  amdagp - ok
15:06:07.0562 2780  [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint          C:\WINDOWS\system32\DRIVERS\amsint.sys
15:06:07.0656 2780  amsint - ok
15:06:07.0765 2780  [ C27D46B06D340293670450FCE9DFB166 ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
15:06:07.0781 2780  AntiVirSchedulerService - ok
15:06:07.0843 2780  [ 72D90E56563165984224493069C69ED4 ] AntiVirService  C:\Programme\Avira\AntiVir Desktop\avguard.exe
15:06:07.0859 2780  AntiVirService - ok
15:06:07.0937 2780  [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
15:06:07.0953 2780  Apple Mobile Device - ok
15:06:07.0968 2780  AppMgmt - ok
15:06:08.0000 2780  [ B5B8A80875C1DEDEDA8B02765642C32F ] Arp1394        C:\WINDOWS\system32\DRIVERS\arp1394.sys
15:06:08.0140 2780  Arp1394 - ok
15:06:08.0156 2780  [ 62D318E9A0C8FC9B780008E724283707 ] asc            C:\WINDOWS\system32\DRIVERS\asc.sys
15:06:08.0312 2780  asc - ok
15:06:08.0328 2780  [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p        C:\WINDOWS\system32\DRIVERS\asc3350p.sys
15:06:08.0406 2780  asc3350p - ok
15:06:08.0421 2780  [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550        C:\WINDOWS\system32\DRIVERS\asc3550.sys
15:06:08.0546 2780  asc3550 - ok
15:06:08.0671 2780  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
15:06:08.0765 2780  aspnet_state - ok
15:06:08.0781 2780  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
15:06:08.0937 2780  AsyncMac - ok
15:06:08.0968 2780  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi          C:\WINDOWS\system32\DRIVERS\atapi.sys
15:06:09.0093 2780  atapi - ok
15:06:09.0109 2780  Atdisk - ok
15:06:09.0156 2780  [ 68CCF9573DF16BCE2236E07C430E607D ] Ati HotKey Poller C:\WINDOWS\system32\Ati2evxx.exe
15:06:09.0218 2780  Ati HotKey Poller - ok
15:06:09.0281 2780  [ 5B9320783E76A46EF97734F113A82AD8 ] ati2mtag        C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
15:06:09.0359 2780  ati2mtag - ok
15:06:09.0437 2780  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc        C:\WINDOWS\system32\DRIVERS\atmarpc.sys
15:06:09.0578 2780  Atmarpc - ok
15:06:09.0609 2780  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
15:06:09.0765 2780  AudioSrv - ok
15:06:09.0796 2780  [ D9F724AA26C010A217C97606B160ED68 ] audstub        C:\WINDOWS\system32\DRIVERS\audstub.sys
15:06:09.0937 2780  audstub - ok
15:06:09.0984 2780  [ 0B497C79824F8E1BF22FA6AACD3DE3A0 ] avgio          C:\Programme\Avira\AntiVir Desktop\avgio.sys
15:06:10.0000 2780  avgio - ok
15:06:10.0046 2780  [ 1E4114685DE1FFA9675E09C6A1FB3F4B ] avgntflt        C:\WINDOWS\system32\DRIVERS\avgntflt.sys
15:06:10.0093 2780  avgntflt - ok
15:06:10.0109 2780  [ 0F78D3DAE6DEDD99AE54C9491C62ADF2 ] avipbb          C:\WINDOWS\system32\DRIVERS\avipbb.sys
15:06:10.0125 2780  avipbb - ok
15:06:10.0234 2780  [ 825F81A6F7DD073509DB101F0BA6DC59 ] BBSvc          C:\Programme\Microsoft\BingBar\BBSvc.EXE
15:06:10.0265 2780  BBSvc - ok
15:06:10.0265 2780  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
15:06:10.0421 2780  Beep - ok
15:06:10.0453 2780  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
15:06:10.0609 2780  BITS - ok
15:06:10.0703 2780  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe
15:06:10.0718 2780  Bonjour Service - ok
15:06:10.0781 2780  [ B71549F23736ADF83A571061C47777FD ] Browser        C:\WINDOWS\System32\browser.dll
15:06:10.0812 2780  Browser - ok
15:06:10.0859 2780  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf          C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
15:06:11.0015 2780  cbidf - ok
15:06:11.0031 2780  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k        C:\WINDOWS\system32\drivers\cbidf2k.sys
15:06:11.0187 2780  cbidf2k - ok
15:06:11.0218 2780  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
15:06:11.0375 2780  CCDECODE - ok
15:06:11.0421 2780  [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt        C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
15:06:11.0500 2780  cd20xrnt - ok
15:06:11.0515 2780  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio        C:\WINDOWS\system32\drivers\Cdaudio.sys
15:06:11.0671 2780  Cdaudio - ok
15:06:11.0687 2780  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
15:06:11.0828 2780  Cdfs - ok
15:06:11.0859 2780  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom          C:\WINDOWS\system32\DRIVERS\cdrom.sys
15:06:11.0984 2780  Cdrom - ok
15:06:12.0000 2780  Changer - ok
15:06:12.0015 2780  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc          C:\WINDOWS\system32\cisvc.exe
15:06:12.0156 2780  CiSvc - ok
15:06:12.0187 2780  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv        C:\WINDOWS\system32\clipsrv.exe
15:06:12.0312 2780  ClipSrv - ok
15:06:12.0359 2780  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
15:06:12.0453 2780  clr_optimization_v2.0.50727_32 - ok
15:06:12.0500 2780  [ C687F81290303D90099B027A6474F99F ] CmdIde          C:\WINDOWS\system32\DRIVERS\cmdide.sys
15:06:12.0656 2780  CmdIde - ok
15:06:12.0671 2780  COMSysApp - ok
15:06:12.0687 2780  [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray        C:\WINDOWS\system32\DRIVERS\cpqarray.sys
15:06:12.0859 2780  Cpqarray - ok
15:06:12.0859 2780  Creative Service for CDROM Access - ok
15:06:12.0890 2780  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
15:06:13.0031 2780  CryptSvc - ok
15:06:13.0093 2780  [ 8DB84DE3AAB34A8B4C2F644EFF41CD76 ] ctsfm2k        C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys
15:06:13.0156 2780  ctsfm2k - ok
15:06:13.0203 2780  [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k        C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
15:06:13.0375 2780  dac2w2k - ok
15:06:13.0390 2780  [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt        C:\WINDOWS\system32\DRIVERS\dac960nt.sys
15:06:13.0546 2780  dac960nt - ok
15:06:13.0609 2780  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
15:06:13.0671 2780  DcomLaunch - ok
15:06:13.0734 2780  [ AC42D95803A473F4898297DAFBA8DC89 ] DELL_A02        C:\WINDOWS\system32\DRIVERS\PRISMA02.sys
15:06:13.0796 2780  DELL_A02 - ok
15:06:13.0843 2780  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
15:06:13.0984 2780  Dhcp - ok
15:06:14.0000 2780  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
15:06:14.0156 2780  Disk - ok
15:06:14.0156 2780  dmadmin - ok
15:06:14.0203 2780  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
15:06:14.0375 2780  dmboot - ok
15:06:14.0406 2780  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
15:06:14.0546 2780  dmio - ok
15:06:14.0562 2780  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
15:06:14.0703 2780  dmload - ok
15:06:14.0734 2780  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
15:06:14.0875 2780  dmserver - ok
15:06:14.0906 2780  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
15:06:15.0046 2780  DMusic - ok
15:06:15.0062 2780  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
15:06:15.0187 2780  Dnscache - ok
15:06:15.0234 2780  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc        C:\WINDOWS\System32\dot3svc.dll
15:06:15.0375 2780  Dot3svc - ok
15:06:15.0406 2780  [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o          C:\WINDOWS\system32\DRIVERS\dpti2o.sys
15:06:15.0562 2780  dpti2o - ok
15:06:15.0593 2780  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud        C:\WINDOWS\system32\drivers\drmkaud.sys
15:06:15.0718 2780  drmkaud - ok
15:06:15.0765 2780  [ E814854E6B246CCF498874839AB64D77 ] drvmcdb        C:\WINDOWS\system32\drivers\drvmcdb.sys
15:06:15.0781 2780  drvmcdb ( UnsignedFile.Multi.Generic ) - warning
15:06:15.0781 2780  drvmcdb - detected UnsignedFile.Multi.Generic (1)
15:06:15.0796 2780  [ EE83A4EBAE70BC93CF14879D062F548B ] drvnddm        C:\WINDOWS\system32\drivers\drvnddm.sys
15:06:15.0796 2780  drvnddm ( UnsignedFile.Multi.Generic ) - warning
15:06:15.0796 2780  drvnddm - detected UnsignedFile.Multi.Generic (1)
15:06:15.0843 2780  [ 5AD19FD45820173E094194C1E6F719EF ] DTT200U        C:\WINDOWS\system32\Drivers\DTT200U.sys
15:06:15.0875 2780  DTT200U ( UnsignedFile.Multi.Generic ) - warning
15:06:15.0875 2780  DTT200U - detected UnsignedFile.Multi.Generic (1)
15:06:15.0906 2780  [ 1E0E5E92AF599F2945485E9CEE164832 ] DTT200ULD      C:\WINDOWS\system32\Drivers\DTT200ULD.sys
15:06:15.0921 2780  DTT200ULD ( UnsignedFile.Multi.Generic ) - warning
15:06:15.0921 2780  DTT200ULD - detected UnsignedFile.Multi.Generic (1)
15:06:15.0968 2780  [ 95974E66D3DE4951D29E28E8BC0B644C ] E100B          C:\WINDOWS\system32\DRIVERS\e100b325.sys
15:06:16.0000 2780  E100B - ok
15:06:16.0031 2780  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost        C:\WINDOWS\System32\eapsvc.dll
15:06:16.0187 2780  EapHost - ok
15:06:16.0234 2780  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc          C:\WINDOWS\System32\ersvc.dll
15:06:16.0406 2780  ERSvc - ok
15:06:16.0468 2780  [ B9F03760AF557348E17A5BB5FFEB73C0 ] es1969          C:\WINDOWS\system32\drivers\es1969.sys
15:06:16.0625 2780  es1969 - ok
15:06:16.0671 2780  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
15:06:16.0703 2780  Eventlog - ok
15:06:16.0750 2780  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem    C:\WINDOWS\system32\es.dll
15:06:16.0765 2780  EventSystem - ok
15:06:16.0796 2780  [ 38D332A6D56AF32635675F132548343E ] Fastfat        C:\WINDOWS\system32\drivers\Fastfat.sys
15:06:16.0953 2780  Fastfat - ok
15:06:17.0000 2780  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
15:06:17.0078 2780  FastUserSwitchingCompatibility - ok
15:06:17.0109 2780  [ 08B8B302AF0D1B3B8543429BBAC8F21F ] Fax            C:\WINDOWS\system32\fxssvc.exe
15:06:17.0250 2780  Fax - ok
15:06:17.0281 2780  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc            C:\WINDOWS\system32\DRIVERS\fdc.sys
15:06:17.0421 2780  Fdc - ok
15:06:17.0437 2780  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
15:06:17.0578 2780  Fips - ok
15:06:17.0687 2780  [ 167D24A045499EBEF438F231976158DF ] FirebirdServerMAGIXInstance C:\Programme\MAGIX\Common\Database\bin\fbserver.exe
15:06:17.0796 2780  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - warning
15:06:17.0796 2780  FirebirdServerMAGIXInstance - detected UnsignedFile.Multi.Generic (1)
15:06:17.0828 2780  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
15:06:17.0968 2780  Flpydisk - ok
15:06:18.0000 2780  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
15:06:18.0140 2780  FltMgr - ok
15:06:18.0265 2780  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
15:06:18.0281 2780  FontCache3.0.0.0 - ok
15:06:18.0312 2780  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
15:06:18.0468 2780  Fs_Rec - ok
15:06:18.0484 2780  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
15:06:18.0640 2780  Ftdisk - ok
15:06:18.0656 2780  [ 065639773D8B03F33577F6CDAEA21063 ] gameenum        C:\WINDOWS\system32\DRIVERS\gameenum.sys
15:06:18.0796 2780  gameenum - ok
15:06:18.0843 2780  [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM    C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
15:06:18.0859 2780  GEARAspiWDM - ok
15:06:18.0890 2780  [ 997527391DEC418DC62D784D848D73BE ] GigasetGenericUSB C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB.sys
15:06:18.0953 2780  GigasetGenericUSB - ok
15:06:19.0125 2780  [ EB68A949E2ACE7A4224F7D1AB6420B3E ] GoogleDesktopManager C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe
15:06:19.0234 2780  GoogleDesktopManager ( UnsignedFile.Multi.Generic ) - warning
15:06:19.0234 2780  GoogleDesktopManager - detected UnsignedFile.Multi.Generic (1)
15:06:19.0281 2780  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc            C:\WINDOWS\system32\DRIVERS\msgpc.sys
15:06:19.0421 2780  Gpc - ok
15:06:19.0500 2780  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate        C:\Programme\Google\Update\GoogleUpdate.exe
15:06:19.0515 2780  gupdate - ok
15:06:19.0515 2780  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Programme\Google\Update\GoogleUpdate.exe
15:06:19.0531 2780  gupdatem - ok
15:06:19.0578 2780  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc          C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
15:06:19.0609 2780  gusvc - ok
15:06:19.0656 2780  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc        C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
15:06:19.0796 2780  helpsvc - ok
15:06:19.0796 2780  HidServ - ok
15:06:19.0828 2780  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
15:06:19.0968 2780  HidUsb - ok
15:06:20.0000 2780  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
15:06:20.0125 2780  hkmsvc - ok
15:06:20.0140 2780  [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn            C:\WINDOWS\system32\DRIVERS\hpn.sys
15:06:20.0312 2780  hpn - ok
15:06:20.0343 2780  [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412        C:\WINDOWS\system32\DRIVERS\HPZid412.sys
15:06:20.0453 2780  HPZid412 - ok
15:06:20.0484 2780  [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12        C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
15:06:20.0515 2780  HPZipr12 - ok
15:06:20.0562 2780  [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12        C:\WINDOWS\system32\DRIVERS\HPZius12.sys
15:06:20.0609 2780  HPZius12 - ok
15:06:20.0656 2780  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
15:06:20.0734 2780  HTTP - ok
15:06:20.0765 2780  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
15:06:20.0890 2780  HTTPFilter - ok
15:06:20.0906 2780  [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt        C:\WINDOWS\system32\drivers\i2omgmt.sys
15:06:21.0031 2780  i2omgmt - ok
15:06:21.0062 2780  [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp          C:\WINDOWS\system32\DRIVERS\i2omp.sys
15:06:21.0203 2780  i2omp - ok
15:06:21.0218 2780  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
15:06:21.0390 2780  i8042prt - ok
15:06:21.0515 2780  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc          C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
15:06:21.0546 2780  idsvc - ok
15:06:21.0593 2780  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi          C:\WINDOWS\system32\DRIVERS\imapi.sys
15:06:21.0734 2780  Imapi - ok
15:06:21.0750 2780  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\system32\imapi.exe
15:06:21.0906 2780  ImapiService - ok
15:06:21.0921 2780  [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u        C:\WINDOWS\system32\DRIVERS\ini910u.sys
15:06:22.0078 2780  ini910u - ok
15:06:22.0109 2780  [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde        C:\WINDOWS\system32\DRIVERS\intelide.sys
15:06:22.0250 2780  IntelIde - ok
15:06:22.0281 2780  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
15:06:22.0437 2780  intelppm - ok
15:06:22.0468 2780  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw          C:\WINDOWS\system32\drivers\ip6fw.sys
15:06:22.0593 2780  Ip6Fw - ok
15:06:22.0609 2780  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
15:06:22.0765 2780  IpFilterDriver - ok
15:06:22.0781 2780  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
15:06:22.0906 2780  IpInIp - ok
15:06:22.0937 2780  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat          C:\WINDOWS\system32\DRIVERS\ipnat.sys
15:06:23.0062 2780  IpNat - ok
15:06:23.0156 2780  [ E6BE7A41A28D8F2DB174957454D32448 ] iPod Service    C:\Programme\iPod\bin\iPodService.exe
15:06:23.0187 2780  iPod Service - ok
15:06:23.0234 2780  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec          C:\WINDOWS\system32\DRIVERS\ipsec.sys
15:06:23.0375 2780  IPSec - ok
15:06:23.0390 2780  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
15:06:23.0531 2780  IRENUM - ok
15:06:23.0546 2780  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
15:06:23.0671 2780  isapnp - ok
15:06:23.0796 2780  [ 32192B4EBE8720ED8D49A455C962CB91 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
15:06:23.0812 2780  JavaQuickStarterService - ok
15:06:23.0828 2780  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
15:06:23.0968 2780  Kbdclass - ok
15:06:24.0015 2780  [ B6D6C117D771C98130497265F26D1882 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
15:06:24.0140 2780  kbdhid - ok
15:06:24.0171 2780  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
15:06:24.0312 2780  kmixer - ok
15:06:24.0375 2780  [ 7B4CC34BE49D50E6C64687822C667A2C ] KOBCCEX        C:\WINDOWS\system32\drivers\KOBCCEX.sys
15:06:24.0484 2780  KOBCCEX - ok
15:06:24.0531 2780  [ A524F75FAAA7D5734B46A139E86BD015 ] KOBCCID        C:\WINDOWS\system32\drivers\KOBCCID.sys
15:06:24.0562 2780  KOBCCID - ok
15:06:24.0578 2780  KodakCCS - ok
15:06:24.0625 2780  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
15:06:24.0734 2780  KSecDD - ok
15:06:24.0781 2780  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
15:06:24.0828 2780  lanmanserver - ok
15:06:24.0859 2780  [ 1869B14B06B44B44AF70548E1EA3303F ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
15:06:24.0906 2780  LanmanWorkstation - ok
15:06:24.0921 2780  Lbd - ok
15:06:24.0921 2780  lbrtfdc - ok
15:06:24.0968 2780  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts        C:\WINDOWS\System32\lmhsvc.dll
15:06:25.0093 2780  LmHosts - ok
15:06:25.0109 2780  [ B7550A7107281D170CE85524B1488C98 ] Messenger      C:\WINDOWS\System32\msgsvc.dll
15:06:25.0250 2780  Messenger - ok
15:06:25.0296 2780  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd          C:\WINDOWS\system32\drivers\mnmdd.sys
15:06:25.0437 2780  mnmdd - ok
15:06:25.0453 2780  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc        C:\WINDOWS\system32\mnmsrvc.exe
15:06:25.0593 2780  mnmsrvc - ok
15:06:25.0625 2780  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem          C:\WINDOWS\system32\drivers\Modem.sys
15:06:25.0765 2780  Modem - ok
15:06:25.0781 2780  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
15:06:25.0906 2780  Mouclass - ok
15:06:25.0953 2780  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
15:06:26.0109 2780  mouhid - ok
15:06:26.0140 2780  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
15:06:26.0281 2780  MountMgr - ok
15:06:26.0375 2780  [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
15:06:26.0390 2780  MozillaMaintenance - ok
15:06:26.0421 2780  [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x        C:\WINDOWS\system32\DRIVERS\mraid35x.sys
15:06:26.0578 2780  mraid35x - ok
15:06:26.0609 2780  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
15:06:26.0734 2780  MRxDAV - ok
15:06:26.0781 2780  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
15:06:26.0875 2780  MRxSmb - ok
15:06:26.0906 2780  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC          C:\WINDOWS\system32\msdtc.exe
15:06:27.0031 2780  MSDTC - ok
15:06:27.0062 2780  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
15:06:27.0203 2780  Msfs - ok
15:06:27.0218 2780  MSIServer - ok
15:06:27.0250 2780  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV        C:\WINDOWS\system32\drivers\MSKSSRV.sys
15:06:27.0375 2780  MSKSSRV - ok
15:06:27.0390 2780  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
15:06:27.0515 2780  MSPCLOCK - ok
15:06:27.0531 2780  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM          C:\WINDOWS\system32\drivers\MSPQM.sys
15:06:27.0656 2780  MSPQM - ok
15:06:27.0687 2780  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
15:06:27.0828 2780  mssmbios - ok
15:06:27.0828 2780  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE          C:\WINDOWS\system32\drivers\MSTEE.sys
15:06:27.0968 2780  MSTEE - ok
15:06:28.0000 2780  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup            C:\WINDOWS\system32\drivers\Mup.sys
15:06:28.0015 2780  Mup - ok
15:06:28.0031 2780  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
15:06:28.0203 2780  NABTSFEC - ok
15:06:28.0265 2780  [ 9121D8FFFF773C66BBF4955E4F7AAC23 ] NAL            C:\WINDOWS\system32\Drivers\iqvw32.sys
15:06:28.0312 2780  NAL ( UnsignedFile.Multi.Generic ) - warning
15:06:28.0312 2780  NAL - detected UnsignedFile.Multi.Generic (1)
15:06:28.0390 2780  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
15:06:28.0531 2780  napagent - ok
15:06:28.0593 2780  NasPmService - ok
15:06:28.0609 2780  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
15:06:28.0734 2780  NDIS - ok
15:06:28.0765 2780  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
15:06:28.0906 2780  NdisIP - ok
15:06:28.0937 2780  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
15:06:29.0000 2780  NdisTapi - ok
15:06:29.0015 2780  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio        C:\WINDOWS\system32\DRIVERS\ndisuio.sys
15:06:29.0156 2780  Ndisuio - ok
15:06:29.0187 2780  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan        C:\WINDOWS\system32\DRIVERS\ndiswan.sys
15:06:29.0328 2780  NdisWan - ok
15:06:29.0375 2780  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy        C:\WINDOWS\system32\drivers\NDProxy.sys
15:06:29.0421 2780  NDProxy - ok
15:06:29.0468 2780  [ 2969D26EEE289BE7422AA46FC55F4E38 ] Net Driver HPZ12 C:\WINDOWS\system32\HPZinw12.dll
15:06:29.0500 2780  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
15:06:29.0500 2780  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
15:06:29.0546 2780  [ 1352E1648213551923A0A822E441553C ] Netaapl        C:\WINDOWS\system32\DRIVERS\netaapl.sys
15:06:29.0625 2780  Netaapl - ok
15:06:29.0656 2780  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS        C:\WINDOWS\system32\DRIVERS\netbios.sys
15:06:29.0781 2780  NetBIOS - ok
15:06:29.0812 2780  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
15:06:29.0953 2780  NetBT - ok
15:06:29.0984 2780  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
15:06:30.0125 2780  NetDDE - ok
15:06:30.0125 2780  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
15:06:30.0250 2780  NetDDEdsdm - ok
15:06:30.0296 2780  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\system32\lsass.exe
15:06:30.0421 2780  Netlogon - ok
15:06:30.0453 2780  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
15:06:30.0593 2780  Netman - ok
15:06:30.0640 2780  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
15:06:30.0656 2780  NetTcpPortSharing - ok
15:06:30.0671 2780  [ E9E47CFB2D461FA0FC75B7A74C6383EA ] NIC1394        C:\WINDOWS\system32\DRIVERS\nic1394.sys
15:06:30.0812 2780  NIC1394 - ok
15:06:30.0875 2780  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla            C:\WINDOWS\System32\mswsock.dll
15:06:30.0906 2780  Nla - ok
15:06:30.0937 2780  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
15:06:31.0062 2780  Npfs - ok
15:06:31.0093 2780  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
15:06:31.0234 2780  Ntfs - ok
15:06:31.0265 2780  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp        C:\WINDOWS\system32\lsass.exe
15:06:31.0390 2780  NtLmSsp - ok
15:06:31.0437 2780  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc        C:\WINDOWS\system32\ntmssvc.dll
15:06:31.0609 2780  NtmsSvc - ok
15:06:31.0625 2780  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
15:06:31.0781 2780  Null - ok
15:06:31.0859 2780  [ 2B298519EDBFCF451D43E0F1E8F1006D ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
15:06:32.0015 2780  nv - ok
15:06:32.0062 2780  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
15:06:32.0218 2780  NwlnkFlt - ok
15:06:32.0234 2780  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
15:06:32.0406 2780  NwlnkFwd - ok
15:06:32.0531 2780  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
15:06:32.0562 2780  odserv - ok
15:06:32.0578 2780  [ CA33832DF41AFB202EE7AEB05145922F ] ohci1394        C:\WINDOWS\system32\DRIVERS\ohci1394.sys
15:06:32.0718 2780  ohci1394 - ok
15:06:32.0765 2780  [ 53D5F1278D9EDB21689BBBCECC09108D ] omci            C:\WINDOWS\system32\DRIVERS\omci.sys
15:06:32.0781 2780  omci ( UnsignedFile.Multi.Generic ) - warning
15:06:32.0781 2780  omci - detected UnsignedFile.Multi.Generic (1)
15:06:32.0812 2780  [ 5A432A042DAE460ABE7199B758E8606C ] ose            C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
15:06:32.0828 2780  ose - ok
15:06:32.0843 2780  [ 103A9B117A7D9903111955CDAFE65AC6 ] ossrv          C:\WINDOWS\system32\DRIVERS\ctoss2k.sys
15:06:32.0890 2780  ossrv - ok
15:06:32.0968 2780  [ 1DB419CB76493F6292CCFBDC3466F5FF ] P17            C:\WINDOWS\system32\drivers\P17.sys
15:06:33.0046 2780  P17 - ok
15:06:33.0093 2780  [ F84785660305B9B903FB3BCA8BA29837 ] Parport        C:\WINDOWS\system32\DRIVERS\parport.sys
15:06:33.0234 2780  Parport - ok
15:06:33.0265 2780  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr        C:\WINDOWS\system32\drivers\PartMgr.sys
15:06:33.0406 2780  PartMgr - ok
15:06:33.0437 2780  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
15:06:33.0578 2780  ParVdm - ok
15:06:33.0593 2780  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI            C:\WINDOWS\system32\DRIVERS\pci.sys
15:06:33.0734 2780  PCI - ok
15:06:33.0734 2780  PCIDump - ok
15:06:33.0765 2780  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
15:06:33.0906 2780  PCIIde - ok
15:06:33.0937 2780  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
15:06:34.0078 2780  Pcmcia - ok
15:06:34.0093 2780  PDCOMP - ok
15:06:34.0093 2780  PDFRAME - ok
15:06:34.0109 2780  PDRELI - ok
15:06:34.0109 2780  PDRFRAME - ok
15:06:34.0125 2780  [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2          C:\WINDOWS\system32\DRIVERS\perc2.sys
15:06:34.0265 2780  perc2 - ok
15:06:34.0281 2780  [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib        C:\WINDOWS\system32\DRIVERS\perc2hib.sys
15:06:34.0437 2780  perc2hib - ok
15:06:34.0468 2780  PLCMPR5 - ok
15:06:34.0500 2780  [ 2ABA2F545B35F9C6CC2CFC4E1D539A80 ] PLCNDIS5        C:\WINDOWS\system32\plcndis5.sys
15:06:34.0531 2780  PLCNDIS5 ( UnsignedFile.Multi.Generic ) - warning
15:06:34.0531 2780  PLCNDIS5 - detected UnsignedFile.Multi.Generic (1)
15:06:34.0546 2780  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
15:06:34.0578 2780  PlugPlay - ok
15:06:34.0625 2780  [ BAFC9706BDF425A02B66468AB2605C59 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.dll
15:06:34.0625 2780  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
15:06:34.0625 2780  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
15:06:34.0640 2780  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent    C:\WINDOWS\system32\lsass.exe
15:06:34.0765 2780  PolicyAgent - ok
15:06:34.0796 2780  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
15:06:34.0921 2780  PptpMiniport - ok
15:06:34.0953 2780  [ BA5A990A99DD7A157127725C38D399AC ] PRISMSVC        C:\WINDOWS\system32\PRISMSVC.EXE
15:06:34.0984 2780  PRISMSVC ( UnsignedFile.Multi.Generic ) - warning
15:06:34.0984 2780  PRISMSVC - detected UnsignedFile.Multi.Generic (1)
15:06:34.0984 2780  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
15:06:35.0125 2780  ProtectedStorage - ok
15:06:35.0125 2780  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
15:06:35.0265 2780  PSched - ok
15:06:35.0312 2780  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink        C:\WINDOWS\system32\DRIVERS\ptilink.sys
15:06:35.0468 2780  Ptilink - ok
15:06:35.0500 2780  [ 49452BFCEC22F36A7A9B9C2181BC3042 ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
15:06:35.0515 2780  PxHelp20 - ok
15:06:35.0562 2780  [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080          C:\WINDOWS\system32\DRIVERS\ql1080.sys
15:06:35.0687 2780  ql1080 - ok
15:06:35.0703 2780  [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt        C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
15:06:35.0843 2780  Ql10wnt - ok
15:06:35.0875 2780  [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160        C:\WINDOWS\system32\DRIVERS\ql12160.sys
15:06:36.0015 2780  ql12160 - ok
15:06:36.0031 2780  [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240          C:\WINDOWS\system32\DRIVERS\ql1240.sys
15:06:36.0171 2780  ql1240 - ok
15:06:36.0187 2780  [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280          C:\WINDOWS\system32\DRIVERS\ql1280.sys
15:06:36.0312 2780  ql1280 - ok
15:06:36.0343 2780  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
15:06:36.0484 2780  RasAcd - ok
15:06:36.0515 2780  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto        C:\WINDOWS\System32\rasauto.dll
15:06:36.0640 2780  RasAuto - ok
15:06:36.0656 2780  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp        C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
15:06:36.0796 2780  Rasl2tp - ok
15:06:36.0828 2780  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
15:06:36.0968 2780  RasMan - ok
15:06:36.0984 2780  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
15:06:37.0109 2780  RasPppoe - ok
15:06:37.0125 2780  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
15:06:37.0265 2780  Raspti - ok
15:06:37.0296 2780  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
15:06:37.0437 2780  Rdbss - ok
15:06:37.0468 2780  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
15:06:37.0609 2780  RDPCDD - ok
15:06:37.0640 2780  [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr          C:\WINDOWS\system32\DRIVERS\rdpdr.sys
15:06:37.0781 2780  rdpdr - ok
15:06:37.0843 2780  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD          C:\WINDOWS\system32\drivers\RDPWD.sys
15:06:37.0937 2780  RDPWD - ok
15:06:37.0984 2780  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr      C:\WINDOWS\system32\sessmgr.exe
15:06:38.0125 2780  RDSessMgr - ok
15:06:38.0140 2780  [ ED761D453856F795A7FE056E42C36365 ] redbook        C:\WINDOWS\system32\DRIVERS\redbook.sys
15:06:38.0281 2780  redbook - ok
15:06:38.0312 2780  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
15:06:38.0453 2780  RemoteAccess - ok
15:06:38.0484 2780  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\system32\locator.exe
15:06:38.0625 2780  RpcLocator - ok
15:06:38.0640 2780  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs          C:\WINDOWS\system32\rpcss.dll
15:06:38.0671 2780  RpcSs - ok
15:06:38.0718 2780  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
15:06:38.0843 2780  RSVP - ok
15:06:38.0859 2780  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs          C:\WINDOWS\system32\lsass.exe
15:06:38.0984 2780  SamSs - ok
15:06:39.0015 2780  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
15:06:39.0156 2780  SCardSvr - ok
15:06:39.0203 2780  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
15:06:39.0343 2780  Schedule - ok
15:06:39.0437 2780  [ 4A5809A1D796E2675AC0332BF7B0CB11 ] SeaPort        C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
15:06:39.0453 2780  SeaPort - ok
15:06:39.0515 2780  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
15:06:39.0640 2780  Secdrv - ok
15:06:39.0640 2780  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
15:06:39.0781 2780  seclogon - ok
15:06:39.0812 2780  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
15:06:39.0953 2780  SENS - ok
15:06:40.0015 2780  [ B490AD520257DDA26C1D587A71E527B5 ] Ser2pl          C:\WINDOWS\system32\DRIVERS\ser2pl.sys
15:06:40.0078 2780  Ser2pl - ok
15:06:40.0109 2780  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum        C:\WINDOWS\system32\DRIVERS\serenum.sys
15:06:40.0250 2780  serenum - ok
15:06:40.0281 2780  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
15:06:40.0421 2780  Serial - ok
15:06:40.0453 2780  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy        C:\WINDOWS\system32\drivers\Sfloppy.sys
15:06:40.0593 2780  Sfloppy - ok
15:06:40.0625 2780  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
15:06:40.0796 2780  SharedAccess - ok
15:06:40.0828 2780  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
15:06:40.0843 2780  ShellHWDetection - ok
15:06:40.0843 2780  Simbad - ok
15:06:40.0890 2780  [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp          C:\WINDOWS\system32\DRIVERS\sisagp.sys
15:06:41.0031 2780  sisagp - ok
15:06:41.0046 2780  [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
15:06:41.0187 2780  SLIP - ok
15:06:41.0234 2780  [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow        C:\WINDOWS\system32\DRIVERS\sparrow.sys
15:06:41.0296 2780  Sparrow - ok
15:06:41.0328 2780  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
15:06:41.0468 2780  splitter - ok
15:06:41.0531 2780  [ 60784F891563FB1B767F70117FC2428F ] Spooler        C:\WINDOWS\system32\spoolsv.exe
15:06:41.0562 2780  Spooler - ok
15:06:41.0593 2780  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
15:06:41.0734 2780  sr - ok
15:06:41.0765 2780  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice      C:\WINDOWS\system32\srsvc.dll
15:06:41.0906 2780  srservice - ok
15:06:41.0968 2780  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv            C:\WINDOWS\system32\DRIVERS\srv.sys
15:06:42.0046 2780  Srv - ok
15:06:42.0078 2780  [ D7968049BE0ADBB6A57CEE3960320911 ] sscdbhk5        C:\WINDOWS\system32\drivers\sscdbhk5.sys
15:06:42.0093 2780  sscdbhk5 ( UnsignedFile.Multi.Generic ) - warning
15:06:42.0093 2780  sscdbhk5 - detected UnsignedFile.Multi.Generic (1)
15:06:42.0109 2780  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
15:06:42.0250 2780  SSDPSRV - ok
15:06:42.0312 2780  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
15:06:42.0328 2780  ssmdrv - ok
15:06:42.0343 2780  [ C3FFD65ABFB6441E7606CF74F1155273 ] ssrtln          C:\WINDOWS\system32\drivers\ssrtln.sys
15:06:42.0375 2780  ssrtln ( UnsignedFile.Multi.Generic ) - warning
15:06:42.0375 2780  ssrtln - detected UnsignedFile.Multi.Generic (1)
15:06:42.0437 2780  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
15:06:42.0562 2780  stisvc - ok
15:06:42.0609 2780  [ 77813007BA6265C4B6098187E6ED79D2 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
15:06:42.0750 2780  streamip - ok
15:06:42.0765 2780  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
15:06:42.0906 2780  swenum - ok
15:06:42.0921 2780  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
15:06:43.0046 2780  swmidi - ok
15:06:43.0062 2780  SwPrv - ok
15:06:43.0078 2780  [ 1FF3217614018630D0A6758630FC698C ] symc810        C:\WINDOWS\system32\DRIVERS\symc810.sys
15:06:43.0203 2780  symc810 - ok
15:06:43.0234 2780  [ 070E001D95CF725186EF8B20335F933C ] symc8xx        C:\WINDOWS\system32\DRIVERS\symc8xx.sys
15:06:43.0375 2780  symc8xx - ok
15:06:43.0406 2780  [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi          C:\WINDOWS\system32\DRIVERS\sym_hi.sys
15:06:43.0546 2780  sym_hi - ok
15:06:43.0562 2780  [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3          C:\WINDOWS\system32\DRIVERS\sym_u3.sys
15:06:43.0703 2780  sym_u3 - ok
15:06:43.0734 2780  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
15:06:43.0875 2780  sysaudio - ok
15:06:43.0906 2780  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog      C:\WINDOWS\system32\smlogsvc.exe
15:06:44.0031 2780  SysmonLog - ok
15:06:44.0046 2780  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
15:06:44.0187 2780  TapiSrv - ok
15:06:44.0250 2780  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip          C:\WINDOWS\system32\DRIVERS\tcpip.sys
15:06:44.0296 2780  Tcpip - ok
15:06:44.0312 2780  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
15:06:44.0453 2780  TDPIPE - ok
15:06:44.0484 2780  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP          C:\WINDOWS\system32\drivers\TDTCP.sys
15:06:44.0640 2780  TDTCP - ok
15:06:44.0656 2780  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
15:06:44.0781 2780  TermDD - ok
15:06:44.0812 2780  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService    C:\WINDOWS\System32\termsrv.dll
15:06:44.0953 2780  TermService - ok
15:06:45.0031 2780  [ 30698355067D07DA5F9EB81132C9FDD6 ] tfsnboio        C:\WINDOWS\system32\dla\tfsnboio.sys
15:06:45.0046 2780  tfsnboio ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0046 2780  tfsnboio - detected UnsignedFile.Multi.Generic (1)
15:06:45.0078 2780  [ FB9D825BB4A2ABDF24600F7505050E2B ] tfsncofs        C:\WINDOWS\system32\dla\tfsncofs.sys
15:06:45.0078 2780  tfsncofs ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0078 2780  tfsncofs - detected UnsignedFile.Multi.Generic (1)
15:06:45.0093 2780  [ CAFD8CCA11AA1E8B6D2EA1BA8F70EC33 ] tfsndrct        C:\WINDOWS\system32\dla\tfsndrct.sys
15:06:45.0093 2780  tfsndrct ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0093 2780  tfsndrct - detected UnsignedFile.Multi.Generic (1)
15:06:45.0093 2780  [ D4400188782AA797598958969C9657D4 ] tfsndres        C:\WINDOWS\system32\dla\tfsndres.sys
15:06:45.0109 2780  tfsndres ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0109 2780  tfsndres - detected UnsignedFile.Multi.Generic (1)
15:06:45.0125 2780  [ B92F67A71CC8176F331B8AA8D9F555AD ] tfsnifs        C:\WINDOWS\system32\dla\tfsnifs.sys
15:06:45.0156 2780  tfsnifs ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0156 2780  tfsnifs - detected UnsignedFile.Multi.Generic (1)
15:06:45.0171 2780  [ 85985FAA9A71E2358FCC2EDEFC2A3C5C ] tfsnopio        C:\WINDOWS\system32\dla\tfsnopio.sys
15:06:45.0187 2780  tfsnopio ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0187 2780  tfsnopio - detected UnsignedFile.Multi.Generic (1)
15:06:45.0203 2780  [ BBA22094F0F7C210567EFDAF11F64495 ] tfsnpool        C:\WINDOWS\system32\dla\tfsnpool.sys
15:06:45.0234 2780  tfsnpool ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0234 2780  tfsnpool - detected UnsignedFile.Multi.Generic (1)
15:06:45.0250 2780  [ 81340BEF80B9811E98CE64611E67E3FF ] tfsnudf        C:\WINDOWS\system32\dla\tfsnudf.sys
15:06:45.0250 2780  tfsnudf ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0250 2780  tfsnudf - detected UnsignedFile.Multi.Generic (1)
15:06:45.0265 2780  [ C035FD116224CCC8325F384776B6A8BB ] tfsnudfa        C:\WINDOWS\system32\dla\tfsnudfa.sys
15:06:45.0312 2780  tfsnudfa ( UnsignedFile.Multi.Generic ) - warning
15:06:45.0312 2780  tfsnudfa - detected UnsignedFile.Multi.Generic (1)
15:06:45.0328 2780  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
15:06:45.0359 2780  Themes - ok
15:06:45.0421 2780  [ EFEF22B9577E5051057FDE1AE381B50C ] TomTomHOMEService C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
15:06:45.0437 2780  TomTomHOMEService - ok
15:06:45.0468 2780  [ D213A9247DC347F305A2D4CC9B951487 ] TosIde          C:\WINDOWS\system32\DRIVERS\toside.sys
15:06:45.0593 2780  TosIde - ok
15:06:45.0640 2780  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
15:06:45.0765 2780  TrkWks - ok
15:06:45.0796 2780  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
15:06:45.0937 2780  Udfs - ok
15:06:45.0968 2780  [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra          C:\WINDOWS\system32\DRIVERS\ultra.sys
15:06:46.0062 2780  ultra - ok
15:06:46.0093 2780  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
15:06:46.0265 2780  Update - ok
15:06:46.0296 2780  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
15:06:46.0421 2780  upnphost - ok
15:06:46.0437 2780  UPnPService - ok
15:06:46.0468 2780  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS            C:\WINDOWS\System32\ups.exe
15:06:46.0593 2780  UPS - ok
15:06:46.0640 2780  [ EAFE1E00739AFE6C51487A050E772E17 ] USBAAPL        C:\WINDOWS\system32\Drivers\usbaapl.sys
15:06:46.0718 2780  USBAAPL - ok
15:06:46.0750 2780  [ E919708DB44ED8543A7C017953148330 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
15:06:46.0890 2780  usbaudio - ok
15:06:46.0906 2780  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp        C:\WINDOWS\system32\DRIVERS\usbccgp.sys
15:06:47.0046 2780  usbccgp - ok
15:06:47.0062 2780  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci        C:\WINDOWS\system32\DRIVERS\usbehci.sys
15:06:47.0187 2780  usbehci - ok
15:06:47.0218 2780  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
15:06:47.0359 2780  usbhub - ok
15:06:47.0406 2780  [ FA166AC5ADB11B243910462F091F5449 ] USBMIDI        C:\WINDOWS\system32\Drivers\Mdusb.sys
15:06:47.0421 2780  USBMIDI ( UnsignedFile.Multi.Generic ) - warning
15:06:47.0421 2780  USBMIDI - detected UnsignedFile.Multi.Generic (1)
15:06:47.0437 2780  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
15:06:47.0578 2780  usbprint - ok
15:06:47.0593 2780  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan        C:\WINDOWS\system32\DRIVERS\usbscan.sys
15:06:47.0734 2780  usbscan - ok
15:06:47.0765 2780  [ 1C888B000C2F9492F4B15B5B6B84873E ] usbser          C:\WINDOWS\system32\DRIVERS\usbser.sys
15:06:47.0906 2780  usbser - ok
15:06:47.0937 2780  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR        C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
15:06:48.0062 2780  USBSTOR - ok
15:06:48.0078 2780  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci        C:\WINDOWS\system32\DRIVERS\usbuhci.sys
15:06:48.0218 2780  usbuhci - ok
15:06:48.0250 2780  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave        C:\WINDOWS\System32\drivers\vga.sys
15:06:48.0390 2780  VgaSave - ok
15:06:48.0421 2780  [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp          C:\WINDOWS\system32\DRIVERS\viaagp.sys
15:06:48.0562 2780  viaagp - ok
15:06:48.0578 2780  [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde          C:\WINDOWS\system32\DRIVERS\viaide.sys
15:06:48.0718 2780  ViaIde - ok
15:06:48.0750 2780  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap        C:\WINDOWS\system32\drivers\VolSnap.sys
15:06:48.0890 2780  VolSnap - ok
15:06:48.0921 2780  [ 68F106273BE29E7B7EF8266977268E78 ] VSS            C:\WINDOWS\System32\vssvc.exe
15:06:49.0046 2780  VSS - ok
15:06:49.0078 2780  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] w32time        C:\WINDOWS\system32\w32time.dll
15:06:49.0218 2780  w32time - ok
15:06:49.0250 2780  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
15:06:49.0390 2780  Wanarp - ok
15:06:49.0453 2780  [ DC7F91B2ED24A738C807EA07F298928C ] wceusbsh        C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
15:06:49.0500 2780  wceusbsh - ok
15:06:49.0578 2780  [ D918617B46457B9AC28027722E30F647 ] Wdf01000        C:\WINDOWS\system32\Drivers\wdf01000.sys
15:06:49.0609 2780  Wdf01000 - ok
15:06:49.0609 2780  WDICA - ok
15:06:49.0625 2780  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
15:06:49.0765 2780  wdmaud - ok
15:06:49.0796 2780  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient      C:\WINDOWS\System32\webclnt.dll
15:06:49.0937 2780  WebClient - ok
15:06:50.0031 2780  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
15:06:50.0171 2780  winmgmt - ok
15:06:50.0328 2780  [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc        C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
15:06:50.0390 2780  wlidsvc - ok
15:06:50.0437 2780  [ 581176F60885AEF8F78C6E38DCC3CDF9 ] WMDM PMSP Service C:\WINDOWS\system32\MsPMSPSv.exe
15:06:50.0453 2780  WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - warning
15:06:50.0453 2780  WMDM PMSP Service - detected UnsignedFile.Multi.Generic (1)
15:06:50.0515 2780  [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN        C:\WINDOWS\system32\MsPMSNSv.dll
15:06:50.0656 2780  WmdmPmSN - ok
15:06:50.0703 2780  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
15:06:50.0843 2780  WmiApSrv - ok
15:06:50.0937 2780  [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc  C:\Programme\Windows Media Player\WMPNetwk.exe
15:06:51.0031 2780  WMPNetworkSvc - ok
15:06:51.0062 2780  [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL        C:\WINDOWS\System32\drivers\ws2ifsl.sys
15:06:51.0203 2780  WS2IFSL - ok
15:06:51.0234 2780  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
15:06:51.0375 2780  wscsvc - ok
15:06:51.0390 2780  WSearch - ok
15:06:51.0421 2780  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
15:06:51.0562 2780  WSTCODEC - ok
15:06:51.0578 2780  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
15:06:51.0734 2780  wuauserv - ok
15:06:51.0781 2780  [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
15:06:51.0859 2780  WudfPf - ok
15:06:51.0890 2780  [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd          C:\WINDOWS\system32\DRIVERS\wudfrd.sys
15:06:51.0937 2780  WudfRd - ok
15:06:51.0968 2780  [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc        C:\WINDOWS\System32\WUDFSvc.dll
15:06:51.0984 2780  WudfSvc - ok
15:06:52.0031 2780  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
15:06:52.0218 2780  WZCSVC - ok
15:06:52.0281 2780  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov        C:\WINDOWS\System32\xmlprov.dll
15:06:52.0437 2780  xmlprov - ok
15:06:52.0468 2780  ================ Scan global ===============================
15:06:52.0500 2780  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
15:06:52.0531 2780  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
15:06:52.0546 2780  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
15:06:52.0562 2780  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
15:06:52.0562 2780  [Global] - ok
15:06:52.0562 2780  ================ Scan MBR ==================================
15:06:52.0593 2780  [ B16A2359F4962B0C622D81A1C1F4B703 ] \Device\Harddisk0\DR0
15:06:52.0875 2780  \Device\Harddisk0\DR0 - ok
15:06:53.0328 2780  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR4
15:07:00.0437 2780  \Device\Harddisk1\DR4 - ok
15:07:00.0437 2780  ================ Scan VBR ==================================
15:07:00.0437 2780  [ 4A872EB9703FB707DA7262924D67199E ] \Device\Harddisk0\DR0\Partition1
15:07:00.0437 2780  \Device\Harddisk0\DR0\Partition1 - ok
15:07:00.0437 2780  [ 5C240E125C2371E2CBAB7217F19F2392 ] \Device\Harddisk1\DR4\Partition1
15:07:00.0453 2780  \Device\Harddisk1\DR4\Partition1 - ok
15:07:00.0453 2780  ============================================================
15:07:00.0453 2780  Scan finished
15:07:00.0453 2780  ============================================================
15:07:00.0562 3836  Detected object count: 26
15:07:00.0562 3836  Actual detected object count: 26
15:08:00.0968 3836  AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0968 3836  AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0968 3836  drvmcdb ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0968 3836  drvmcdb ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0968 3836  drvnddm ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0968 3836  drvnddm ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  DTT200U ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  DTT200U ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  DTT200ULD ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  DTT200ULD ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  FirebirdServerMAGIXInstance ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  GoogleDesktopManager ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  GoogleDesktopManager ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  NAL ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  NAL ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:00.0984 3836  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:00.0984 3836  Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  omci ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  omci ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  PLCNDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  PLCNDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  PRISMSVC ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  PRISMSVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  sscdbhk5 ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  sscdbhk5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0000 3836  ssrtln ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0000 3836  ssrtln ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsnboio ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsnboio ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsncofs ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsncofs ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsndrct ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsndrct ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsndres ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsndres ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsnifs ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsnifs ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsnopio ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsnopio ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsnpool ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsnpool ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0015 3836  tfsnudf ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0015 3836  tfsnudf ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0031 3836  tfsnudfa ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0031 3836  tfsnudfa ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0031 3836  USBMIDI ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0031 3836  USBMIDI ( UnsignedFile.Multi.Generic ) - User select action: Skip
15:08:01.0031 3836  WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - skipped by user
15:08:01.0031 3836  WMDM PMSP Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 19.09.2012 12:52
Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.
  • Starte combofix.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
    Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.
  • Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.
Wichtiger Hinweis:
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!

Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Solltest du nach der Ausführung von Combofix Probleme beim Starten von Anwendungen haben und Meldungen erhalten wie

Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
startest du Windows dann manuell neu und die Fehlermeldungen sollten nicht mehr auftauchen.

Boogie 19.09.2012 17:26
Hier ist es:

[code]
Combofix Logfile:
Code:
ComboFix 12-09-18.07 - Markus Ruffing 19.09.2012  17:54:54.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.1022.557 [GMT 2:00]
ausgeführt von:: c:\dokumente und einstellungen\Markus Ruffing\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {83C0A8FC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {862F381C-FFA4-00FF-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {8632398C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Disabled/Updated* {865406F4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {00000000-0000-0000-0000-000000000000}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {0677CEF8-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {83DFBA5C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {83E06C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {83EB6DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {83EF9734-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {85C8BDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {85FDEC1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86097054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8616BAD4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8617C054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86181CE4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8619FB64-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861BADDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861C6AD4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861CB354-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861DF754-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861E4DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861ED424-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {861F4054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86214DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862225BC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8623D93C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8624A64C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8624C944-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86250DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862524EC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86259054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86260DDC-FFA4-0110-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86287A64-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628877C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8628D6DC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862982DC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8629ADDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8629D054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A3DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A4054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862A8914-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862B5DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862B9C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862BDCC4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C1C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C364C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C3C44-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C6754-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862C9A5C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862CEDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862D1304-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862DA49C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862DB404-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862DCDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862E2914-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862E8054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862E8D8C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862E9DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862EA5BC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862F1A34-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862F7DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {862FA6DC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86302424-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8630428C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86309DB4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863185E4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86318B24-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8631EAA4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863255BC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863258EC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863274EC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632CDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8632DDB4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8633E514-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8633F44C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863425BC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86343474-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863473D4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8634B44C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86357C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8636449C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86366DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8636960C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8636B65C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8636B874-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8637C5E4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8637DC74-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8637EC1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86389DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863958D4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86396DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863AEDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863BA60C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863CB71C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863D4B5C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863DA054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863DE2CC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863E561C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863ED054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863EDDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863FC8E4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {863FE89C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8640F854-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864104C4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86417DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8641ED3C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86428A14-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8642CA34-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8642E234-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8642F054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864306A4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86430DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86435054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86436594-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86437DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8643A254-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8643A41C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8643D794-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8643FDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86444C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86447B2C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8645552C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86458D0C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8646038C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864634EC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86468454-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8646E564-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864725CC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86474DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8647B054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864854AC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86494544-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8649467C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864A0A8C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864ACDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864BC254-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864BC544-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864BCDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864C1D8C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864C1DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864C3054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864C3B4C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864C623C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864CADDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864CDAFC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864CFC1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864D24E4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864DD25C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864E2C24-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864E3A14-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864F074C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864F72B4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {864F9054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865026AC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86514054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8652051C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8652B47C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8652D3B4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86539624-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8653DC1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86540714-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86541524-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86544C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86544DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8654933C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8654A924-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8654D324-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8654DDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8654FDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86553374-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8655586C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86559CC4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8655C504-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86564AEC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86567374-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86568054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8656D43C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8656F054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865711DC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657135C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657144C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86574054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86576C1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865771A4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86579C4C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657BBBC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657BDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657D054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8657DDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86583484-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86583804-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86586C6C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8658BDDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8658E514-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8658EC24-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8658F1C4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86592B94-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8659E99C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865A4CC4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865AC2F4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865AFC1C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865B8054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865BDC44-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865BF054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865C6054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865CDD44-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865D32B4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {865E7A84-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8660638C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86606AB4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8660AAF4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8662122C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8663BC2C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86662054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86680DDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668AD5C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668ADDC-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668B33C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668BB64-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668BCC4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8668C3D4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86693054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {86693D44-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {866986A4-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8669C054-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8669C594-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8669C914-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {866CF30C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {8671267C-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {867CAD44-FFA4-00EE-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {BADB0D00-FFA4-00EE-0D24-347CA8A3377C}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\eSelleratePlugin.DLL
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\MBSMainPlugin4070.dll
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\MBSQTImporterPlugin4175.dll
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\MBSRegistrationPlugin4071.dll
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\rbap550.dll
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\RBInternetEncodings550.dll
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\rbqt550.DLL
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\RBShell550.dll
c:\dokumente und einstellungen\Markus Ruffing\WINDOWS
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\msvcr71.dll
c:\windows\settings.reg
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\spool\prtprocs\w32x86\CNMPD6l(2).DLL
c:\windows\system32\spool\prtprocs\w32x86\CNMPD6l(3).DLL
c:\windows\system32\spool\prtprocs\w32x86\CNMPD6l(4).DLL
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\fusion.dll
c:\windows\system32\URTTemp\mscoree.dll
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\mscorsn.dll
c:\windows\system32\URTTemp\mscorwks.dll
c:\windows\system32\URTTemp\msvcr71.dll
c:\windows\system32\URTTemp\regtlib.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2012-08-19 bis 2012-09-19  ))))))))))))))))))))))))))))))
.
.
2012-09-16 19:25 . 2012-09-16 19:25        --------        d-----w-        C:\_OTL
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-06 13:59 . 2004-08-18 12:05        78336        ----a-w-        c:\windows\system32\browser.dll
2012-07-04 14:05 . 2004-08-18 12:15        139784        ----a-w-        c:\windows\system32\drivers\rdpwd.sys
2012-07-03 18:25 . 2004-08-18 12:05        1866240        ----a-w-        c:\windows\system32\win32k.sys
2012-07-03 11:46 . 2010-08-08 10:04        22344        ----a-w-        c:\windows\system32\drivers\mbam.sys
2012-07-02 17:39 . 2004-08-18 12:05        916992        ----a-w-        c:\windows\system32\wininet.dll
2012-07-02 17:39 . 2004-08-18 12:05        43520        ----a-w-        c:\windows\system32\licmgr10.dll
2012-07-02 17:39 . 2004-08-18 12:05        1469440        ------w-        c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2004-08-18 12:05        385024        ----a-w-        c:\windows\system32\html.iec
2012-09-11 15:39 . 2012-09-11 15:38        266720        ----a-w-        c:\programme\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49        94208        ----a-w-        c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49        94208        ----a-w-        c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49        94208        ----a-w-        c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49        94208        ----a-w-        c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-21 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2011-01-10 281768]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2012-04-18 421888]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"iTunesHelper"="f:\programme\iTunes\iTunesHelper.exe" [2012-06-07 421776]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\Markus Ruffing\Startmenü\Programme\Autostart\
Dropbox.lnk - c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programme\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"midi2"=hxdll.dll
"midi1"=hxdll.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Google Updater.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Google Updater.lnk
backup=c:\windows\pss\Google Updater.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Microsoft Office.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Windows Search.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Wireless USB 2.0 WLAN-Kartendienstprogramm.lnk]
path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Wireless USB 2.0 WLAN-Kartendienstprogramm.lnk
backup=c:\windows\pss\Wireless USB 2.0 WLAN-Kartendienstprogramm.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Markus Ruffing^Startmenü^Programme^Autostart^BUFFALO NAS Navigator.lnk]
path=c:\dokumente und einstellungen\Markus Ruffing\Startmenü\Programme\Autostart\BUFFALO NAS Navigator.lnk
backup=c:\windows\pss\BUFFALO NAS Navigator.lnkStartup
.
[HKLM\~\startupfolder\C:^Dokumente und Einstellungen^Markus Ruffing^Startmenü^Programme^Autostart^NAS Scheduler.lnk]
path=c:\dokumente und einstellungen\Markus Ruffing\Startmenü\Programme\Autostart\NAS Scheduler.lnk
backup=c:\windows\pss\NAS Scheduler.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-07-27 20:51        919008        ----a-w-        c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2011-11-02 06:51        59240        ----a-w-        c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2012-05-30 18:06        59280        ----a-w-        c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
2005-03-29 20:05        339968        ----a-w-        c:\programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2008-04-14 02:22        15360        ----a-w-        c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
2004-12-06 00:05        127035        ----a-w-        c:\windows\system32\dla\tfswctrl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
2005-02-23 15:19        53248        ------w-        c:\programme\CyberLink\PowerDVD\DVDLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2008-02-04 11:33        1836544        ----a-w-        c:\programme\Google\Google Desktop Search\GoogleDesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2010-06-09 18:55        49208        ----a-w-        c:\programme\HP\HP Software Update\hpwuschd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2004-07-27 15:50        221184        ----a-w-        c:\progra~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2004-07-27 15:50        81920        ----a-w-        c:\programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:22        1695232        ----a-w-        c:\programme\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
2005-05-03 18:38        64512        ----a-w-        c:\windows\system32\P17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2012-04-18 18:56        421888        ----a-w-        c:\programme\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SignCubes]
2010-04-19 10:27        261640        ----a-w-        c:\progra~1\OPENLI~1\siqSEMr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SignCubesCFGpdf]
2010-04-19 10:31        110016        ----a-w-        c:\progra~1\OPENLI~1\siqFileHandler1.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SignCubesCFGpdf1]
2008-12-19 13:39        119088        ----a-w-        c:\progra~1\OPENLI~1\siqCFGpdf.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-12-22 09:41        136600        ----a-w-        c:\programme\Java\jre6\bin\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-06-21 12:03        68856        ----a-w-        c:\programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2010-02-17 19:44        198160        ----a-w-        c:\programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2011-04-22 12:21        247728        ----a-w-        c:\programme\TomTom HOME 2\TomTomHOMERunner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3 (0x3)
"iPod Service"=3 (0x3)
"idsvc"=3 (0x3)
"gusvc"=2 (0x2)
"gupdatem"=3 (0x3)
"gupdate"=2 (0x2)
"GoogleDesktopManager"=3 (0x3)
"FirebirdServerMAGIXInstance"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"AntiVirSchedulerService"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\WS_FTP Pro\\wsftppro.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\devolo\\informer\\devinf.exe"=
"c:\\Programme\\devolo\\easyshare\\easyshare.exe"=
"c:\\Programme\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programme\\BUFFALO\\NASNAVI\\NasNavi.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Dokumente und Einstellungen\\Markus Ruffing\\Anwendungsdaten\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"f:\\Programme\\iTunes\\iTunes.exe"=
.
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [16.02.2011 18:55 136360]
R2 NasPmService;NAS PM Service;c:\programme\BUFFALO\NASNAVI\nassvc.exe -Service_Execute -dcyc=60 -dto=3 -dluc=0 -dmin=1 -dmax=60 -dflc=0 -apc=0 -log=0 -pm=1 -pall=1 -phttp=0 -pbc=0 -ppro=0 -pcyc=0 -pmin=1 -pmax=60 -pflc=0 --> c:\programme\BUFFALO\NASNAVI\nassvc.exe -Service_Execute -dcyc=60 -dto=3 -dluc=0 -dmin=1 -dmax=60 -dflc=0 -apc=0 -log=0 -pm=1 -pall=1 -phttp=0 -pbc=0 -ppro=0 -pcyc=0 -pmin=1 -pmax=60 -pflc=0 [?]
R2 PLCNDIS5;PLCNDIS5 NDIS Protocol Driver;c:\windows\system32\plcndis5.sys [17.05.2004 11:21 17280]
R2 TomTomHOMEService;TomTomHOMEService;c:\programme\TomTom HOME 2\TomTomHOMEService.exe [22.04.2011 14:21 92592]
R3 es1969;ESS 1969-Audiotreiber (WDM);c:\windows\system32\drivers\es1969.sys [21.01.2006 17:59 72192]
R3 KOBCCEX;KOBCCEX;c:\windows\system32\drivers\KOBCCEX.sys [11.12.2011 22:16 23168]
R3 KOBCCID;KOBCCID;c:\windows\system32\drivers\KOBCCID.sys [11.12.2011 22:16 83840]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\programme\Google\Update\GoogleUpdate.exe [06.01.2010 14:01 135664]
S3 adiusbae;Teledat 300 USB;c:\windows\system32\DRIVERS\adiusbae.sys --> c:\windows\system32\DRIVERS\adiusbae.sys [?]
S3 BBSvc;Bing Bar Update Service;c:\programme\Microsoft\BingBar\BBSvc.EXE [28.02.2011 18:44 183560]
S3 DTT200U;DTT200U DVB-T USB receiver Driver;c:\windows\system32\drivers\DTT200U.sys [06.09.2004 14:40 18432]
S3 DTT200ULD;DTT200U DVB-T USB receiver firmware loader;c:\windows\system32\drivers\DTT200ULD.sys [01.10.2004 12:59 17920]
S3 GigasetGenericUSB;GigasetGenericUSB;c:\windows\system32\drivers\GigasetGenericUSB.sys [23.10.2011 17:34 44032]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\Google\Update\GoogleUpdate.exe [06.01.2010 14:01 135664]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programme\Mozilla Maintenance Service\maintenanceservice.exe [06.05.2012 15:57 114144]
S3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\drivers\netaapl.sys [13.06.2011 22:01 18432]
S3 PLCMPR5;PLCMPR5 NDIS Protocol Driver;\??\c:\windows\system32\PLCMPR5.SYS --> c:\windows\system32\PLCMPR5.SYS [?]
S3 UPnPService;UPnPService;c:\programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe --> c:\programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe [?]
S3 USBMIDI;UF USB MIDI Driver;c:\windows\system32\drivers\mdusb.sys [13.05.2006 11:07 31306]
S4 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\programme\MAGIX\Common\Database\bin\fbserver.exe [07.09.2008 20:43 1527900]
S4 PRISMSVC;PRISMSVC;c:\windows\system32\PRISMSVC.exe [22.08.2005 22:53 57344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12        REG_MULTI_SZ          Pml Driver HPZ12 Net Driver HPZ12
.
Inhalt des "geplante Tasks" Ordners
.
2012-08-03 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programme\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:57]
.
2012-09-10 c:\windows\Tasks\Google Software Updater.job
- c:\programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-26 15:41]
.
2012-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-01-06 12:01]
.
2012-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programme\Google\Update\GoogleUpdate.exe [2010-01-06 12:01]
.
2005-08-28 c:\windows\Tasks\ISP-Anmeldungserinnerung 1.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-18 02:22]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.t-online.de
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.euro.dell.com/
uInternet Settings,ProxyOverride = <local>;*.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.100.1
DPF: {37E14A3C-E80D-4AB0-9E44-DECA0B021828} - hxxps://www.pvs-privacy.de/paddialog/PADOnlineActiveX.cab
FF - ProfilePath - c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Mozilla\Firefox\Profiles\zlx9bq8k.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
MSConfigStartUp-Ad-Watch - c:\programme\Lavasoft\Ad-Aware\AAWTray.exe
MSConfigStartUp-Adobe Photo Downloader - c:\programme\Adobe\Photoshop Elements 4.0\apdproxy.exe
MSConfigStartUp-Adobe Reader Speed Launcher - c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-AVP - c:\programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
MSConfigStartUp-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\programme\Gemeinsame Dateien\Nero\Lib\NMBgMonitor.exe
MSConfigStartUp-CTSysVol - c:\programme\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
MSConfigStartUp-DMXLauncher - c:\programme\Dell\Media Experience\DMXLauncher.exe
MSConfigStartUp-hpqSRMon - c:\programme\HP\Digital Imaging\bin\hpqSRMon.exe
MSConfigStartUp-iTunesHelper - c:\programme\iTunes\iTunesHelper.exe
MSConfigStartUp-NBKeyScan - c:\programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
MSConfigStartUp-NeroFilterCheck - c:\programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe
MSConfigStartUp-Picasa Media Detector - c:\programme\Picasa2\PicasaMediaDetector.exe
MSConfigStartUp-UpdReg - c:\windows\UpdReg.EXE
AddRemove-ASIO4ALL v2 - c:\programme\ASIO4ALL v2\uninstall.exe
AddRemove-Blues Vol. 12 Video Lessons2.0 - c:\windows\iun6002.exe
AddRemove-Blues Vol. 13 Video Lessons1.0 - c:\windows\iun6002.exe
AddRemove-XP_is1 - c:\programme\CME\UF MIDI USB DRIVER\unins000.exe
AddRemove-CopyPod - c:\programme\CopyPod\uninstall.exe
AddRemove-DATA BECKER - Die große CD-Druckerei - c:\windows\IsUn0407.exe
AddRemove-Destinator Console - c:\destin~1\INSTAL~1\Console\UnDest.exe
AddRemove-dmail lite v3.60 - c:\progra~1\dmail\UNWISE.EXE
AddRemove-FingerPower! Vol. 11.0 - c:\windows\iun6002.exe
AddRemove-HijackThis - c:\dokume~1\MARKUS~1\LOKALE~1\Temp\Rar$EX00.968\HijackThis.exe
AddRemove-INDEX - c:\windows\IsUn0407.exe
AddRemove-Mein CEWE FOTOBUCH_is1 - c:\programme\Mein CEWE FOTOBUCH\unins000.exe
AddRemove-Microsoft Interactive Training - c:\windows\IsUn0407.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2012-09-19 18:11
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(668)
c:\windows\system32\iphlpapi.dll
c:\windows\system32\PRISMAPI.dll
.
- - - - - - - > 'explorer.exe'(3172)
c:\dokumente und einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\DropboxExt.14.dll
c:\programme\Windows Desktop Search\deskbar.dll
c:\programme\Windows Desktop Search\de-de\dbres.dll.mui
c:\programme\Windows Desktop Search\dbres.dll
c:\programme\Windows Desktop Search\wordwheel.dll
c:\programme\Windows Desktop Search\de-de\msnlExtRes.dll.mui
c:\programme\Windows Desktop Search\msnlExtRes.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\programme\WS_FTP Pro\nsftpch.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\System32\SCardSvr.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\Avira\AntiVir Desktop\avshadow.exe
c:\programme\Java\jre6\bin\jqs.exe
c:\programme\BUFFALO\NASNAVI\nassvc.exe
c:\programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\MsPMSPSv.exe
c:\windows\system32\SearchIndexer.exe
c:\programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\PRISMSVR.EXE
c:\programme\iPod\bin\iPodService.exe
c:\windows\system32\SearchFilterHost.exe
c:\windows\system32\SearchProtocolHost.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-09-19  18:21:43 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-09-19 16:21
.
Vor Suchlauf: 6.105.559.040 Bytes frei
Nach Suchlauf: 6.115.303.424 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - D537F2CBEB4F225E2E7701DCB2B17BD9
--- --- ---

cosinus 20.09.2012 09:56
Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM!

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.
  • Starte die aswMBR.exe - (aswMBR.exe Anleitung)
    Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
  • Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
    Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
  • Klicke auf Scan.
  • Warte bitte bis Scan finished successfully im DOS-Fenster steht.
  • Drücke auf Save Log und speichere diese auf dem Desktop.
Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).



Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Boogie 21.09.2012 13:04
Bitte:

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-20 21:26:48
-----------------------------
21:26:48.279    OS Version: Windows 5.1.2600 Service Pack 3
21:26:48.279    Number of processors: 2 586 0x401
21:26:48.279    ComputerName: MARKUS  UserName:
21:26:48.904    Initialize success
21:29:39.623    AVAST engine defs: 12092000
21:29:52.357    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
21:29:52.357    Disk 0 Vendor: HDS728080PLA380 PF2OA63A Size: 76293MB BusType: 3
21:29:52.404    Disk 0 MBR read successfully
21:29:52.404    Disk 0 MBR scan
21:29:52.498    Disk 0 unknown MBR code
21:29:52.529    Disk 0 Partition 1 00    DE Dell Utility Dell 8.0      62 MB offset 63
21:29:52.607    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        73139 MB offset 128520
21:29:52.654    Disk 0 Partition 3 00    DB  CP/M / CTOS Dell 8.0    3074 MB offset 149934645
21:29:52.685    Disk 0 scanning sectors +156232125
21:29:52.920    Disk 0 scanning C:\WINDOWS\system32\drivers
21:30:45.920    Service scanning
21:31:06.826    Modules scanning
21:31:55.279    Disk 0 trace - called modules:
21:31:55.326    ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
21:31:55.326    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87158ab8]
21:31:55.326    3 CLASSPNP.SYS[f7512fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x8716bd98]
21:31:56.576    AVAST engine scan C:\WINDOWS
21:32:41.638    AVAST engine scan C:\WINDOWS\system32
21:41:26.295    AVAST engine scan C:\WINDOWS\system32\drivers
21:42:34.810    AVAST engine scan C:\Dokumente und Einstellungen\Markus Ruffing
23:29:03.795    AVAST engine scan C:\Dokumente und Einstellungen\All Users
23:35:24.826    Scan finished successfully
06:03:53.138    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
06:03:53.170    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"
Code:

OSAM Logfile:

       
Code:

       
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 21:18:27 on 20.09.2012

OS: Windows XP Home Edition Service Pack 3 (Build 2600)
Default Browser: Microsoft Corporation Internet Explorer 8.00.6001.18702

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - "Apple Inc." - C:\Programme\Apple Software Update\SoftwareUpdate.exe
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Google Software Updater.job" - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"CTAPI_Control.cpl" - "KOBIL Systems" - C:\WINDOWS\system32\CTAPI_Control.cpl
"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"ISUSPM.cpl" - "InstallShield Software Corporation" - C:\WINDOWS\system32\ISUSPM.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"AntiVir PersonalEdition Classic Konfiguration" - ? - C:\PROGRA~1\ANTIVI~1\avconfig.cpl  (File not found)
"Avira AntiVir Personal" - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"DeviceControl" - "Creative Technology Ltd." - C:\Programme\Creative\Sound Blaster Live! 24-bit\Device Control\USBAudio.cpl
"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AEGIS Protocol (IEEE 802.1x) v3.1.0.0" (AegisP) - "Meetinghouse Data Communications" - C:\WINDOWS\System32\DRIVERS\AegisP.sys
"avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys
"catchme" (catchme) - ? - C:\ComboFix\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"drvmcdb" (drvmcdb) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\drvmcdb.sys
"drvnddm" (drvnddm) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\drvnddm.sys
"DTT200U DVB-T USB receiver Driver" (DTT200U) - "Computer & Entertainment, Inc." - C:\WINDOWS\System32\Drivers\DTT200U.sys
"DTT200U DVB-T USB receiver firmware loader" (DTT200ULD) - "DTT200Uer" - C:\WINDOWS\System32\Drivers\DTT200ULD.sys
"Lbd" (Lbd) - ? - C:\WINDOWS\System32\DRIVERS\Lbd.sys  (File not found)
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"Nal Service " (NAL) - "Intel Corporation " - C:\WINDOWS\system32\Drivers\iqvw32.sys
"OMCI WDM Device Driver" (omci) - "Dell Computer Corporation" - C:\WINDOWS\System32\DRIVERS\omci.sys
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"PLCMPR5 NDIS Protocol Driver" (PLCMPR5) - ? - C:\WINDOWS\system32\PLCMPR5.SYS  (File not found)
"PLCNDIS5 NDIS Protocol Driver" (PLCNDIS5) - "Intellon, Inc." - C:\WINDOWS\system32\plcndis5.sys
"pwtdypow" (pwtdypow) - ? - C:\DOKUME~1\MARKUS~1\LOKALE~1\Temp\pwtdypow.sys  (Hidden registry entry, rootkit activity | File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"sscdbhk5" (sscdbhk5) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\sscdbhk5.sys
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys
"ssrtln" (ssrtln) - "Sonic Solutions" - C:\WINDOWS\System32\drivers\ssrtln.sys
"Teledat 300 USB" (adiusbae) - ? - C:\WINDOWS\System32\DRIVERS\adiusbae.sys  (File not found)
"Teledat 300 USB Loader(adildr.sys)" (ADILOADER) - ? - C:\WINDOWS\System32\Drivers\adildr.sys  (File not found)
"tfsnboio" (tfsnboio) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnboio.sys
"tfsncofs" (tfsncofs) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsncofs.sys
"tfsndrct" (tfsndrct) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsndrct.sys
"tfsndres" (tfsndres) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsndres.sys
"tfsnifs" (tfsnifs) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnifs.sys
"tfsnopio" (tfsnopio) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnopio.sys
"tfsnpool" (tfsnpool) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnpool.sys
"tfsnudf" (tfsnudf) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnudf.sys
"tfsnudfa" (tfsnudfa) - "Sonic Solutions" - C:\WINDOWS\System32\dla\tfsnudfa.sys
"UF USB MIDI Driver" (USBMIDI) - "Central Music Co" - C:\WINDOWS\System32\Drivers\Mdusb.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? -   (File not found | COM-object registry key not found)
{BDEADF00-C265-11d0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----
{56F9679E-7826-4C84-81F3-532071A8BCC5} "Windows Desktop Search Namespace Manager" - "Microsoft Corporation" - C:\Programme\Windows Desktop Search\MSNLNamespaceMgr.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? -   (File not found | COM-object registry key not found)
{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess" - "Sonic Solutions" - C:\WINDOWS\system32\dla\tfswshx.dll
{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - F:\Programme\iTunes\iTunesMiniPlayer.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -   (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Programme\Real\RealPlayer\rpshell.dll
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -   (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL
{13E7F612-F261-4391-BEA2-39DF4F3FA311} "Windows Desktop Search" - "Microsoft Corporation" - C:\Programme\Windows Desktop Search\msnlExt.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Programme\WinRAR\rarext.dll  (File found, but it contains no detailed information)

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{0A5FD7C5-A45C-49FC-ADB5-9952547D5715} "Creative Software AutoUpdate" - "Creative Technology Ltd" - C:\WINDOWS\DOWNLO~1\CTSUEng.ocx / hxxp://creative.com/su/ocx/15015/CTSUEng.cab
{F6ACF75C-C32C-447B-9BEF-46B766368D29} "Creative Software AutoUpdate Support Package" - "Creative Technology Ltd" - C:\WINDOWS\DOWNLO~1\CTPID.ocx / hxxp://creative.com/su/ocx/15016/CTPID.cab
{A4639D2F-774E-11D3-A490-00C04F6843FB} "IEAnimBehaviorFactory Class" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\MSORUN\MSORUN.DLL / hxxp://download.microsoft.com/download/PowerPoint2002/Install/10.0.2609/WIN98MeXP/EN-US/msorun.cab
{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} "Java Plug-in 1.4.2_03" - "JavaSoft / Sun Microsystems, Inc." - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll / hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} "Java Plug-in 1.5.0_10" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.5.0_10\bin\npjpi150_10.dll / hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} "Java Plug-in 1.6.0_03" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_03\bin\npjpi160_03.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} "Java Plug-in 1.6.0_05" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_05\bin\npjpi160_05.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} "Java Plug-in 1.6.0_07" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_07\bin\npjpi160_07.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_11" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_11.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} "Java Plug-in 1.6.0_11" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_11.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_11" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_11.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
{37E14A3C-E80D-4AB0-9E44-DECA0B021828} "PADOnlineActiveX Control" - "Atelion GmbH" - C:\WINDOWS\DOWNLO~1\PADONL~1.OCX / https://www.pvs-privacy.de/paddialog/PADOnlineActiveX.cab
{2FC9A21E-2069-4E47-8235-36318989DB13} "PPSDKActiveXScanner.MainScreen" - "Pest Patrol Inc." - C:\WINDOWS\Downloaded Program Files\PPSDKActiveXScanner.ocx / hxxp://ppupdates.ca.com/downloads/scanner/axscanner.cab
{A8F2B9BD-A6A0-486A-9744-18920D898429} "ScorchPlugin Class" - "Sibelius Software Ltd." - C:\WINDOWS\Downloaded Program Files\NPSibelius.dll / hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab
{166B1BCA-3F9C-11CF-8075-444553540000} "Shockwave ActiveX Control" - "Macromedia, Inc." - C:\WINDOWS\system32\Macromed\Director\SwDir.dll / hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\WINDOWS\system32\Macromed\Flash\Flash10l.ocx / hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\WINDOWS\system32\legitcheckcontrol.dll / hxxp://download.microsoft.com/download/8/3/d/83d1fe15-fe0f-4bdf-b09c-4e3c49808ec7/LegitCheckControl.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
{8dcb7100-df86-4384-8842-8fa844297b3f} "Bing Bar" - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BingExt.dll
<binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{d2ce3e00-f94a-4740-988e-03dc2f38c34f} "Bing Bar Helper" - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BingExt.dll
{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess" - "Sonic Solutions" - C:\WINDOWS\system32\dla\tfswshx.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} "Java(tm) Plug-In SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll
{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live ID Sign-in Helper" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Markus Ruffing\Startmenü\Programme\Autostart\desktop.ini
"Dropbox.lnk" - "Dropbox, Inc." - C:\Dokumente und Einstellungen\Markus Ruffing\Anwendungsdaten\Dropbox\bin\Dropbox.exe  (Shortcut exists | File exists)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"swg" - "Google Inc." - "C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"APSDaemon" - "Apple Inc." - "C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe"
"avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
"iTunesHelper" - "Apple Inc." - "F:\Programme\iTunes\iTunesHelper.exe"
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime

[Network Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order )-----
"PRISMCM" - "Conexant Systems, Inc." - C:\WINDOWS\system32\PRISMAPI.dll

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Canon BJ Language Monitor PIXMA iP8500" - "CANON INC." - C:\WINDOWS\system32\CNMLM6l.DLL
"HP Discovery Port Monitor (HP Officejet 6500 E710n-z)" - "Hewlett-Packard Co." - C:\WINDOWS\system32\HPDiscoPM5412.dll
"OPENLiMiT PortMonitor" - "PDF Tools AG (hxxp://www.pdf-tools.com)" - C:\WINDOWS\system32\pdfpmon.dll
"PCL hpz3l5ha" - "Hewlett-Packard Company" - C:\WINDOWS\system32\hpz3l5ha.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll  (File not found)
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe
"Bing Bar Update Service" (BBSvc) - "Microsoft Corporation." - C:\Programme\Microsoft\BingBar\BBSvc.EXE
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Google Update-Dienst (gupdatem)" (gupdatem) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Kodak Camera Connection Software" (KodakCCS) - ? - C:\WINDOWS\system32\drivers\KodakCCS.exe  (File not found)
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
"Mozilla Maintenance Service" (MozillaMaintenance) - "Mozilla Foundation" - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
"NAS PM Service" (NasPmService) - "BUFFALO INC." - C:\Programme\BUFFALO\NASNAVI\nassvc.exe
"Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\WINDOWS\system32\HPZinw12.dll
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\WINDOWS\system32\HPZipm12.dll
"SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
"TomTomHOMEService" (TomTomHOMEService) - "TomTom" - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
"UPnPService" (UPnPService) - ? - C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe  (File not found)
"Windows Live ID Sign-in Assistant" (wlidsvc) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
"WMDM PMSP Service" (WMDM PMSP Service) - "Microsoft Corporation" - C:\WINDOWS\system32\MsPMSPSv.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

--- --- ---

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

cosinus 21.09.2012 19:45
Wir sollten den MBR fixen, sichere für den Fall der Fälle ALLE wichtigen Daten, auch wenn meistens alles glatt geht.

Hinweis: Mach bitte NICHT den MBR-Fix, wenn du noch andere Betriebssysteme wie zB Ubuntu installiert hast, ein MBR-Fix mit Windows-Tools macht ein parallel installiertes (Dualboot) Linux unbootbar.
Mach den Fix auch dann nicht, wenn du zB mit TrueCrypt oder anderen Verschlüsselungsprogrammen eine Vollverschlüsselung der Windowspartition bzw. gesamten Festplatte hast

Starte nach der Datensicherung aswmbr erneut und klick auf den Button FIXMBR.

Hinweis: Bitte den Virenscanner abstellen bevor du aswMBR ausführst, denn v.a. Avira meldet darin oft einen Fehalalrm!

Anschließend Windows neu starten und ein neues Log mit aswMBR machen.

Boogie 03.10.2012 16:46
Hat ein bißchen gedauert. Ich war eine Woche im Ausland.

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-20 21:26:48
-----------------------------
21:26:48.279 OS Version: Windows 5.1.2600 Service Pack 3
21:26:48.279 Number of processors: 2 586 0x401
21:26:48.279 ComputerName: MARKUS UserName:
21:26:48.904 Initialize success
21:29:39.623 AVAST engine defs: 12092000
21:29:52.357 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
21:29:52.357 Disk 0 Vendor: HDS728080PLA380 PF2OA63A Size: 76293MB BusType: 3
21:29:52.404 Disk 0 MBR read successfully
21:29:52.404 Disk 0 MBR scan
21:29:52.498 Disk 0 unknown MBR code
21:29:52.529 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 62 MB offset 63
21:29:52.607 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 73139 MB offset 128520
21:29:52.654 Disk 0 Partition 3 00 DB CP/M / CTOS Dell 8.0 3074 MB offset 149934645
21:29:52.685 Disk 0 scanning sectors +156232125
21:29:52.920 Disk 0 scanning C:\WINDOWS\system32\drivers
21:30:45.920 Service scanning
21:31:06.826 Modules scanning
21:31:55.279 Disk 0 trace - called modules:
21:31:55.326 ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
21:31:55.326 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87158ab8]
21:31:55.326 3 CLASSPNP.SYS[f7512fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x8716bd98]
21:31:56.576 AVAST engine scan C:\WINDOWS
21:32:41.638 AVAST engine scan C:\WINDOWS\system32
21:41:26.295 AVAST engine scan C:\WINDOWS\system32\drivers
21:42:34.810 AVAST engine scan C:\Dokumente und Einstellungen\Markus Ruffing
23:29:03.795 AVAST engine scan C:\Dokumente und Einstellungen\All Users
23:35:24.826 Scan finished successfully
06:03:53.138 Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
06:03:53.170 The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-03 17:40:19
-----------------------------
17:40:19.265 OS Version: Windows 5.1.2600 Service Pack 3
17:40:19.265 Number of processors: 2 586 0x401
17:40:19.265 ComputerName: MARKUS UserName:
17:40:20.468 Initialize success
17:41:33.406 AVAST engine defs: 12100301
17:44:02.312 Verifying
17:44:12.312 Disk 0 Windows 501 MBR fixed successfully
17:44:39.140 Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
17:44:39.171 The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"

cosinus 03.10.2012 19:39
NACH dem Fix sollt auch ein NEUER Scandurchlauf gemacht werden - das vorherige Log sowie dass der MBR nun gefixt wurde ist reichlich uninteressant

Boogie 04.10.2012 16:31
Bitte sehr:

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-09-20 21:26:48
-----------------------------
21:26:48.279    OS Version: Windows 5.1.2600 Service Pack 3
21:26:48.279    Number of processors: 2 586 0x401
21:26:48.279    ComputerName: MARKUS  UserName:
21:26:48.904    Initialize success
21:29:39.623    AVAST engine defs: 12092000
21:29:52.357    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
21:29:52.357    Disk 0 Vendor: HDS728080PLA380 PF2OA63A Size: 76293MB BusType: 3
21:29:52.404    Disk 0 MBR read successfully
21:29:52.404    Disk 0 MBR scan
21:29:52.498    Disk 0 unknown MBR code
21:29:52.529    Disk 0 Partition 1 00    DE Dell Utility Dell 8.0      62 MB offset 63
21:29:52.607    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        73139 MB offset 128520
21:29:52.654    Disk 0 Partition 3 00    DB  CP/M / CTOS Dell 8.0    3074 MB offset 149934645
21:29:52.685    Disk 0 scanning sectors +156232125
21:29:52.920    Disk 0 scanning C:\WINDOWS\system32\drivers
21:30:45.920    Service scanning
21:31:06.826    Modules scanning
21:31:55.279    Disk 0 trace - called modules:
21:31:55.326    ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
21:31:55.326    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87158ab8]
21:31:55.326    3 CLASSPNP.SYS[f7512fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x8716bd98]
21:31:56.576    AVAST engine scan C:\WINDOWS
21:32:41.638    AVAST engine scan C:\WINDOWS\system32
21:41:26.295    AVAST engine scan C:\WINDOWS\system32\drivers
21:42:34.810    AVAST engine scan C:\Dokumente und Einstellungen\Markus Ruffing
23:29:03.795    AVAST engine scan C:\Dokumente und Einstellungen\All Users
23:35:24.826    Scan finished successfully
06:03:53.138    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
06:03:53.170    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-03 17:40:19
-----------------------------
17:40:19.265    OS Version: Windows 5.1.2600 Service Pack 3
17:40:19.265    Number of processors: 2 586 0x401
17:40:19.265    ComputerName: MARKUS  UserName:
17:40:20.468    Initialize success
17:41:33.406    AVAST engine defs: 12100301
17:44:02.312    Verifying
17:44:12.312    Disk 0 Windows 501 MBR fixed successfully
17:44:39.140    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
17:44:39.171    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-03 17:54:10
-----------------------------
17:54:10.171    OS Version: Windows 5.1.2600 Service Pack 3
17:54:10.171    Number of processors: 2 586 0x401
17:54:10.171    ComputerName: MARKUS  UserName:
17:54:23.000    Initialize success
17:55:03.703    AVAST engine defs: 12100301
17:55:08.437    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-10-04 15:05:15
-----------------------------
15:05:15.171    OS Version: Windows 5.1.2600 Service Pack 3
15:05:15.171    Number of processors: 2 586 0x401
15:05:15.171    ComputerName: MARKUS  UserName:
15:05:15.875    Initialize success
15:05:36.843    AVAST engine defs: 12100301
15:05:45.281    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
15:05:45.281    Disk 0 Vendor: HDS728080PLA380 PF2OA63A Size: 76293MB BusType: 3
15:05:45.328    Disk 0 MBR read successfully
15:05:45.328    Disk 0 MBR scan
15:05:45.375    Disk 0 Windows XP default MBR code
15:05:45.375    Disk 0 Partition 1 00    DE Dell Utility Dell 8.0      62 MB offset 63
15:05:45.406    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS        73139 MB offset 128520
15:05:45.437    Disk 0 Partition 3 00    DB  CP/M / CTOS Dell 8.0    3074 MB offset 149934645
15:05:45.437    Disk 0 scanning sectors +156232125
15:05:45.531    Disk 0 scanning C:\WINDOWS\system32\drivers
15:05:59.640    Service scanning
15:06:23.171    Modules scanning
15:06:30.640    Disk 0 trace - called modules:
15:06:30.656    ntkrnlpa.exe CLASSPNP.SYS disk.sys atapi.sys hal.dll pciide.sys PCIIDEX.SYS
15:06:30.656    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8715cab8]
15:06:30.656    3 CLASSPNP.SYS[f7512fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x87167d98]
15:06:30.875    AVAST engine scan C:\WINDOWS
15:06:45.046    AVAST engine scan C:\WINDOWS\system32
15:09:33.125    AVAST engine scan C:\WINDOWS\system32\drivers
15:09:51.765    AVAST engine scan C:\Dokumente und Einstellungen\Markus Ruffing
16:02:06.937    AVAST engine scan C:\Dokumente und Einstellungen\All Users
16:05:29.890    Scan finished successfully
17:28:59.312    Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\MBR.dat"
17:28:59.343    The log file has been saved successfully to "C:\Dokumente und Einstellungen\Markus Ruffing\Desktop\aswMBR.txt"

cosinus 04.10.2012 18:59
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Boogie 09.10.2012 12:13
Hier sind die Logs:

Code:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 10/09/2012 at 10:06 AM

Application Version : 5.5.1022

Core Rules Database Version : 9358
Trace Rules Database Version: 7170

Scan type      : Complete Scan
Total Scan Time : 03:52:13

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 733
Memory threats detected  : 0
Registry items scanned    : 39137
Registry threats detected : 0
File items scanned        : 147023
File threats detected    : 43

Adware.Tracking Cookie
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\8VLCIRZ6.txt [ /ad1.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\A808TYB6.txt [ /fastclick.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\6UTF92Q7.txt [ /stats.paypal.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\QQV163XA.txt [ /specificclick.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\5055HVM4.txt [ /serving-sys.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\I6E6JCE4.txt [ /adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\69JCILEE.txt [ /www.etracker.de ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\8E16BIW1.txt [ /ad2.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\HA3BC2AJ.txt [ /ad.360yield.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\P69XWZ4L.txt [ /atdmt.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\3Z7ZMKFG.txt [ /zanox-affiliate.de ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\CBI78874.txt [ /tracking.quisma.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\W0412SAD.txt [ /webmasterplan.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\L19SH1E9.txt [ /ad4.adfarm1.adition.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\7MY2RVPR.txt [ /adform.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\9NJWA12O.txt [ /doubleclick.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\48A6WQA4.txt [ /invitemedia.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\IYJR4EUL.txt [ /zanox.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\2J2LUUY2.txt [ /track.adform.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\23BAMV01.txt [ /ad.yieldmanager.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\SECTA0SM.txt [ /imrworldwide.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\K8AVZJS4.txt [ /xiti.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\261OM85X.txt [ /ad.dyntracker.de ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\Y3TPRQFX.txt [ /ads.creative-serving.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\4C26JBNP.txt [ /ad.zanox.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\4JF1I0AT.txt [ /revsci.net ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\HQP9IAIU.txt [ /im.banner.t-online.de ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\AHKPB5AZ.txt [ /mediaplex.com ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\R8V7B86F.txt [ /track.zalando.de ]
        C:\Dokumente und Einstellungen\Markus Ruffing\Cookies\N911OPQ0.txt [ /apmebf.com ]
        accounts.youtube.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        www.googleadservices.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        .statcounter.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        .xiti.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        statse.webtrendslive.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        de.sitestat.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        www.etracker.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        .stats.paypal.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        .doubleclick.net [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        accounts.google.com [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
        .tracker.vinsight.de [ C:\DOKUMENTE UND EINSTELLUNGEN\MARKUS RUFFING\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\ZLX9BQ8K.DEFAULT\COOKIES.SQLITE ]
Code:

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.10.05.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Markus Ruffing :: MARKUS [Administrator]

05.10.2012 18:46:09
mbam-log-2012-10-05 (18-46-09).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|F:\|L:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 405861
Laufzeit: 6 Stunde(n), 15 Minute(n), 35 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 09.10.2012 15:15
Sieht ok aus, da wurden nur Cookies gefunden, die können alle weg.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )


Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller http://filepony.de/download-cookie_culler/
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ich halte es so, dass ich zum "wilden Surfen" den Opera-Browser oder Chromium unter meinem Linux verwende. Mein Hauptbrowser (Firefox) speichert nur die Cookies von den Sites die ich auch will, alles andere lehne ich manuell ab (der FF fragt mich immer) - die anderen Browser nehmen alles an Cookies zwar an, aber spätestens beim nächsten Start von Opera oder Chromium sind keine Cookies mehr da.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Boogie 09.10.2012 15:31
Hi cosinus,

zunächst mal vielen, vielen Dank für die Hilfe. Finde toll was ihr macht und werde Euch auch auf jeden Fall eine Spende zukommen lassen.

Mein System läuft jetzt stabil und ich habe auch keine weiteren Funde. MB zeigt allerdings noch drei Schädlinge in der Quarantäne. Muß ich da noch was machen?

Was hatte ich denn jetzt eigentlich drauf?

Viele Grüße,

Markus

cosinus 09.10.2012 16:14
Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. Mit Hilfe von OTL kannst du auch viele Tools entfernen:

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.


Malwarebytes zu behalten ist zu empfehlen. Kannst ja 1x im Monat damit einen Vollscan machen, aber immer vorher ans Update denken.


Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.


Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update


PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks => Adobe Flash Player Distribution | Adobe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:55 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19