Trojaner-Board - Virus wurde nicht mehr gefunden. Ist er weg? - C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\...

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Virus wurde nicht mehr gefunden. Ist er weg? - C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\... (https://www.trojaner-board.de/124125-virus-wurde-mehr-gefunden-weg-c-users-appdata-locallow-sun-java-deployment.html)

Virus wurde nicht mehr gefunden. Ist er weg? - C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\...

Hallo,

ich habe auf Facebook einen Bildlink von einem Freund bekommen und ihn angeklickt. Da kam ein Feld mit "installieren..." - das habe ich allerdings nicht gemacht. Zur Sicherheit habe ich einen Scan mit meinem Virenprogramm Avast gemacht. Da kam die Meldung, dass in dem Ordner C:\Users\Besitzer\AppData\LocalLow\Sun\Java\Deployment\... (weiter weiß ich leider nicht mehr) eine infizierte Datei ist. Diese habe ich mit Avast gelöscht. Bei einem erneuten Scan mit Avast, sowie einem Scan mit Malwarebytes kam dann kein Fund mehr, also keine infizierte Datei gefunden. Nun bin ich unsicher, ob der Virus weg ist.

Wäre super, wenn ihr euch mal meinen OTL-Scan anschauen könntet. Vielen Dank!

OTL.txt:

Code:

OTL logfile created on: 15.09.2012 13:30:49 - Run 1

OTL by OldTimer - Version 3.2.61.4     Folder = C:\Users\Weise\Desktop

64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7600.16385)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,80 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 63,69% Memory free

7,60 Gb Paging File | 5,91 Gb Available in Paging File | 77,70% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 281,95 Gb Total Space | 179,00 Gb Free Space | 63,48% Space Free | Partition Type: NTFS

Drive D: | 15,84 Gb Total Space | 2,28 Gb Free Space | 14,42% Space Free | Partition Type: NTFS

 

Computer Name: WEISE-HP | User Name: Weise | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.09.15 13:29:38 | 000,599,552 | ---- | M] (OldTimer Tools) -- C:\Users\Weise\Desktop\OTL.exe

PRC - [2012.08.21 11:12:26 | 004,282,728 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2012.08.21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2012.07.03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

PRC - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

PRC - [2011.08.25 15:06:04 | 003,346,544 | ---- | M] (Babylon Ltd.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe

PRC - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

PRC - [2010.07.02 11:51:16 | 000,027,192 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

PRC - [2010.04.23 12:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe

PRC - [2010.04.13 09:57:58 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

PRC - [2010.04.13 09:57:56 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

PRC - [2010.03.18 21:57:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

PRC - [2010.03.18 21:56:56 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.06.14 14:38:49 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\009c50fb69919b90fb233cb4c35d0ad7\System.Windows.Forms.ni.dll

MOD - [2012.06.14 14:38:29 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ebefde27b0ef7f39bb49c493b34a602c\System.Drawing.ni.dll

MOD - [2012.05.10 18:38:59 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\68eb2c96de3918a4757f5f768dc671c7\IAStorUtil.ni.dll

MOD - [2012.05.10 15:22:29 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0c00b1a8336dd4c1bd1ebce7780f20b4\System.Runtime.Remoting.ni.dll

MOD - [2012.05.10 15:20:43 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b68fdf2c95b93fc5006a092c11eed07c\WindowsBase.ni.dll

MOD - [2012.05.10 15:20:30 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5c85c9c42e1b8a8760de82ecb4c7d582\System.Xml.ni.dll

MOD - [2012.05.10 15:20:22 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb079eab134fd1a752ad91db13274110\System.Configuration.ni.dll

MOD - [2012.05.10 15:20:20 | 007,952,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\2ebb3c259eab50af565e3a8dba6ad20e\System.ni.dll

MOD - [2012.05.10 15:20:07 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\5858678a79aae31262b0214424245d06\mscorlib.ni.dll

MOD - [2010.07.17 20:46:33 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll

MOD - [2010.07.17 20:46:31 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2010.06.22 07:57:44 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV - [2012.09.10 16:47:55 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.08.21 11:12:25 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2012.08.15 12:21:38 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2011.10.01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)

SRV - [2011.10.01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)

SRV - [2011.02.28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)

SRV - [2011.02.25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)

SRV - [2010.07.02 11:51:16 | 000,027,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC)

SRV - [2010.06.18 16:26:18 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe -- (HP Wireless Assistant Service)

SRV - [2010.06.17 15:54:20 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Programme\Realtek\RtVOsd\RtVOsdService.exe -- (RtVOsdService)

SRV - [2010.04.13 09:57:58 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)

SRV - [2010.04.04 01:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)

SRV - [2010.03.18 21:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)

SRV - [2010.03.18 21:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)

SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.01.09 22:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)

SRV - [2009.11.18 04:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)

SRV - [2009.08.18 12:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2012.08.21 11:13:13 | 000,969,200 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2012.08.21 11:13:13 | 000,359,464 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2012.08.21 11:13:13 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2012.08.21 11:13:12 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2012.08.21 11:13:12 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2012.08.21 11:13:11 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2012.03.01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.16 23:58:34 | 000,230,864 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)

DRV:64bit: - [2011.10.01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)

DRV:64bit: - [2011.10.01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)

DRV:64bit: - [2011.10.01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)

DRV:64bit: - [2011.10.01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)

DRV:64bit: - [2011.03.11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010.09.19 09:37:59 | 003,063,360 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)

DRV:64bit: - [2010.06.22 09:17:52 | 006,856,704 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2010.06.22 07:28:32 | 010,342,240 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdpmd64.sys -- (intelkmd)

DRV:64bit: - [2010.06.22 07:28:32 | 010,342,240 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2010.06.22 07:24:12 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2010.05.31 21:46:50 | 000,333,928 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010.05.06 15:21:46 | 000,125,456 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)

DRV:64bit: - [2010.04.16 05:26:28 | 000,319,536 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)

DRV:64bit: - [2010.04.13 09:44:22 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009.09.23 03:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2009.09.17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.07.14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2009.06.20 04:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)

DRV:64bit: - [2009.06.10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)

DRV:64bit: - [2009.06.10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)

DRV:64bit: - [2009.06.10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)

DRV:64bit: - [2009.06.10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)

DRV:64bit: - [2009.06.10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)

DRV:64bit: - [2009.06.10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV - [2009.09.23 03:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {628A5889-C2A4-4DAD-A5B6-F36FA2B11828}

IE:64bit: - HKLM\..\SearchScopes\{01307296-9682-4A67-A542-5A505A61CE8B}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

IE:64bit: - HKLM\..\SearchScopes\{628A5889-C2A4-4DAD-A5B6-F36FA2B11828}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox

IE:64bit: - HKLM\..\SearchScopes\{7A8F2B8E-4512-4071-9A77-41A8984D1BE7}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT/4

IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)

IE - HKLM\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

IE - HKLM\..\SearchScopes\{01307296-9682-4A67-A542-5A505A61CE8B}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

IE - HKLM\..\SearchScopes\{628A5889-C2A4-4DAD-A5B6-F36FA2B11828}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox

IE - HKLM\..\SearchScopes\{7A8F2B8E-4512-4071-9A77-41A8984D1BE7}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050

IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)

IE - HKCU\..\SearchScopes,DefaultScope = {628A5889-C2A4-4DAD-A5B6-F36FA2B11828}

IE - HKCU\..\SearchScopes\{01307296-9682-4A67-A542-5A505A61CE8B}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF

IE - HKCU\..\SearchScopes\{1CDC032F-F3B4-4EE6-A05A-B072EBC6B23A}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=7fe4bf71-3430-4f61-8d64-ea532d39851f&apn_sauid=35CA9664-4E5B-4317-A0AA-A768D33E198A&

IE - HKCU\..\SearchScopes\{628A5889-C2A4-4DAD-A5B6-F36FA2B11828}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox

IE - HKCU\..\SearchScopes\{7A8F2B8E-4512-4071-9A77-41A8984D1BE7}: "URL" = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}

IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultengine: "Ask.com"

FF - prefs.js..browser.search.defaultenginename: "Ask.com"

FF - prefs.js..browser.search.defaultthis.engineName: "Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"

FF - prefs.js..browser.search.order.1: "Ask.com"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "hxxp://de.ask.com/?l=dis&o=1586&gct=hp"

FF - prefs.js..extensions.enabledAddons: wrc@avast.com:7.0.1466

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9

FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.3.2

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26

FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q="

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.08.31 17:37:30 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.10 16:47:56 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.31 17:45:30 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.10 16:47:56 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.08.31 17:45:30 | 000,000,000 | ---D | M]

 

[2011.01.29 16:08:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Weise\AppData\Roaming\mozilla\Extensions

[2012.07.25 13:02:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Weise\AppData\Roaming\mozilla\Firefox\Profiles\fx4gye73.default\extensions

[2011.02.09 18:38:59 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Weise\AppData\Roaming\mozilla\Firefox\Profiles\fx4gye73.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2011.06.21 16:16:29 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Weise\AppData\Roaming\mozilla\Firefox\Profiles\fx4gye73.default\extensions\engine@conduit.com

[2012.07.25 13:02:32 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\Weise\AppData\Roaming\mozilla\firefox\profiles\fx4gye73.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2011.12.16 22:14:30 | 000,002,404 | ---- | M] () -- C:\Users\Weise\AppData\Roaming\mozilla\firefox\profiles\fx4gye73.default\searchplugins\askcom.xml

[2011.02.10 20:05:26 | 000,000,873 | ---- | M] () -- C:\Users\Weise\AppData\Roaming\mozilla\firefox\profiles\fx4gye73.default\searchplugins\conduit.xml

[2012.03.06 22:01:03 | 000,001,160 | ---- | M] () -- C:\Users\Weise\AppData\Roaming\mozilla\firefox\profiles\fx4gye73.default\searchplugins\scroogle-de.xml

[2012.01.25 16:33:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2011.11.13 18:04:12 | 000,000,000 | ---D | M] ("Babylon Spelling and Proofreading") -- C:\Program Files (x86)\mozilla firefox\extensions\adapter@babylontc.com

[2011.11.13 18:04:09 | 000,000,000 | ---D | M] (Babylon OCR) -- C:\Program Files (x86)\mozilla firefox\extensions\ocr@babylon.com

[2012.08.31 17:37:30 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF

[2012.09.10 16:47:55 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll

[2012.06.22 16:53:21 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.09.10 16:47:53 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012.06.22 16:53:21 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012.06.22 16:53:21 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.06.22 16:53:21 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.06.22 16:53:21 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 
 ========== Chrome  ==========

 

CHR - homepage: hxxp://www.google.com

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR - homepage: hxxp://www.google.com

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\pdf.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.89\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll

CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.1_0\BabylonChromePI.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll

CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll

CHR - Extension: YouTube = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Google-Suche = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: Babylon Translator = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\

CHR - Extension: avast! WebRep = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\

CHR - Extension: Google Mail = C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Babylon IE plugin) - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [Babylon Client] C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe (Babylon Ltd.)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe (Adobe Systems Incorporated)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0

O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O8:64bit: - Extra context menu item: Translate this web page with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O8:64bit: - Extra context menu item: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O8 - Extra context menu item: Free YouTube Download - C:\Users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O8 - Extra context menu item: Translate this web page with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O8 - Extra context menu item: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5E114A3A-757E-4064-9FF7-00F1DCBF086E}: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E65BF292-2D71-433B-B809-C3478BFAAE85}: DhcpNameServer = 192.168.50.2

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.09.15 13:29:38 | 000,599,552 | ---- | C] (OldTimer Tools) -- C:\Users\Weise\Desktop\OTL.exe

[2012.09.01 18:48:43 | 000,000,000 | ---D | C] -- C:\Users\Weise\AppData\Roaming\Malwarebytes

[2012.09.01 18:48:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012.09.01 18:48:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012.09.01 18:48:34 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2012.09.01 18:48:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.09.15 13:29:38 | 000,599,552 | ---- | M] (OldTimer Tools) -- C:\Users\Weise\Desktop\OTL.exe

[2012.09.15 13:28:42 | 000,000,000 | ---- | M] () -- C:\Users\Weise\defogger_reenable

[2012.09.15 13:28:02 | 000,050,477 | ---- | M] () -- C:\Users\Weise\Desktop\Defogger.exe

[2012.09.15 13:21:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2012.09.15 13:06:01 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012.09.15 12:44:45 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.09.15 12:44:45 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.09.15 12:36:49 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012.09.15 12:35:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.09.15 12:35:42 | 3062,255,616 | -HS- | M] () -- C:\hiberfil.sys

[2012.09.14 09:10:21 | 001,500,294 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.09.14 09:10:21 | 000,654,852 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.14 09:10:21 | 000,616,694 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.09.14 09:10:21 | 000,130,434 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.14 09:10:21 | 000,106,816 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.09.05 17:03:29 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2012.09.01 18:48:38 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.31 17:37:32 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt

[2012.08.22 10:22:29 | 000,303,912 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.08.21 11:13:13 | 000,969,200 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys

[2012.08.21 11:13:13 | 000,359,464 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys

[2012.08.21 11:13:13 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys

[2012.08.21 11:13:12 | 000,071,600 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys

[2012.08.21 11:13:12 | 000,054,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys

[2012.08.21 11:13:11 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys

[2012.08.21 11:12:33 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

[2012.08.21 11:12:23 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe

[2012.08.21 11:12:02 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe

[2012.08.20 22:36:07 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk

 
 ========== Files Created - No Company Name ==========

 

[2012.09.15 13:28:42 | 000,000,000 | ---- | C] () -- C:\Users\Weise\defogger_reenable

[2012.09.15 13:28:00 | 000,050,477 | ---- | C] () -- C:\Users\Weise\Desktop\Defogger.exe

[2012.09.01 18:48:38 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.06.25 13:46:38 | 000,001,467 | ---- | C] () -- C:\Users\Weise\.recently-used.xbel

[2011.11.13 18:09:01 | 000,032,256 | ---- | C] () -- C:\Windows\SysWow64\AVSredirect.dll

[2011.11.13 18:04:36 | 000,107,520 | RHS- | C] () -- C:\Windows\SysWow64\TAKDSDecoder.dll

[2011.09.17 10:27:04 | 000,000,355 | ---- | C] () -- C:\Users\Weise\Computer - Verknüpfung.lnk

[2011.01.22 17:08:03 | 001,527,912 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2010.09.19 09:48:11 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2010.09.19 09:46:30 | 000,002,189 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat

[2010.09.19 09:37:21 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini

[2010.09.19 09:37:21 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini

[2010.09.19 09:34:48 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat

 
 ========== LOP Check ==========

 

[2012.04.29 10:58:30 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\Babylon

[2011.11.13 17:32:05 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\Canneverbe Limited

[2011.08.21 09:50:22 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\DVDVideoSoft

[2011.07.19 15:45:29 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers

[2012.06.25 13:46:38 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\gtk-2.0

[2012.02.16 01:12:30 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\IrfanView

[2012.06.14 14:51:09 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\OpenOffice.org

[2011.04.14 19:03:42 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\PlayFirst

[2012.08.21 08:19:16 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\SoftGrid Client

[2011.01.22 17:08:40 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\TP

[2011.12.17 01:50:49 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\TrueCrypt

[2011.02.17 21:27:45 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\WildTangent

[2011.07.14 15:14:51 | 000,000,000 | ---D | M] -- C:\Users\Weise\AppData\Roaming\_MDLogs

[2012.09.11 21:40:08 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

 
 ========== Purity Check ==========

 

 
 

< End of report >

Extras.txt:

Code:

OTL Extras logfile created on: 15.09.2012 13:30:49 - Run 1

OTL by OldTimer - Version 3.2.61.4     Folder = C:\Users\Weise\Desktop

64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7600.16385)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,80 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 63,69% Memory free

7,60 Gb Paging File | 5,91 Gb Available in Paging File | 77,70% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 281,95 Gb Total Space | 179,00 Gb Free Space | 63,48% Space Free | Partition Type: NTFS

Drive D: | 15,84 Gb Total Space | 2,28 Gb Free Space | 14,42% Space Free | Partition Type: NTFS

 

Computer Name: WEISE-HP | User Name: Weise | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)

https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)

https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{067327E3-7060-42AC-B589-4D8EC5474F74}" = lport=138 | protocol=17 | dir=in | app=system | 

"{06774066-83CB-4C90-9E12-066F41CAA7BF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{0FC8D6CF-DB8B-4AF1-B79D-10CB3C764C46}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{1AEA139D-F056-4B7B-BA3F-B797A73BF854}" = rport=445 | protocol=6 | dir=out | app=system | 

"{3A57DDB3-8FE1-452A-A890-A31E42347653}" = rport=137 | protocol=17 | dir=out | app=system | 

"{409335A6-4100-4C84-8A19-6B8732D616D2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{5D3923E2-7546-479F-82C8-8F5927BC51DE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{60490AF2-3FD4-4A20-B99E-33C50B11B00C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{6554076C-062A-4771-B039-417BAF85A32C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{6989001A-3344-4625-8035-03E2B1AF862F}" = lport=137 | protocol=17 | dir=in | app=system | 

"{739F0AE8-5B2A-478B-926C-3ACC71F26F0A}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{75D08B34-D14B-4004-937A-C24FD0FB5F4D}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{7D974F7B-4918-401B-86FF-56EFC34108BB}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{809DE0D1-3E6A-431D-8E19-49C87328ECAD}" = lport=139 | protocol=6 | dir=in | app=system | 

"{8C368AE3-B611-4AFD-950C-538A0039BE27}" = rport=138 | protocol=17 | dir=out | app=system | 

"{9A40E4DA-0DBE-43BB-9C68-501DB5C85C07}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{A9F77D9D-E0D6-4B3A-8FCF-02C3095B945A}" = rport=139 | protocol=6 | dir=out | app=system | 

"{AC071936-30DF-4489-8447-DC5BE968D194}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{E4E54AB9-8EB6-4618-AB9B-E57A3EB7A3D1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{E5732D87-AD85-4087-836E-8BC14DE23FE5}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{E67888FC-8433-4031-A696-FCD73AFBBAF1}" = lport=445 | protocol=6 | dir=in | app=system | 

"{EAC9DCFE-8020-47B7-BE6C-2300A04C6907}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 

"{FAC7B787-6ED4-4EC4-9FF3-0903A5AC7677}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{FB6C6165-AEC1-4F3B-A577-2334921C9033}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{FE52714E-EC0B-4AD4-B43E-C37F5B832CCC}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0F074651-46AE-4BED-BE40-8DE51C1FFB6B}" = protocol=6 | dir=in | app=c:\program files (x86)\easybits for kids\programs\my first browser\myfirstbrowser.exe | 

"{123A2A3F-3186-4930-BCE0-BF513D548B05}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{1369409E-5BF5-47EE-BEE8-29B987AF2395}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 

"{17038D82-A4E3-4DA4-9907-E437D6658B87}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe | 

"{1A3632C1-1AC5-4E3C-A754-3476162052E6}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe | 

"{1EE026BE-0BDE-47F5-8DDF-4DDF097554D1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{21F346B9-7DA0-4B93-917A-6C2D488EE5E3}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{2D1BB69B-7141-4A4C-B540-F241448BE815}" = protocol=17 | dir=in | app=c:\program files (x86)\easybits for kids\programs\my first browser\myfirstbrowser.exe | 

"{45EB6F37-1DB7-47F0-9AC3-EED0214AB618}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe | 

"{5EB5D83D-D26A-45F7-8C2D-734DE562E2B3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{73FEC0BD-3AA4-4A5D-A839-2D1ACDF94FD9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{7C310E2B-F674-446E-B05D-FA4197D2A7F4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{80AE223C-125E-4658-B2F2-F7D91D9D19F2}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe | 

"{80C82D17-D99C-4409-8FE0-26A992D0C492}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{958D7A6F-5AF5-4054-A9C5-E82A5CCB6F78}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{B28D610F-CF7E-461B-A203-51BEF05B0970}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{B4702FC2-0069-44A3-8260-F148D0A766CA}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{BB304602-4064-411F-B52F-F5351CC79A4D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{CC62FDC1-4C08-4E3A-A8F9-505BFABAFE74}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{CF4FBEFA-1DD7-4486-80F0-08F83F2AF27A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{D1D03568-D073-487E-99E1-521A9C877481}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{DE33A813-FCFE-4D97-B1F7-EEB7E2E6E469}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{E1EADF12-D261-4AEE-9793-1FDE71DCDED9}" = protocol=6 | dir=out | app=system | 

"{E7009007-6DF5-41AA-9012-B2742C649B84}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{EC027E01-635B-4EA3-B881-90F3771BAECA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{FBD9B94C-4711-4D69-8CE4-0A2EDD9E2AE7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{1795BAA8-65EC-66D0-9DA4-D4B1FBE7700E}" = ATI Catalyst Install Manager

"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java(TM) 6 Update 20 (64-bit)

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570

"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los 2010

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant

"{B601929F-3A47-4F37-8D1E-EAD1481BE5EA}" = ccc-utility64

"{E342EC6B-5F25-47FE-B92C-DE616149B430}" = HP Wireless Assistant

"{F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9}" = RtVOsd

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter

"CCleaner" = CCleaner

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"SynTPDeinstKey" = Synaptics Pointing Device Driver

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam

"{02FC8489-58FB-2628-768A-2CE172A37D7D}" = Catalyst Control Center Graphics Previews Common

"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements

"{08F1513E-2113-06C5-583A-FB1DE0E64AE6}" = CCC Help Chinese Standard

"{0AB910A1-042A-D781-3779-2A4DC383BF0F}" = CCC Help Czech

"{0D619D56-854C-F5D1-A134-4EB72974E09E}" = CCC Help Thai

"{144AAC2E-410C-6F23-5EC4-CB96049DD1D4}" = CCC Help Finnish

"{1AF5A6D6-266D-9A24-D13A-5A50B2182645}" = CCC Help Norwegian

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library

"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = Media Player Classic - Home Cinema v1.5.0.2827

"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 26

"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com

"{2A54B824-C32C-A931-17CB-A74B54E28AAE}" = CCC Help Spanish

"{2BED1172-6F40-1090-C681-26FEEF383E14}" = ccc-core-static

"{2F1E1F4D-B5CC-CA5D-2035-3A464BB053C3}" = CCC Help English

"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform

"{3234355B-963B-99FE-EECA-8A034781AF15}" = CCC Help Polish

"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7

"{3C302D80-4540-BA36-7167-8B59EC0BB9F4}" = CCC Help Korean

"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology

"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor

"{41136F4A-3C71-7F9F-7ECA-4E2C2D6C216F}" = CCC Help Dutch

"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager

"{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}" = LightScribe System Software

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4B156358-CE9C-4E9F-8CAD-79AE86A68C60}" = HP Power Manager

"{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}" = OpenOffice.org 3.4

"{4D66BBCA-8E0A-5FF3-4206-3BEA432FB1E9}" = CCC Help Turkish

"{543F949F-2B95-448F-9F2E-56F0C5FF8E2C}" = Catalyst Control Center - Branding

"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync

"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411

"{62BD9D85-46D9-400E-95F1-A09B667CB57F}" = HP Software Framework

"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components

"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library

"{66E2396F-1392-BECA-37D7-6C4AECED9668}" = CCC Help Russian

"{69ABD67D-5C2E-4724-B519-695DEF3EC23B}" = HP Documentation

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{72D90DB3-A16A-4545-B555-868471101833}" = HP Setup

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar

"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP

"{7E918D75-2600-0674-ADC2-4722D7F37018}" = CCC Help Italian

"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie

"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update

"{90140011-0066-0407-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Deutsch

"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010

"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9C632E6D-C984-75B8-DE46-8E495E179314}" = CCC Help Portuguese

"{9ECF7817-DB11-4FBA-9DF1-296A578D513A}" = Adobe Shockwave Player 11.5

"{A1A5DA17-C6A6-897E-2EBB-8BACE074FA10}" = CCC Help Swedish

"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR

"{A5EFB5BD-5B8C-813B-711E-4C068721281F}" = CCC Help Danish

"{A7496F46-78AE-4DB2-BCF5-95F210FA6F96}" = Windows Live Movie Maker

"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch

"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger

"{B0B3A2CE-C337-E33B-F24E-A8BDCA644D03}" = Catalyst Control Center Localization All

"{B635B0A0-8C8B-4492-E54A-85CA5DC5CAC2}" = CCC Help Japanese

"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49

"{BAB3C6F6-8C54-BFE0-A570-1E471ACE00B5}" = Catalyst Control Center Graphics Previews Vista

"{BB9344E4-C629-7E36-6248-EAF3F7AFCB95}" = CCC Help Chinese Traditional

"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo

"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail

"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials

"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call

"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!

"{D45DB0E4-E813-1584-9670-ADF85214596E}" = CCC Help French

"{DB15EA7D-B263-1B9B-0C3E-25BE7D15C551}" = PX Profile Update

"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer

"{E342D296-DB9D-4FC7-ACB0-39926C0BFA16}" = HP Quick Launch

"{EE07C46F-278A-412C-4687-54963CBC5862}" = CCC Help Hungarian

"{EFD35B3A-0296-864F-C78F-910CD41B1C32}" = CCC Help Greek

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F8504F00-2C61-0FA1-8E17-AADA786A164F}" = CCC Help German

"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center

"{FC17E0A7-EAA9-4902-92F8-C83B9FD02246}" = HP Support Assistant

"{FE363238-928A-113D-0318-4F7CEBB88715}" = Catalyst Control Center InstallProxy

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"avast" = avast! Free Antivirus

"Babylon" = Babylon

"conduitEngine" = Conduit Engine

"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar

"EasyBits Magic Desktop" = Magic Desktop

"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7

"Free YouTube Download 3_is1" = Free YouTube Download 3 version 3.0.7.718

"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.815

"Google Chrome" = Google Chrome

"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam

"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite

"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9

"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!

"IrfanView" = IrfanView (remove only)

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300

"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"My HP Game Console" = HP Game Console

"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010

"TrueCrypt" = TrueCrypt

"Uninstall_is1" = Uninstall 1.0.0.1

"VLC media player" = VLC media player 1.1.11

"WildTangent hp Master Uninstall" = HP Games

"WinGimp-2.0_is1" = GIMP 2.6.11

"WinLiveSuite_Wave3" = Windows Live Essentials

"WT087361" = FATE

"WT087380" = John Deere Drive Green

"WT087394" = Penguins!

"WT087396" = Polar Bowler

"WT087420" = Agatha Christie - Death on the Nile

"WT087428" = Bejeweled 2 Deluxe

"WT087453" = Chuzzle Deluxe

"WT087480" = Insaniquarium Deluxe

"WT087485" = Jewel Quest II

"WT087490" = Jewel Quest Solitaire

"WT087501" = Plants vs. Zombies

"WT087510" = Slingo Deluxe

"WT087513" = Virtual Villagers - The Secret City

"WT087519" = Wedding Dash

"WT087533" = Zuma Deluxe

"WT087536" = Diner Dash 2 Restaurant Rescue

"YTdetect" = Yahoo! Detect

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 03.03.2012 15:34:31 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842815

Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files

 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder

 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe

 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"

 des "version"-Attributs im assemblyIdentity-Element ist ungültig.

 

Error - 03.03.2012 15:41:12 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files

 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 04.03.2012 07:06:20 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files

 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 04.03.2012 15:28:12 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files

 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 04.03.2012 15:37:55 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files

 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 05.03.2012 16:46:48 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files

 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 06.03.2012 15:50:14 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842815

Description = Fehler beim Generieren des Aktivierungskontextes für "c:\Program Files

 (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder

 Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe

 AIR.dll" in Zeile 3.  Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"

 des "version"-Attributs im assemblyIdentity-Element ist ungültig.

 

Error - 06.03.2012 15:56:32 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files

 (x86)\windows live\photo gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "c:\program files (x86)\windows live\photo gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 06.03.2012 17:07:56 | Computer Name = Weise-HP | Source = SideBySide | ID = 16842787

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files

 (x86)\Windows Live\Photo Gallery\MovieMaker.Exe". Fehler in Manifest- oder Richtliniendatei

 "C:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL" in Zeile  8.  Die 

im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente

 überein.  Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition:

 WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".  Verwenden Sie

 das Programm "sxstrace.exe" für eine detaillierte Diagnose.

 

Error - 07.03.2012 03:13:29 | Computer Name = Weise-HP | Source = Application Virtualization Client | ID = 6032

Description = {tid=1670:usr=Weise} Eine temporäre Einstellungsdatei wurde gefunden.

 Diese Datei (C:\Users\Weise\AppData\Local\Q$_140066.DEU_SoftGridUserSettings_settings.cp.temp)

 ist möglicherweise beschädigt und wird gelöscht.

 

[ Hewlett-Packard Events ]

Error - 23.07.2012 13:36:04 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201207231936.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

Error - 23.07.2012 17:12:44 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\071223111241.xml

 File not created by asset agent

 

Error - 03.08.2012 14:52:56 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201208032052.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

Error - 06.08.2012 15:17:01 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201208062117.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

Error - 13.08.2012 12:53:58 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\081213065349.xml

 File not created by asset agent

 

Error - 13.08.2012 12:54:43 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201208131854.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

Error - 21.08.2012 06:05:51 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\081221120541.xml

 File not created by asset agent

 

Error - 21.08.2012 06:07:01 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201208211207.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

Error - 03.09.2012 11:39:56 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.

Configurator
 

   bei Configurator.ConfiguratorClass.loadXML()     bei HPSFConfigReader.ConfigHelper..ctor()
 

   bei HPAssistant.csSettings.loadApplicationResources(Boolean isOnAppLoad) 

 

Error - 03.09.2012 11:40:30 | Computer Name = Weise-HP | Source = Hewlett-Packard | ID = 0

Description = de-DE Ein Teil des Pfades "C:\ProgramData\Hewlett-Packard\HP Support

 Framework\Logs\Temp\HPSA\HPSASession_201209031740.xml" konnte nicht gefunden werden.

mscorlib
 

   bei System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)     bei

 System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 

rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options,

 SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)     bei System.IO.FileStream..ctor(String

 path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions

 options)     bei System.IO.StreamWriter.CreateFile(String path, Boolean append)    

 bei System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding,

 Int32 bufferSize)     bei System.IO.StreamWriter..ctor(String path, Boolean append,

 Encoding encoding)     bei System.IO.File.WriteAllText(String path, String contents,

 Encoding encoding)     bei HP.ActiveSupportLibrary.Issues.HPSFSession.closeSaveSession()
 

 

[ HP Wireless Assistant Events ]

Error - 22.01.2011 10:45:09 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 22.01.2011 10:46:17 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 22.01.2011 10:47:25 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 22.01.2011 10:48:32 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 22.01.2011 10:49:40 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 22.01.2011 10:50:48 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Runtime.InteropServices.COMException Der RPC-Server ist nicht

 verfügbar. (Ausnahme von HRESULT: 0x800706BA)    bei System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32

 errorCode, IntPtr errorInfo)     bei System.Management.ManagementScope.InitializeGuts(Object

 o)     bei System.Management.ManagementScope.Initialize()     bei System.Management.ManagementObject.Initialize(Boolean

 getObject)     bei System.Management.ManagementBaseObject.get_Properties()     bei 

System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)     bei

 HPPA_Service.CurrentConfiguration.<ReloadRadioList>b__c()

 

Error - 10.03.2011 10:52:45 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Exception GetDeviceInfo() failed : 597    bei HP_Common.CaslWrapper.GetDeviceInfo(List`1&

 radioList)     bei HPPA_Service.CurrentConfiguration.ReloadRadioList()

 

Error - 10.03.2011 10:52:52 | Computer Name = Weise-HP | Source = HP WA Service | ID = 0

Description = System.Exception GetDeviceInfo() failed : 597    bei HP_Common.CaslWrapper.GetDeviceInfo(List`1&

 radioList)     bei HPPA_Service.CurrentConfiguration.ReloadRadioList()

 

Error - 06.06.2012 06:25:32 | Computer Name = Weise-HP | Source = HP WA Application | ID = 0

Description = HardwareAccess.UnableToConnectException Application.ApplicationStartup;

 failed to create hardware layer Fehler in der Anwendung.    bei HardwareAccess.Hardware..ctor(Dispatcher

 dispatcher, ServicePort port, Int32 timeout)     bei HardwareAccess.Hardware.Create(Dispatcher

 dispatcher, ServicePort port, Int32 timeout)     bei HPWA_Main.App.ApplicationStartup(Object

 sender, StartupEventArgs args)

 

Error - 06.06.2012 06:25:35 | Computer Name = Weise-HP | Source = HP WA Application | ID = 0

Description = MainWindow.ShowImpl; not initialized, closing application...

 

[ System Events ]

Error - 03.09.2012 11:30:06 | Computer Name = Weise-HP | Source = Service Control Manager | ID = 7001

Description = Der Dienst "Client Virtualization Handler" ist vom Dienst "Application

 Virtualization Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet

 wurde:   %%1053

 

Error - 07.09.2012 12:34:19 | Computer Name = Weise-HP | Source = EventLog | ID = 6008

Description = Das System wurde zuvor am ?07.?09.?2012 um 18:32:14 unerwartet heruntergefahren.

 

Error - 10.09.2012 14:26:53 | Computer Name = Weise-HP | Source = EventLog | ID = 6008

Description = Das System wurde zuvor am ?10.?09.?2012 um 19:25:46 unerwartet heruntergefahren.

 

Error - 11.09.2012 15:40:03 | Computer Name = Weise-HP | Source = EventLog | ID = 6008

Description = Das System wurde zuvor am ?11.?09.?2012 um 21:09:43 unerwartet heruntergefahren.

 

Error - 13.09.2012 16:40:03 | Computer Name = Weise-HP | Source = DCOM | ID = 10010

Description = 

 

Error - 14.09.2012 03:08:14 | Computer Name = Weise-HP | Source = Disk | ID = 262155

Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

 

Error - 14.09.2012 05:21:39 | Computer Name = Weise-HP | Source = DCOM | ID = 10010

Description = 

 

Error - 14.09.2012 05:27:03 | Computer Name = Weise-HP | Source = EventLog | ID = 6008

Description = Das System wurde zuvor am ?14.?09.?2012 um 11:25:28 unerwartet heruntergefahren.

 

Error - 14.09.2012 10:12:26 | Computer Name = Weise-HP | Source = EventLog | ID = 6008

Description = Das System wurde zuvor am ?14.?09.?2012 um 11:27:57 unerwartet heruntergefahren.

 

Error - 14.09.2012 10:13:49 | Computer Name = Weise-HP | Source = DCOM | ID = 10010

Description = 

 

 

< End of report >

hi
hast du den link noch? den hätte ich gern als private nachicht.
warne außerdem deinen freund mal, der hat evtl. nen trojaner auf dem pc, er möge sich mal hier melden

Hallo,
Vielen Dank für die schnelle Antwort.
das ist der Bildlink:
hxxp://hotfile.com/167907941/1567cc5/IMG006333.jpg

hab ich nicht was von privater nachicht gesagt?
willst du das evtl. jemand nen verdächtigen link kopiert und öffnet?

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Sorry, ich bin neu hier und weis nicht wie ich private Nachrichten erstelle.

Ich habe gerade Combofix ausgeführt als ich fertig war kam aber kein Logfile auch nach einem Neustart des PC.
Soll ich einen erneuten Scan durchführen?

hi
ja und dann kopiert mans einfach rein? nachfragen wäre ja auch möglich gewesen.
fürsnächste mal:
klicke auf den benutzernamen wo du die nachicht hin senden willst, auf nachicht senden, auf private nachicht senden und los gehts :-)
schau mal ob auf c: ein e combofix bzw log.txt liegt, poste bitte deren inhalt

Hallo,
leider kann ich den Log auch in C: nicht finden.

dann führe es noch mal aus bitte

Jetzt hat es funktioniert.
Hier also der Log.

Code:

ComboFix 12-09-16.01 - Weise 20.09.2012  17:39:19.1.2 - x64

Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.3894.2413 [GMT 2:00]

ausgeführt von:: c:\users\Weise\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\Install.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-08-20 bis 2012-09-20  ))))))))))))))))))))))))))))))

.

.

2012-09-20 15:51 . 2012-09-20 15:51        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-09-20 15:35 . 2012-09-20 15:35        69000        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{CB60F8E4-21BF-4998-98A8-688A3AEAD219}\offreg.dll

2012-09-18 12:00 . 2012-08-27 23:49        9310152        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{CB60F8E4-21BF-4998-98A8-688A3AEAD219}\mpengine.dll

2012-09-12 12:43 . 2012-08-02 17:55        574464        ----a-w-        c:\windows\system32\d3d10level9.dll

2012-09-12 12:43 . 2012-08-02 17:05        490496        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2012-09-10 14:47 . 2012-09-10 14:47        73696        ----a-w-        c:\program files (x86)\Mozilla Firefox\breakpadinjector.dll

2012-09-01 16:48 . 2012-09-01 16:48        --------        d-----w-        c:\users\Weise\AppData\Roaming\Malwarebytes

2012-09-01 16:48 . 2012-09-01 16:48        --------        d-----w-        c:\programdata\Malwarebytes

2012-09-01 16:48 . 2012-09-01 16:48        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-09-01 16:48 . 2012-07-03 11:46        24904        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-08-22 08:04 . 2012-07-06 20:06        80384        ----a-w-        c:\windows\system32\drivers\BTHUSB.SYS

2012-08-22 08:04 . 2012-07-06 20:06        552448        ----a-w-        c:\windows\system32\drivers\bthport.sys

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-13 11:48 . 2011-08-21 13:04        64462936        ----a-w-        c:\windows\system32\MRT.exe

2012-08-21 09:13 . 2012-02-15 14:34        359464        ----a-w-        c:\windows\system32\drivers\aswSP.sys

2012-08-21 09:13 . 2012-02-15 14:34        969200        ----a-w-        c:\windows\system32\drivers\aswSnx.sys

2012-08-21 09:13 . 2012-02-15 14:34        59728        ----a-w-        c:\windows\system32\drivers\aswTdi.sys

2012-08-21 09:13 . 2012-04-07 22:20        54072        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys

2012-08-21 09:13 . 2012-02-15 14:34        71600        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys

2012-08-21 09:13 . 2012-02-15 14:34        25232        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys

2012-08-21 09:12 . 2012-02-15 14:33        41224        ----a-w-        c:\windows\avastSS.scr

2012-08-21 09:12 . 2012-02-15 14:33        227648        ----a-w-        c:\windows\SysWow64\aswBoot.exe

2012-08-21 09:12 . 2012-02-15 14:34        285328        ----a-w-        c:\windows\system32\aswBoot.exe

2012-08-15 10:21 . 2012-04-12 11:23        426184        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2012-08-15 10:21 . 2011-06-16 09:18        70344        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-18 17:31 . 2012-08-21 08:42        3146752        ----a-w-        c:\windows\system32\win32k.sys

2012-07-04 22:04 . 2012-08-21 08:44        73216        ----a-w-        c:\windows\system32\netapi32.dll

2012-07-04 22:01 . 2012-08-21 08:44        58880        ----a-w-        c:\windows\system32\browcli.dll

2012-07-04 22:01 . 2012-08-21 08:44        136704        ----a-w-        c:\windows\system32\browser.dll

2012-07-04 21:23 . 2012-08-21 08:44        41472        ----a-w-        c:\windows\SysWow64\browcli.dll

2012-06-27 07:03 . 2012-08-21 08:43        1197568        ----a-w-        c:\windows\system32\wininet.dll

2012-06-27 07:03 . 2012-08-21 08:43        1501184        ----a-w-        c:\windows\system32\urlmon.dll

2012-06-27 07:03 . 2012-08-21 08:42        134144        ----a-w-        c:\windows\system32\url.dll

2012-06-27 07:00 . 2012-08-21 08:43        1026560        ----a-w-        c:\windows\system32\mstime.dll

2012-06-27 06:59 . 2012-08-21 08:43        9372672        ----a-w-        c:\windows\system32\mshtml.dll

2012-06-27 06:59 . 2012-08-21 08:42        97792        ----a-w-        c:\windows\system32\mshtmled.dll

2012-06-27 06:59 . 2012-08-21 08:43        736256        ----a-w-        c:\windows\system32\msfeeds.dll

2012-06-27 06:59 . 2012-08-21 08:42        82944        ----a-w-        c:\windows\system32\msfeedsbs.dll

2012-06-27 06:59 . 2012-08-21 08:42        57856        ----a-w-        c:\windows\system32\licmgr10.dll

2012-06-27 06:58 . 2012-08-15 09:01        64512        ----a-w-        c:\windows\system32\jsproxy.dll

2012-06-27 06:58 . 2012-08-21 08:43        247808        ----a-w-        c:\windows\system32\ieui.dll

2012-06-27 06:58 . 2012-08-21 08:43        2458624        ----a-w-        c:\windows\system32\iertutil.dll

2012-06-27 06:58 . 2012-08-21 08:43        12405760        ----a-w-        c:\windows\system32\ieframe.dll

2012-06-27 06:58 . 2012-08-21 08:43        256000        ----a-w-        c:\windows\system32\iepeers.dll

2012-06-27 06:58 . 2012-08-21 08:43        445952        ----a-w-        c:\windows\system32\iedkcs32.dll

2012-06-27 06:55 . 2012-08-21 08:42        12288        ----a-w-        c:\windows\system32\msfeedssync.exe

2012-06-27 06:03 . 2012-08-21 08:43        981504        ----a-w-        c:\windows\SysWow64\wininet.dll

2012-06-27 06:01 . 2012-08-21 08:42        44544        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2012-06-27 05:41 . 2012-08-21 08:42        482816        ----a-w-        c:\windows\system32\html.iec

2012-06-27 04:58 . 2012-08-21 08:42        1638912        ----a-w-        c:\windows\system32\mshtml.tlb

2012-06-27 04:53 . 2012-08-21 08:42        386048        ----a-w-        c:\windows\SysWow64\html.iec

2012-06-27 04:19 . 2012-08-21 08:42        1638912        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2006-05-03 11:06        163328        --sha-r-        c:\windows\SysWOW64\flvDX.dll

2007-02-21 12:47        31232        --sha-r-        c:\windows\SysWOW64\msfDX.dll

2008-03-16 14:30        216064        --sha-r-        c:\windows\SysWOW64\nbDX.dll

2010-01-06 23:00        107520        --sha-r-        c:\windows\SysWOW64\TAKDSDecoder.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll" [2011-01-17 175912]

.

[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]

2011-01-17 14:54        175912        ----a-w-        c:\program files (x86)\ConduitEngine\prxConduitEngine.dll

.

[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

2011-01-17 14:54        175912        ----a-w-        c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files (x86)\DVDVideoSoftTB\prxtbDVDV.dll" [2011-01-17 175912]

"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]

.

[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]

.

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-06-21 98304]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

"Babylon Client"="c:\program files (x86)\Babylon\Babylon-Pro\Babylon.exe" [2011-08-25 3346544]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-07-03 462920]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"HideFastUserSwitching"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"EnableShellExecuteHooks"= 1 (0x1)

.

[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-08 136176]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-15 250056]

R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-08 136176]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-10 114144]

R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-23 225280]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-10 1255736]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-06-22 203264]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-08-21 71600]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x]

S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]

S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-07-02 27192]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-07-03 655944]

S2 RtVOsdService;RtVOsdService Installer;c:\program files\Realtek\RtVOsd\RtVOsdService.exe [2010-06-17 315392]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-06-22 6856704]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-06-22 264192]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [2010-06-22 10342240]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-07-03 24904]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-05-31 333928]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2010-05-19 08:36        451872        ----a-w-        c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

.

Inhalt des "geplante Tasks" Ordners

.

2012-09-20 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-12 10:21]

.

2012-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-08 19:45]

.

2012-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-08 19:45]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-08-21 09:11        133400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-03-13 6234144]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-06-22 161304]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-06-22 386584]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-06-22 414744]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Free YouTube Download - c:\users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

IE: Free YouTube to MP3 Converter - c:\users\Weise\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

IE: Translate this web page with Babylon - c:\program files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm

IE: Translate with Babylon - c:\program files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm

TCP: DhcpNameServer = 192.168.2.1

FF - ProfilePath - c:\users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://de.ask.com/?l=dis&o=1586&gct=hp

FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

WebBrowser-{872B5B88-9DB5-4310-BDD0-AC189557E5F5} - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe

AddRemove-{FC17E0A7-EAA9-4902-92F8-C83B9FD02246} - c:\program files (x86)\InstallShield Installation Information\{FC17E0A7-EAA9-4902-92F8-C83B9FD02246}\setup.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_271_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_271.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-09-20  17:58:14

ComboFix-quarantined-files.txt  2012-09-20 15:58

.

Vor Suchlauf: 8 Verzeichnis(se), 197.942.427.648 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 199.545.532.416 Bytes frei

.

- - End Of File - - CA5187DDABA939AA37F6809BDBE5F9C1

hi
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

Hallo
Hier der Log.

Code:

15:44:51.0083 1844  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24

15:44:51.0129 1844  ============================================================

15:44:51.0129 1844  Current date / time: 2012/09/21 15:44:51.0129

15:44:51.0129 1844  SystemInfo:

15:44:51.0129 1844  

15:44:51.0129 1844  OS Version: 6.1.7600 ServicePack: 0.0

15:44:51.0129 1844  Product type: Workstation

15:44:51.0129 1844  ComputerName: WEISE-HP

15:44:51.0129 1844  UserName: Weise

15:44:51.0129 1844  Windows directory: C:\Windows

15:44:51.0129 1844  System windows directory: C:\Windows

15:44:51.0129 1844  Running under WOW64

15:44:51.0129 1844  Processor architecture: Intel x64

15:44:51.0129 1844  Number of processors: 2

15:44:51.0129 1844  Page size: 0x1000

15:44:51.0129 1844  Boot type: Normal boot

15:44:51.0129 1844  ============================================================

15:44:51.0956 1844  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

15:44:51.0972 1844  ============================================================

15:44:51.0972 1844  \Device\Harddisk0\DR0:

15:44:51.0972 1844  MBR partitions:

15:44:51.0972 1844  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800

15:44:51.0972 1844  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x233E8000

15:44:51.0972 1844  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x2344C000, BlocksNum 0x1FAE800

15:44:51.0972 1844  \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x253FA800, BlocksNum 0x33AB0

15:44:51.0972 1844  ============================================================

15:44:52.0003 1844  C: <-> \Device\Harddisk0\DR0\Partition2

15:44:52.0034 1844  D: <-> \Device\Harddisk0\DR0\Partition3

15:44:52.0034 1844  ============================================================

15:44:52.0034 1844  Initialize success

15:44:52.0034 1844  ============================================================

15:45:54.0887 4416  ============================================================

15:45:54.0887 4416  Scan started

15:45:54.0887 4416  Mode: Manual; SigCheck; TDLFS; 

15:45:54.0887 4416  ============================================================

15:45:56.0057 4416  ================ Scan system memory ========================

15:45:56.0057 4416  System memory - ok

15:45:56.0057 4416  ================ Scan services =============================

15:45:56.0244 4416  [ 1B00662092F9F9568B995902F0CC40D5 ] 1394ohci        C:\Windows\system32\DRIVERS\1394ohci.sys

15:45:56.0400 4416  1394ohci - ok

15:45:56.0447 4416  [ 6F11E88748CDEFD2F76AA215F97DDFE5 ] ACPI            C:\Windows\system32\DRIVERS\ACPI.sys

15:45:56.0478 4416  ACPI - ok

15:45:56.0509 4416  [ 63B05A0420CE4BF0E4AF6DCC7CADA254 ] AcpiPmi         C:\Windows\system32\DRIVERS\acpipmi.sys

15:45:56.0587 4416  AcpiPmi - ok

15:45:56.0681 4416  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

15:45:56.0712 4416  AdobeARMservice - ok

15:45:56.0821 4416  [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

15:45:56.0852 4416  AdobeFlashPlayerUpdateSvc - ok

15:45:56.0899 4416  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

15:45:56.0946 4416  adp94xx - ok

15:45:56.0977 4416  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

15:45:57.0024 4416  adpahci - ok

15:45:57.0040 4416  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

15:45:57.0071 4416  adpu320 - ok

15:45:57.0102 4416  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

15:45:57.0242 4416  AeLookupSvc - ok

15:45:57.0305 4416  [ D1E343BC00136CE03C4D403194D06A80 ] AERTFilters     C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

15:45:57.0336 4416  AERTFilters - ok

15:45:57.0367 4416  [ DB9D6C6B2CD95A9CA414D045B627422E ] AFD             C:\Windows\system32\drivers\afd.sys

15:45:57.0445 4416  AFD - ok

15:45:57.0492 4416  [ 98022774D9930ECBB292E70DB7601DF6 ] AgereSoftModem  C:\Windows\system32\DRIVERS\agrsm64.sys

15:45:57.0586 4416  AgereSoftModem - ok

15:45:57.0617 4416  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\DRIVERS\agp440.sys

15:45:57.0648 4416  agp440 - ok

15:45:57.0679 4416  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

15:45:57.0742 4416  ALG - ok

15:45:57.0788 4416  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\DRIVERS\aliide.sys

15:45:57.0804 4416  aliide - ok

15:45:57.0835 4416  [ CC180E1E0700995340C838BC1A729577 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

15:45:57.0913 4416  AMD External Events Utility - ok

15:45:57.0929 4416  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\DRIVERS\amdide.sys

15:45:57.0944 4416  amdide - ok

15:45:57.0960 4416  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

15:45:58.0007 4416  AmdK8 - ok

15:45:58.0178 4416  [ 8155EA1864D1FA8B168C46C41ED97A76 ] amdkmdag        C:\Windows\system32\DRIVERS\atikmdag.sys

15:45:58.0428 4416  amdkmdag - ok

15:45:58.0444 4416  [ 4841C7AF2BAC05AE23955D65B4336446 ] amdkmdap        C:\Windows\system32\DRIVERS\atikmpag.sys

15:45:58.0490 4416  amdkmdap - ok

15:45:58.0506 4416  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

15:45:58.0553 4416  AmdPPM - ok

15:45:58.0615 4416  [ EC7EBAB00A4D8448BAB68D1E49B4BEB9 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

15:45:58.0631 4416  amdsata - ok

15:45:58.0662 4416  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

15:45:58.0693 4416  amdsbs - ok

15:45:58.0709 4416  [ DB27766102C7BF7E95140A2AA81D042E ] amdxata         C:\Windows\system32\drivers\amdxata.sys

15:45:58.0740 4416  amdxata - ok

15:45:58.0787 4416  [ 42FD751B27FA0E9C69BB39F39E409594 ] AppID           C:\Windows\system32\drivers\appid.sys

15:45:58.0880 4416  AppID - ok

15:45:58.0912 4416  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

15:45:59.0021 4416  AppIDSvc - ok

15:45:59.0052 4416  [ D065BE66822847B7F127D1F90158376E ] Appinfo         C:\Windows\System32\appinfo.dll

15:45:59.0114 4416  Appinfo - ok

15:45:59.0177 4416  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

15:45:59.0208 4416  arc - ok

15:45:59.0224 4416  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

15:45:59.0255 4416  arcsas - ok

15:45:59.0302 4416  [ 55142B4F7A7E4C9C151C6000A6BF7809 ] aswFsBlk        C:\Windows\system32\drivers\aswFsBlk.sys

15:45:59.0333 4416  aswFsBlk - ok

15:45:59.0380 4416  [ AA9FDE3D630160B47DAB21BF8250111C ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys

15:45:59.0411 4416  aswMonFlt - ok

15:45:59.0442 4416  [ 2A6675C24DF5159A9506CD13ECE5ABE9 ] aswRdr          C:\Windows\System32\Drivers\aswrdr2.sys

15:45:59.0473 4416  aswRdr - ok

15:45:59.0520 4416  [ 4E38475BDB51A867CCBA7D5DF7FDFC0C ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys

15:45:59.0582 4416  aswSnx - ok

15:45:59.0614 4416  [ 9A49D80D65451AF22913AEF772CC3DA9 ] aswSP           C:\Windows\system32\drivers\aswSP.sys

15:45:59.0660 4416  aswSP - ok

15:45:59.0676 4416  [ C3EC420451AC5300A22190AE38418FBA ] aswTdi          C:\Windows\system32\drivers\aswTdi.sys

15:45:59.0692 4416  aswTdi - ok

15:45:59.0723 4416  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

15:45:59.0832 4416  AsyncMac - ok

15:45:59.0863 4416  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\DRIVERS\atapi.sys

15:45:59.0894 4416  atapi - ok

15:45:59.0957 4416  [ E857EEE6B92AAA473EBB3465ADD8F7E7 ] athr            C:\Windows\system32\DRIVERS\athrx.sys

15:46:00.0050 4416  athr - ok

15:46:00.0097 4416  [ 2D648572BA9A610952FCAFBA1E119C2D ] AtiHdmiService  C:\Windows\system32\drivers\AtiHdmi.sys

15:46:00.0113 4416  AtiHdmiService - ok

15:46:00.0160 4416  [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

15:46:00.0284 4416  AudioEndpointBuilder - ok

15:46:00.0300 4416  [ 07721A77180EDD4D39CCB865BF63C7FD ] AudioSrv        C:\Windows\System32\Audiosrv.dll

15:46:00.0409 4416  AudioSrv - ok

15:46:00.0472 4416  [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe

15:46:00.0487 4416  avast! Antivirus - ok

15:46:00.0518 4416  [ B20B5FA5CA050E9926E4D1DB81501B32 ] AxInstSV        C:\Windows\System32\AxInstSV.dll

15:46:00.0565 4416  AxInstSV - ok

15:46:00.0612 4416  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

15:46:00.0674 4416  b06bdrv - ok

15:46:00.0721 4416  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

15:46:00.0768 4416  b57nd60a - ok

15:46:00.0846 4416  [ 825F81A6F7DD073509DB101F0BA6DC59 ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE

15:46:00.0877 4416  BBSvc - ok

15:46:00.0971 4416  [ 810BE94A9E42309B3F74217AC28BC6AC ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys

15:46:01.0127 4416  BCM43XX - ok

15:46:01.0205 4416  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

15:46:01.0267 4416  BDESVC - ok

15:46:01.0298 4416  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

15:46:01.0392 4416  Beep - ok

15:46:01.0439 4416  [ 4992C609A6315671463E30F6512BC022 ] BFE             C:\Windows\System32\bfe.dll

15:46:01.0564 4416  BFE - ok

15:46:01.0626 4416  [ 7F0C323FE3DA28AA4AA1BDA3F575707F ] BITS            C:\Windows\system32\qmgr.dll

15:46:01.0766 4416  BITS - ok

15:46:01.0798 4416  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

15:46:01.0844 4416  blbdrive - ok

15:46:01.0891 4416  [ 19D20159708E152267E53B66677A4995 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

15:46:01.0954 4416  bowser - ok

15:46:01.0969 4416  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

15:46:02.0000 4416  BrFiltLo - ok

15:46:02.0016 4416  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

15:46:02.0063 4416  BrFiltUp - ok

15:46:02.0094 4416  [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys

15:46:02.0188 4416  BridgeMP - ok

15:46:02.0219 4416  [ 6B054C67AAA87843504E8E3C09102009 ] Browser         C:\Windows\System32\browser.dll

15:46:02.0281 4416  Browser - ok

15:46:02.0312 4416  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

15:46:02.0359 4416  Brserid - ok

15:46:02.0390 4416  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

15:46:02.0437 4416  BrSerWdm - ok

15:46:02.0484 4416  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

15:46:02.0546 4416  BrUsbMdm - ok

15:46:02.0578 4416  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

15:46:02.0609 4416  BrUsbSer - ok

15:46:02.0671 4416  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys

15:46:02.0734 4416  BthEnum - ok

15:46:02.0765 4416  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

15:46:02.0812 4416  BTHMODEM - ok

15:46:02.0858 4416  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

15:46:02.0890 4416  BthPan - ok

15:46:02.0921 4416  [ E10D1912634974EA273A1588C75CCB76 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys

15:46:02.0983 4416  BTHPORT - ok

15:46:03.0014 4416  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

15:46:03.0124 4416  bthserv - ok

15:46:03.0170 4416  [ 19B784B6ECBB3ADBB2242700FEE90BEC ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys

15:46:03.0202 4416  BTHUSB - ok

15:46:03.0233 4416  catchme - ok

15:46:03.0264 4416  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

15:46:03.0373 4416  cdfs - ok

15:46:03.0420 4416  [ 83D2D75E1EFB81B3450C18131443F7DB ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

15:46:03.0467 4416  cdrom - ok

15:46:03.0514 4416  [ 312E2F82AF11E79906898AC3E3D58A1F ] CertPropSvc     C:\Windows\System32\certprop.dll

15:46:03.0607 4416  CertPropSvc - ok

15:46:03.0654 4416  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

15:46:03.0685 4416  circlass - ok

15:46:03.0701 4416  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

15:46:03.0748 4416  CLFS - ok

15:46:03.0794 4416  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

15:46:03.0826 4416  clr_optimization_v2.0.50727_32 - ok

15:46:03.0872 4416  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

15:46:03.0904 4416  clr_optimization_v2.0.50727_64 - ok

15:46:03.0950 4416  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

15:46:04.0013 4416  clr_optimization_v4.0.30319_32 - ok

15:46:04.0060 4416  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

15:46:04.0075 4416  clr_optimization_v4.0.30319_64 - ok

15:46:04.0106 4416  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

15:46:04.0153 4416  CmBatt - ok

15:46:04.0169 4416  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\DRIVERS\cmdide.sys

15:46:04.0200 4416  cmdide - ok

15:46:04.0247 4416  [ CA7720B73446FDDEC5C69519C1174C98 ] CNG             C:\Windows\system32\Drivers\cng.sys

15:46:04.0309 4416  CNG - ok

15:46:04.0356 4416  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

15:46:04.0372 4416  Compbatt - ok

15:46:04.0403 4416  [ F26B3A86F6FA87CA360B879581AB4123 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys

15:46:04.0450 4416  CompositeBus - ok

15:46:04.0481 4416  COMSysApp - ok

15:46:04.0496 4416  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

15:46:04.0528 4416  crcdisk - ok

15:46:04.0574 4416  [ F02786B66375292E58C8777082D4396D ] CryptSvc        C:\Windows\system32\cryptsvc.dll

15:46:04.0637 4416  CryptSvc - ok

15:46:04.0715 4416  [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

15:46:04.0777 4416  cvhsvc - ok

15:46:04.0808 4416  [ 7266972E86890E2B30C0C322E906B027 ] DcomLaunch      C:\Windows\system32\rpcss.dll

15:46:04.0949 4416  DcomLaunch - ok

15:46:04.0996 4416  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

15:46:05.0105 4416  defragsvc - ok

15:46:05.0167 4416  [ 9C253CE7311CA60FC11C774692A13208 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

15:46:05.0230 4416  DfsC - ok

15:46:05.0261 4416  [ CE3B9562D997F69B330D181A8875960F ] Dhcp            C:\Windows\system32\dhcpcore.dll

15:46:05.0339 4416  Dhcp - ok

15:46:05.0370 4416  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

15:46:05.0479 4416  discache - ok

15:46:05.0526 4416  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

15:46:05.0557 4416  Disk - ok

15:46:05.0588 4416  [ 85CF424C74A1D5EC33533E1DBFF9920A ] Dnscache        C:\Windows\System32\dnsrslvr.dll

15:46:05.0651 4416  Dnscache - ok

15:46:05.0682 4416  [ 14452ACDB09B70964C8C21BF80A13ACB ] dot3svc         C:\Windows\System32\dot3svc.dll

15:46:05.0807 4416  dot3svc - ok

15:46:05.0822 4416  [ 8C2BA6BEA949EE6E68385F5692BAFB94 ] DPS             C:\Windows\system32\dps.dll

15:46:05.0932 4416  DPS - ok

15:46:05.0978 4416  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

15:46:06.0010 4416  drmkaud - ok

15:46:06.0056 4416  [ EBCE0B0924835F635F620D19F0529DCE ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

15:46:06.0119 4416  DXGKrnl - ok

15:46:06.0134 4416  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

15:46:06.0244 4416  EapHost - ok

15:46:06.0337 4416  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

15:46:06.0478 4416  ebdrv - ok

15:46:06.0524 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] EFS             C:\Windows\System32\lsass.exe

15:46:06.0571 4416  EFS - ok

15:46:06.0649 4416  [ 47C071994C3F649F23D9CD075AC9304A ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

15:46:06.0727 4416  ehRecvr - ok

15:46:06.0743 4416  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

15:46:06.0805 4416  ehSched - ok

15:46:06.0852 4416  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

15:46:06.0899 4416  elxstor - ok

15:46:06.0930 4416  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\DRIVERS\errdev.sys

15:46:06.0961 4416  ErrDev - ok

15:46:07.0024 4416  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

15:46:07.0133 4416  EventSystem - ok

15:46:07.0195 4416  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

15:46:07.0304 4416  exfat - ok

15:46:07.0320 4416  ezSharedSvc - ok

15:46:07.0351 4416  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

15:46:07.0460 4416  fastfat - ok

15:46:07.0507 4416  [ D607B2F1BEE3992AA6C2C92C0A2F0855 ] Fax             C:\Windows\system32\fxssvc.exe

15:46:07.0570 4416  Fax - ok

15:46:07.0601 4416  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

15:46:07.0648 4416  fdc - ok

15:46:07.0679 4416  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

15:46:07.0772 4416  fdPHost - ok

15:46:07.0804 4416  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

15:46:07.0882 4416  FDResPub - ok

15:46:07.0928 4416  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

15:46:07.0960 4416  FileInfo - ok

15:46:07.0960 4416  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

15:46:08.0053 4416  Filetrace - ok

15:46:08.0069 4416  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

15:46:08.0084 4416  flpydisk - ok

15:46:08.0116 4416  [ F7866AF72ABBAF84B1FA5AA195378C59 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

15:46:08.0147 4416  FltMgr - ok

15:46:08.0225 4416  [ CB5E4B9C319E3C6BB363EB7E58A4A051 ] FontCache       C:\Windows\system32\FntCache.dll

15:46:08.0318 4416  FontCache - ok

15:46:08.0365 4416  [ 8D89E3131C27FDD6932189CB785E1B7A ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

15:46:08.0396 4416  FontCache3.0.0.0 - ok

15:46:08.0412 4416  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

15:46:08.0443 4416  FsDepends - ok

15:46:08.0474 4416  [ D3E3F93D67821A2DB2B3D9FAC2DC2064 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

15:46:08.0506 4416  Fs_Rec - ok

15:46:08.0537 4416  [ AE87BA80D0EC3B57126ED2CDC15B24ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

15:46:08.0568 4416  fvevol - ok

15:46:08.0599 4416  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

15:46:08.0630 4416  gagp30kx - ok

15:46:08.0677 4416  [ CE16683CFD11FE70BDE435DDA5EA1FCA ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe

15:46:08.0708 4416  GameConsoleService - ok

15:46:08.0755 4416  [ FE5AB4525BC2EC68B9119A6E5D40128B ] gpsvc           C:\Windows\System32\gpsvc.dll

15:46:08.0833 4416  gpsvc - ok

15:46:08.0927 4416  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:46:08.0942 4416  gupdate - ok

15:46:08.0958 4416  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:46:08.0974 4416  gupdatem - ok

15:46:08.0989 4416  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

15:46:09.0052 4416  hcw85cir - ok

15:46:09.0083 4416  [ 6410F6F415B2A5A9037224C41DA8BF12 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

15:46:09.0130 4416  HdAudAddService - ok

15:46:09.0176 4416  [ 0A49913402747A0B67DE940FB42CBDBB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

15:46:09.0223 4416  HDAudBus - ok

15:46:09.0270 4416  [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64         C:\Windows\system32\DRIVERS\HECIx64.sys

15:46:09.0301 4416  HECIx64 - ok

15:46:09.0317 4416  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

15:46:09.0364 4416  HidBatt - ok

15:46:09.0395 4416  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

15:46:09.0457 4416  HidBth - ok

15:46:09.0473 4416  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

15:46:09.0504 4416  HidIr - ok

15:46:09.0535 4416  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\System32\hidserv.dll

15:46:09.0644 4416  hidserv - ok

15:46:09.0676 4416  [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

15:46:09.0722 4416  HidUsb - ok

15:46:09.0754 4416  [ EFA58EDE58DD74388FFD04CB32681518 ] hkmsvc          C:\Windows\system32\kmsvc.dll

15:46:09.0863 4416  hkmsvc - ok

15:46:09.0894 4416  [ 046B2673767CA626E2CFB7FDF735E9E8 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

15:46:09.0972 4416  HomeGroupListener - ok

15:46:10.0003 4416  [ 06A7422224D9865A5613710A089987DF ] HomeGroupProvider C:\Windows\system32\provsvc.dll

15:46:10.0050 4416  HomeGroupProvider - ok

15:46:10.0112 4416  [ 3F4ADD4196E2B860019539837BE305F9 ] HP Health Check Service C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

15:46:10.0144 4416  HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning

15:46:10.0144 4416  HP Health Check Service - detected UnsignedFile.Multi.Generic (1)

15:46:10.0206 4416  [ 3A09322A8AA8B0C79036686A0EBE7B4C ] HP Wireless Assistant Service C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe

15:46:10.0222 4416  HP Wireless Assistant Service - ok

15:46:10.0268 4416  [ EF3EA06057132138B4E5895A61601DBE ] hpqwmiex        C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

15:46:10.0300 4416  hpqwmiex - ok

15:46:10.0331 4416  [ 0886D440058F203EBA0E1825E4355914 ] HpSAMD          C:\Windows\system32\DRIVERS\HpSAMD.sys

15:46:10.0362 4416  HpSAMD - ok

15:46:10.0409 4416  [ 9DF9CF7840A3A99F2FFD614F0A13F2F9 ] HPWMISVC        C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

15:46:10.0424 4416  HPWMISVC - ok

15:46:10.0471 4416  [ CEE049CAC4EFA7F4E1E4AD014414A5D4 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

15:46:10.0580 4416  HTTP - ok

15:46:10.0596 4416  [ F17766A19145F111856378DF337A5D79 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

15:46:10.0627 4416  hwpolicy - ok

15:46:10.0690 4416  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

15:46:10.0721 4416  i8042prt - ok

15:46:10.0752 4416  [ 1384872112E8E7FD5786ECEB8BDDF4C9 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys

15:46:10.0783 4416  iaStor - ok

15:46:10.0830 4416  [ 6B24D1C3096DE796D15571079EA5E98C ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

15:46:10.0846 4416  IAStorDataMgrSvc - ok

15:46:10.0908 4416  [ B75E45C564E944A2657167D197AB29DA ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

15:46:10.0939 4416  iaStorV - ok

15:46:11.0017 4416  [ 2F2BE70D3E02B6FA877921AB9516D43C ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

15:46:11.0064 4416  idsvc - ok

15:46:11.0345 4416  [ FBACBED7A37B3223822470FF1D8EA00F ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys

15:46:11.0750 4416  igfx - ok

15:46:11.0797 4416  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

15:46:11.0828 4416  iirsp - ok

15:46:11.0860 4416  [ C5B4683680DF085B57BC53E5EF34861F ] IKEEXT          C:\Windows\System32\ikeext.dll

15:46:11.0984 4416  IKEEXT - ok

15:46:12.0094 4416  [ E76FDFFF07F8A2FA81FF250DDA0F6BBA ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

15:46:12.0203 4416  IntcAzAudAddService - ok

15:46:12.0312 4416  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\DRIVERS\intelide.sys

15:46:12.0328 4416  intelide - ok

15:46:12.0577 4416  [ FBACBED7A37B3223822470FF1D8EA00F ] intelkmd        C:\Windows\system32\DRIVERS\igdpmd64.sys

15:46:12.0983 4416  intelkmd - ok

15:46:13.0030 4416  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

15:46:13.0076 4416  intelppm - ok

15:46:13.0108 4416  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

15:46:13.0217 4416  IPBusEnum - ok

15:46:13.0248 4416  [ 722DD294DF62483CECAAE6E094B4D695 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:46:13.0342 4416  IpFilterDriver - ok

15:46:13.0373 4416  [ F8E058D17363EC580E4B7232778B6CB5 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

15:46:13.0498 4416  iphlpsvc - ok

15:46:13.0529 4416  [ E2B4A4494DB7CB9B89B55CA268C337C5 ] IPMIDRV         C:\Windows\system32\DRIVERS\IPMIDrv.sys

15:46:13.0560 4416  IPMIDRV - ok

15:46:13.0591 4416  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

15:46:13.0700 4416  IPNAT - ok

15:46:13.0732 4416  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

15:46:13.0763 4416  IRENUM - ok

15:46:13.0778 4416  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\DRIVERS\isapnp.sys

15:46:13.0810 4416  isapnp - ok

15:46:13.0825 4416  [ FA4D2557DE56D45B0A346F93564BE6E1 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

15:46:13.0856 4416  iScsiPrt - ok

15:46:13.0888 4416  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

15:46:13.0919 4416  kbdclass - ok

15:46:13.0950 4416  [ 6DEF98F8541E1B5DCEB2C822A11F7323 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

15:46:13.0997 4416  kbdhid - ok

15:46:14.0012 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] KeyIso          C:\Windows\system32\lsass.exe

15:46:14.0044 4416  KeyIso - ok

15:46:14.0090 4416  [ 4F4B5FDE429416877DE7143044582EB5 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

15:46:14.0106 4416  KSecDD - ok

15:46:14.0137 4416  [ 6F40465A44ECDC1731BEFAFEC5BDD03C ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

15:46:14.0168 4416  KSecPkg - ok

15:46:14.0200 4416  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

15:46:14.0309 4416  ksthunk - ok

15:46:14.0340 4416  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

15:46:14.0465 4416  KtmRm - ok

15:46:14.0496 4416  [ 81F1D04D4D0E433099365127375FD501 ] LanmanServer    C:\Windows\System32\srvsvc.dll

15:46:14.0558 4416  LanmanServer - ok

15:46:14.0605 4416  [ 27026EAC8818E8A6C00A1CAD2F11D29A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

15:46:14.0730 4416  LanmanWorkstation - ok

15:46:14.0792 4416  [ 7550D101BF49FDB1F92666A233EE36C4 ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

15:46:14.0808 4416  LightScribeService ( UnsignedFile.Multi.Generic ) - warning

15:46:14.0808 4416  LightScribeService - detected UnsignedFile.Multi.Generic (1)

15:46:14.0824 4416  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

15:46:14.0933 4416  lltdio - ok

15:46:14.0964 4416  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

15:46:15.0058 4416  lltdsvc - ok

15:46:15.0089 4416  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

15:46:15.0182 4416  lmhosts - ok

15:46:15.0245 4416  [ DBC1136A62BD4DECC3632DF650284C2E ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

15:46:15.0276 4416  LMS - ok

15:46:15.0307 4416  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

15:46:15.0338 4416  LSI_FC - ok

15:46:15.0354 4416  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

15:46:15.0385 4416  LSI_SAS - ok

15:46:15.0401 4416  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

15:46:15.0432 4416  LSI_SAS2 - ok

15:46:15.0463 4416  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

15:46:15.0494 4416  LSI_SCSI - ok

15:46:15.0526 4416  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

15:46:15.0635 4416  luafv - ok

15:46:15.0713 4416  [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

15:46:15.0744 4416  MBAMProtector - ok

15:46:15.0838 4416  [ 43683E970F008C93C9429EF428147A54 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

15:46:15.0869 4416  MBAMService - ok

15:46:15.0931 4416  [ F84C8F1000BC11E3B7B23CBD3BAFF111 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

15:46:15.0978 4416  Mcx2Svc - ok

15:46:16.0009 4416  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

15:46:16.0025 4416  megasas - ok

15:46:16.0056 4416  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

15:46:16.0087 4416  MegaSR - ok

15:46:16.0118 4416  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

15:46:16.0228 4416  MMCSS - ok

15:46:16.0259 4416  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

15:46:16.0352 4416  Modem - ok

15:46:16.0384 4416  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

15:46:16.0446 4416  monitor - ok

15:46:16.0462 4416  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

15:46:16.0493 4416  mouclass - ok

15:46:16.0508 4416  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

15:46:16.0555 4416  mouhid - ok

15:46:16.0586 4416  [ 791AF66C4D0E7C90A3646066386FB571 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

15:46:16.0618 4416  mountmgr - ok

15:46:16.0711 4416  [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

15:46:16.0727 4416  MozillaMaintenance - ok

15:46:16.0758 4416  [ 609D1D87649ECC19796F4D76D4C15CEA ] mpio            C:\Windows\system32\DRIVERS\mpio.sys

15:46:16.0789 4416  mpio - ok

15:46:16.0820 4416  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

15:46:16.0914 4416  mpsdrv - ok

15:46:16.0961 4416  [ AECAB449567D1846DAD63ECE49E893E3 ] MpsSvc          C:\Windows\system32\mpssvc.dll

15:46:17.0086 4416  MpsSvc - ok

15:46:17.0101 4416  [ 30524261BB51D96D6FCBAC20C810183C ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

15:46:17.0164 4416  MRxDAV - ok

15:46:17.0195 4416  [ 040D62A9D8AD28922632137ACDD984F2 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

15:46:17.0226 4416  mrxsmb - ok

15:46:17.0273 4416  [ F0067552F8F9B33D7C59403AB808A3CB ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:46:17.0320 4416  mrxsmb10 - ok

15:46:17.0335 4416  [ 3C142D31DE9F2F193218A53FE2632051 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:46:17.0382 4416  mrxsmb20 - ok

15:46:17.0413 4416  [ 5E939CF91EA4A841DBAFE4627E0292BB ] msahci          C:\Windows\system32\DRIVERS\msahci.sys

15:46:17.0429 4416  msahci - ok

15:46:17.0460 4416  [ 8D27B597229AED79430FB9DB3BCBFBD0 ] msdsm           C:\Windows\system32\DRIVERS\msdsm.sys

15:46:17.0491 4416  msdsm - ok

15:46:17.0507 4416  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

15:46:17.0554 4416  MSDTC - ok

15:46:17.0600 4416  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

15:46:17.0694 4416  Msfs - ok

15:46:17.0710 4416  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

15:46:17.0819 4416  mshidkmdf - ok

15:46:17.0850 4416  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\DRIVERS\msisadrv.sys

15:46:17.0881 4416  msisadrv - ok

15:46:17.0912 4416  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

15:46:18.0022 4416  MSiSCSI - ok

15:46:18.0037 4416  msiserver - ok

15:46:18.0053 4416  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

15:46:18.0162 4416  MSKSSRV - ok

15:46:18.0193 4416  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

15:46:18.0302 4416  MSPCLOCK - ok

15:46:18.0302 4416  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

15:46:18.0396 4416  MSPQM - ok

15:46:18.0443 4416  [ 89CB141AA8616D8C6A4610FA26C60964 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

15:46:18.0474 4416  MsRPC - ok

15:46:18.0490 4416  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

15:46:18.0521 4416  mssmbios - ok

15:46:18.0536 4416  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

15:46:18.0646 4416  MSTEE - ok

15:46:18.0661 4416  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

15:46:18.0708 4416  MTConfig - ok

15:46:18.0739 4416  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

15:46:18.0770 4416  Mup - ok

15:46:18.0802 4416  [ 4987E079A4530FA737A128BE54B63B12 ] napagent        C:\Windows\system32\qagentRT.dll

15:46:18.0926 4416  napagent - ok

15:46:18.0973 4416  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

15:46:19.0036 4416  NativeWifiP - ok

15:46:19.0082 4416  [ CAD515DBD07D082BB317D9928CE8962C ] NDIS            C:\Windows\system32\drivers\ndis.sys

15:46:19.0160 4416  NDIS - ok

15:46:19.0176 4416  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

15:46:19.0270 4416  NdisCap - ok

15:46:19.0285 4416  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

15:46:19.0379 4416  NdisTapi - ok

15:46:19.0410 4416  [ F105BA1E22BF1F2EE8F005D4305E4BEC ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

15:46:19.0519 4416  Ndisuio - ok

15:46:19.0550 4416  [ 557DFAB9CA1FCB036AC77564C010DAD3 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

15:46:19.0644 4416  NdisWan - ok

15:46:19.0660 4416  [ 659B74FB74B86228D6338D643CD3E3CF ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

15:46:19.0753 4416  NDProxy - ok

15:46:19.0769 4416  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

15:46:19.0862 4416  NetBIOS - ok

15:46:19.0878 4416  [ 9162B273A44AB9DCE5B44362731D062A ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

15:46:19.0987 4416  NetBT - ok

15:46:20.0018 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] Netlogon        C:\Windows\system32\lsass.exe

15:46:20.0050 4416  Netlogon - ok

15:46:20.0081 4416  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

15:46:20.0206 4416  Netman - ok

15:46:20.0237 4416  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

15:46:20.0346 4416  netprofm - ok

15:46:20.0377 4416  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

15:46:20.0408 4416  NetTcpPortSharing - ok

15:46:20.0549 4416  [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64        C:\Windows\system32\DRIVERS\netw5v64.sys

15:46:20.0814 4416  netw5v64 - ok

15:46:20.0845 4416  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

15:46:20.0876 4416  nfrd960 - ok

15:46:20.0923 4416  [ D9A0CE66046D6EFA0C61BAA885CBA0A8 ] NlaSvc          C:\Windows\System32\nlasvc.dll

15:46:21.0032 4416  NlaSvc - ok

15:46:21.0079 4416  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

15:46:21.0188 4416  Npfs - ok

15:46:21.0220 4416  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

15:46:21.0329 4416  nsi - ok

15:46:21.0360 4416  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

15:46:21.0454 4416  nsiproxy - ok

15:46:21.0532 4416  [ 378E0E0DFEA67D98AE6EA53ADBBD76BC ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

15:46:21.0625 4416  Ntfs - ok

15:46:21.0641 4416  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

15:46:21.0734 4416  Null - ok

15:46:21.0766 4416  [ A4D9C9A608A97F59307C2F2600EDC6A4 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

15:46:21.0797 4416  nvraid - ok

15:46:21.0812 4416  [ 6C1D5F70E7A6A3FD1C90D840EDC048B9 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

15:46:21.0844 4416  nvstor - ok

15:46:21.0875 4416  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\DRIVERS\nv_agp.sys

15:46:21.0906 4416  nv_agp - ok

15:46:21.0922 4416  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

15:46:21.0968 4416  ohci1394 - ok

15:46:22.0015 4416  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

15:46:22.0046 4416  ose - ok

15:46:22.0171 4416  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

15:46:22.0405 4416  osppsvc - ok

15:46:22.0452 4416  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

15:46:22.0514 4416  p2pimsvc - ok

15:46:22.0546 4416  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

15:46:22.0592 4416  p2psvc - ok

15:46:22.0608 4416  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

15:46:22.0639 4416  Parport - ok

15:46:22.0670 4416  [ 90061B1ACFE8CCAA5345750FFE08D8B8 ] partmgr         C:\Windows\system32\drivers\partmgr.sys

15:46:22.0686 4416  partmgr - ok

15:46:22.0717 4416  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

15:46:22.0795 4416  PcaSvc - ok

15:46:22.0826 4416  [ F36F6504009F2FB0DFD1B17A116AD74B ] pci             C:\Windows\system32\DRIVERS\pci.sys

15:46:22.0858 4416  pci - ok

15:46:22.0873 4416  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\DRIVERS\pciide.sys

15:46:22.0889 4416  pciide - ok

15:46:22.0920 4416  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

15:46:22.0951 4416  pcmcia - ok

15:46:22.0982 4416  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

15:46:23.0014 4416  pcw - ok

15:46:23.0045 4416  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

15:46:23.0170 4416  PEAUTH - ok

15:46:23.0248 4416  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

15:46:23.0294 4416  PerfHost - ok

15:46:23.0372 4416  [ 557E9A86F65F0DE18C9B6751DFE9D3F1 ] pla             C:\Windows\system32\pla.dll

15:46:23.0513 4416  pla - ok

15:46:23.0575 4416  [ 98B1721B8718164293B9701B98C52D77 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

15:46:23.0653 4416  PlugPlay - ok

15:46:23.0684 4416  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

15:46:23.0731 4416  PNRPAutoReg - ok

15:46:23.0762 4416  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

15:46:23.0809 4416  PNRPsvc - ok

15:46:23.0840 4416  [ 166EB40D1F5B47E615DE3D0FFFE5F243 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

15:46:23.0965 4416  PolicyAgent - ok

15:46:23.0996 4416  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

15:46:24.0121 4416  Power - ok

15:46:24.0152 4416  [ 27CC19E81BA5E3403C48302127BDA717 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

15:46:24.0262 4416  PptpMiniport - ok

15:46:24.0293 4416  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

15:46:24.0355 4416  Processor - ok

15:46:24.0386 4416  [ 97293447431311C06703368AD0F6C4BE ] ProfSvc         C:\Windows\system32\profsvc.dll

15:46:24.0433 4416  ProfSvc - ok

15:46:24.0449 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] ProtectedStorage C:\Windows\system32\lsass.exe

15:46:24.0480 4416  ProtectedStorage - ok

15:46:24.0496 4416  [ EE992183BD8EAEFD9973F352E587A299 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

15:46:24.0589 4416  Psched - ok

15:46:24.0652 4416  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

15:46:24.0730 4416  ql2300 - ok

15:46:24.0761 4416  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

15:46:24.0792 4416  ql40xx - ok

15:46:24.0808 4416  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

15:46:24.0870 4416  QWAVE - ok

15:46:24.0901 4416  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

15:46:24.0964 4416  QWAVEdrv - ok

15:46:24.0995 4416  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

15:46:25.0104 4416  RasAcd - ok

15:46:25.0135 4416  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

15:46:25.0229 4416  RasAgileVpn - ok

15:46:25.0244 4416  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

15:46:25.0369 4416  RasAuto - ok

15:46:25.0385 4416  [ 87A6E852A22991580D6D39ADC4790463 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

15:46:25.0478 4416  Rasl2tp - ok

15:46:25.0494 4416  [ 47394ED3D16D053F5906EFE5AB51CC83 ] RasMan          C:\Windows\System32\rasmans.dll

15:46:25.0619 4416  RasMan - ok

15:46:25.0634 4416  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

15:46:25.0744 4416  RasPppoe - ok

15:46:25.0759 4416  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

15:46:25.0853 4416  RasSstp - ok

15:46:25.0884 4416  [ 3BAC8142102C15D59A87757C1D41DCE5 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

15:46:26.0009 4416  rdbss - ok

15:46:26.0024 4416  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

15:46:26.0056 4416  rdpbus - ok

15:46:26.0087 4416  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

15:46:26.0180 4416  RDPCDD - ok

15:46:26.0212 4416  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

15:46:26.0321 4416  RDPENCDD - ok

15:46:26.0336 4416  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

15:46:26.0430 4416  RDPREFMP - ok

15:46:26.0477 4416  [ 447DE7E3DEA39D422C1504F245B668B1 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

15:46:26.0539 4416  RDPWD - ok

15:46:26.0555 4416  [ 634B9A2181D98F15941236886164EC8B ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

15:46:26.0586 4416  rdyboost - ok

15:46:26.0617 4416  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

15:46:26.0726 4416  RemoteAccess - ok

15:46:26.0758 4416  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

15:46:26.0882 4416  RemoteRegistry - ok

15:46:26.0914 4416  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

15:46:26.0976 4416  RFCOMM - ok

15:46:26.0992 4416  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

15:46:27.0101 4416  RpcEptMapper - ok

15:46:27.0148 4416  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

15:46:27.0179 4416  RpcLocator - ok

15:46:27.0194 4416  [ 7266972E86890E2B30C0C322E906B027 ] RpcSs           C:\Windows\system32\rpcss.dll

15:46:27.0304 4416  RpcSs - ok

15:46:27.0413 4416  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

15:46:27.0522 4416  rspndr - ok

15:46:27.0569 4416  [ 483DF0B58CA532E5240E59DC41F30AA2 ] RSUSBSTOR       C:\Windows\system32\Drivers\RtsUStor.sys

15:46:27.0631 4416  RSUSBSTOR - ok

15:46:27.0662 4416  [ 20A466B9EA2BD828C0EC723F99B8CFE7 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

15:46:27.0709 4416  RTL8167 - ok

15:46:27.0756 4416  [ FEBFB5730E12F62CA38F86A066E7348D ] RtVOsdService   C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe

15:46:27.0787 4416  RtVOsdService ( UnsignedFile.Multi.Generic ) - warning

15:46:27.0787 4416  RtVOsdService - detected UnsignedFile.Multi.Generic (1)

15:46:27.0803 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] SamSs           C:\Windows\system32\lsass.exe

15:46:27.0834 4416  SamSs - ok

15:46:27.0865 4416  [ E3BBB89983DAF5622C1D50CF49F28227 ] sbp2port        C:\Windows\system32\DRIVERS\sbp2port.sys

15:46:27.0896 4416  sbp2port - ok

15:46:27.0928 4416  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

15:46:28.0021 4416  SCardSvr - ok

15:46:28.0052 4416  [ C94DA20C7E3BA1DCA269BC8460D98387 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

15:46:28.0162 4416  scfilter - ok

15:46:28.0208 4416  [ 624D0F5FF99428BB90A5B8A4123E918E ] Schedule        C:\Windows\system32\schedsvc.dll

15:46:28.0318 4416  Schedule - ok

15:46:28.0333 4416  [ 312E2F82AF11E79906898AC3E3D58A1F ] SCPolicySvc     C:\Windows\System32\certprop.dll

15:46:28.0427 4416  SCPolicySvc - ok

15:46:28.0458 4416  [ 54E47AD086782D3AE9417C155CDCEB9B ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys

15:46:28.0505 4416  sdbus - ok

15:46:28.0536 4416  [ 765A27C3279CE11D14CB9E4F5869FCA5 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

15:46:28.0614 4416  SDRSVC - ok

15:46:28.0692 4416  [ CC781378E7EDA615D2CDCA3B17829FA4 ] SeaPort         C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

15:46:28.0723 4416  SeaPort - ok

15:46:28.0754 4416  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

15:46:28.0864 4416  secdrv - ok

15:46:28.0879 4416  [ 463B386EBC70F98DA5DFF85F7E654346 ] seclogon        C:\Windows\system32\seclogon.dll

15:46:28.0988 4416  seclogon - ok

15:46:29.0020 4416  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\system32\sens.dll

15:46:29.0129 4416  SENS - ok

15:46:29.0176 4416  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

15:46:29.0238 4416  SensrSvc - ok

15:46:29.0254 4416  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

15:46:29.0285 4416  Serenum - ok

15:46:29.0300 4416  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

15:46:29.0347 4416  Serial - ok

15:46:29.0378 4416  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

15:46:29.0410 4416  sermouse - ok

15:46:29.0441 4416  [ C3BC61CE47FF6F4E88AB8A3B429A36AF ] SessionEnv      C:\Windows\system32\sessenv.dll

15:46:29.0534 4416  SessionEnv - ok

15:46:29.0550 4416  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\DRIVERS\sffdisk.sys

15:46:29.0612 4416  sffdisk - ok

15:46:29.0628 4416  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\DRIVERS\sffp_mmc.sys

15:46:29.0675 4416  sffp_mmc - ok

15:46:29.0690 4416  [ 178298F767FE638C9FEDCBDEF58BB5E4 ] sffp_sd         C:\Windows\system32\DRIVERS\sffp_sd.sys

15:46:29.0737 4416  sffp_sd - ok

15:46:29.0753 4416  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

15:46:29.0784 4416  sfloppy - ok

15:46:29.0831 4416  [ C6CC9297BD53E5229653303E556AA539 ] Sftfs           C:\Windows\system32\DRIVERS\Sftfslh.sys

15:46:29.0893 4416  Sftfs - ok

15:46:29.0924 4416  [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

15:46:29.0956 4416  sftlist - ok

15:46:30.0002 4416  [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaylh.sys

15:46:30.0034 4416  Sftplay - ok

15:46:30.0034 4416  [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirlh.sys

15:46:30.0065 4416  Sftredir - ok

15:46:30.0065 4416  [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol          C:\Windows\system32\DRIVERS\Sftvollh.sys

15:46:30.0096 4416  Sftvol - ok

15:46:30.0112 4416  [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

15:46:30.0143 4416  sftvsa - ok

15:46:30.0174 4416  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

15:46:30.0299 4416  SharedAccess - ok

15:46:30.0330 4416  [ 0298AC45D0EFFFB2DB4BAA7DD186E7BF ] ShellHWDetection C:\Windows\System32\shsvcs.dll

15:46:30.0408 4416  ShellHWDetection - ok

15:46:30.0439 4416  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

15:46:30.0470 4416  SiSRaid2 - ok

15:46:30.0486 4416  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

15:46:30.0517 4416  SiSRaid4 - ok

15:46:30.0548 4416  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

15:46:30.0658 4416  Smb - ok

15:46:30.0704 4416  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

15:46:30.0751 4416  SNMPTRAP - ok

15:46:30.0782 4416  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

15:46:30.0798 4416  spldr - ok

15:46:30.0860 4416  [ 567977DC43CC13C4C35ED7084C0B84D5 ] Spooler         C:\Windows\System32\spoolsv.exe

15:46:30.0907 4416  Spooler - ok

15:46:31.0001 4416  [ 913D843498553A1BC8F8DBAD6358E49F ] sppsvc          C:\Windows\system32\sppsvc.exe

15:46:31.0141 4416  sppsvc - ok

15:46:31.0157 4416  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

15:46:31.0266 4416  sppuinotify - ok

15:46:31.0313 4416  [ 2408C0366D96BCDF63E8F1C78E4A29C5 ] srv             C:\Windows\system32\DRIVERS\srv.sys

15:46:31.0360 4416  srv - ok

15:46:31.0391 4416  [ 76548F7B818881B47D8D1AE1BE9C11F8 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

15:46:31.0438 4416  srv2 - ok

15:46:31.0484 4416  [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA       C:\Windows\system32\DRIVERS\VSTAZL6.SYS

15:46:31.0516 4416  SrvHsfHDA - ok

15:46:31.0578 4416  [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92       C:\Windows\system32\DRIVERS\VSTDPV6.SYS

15:46:31.0640 4416  SrvHsfV92 - ok

15:46:31.0687 4416  [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac     C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

15:46:31.0734 4416  SrvHsfWinac - ok

15:46:31.0781 4416  [ 0AF6E19D39C70844C5CAA8FB0183C36E ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

15:46:31.0828 4416  srvnet - ok

15:46:31.0874 4416  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

15:46:31.0984 4416  SSDPSRV - ok

15:46:31.0999 4416  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

15:46:32.0093 4416  SstpSvc - ok

15:46:32.0108 4416  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

15:46:32.0140 4416  stexstor - ok

15:46:32.0186 4416  [ 52D0E33B681BD0F33FDC08812FEE4F7D ] stisvc          C:\Windows\System32\wiaservc.dll

15:46:32.0264 4416  stisvc - ok

15:46:32.0296 4416  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

15:46:32.0327 4416  swenum - ok

15:46:32.0374 4416  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

15:46:32.0483 4416  swprv - ok

15:46:32.0514 4416  [ 4998AE89119C7106C92F0A64E4840FF6 ] SynTP           C:\Windows\system32\DRIVERS\SynTP.sys

15:46:32.0561 4416  SynTP - ok

15:46:32.0608 4416  [ 3C1284516A62078FB68F768DE4F1A7BE ] SysMain         C:\Windows\system32\sysmain.dll

15:46:32.0732 4416  SysMain - ok

15:46:32.0764 4416  [ 238935C3CF2854886DC7CBB2A0E2CC66 ] TabletInputService C:\Windows\System32\TabSvc.dll

15:46:32.0826 4416  TabletInputService - ok

15:46:32.0857 4416  [ 884264AC597B690C5707C89723BB8E7B ] TapiSrv         C:\Windows\System32\tapisrv.dll

15:46:32.0966 4416  TapiSrv - ok

15:46:32.0982 4416  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

15:46:33.0091 4416  TBS - ok

15:46:33.0169 4416  [ 624C5B3AA4C99B3184BB922D9ECE3FF0 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

15:46:33.0278 4416  Tcpip - ok

15:46:33.0325 4416  [ 624C5B3AA4C99B3184BB922D9ECE3FF0 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

15:46:33.0419 4416  TCPIP6 - ok

15:46:33.0497 4416  [ 76D078AF6F587B162D50210F761EB9ED ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

15:46:33.0590 4416  tcpipreg - ok

15:46:33.0606 4416  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

15:46:33.0668 4416  TDPIPE - ok

15:46:33.0715 4416  [ 7518F7BCFD4B308ABC9192BACAF6C970 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

15:46:33.0778 4416  TDTCP - ok

15:46:33.0778 4416  [ 079125C4B17B01FCAEEBCE0BCB290C0F ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

15:46:33.0887 4416  tdx - ok

15:46:33.0918 4416  [ C448651339196C0E869A355171875522 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

15:46:33.0949 4416  TermDD - ok

15:46:33.0996 4416  [ 0F05EC2887BFE197AD82A13287D2F404 ] TermService     C:\Windows\System32\termsrv.dll

15:46:34.0121 4416  TermService - ok

15:46:34.0136 4416  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

15:46:34.0183 4416  Themes - ok

15:46:34.0199 4416  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

15:46:34.0292 4416  THREADORDER - ok

15:46:34.0308 4416  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

15:46:34.0417 4416  TrkWks - ok

15:46:34.0480 4416  [ 8DE922CD4FEA6F83B10805DF965B9A08 ] truecrypt       C:\Windows\system32\drivers\truecrypt.sys

15:46:34.0526 4416  truecrypt - ok

15:46:34.0573 4416  [ 840F7FB849F5887A49BA18C13B2DA920 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

15:46:34.0604 4416  TrustedInstaller - ok

15:46:34.0636 4416  [ 61B96C26131E37B24E93327A0BD1FB95 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

15:46:34.0745 4416  tssecsrv - ok

15:46:34.0776 4416  [ 3836171A2CDF3AF8EF10856DB9835A70 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

15:46:34.0885 4416  tunnel - ok

15:46:34.0916 4416  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

15:46:34.0948 4416  uagp35 - ok

15:46:34.0963 4416  [ C06E6F4679CEB8F430B90A51D76D8D3C ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

15:46:35.0010 4416  udfs - ok

15:46:35.0041 4416  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

15:46:35.0088 4416  UI0Detect - ok

15:46:35.0135 4416  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\DRIVERS\uliagpkx.sys

15:46:35.0150 4416  uliagpkx - ok

15:46:35.0182 4416  [ EAB6C35E62B1B0DB0D1B48B671D3A117 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

15:46:35.0228 4416  umbus - ok

15:46:35.0244 4416  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

15:46:35.0275 4416  UmPass - ok

15:46:35.0400 4416  [ 7466809E6DA561D60C2F1CE8EDE3C73F ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

15:46:35.0525 4416  UNS - ok

15:46:35.0556 4416  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

15:46:35.0665 4416  upnphost - ok

15:46:35.0696 4416  [ 537A4E03D7103C12D42DFD8FFDB5BDC9 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

15:46:35.0743 4416  usbccgp - ok

15:46:35.0759 4416  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\DRIVERS\usbcir.sys

15:46:35.0821 4416  usbcir - ok

15:46:35.0837 4416  [ FBB21EBE49F6D560DB37AC25FBC68E66 ] usbehci         C:\Windows\system32\drivers\usbehci.sys

15:46:35.0868 4416  usbehci - ok

15:46:35.0884 4416  [ 6B7A8A99C4A459E73C286A6763EA24CC ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

15:46:35.0930 4416  usbhub - ok

15:46:35.0962 4416  [ 8C88AA7617B4CBC2E4BED61D26B33A27 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

15:46:35.0977 4416  usbohci - ok

15:46:36.0008 4416  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

15:46:36.0040 4416  usbprint - ok

15:46:36.0055 4416  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

15:46:36.0102 4416  usbscan - ok

15:46:36.0133 4416  [ F39983647BC1F3E6100778DDFE9DCE29 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:46:36.0196 4416  USBSTOR - ok

15:46:36.0227 4416  [ 0B5B3B2DF3FD1709618ACFA50B8392B0 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

15:46:36.0274 4416  usbuhci - ok

15:46:36.0320 4416  [ 7CB8C573C6E4A2714402CC0A36EAB4FE ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys

15:46:36.0383 4416  usbvideo - ok

15:46:36.0414 4416  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

15:46:36.0508 4416  UxSms - ok

15:46:36.0523 4416  [ 156F6159457D0AA7E59B62681B56EB90 ] VaultSvc        C:\Windows\system32\lsass.exe

15:46:36.0554 4416  VaultSvc - ok

15:46:36.0570 4416  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\DRIVERS\vdrvroot.sys

15:46:36.0601 4416  vdrvroot - ok

15:46:36.0632 4416  [ 44D73E0BBC1D3C8981304BA15135C2F2 ] vds             C:\Windows\System32\vds.exe

15:46:36.0679 4416  vds - ok

15:46:36.0710 4416  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

15:46:36.0742 4416  vga - ok

15:46:36.0757 4416  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

15:46:36.0866 4416  VgaSave - ok

15:46:36.0898 4416  [ C82E748660F62A242B2DFAC1442F22A4 ] vhdmp           C:\Windows\system32\DRIVERS\vhdmp.sys

15:46:36.0929 4416  vhdmp - ok

15:46:36.0944 4416  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\DRIVERS\viaide.sys

15:46:36.0976 4416  viaide - ok

15:46:37.0007 4416  [ 2B1A3DAE2B4E70DBBA822B7A03FBD4A3 ] volmgr          C:\Windows\system32\DRIVERS\volmgr.sys

15:46:37.0022 4416  volmgr - ok

15:46:37.0054 4416  [ 99B0CBB569CA79ACAED8C91461D765FB ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

15:46:37.0085 4416  volmgrx - ok

15:46:37.0116 4416  [ 58F82EED8CA24B461441F9C3E4F0BF5C ] volsnap         C:\Windows\system32\DRIVERS\volsnap.sys

15:46:37.0163 4416  volsnap - ok

15:46:37.0178 4416  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

15:46:37.0210 4416  vsmraid - ok

15:46:37.0272 4416  [ 787898BF9FB6D7BD87A36E2D95C899BA ] VSS             C:\Windows\system32\vssvc.exe

15:46:37.0366 4416  VSS - ok

15:46:37.0412 4416  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys

15:46:37.0444 4416  vwifibus - ok

15:46:37.0459 4416  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

15:46:37.0522 4416  vwififlt - ok

15:46:37.0553 4416  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys

15:46:37.0600 4416  vwifimp - ok

15:46:37.0662 4416  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

15:46:37.0771 4416  W32Time - ok

15:46:37.0802 4416  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

15:46:37.0849 4416  WacomPen - ok

15:46:37.0896 4416  [ 47CA49400643EFFD3F1C9A27E1D69324 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

15:46:38.0005 4416  WANARP - ok

15:46:38.0005 4416  [ 47CA49400643EFFD3F1C9A27E1D69324 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

15:46:38.0099 4416  Wanarpv6 - ok

15:46:38.0177 4416  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

15:46:38.0255 4416  WatAdminSvc - ok

15:46:38.0317 4416  [ 5AB1BB85BD8B5089CC5D64200DEDAE68 ] wbengine        C:\Windows\system32\wbengine.exe

15:46:38.0411 4416  wbengine - ok

15:46:38.0426 4416  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

15:46:38.0473 4416  WbioSrvc - ok

15:46:38.0504 4416  [ DD1BAE8EBFC653824D29CCF8C9054D68 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

15:46:38.0582 4416  wcncsvc - ok

15:46:38.0614 4416  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

15:46:38.0645 4416  WcsPlugInService - ok

15:46:38.0660 4416  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

15:46:38.0676 4416  Wd - ok

15:46:38.0723 4416  [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

15:46:38.0770 4416  Wdf01000 - ok

15:46:38.0785 4416  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

15:46:38.0848 4416  WdiServiceHost - ok

15:46:38.0848 4416  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

15:46:38.0910 4416  WdiSystemHost - ok

15:46:38.0941 4416  [ 733006127F235BE7C35354EBEE7B9A7B ] WebClient       C:\Windows\System32\webclnt.dll

15:46:39.0004 4416  WebClient - ok

15:46:39.0035 4416  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

15:46:39.0128 4416  Wecsvc - ok

15:46:39.0160 4416  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

15:46:39.0253 4416  wercplsupport - ok

15:46:39.0284 4416  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

15:46:39.0378 4416  WerSvc - ok

15:46:39.0409 4416  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

15:46:39.0487 4416  WfpLwf - ok

15:46:39.0518 4416  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

15:46:39.0550 4416  WIMMount - ok

15:46:39.0565 4416  WinDefend - ok

15:46:39.0565 4416  WinHttpAutoProxySvc - ok

15:46:39.0643 4416  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

15:46:39.0752 4416  Winmgmt - ok

15:46:39.0799 4416  [ 41FBB751936B387F9179E7F03A74FE29 ] WinRM           C:\Windows\system32\WsmSvc.dll

15:46:39.0971 4416  WinRM - ok

15:46:40.0018 4416  [ 817EAFF5D38674EDD7713B9DFB8E9791 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

15:46:40.0064 4416  WinUsb - ok

15:46:40.0111 4416  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

15:46:40.0189 4416  Wlansvc - ok

15:46:40.0283 4416  [ 98F138897EF4246381D197CB81846D62 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

15:46:40.0392 4416  wlidsvc - ok

15:46:40.0423 4416  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys

15:46:40.0454 4416  WmiAcpi - ok

15:46:40.0486 4416  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

15:46:40.0532 4416  wmiApSrv - ok

15:46:40.0564 4416  WMPNetworkSvc - ok

15:46:40.0595 4416  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

15:46:40.0626 4416  WPCSvc - ok

15:46:40.0657 4416  [ 2E57DDF2880A7E52E76F41C7E96D327B ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

15:46:40.0704 4416  WPDBusEnum - ok

15:46:40.0735 4416  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

15:46:40.0829 4416  ws2ifsl - ok

15:46:40.0860 4416  [ 8F9F3969933C02DA96EB0F84576DB43E ] wscsvc          C:\Windows\system32\wscsvc.dll

15:46:40.0891 4416  wscsvc - ok

15:46:40.0891 4416  WSearch - ok

15:46:40.0985 4416  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

15:46:41.0110 4416  wuauserv - ok

15:46:41.0188 4416  [ 7CADC74271DD6461C452C271B30BD378 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

15:46:41.0297 4416  WudfPf - ok

15:46:41.0344 4416  [ 3B197AF0FFF08AA66B6B2241CA538D64 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

15:46:41.0453 4416  WUDFRd - ok

15:46:41.0484 4416  [ B551D6637AA0E132C18AC6E504F7B79B ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

15:46:41.0593 4416  wudfsvc - ok

15:46:41.0609 4416  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll

15:46:41.0671 4416  WwanSvc - ok

15:46:41.0718 4416  [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7         C:\Windows\system32\DRIVERS\yk62x64.sys

15:46:41.0765 4416  yukonw7 - ok

15:46:41.0796 4416  ================ Scan global ===============================

15:46:41.0827 4416  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

15:46:41.0874 4416  [ 0CB6EBF4B461A6043353C570BD72A1E1 ] C:\Windows\system32\winsrv.dll

15:46:41.0890 4416  [ 0CB6EBF4B461A6043353C570BD72A1E1 ] C:\Windows\system32\winsrv.dll

15:46:41.0936 4416  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

15:46:41.0968 4416  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

15:46:41.0983 4416  [Global] - ok

15:46:41.0983 4416  ================ Scan MBR ==================================

15:46:41.0983 4416  [ 067B94BE700F88130744E4AA1EF50CC3 ] \Device\Harddisk0\DR0

15:46:42.0248 4416  \Device\Harddisk0\DR0 - ok

15:46:42.0248 4416  ================ Scan VBR ==================================

15:46:42.0264 4416  [ 6D62A4780C38C4269EBE4F613C4C0E57 ] \Device\Harddisk0\DR0\Partition1

15:46:42.0264 4416  \Device\Harddisk0\DR0\Partition1 - ok

15:46:42.0295 4416  [ 1EA8EDB8B2AF91A58A5A9DC20428FA7F ] \Device\Harddisk0\DR0\Partition2

15:46:42.0295 4416  \Device\Harddisk0\DR0\Partition2 - ok

15:46:42.0326 4416  [ 879A4BE32890526EFA71F441952CF17F ] \Device\Harddisk0\DR0\Partition3

15:46:42.0326 4416  \Device\Harddisk0\DR0\Partition3 - ok

15:46:42.0342 4416  [ DC3CB6CF6D615BC4F09209E68390C205 ] \Device\Harddisk0\DR0\Partition4

15:46:42.0342 4416  \Device\Harddisk0\DR0\Partition4 - ok

15:46:42.0342 4416  ============================================================

15:46:42.0342 4416  Scan finished

15:46:42.0342 4416  ============================================================

15:46:42.0358 2428  Detected object count: 3

15:46:42.0358 2428  Actual detected object count: 3

15:46:54.0276 2428  HP Health Check Service ( UnsignedFile.Multi.Generic ) - skipped by user

15:46:54.0276 2428  HP Health Check Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:46:54.0276 2428  LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user

15:46:54.0276 2428  LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip 

15:46:54.0276 2428  RtVOsdService ( UnsignedFile.Multi.Generic ) - skipped by user

15:46:54.0276 2428  RtVOsdService ( UnsignedFile.Multi.Generic ) - User select action: Skip

hi

lade den CCleaner standard:
CCleaner Download - CCleaner 3.22.1800
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Hier nun die Liste

Code:

Acrobat.com        Adobe Systems Incorporated        16.07.2010        1,61MB        1.6.65        -> unbekannt

Adobe AIR        Adobe Systems Inc.        16.07.2010                1.5.0.7220        -> unbekannt

Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        19.09.2012        6,00MB        11.4.402.278        -> notwendig

Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        20.09.2012        6,00MB        11.4.402.278        -> notwendig

Adobe Reader X (10.1.4) - Deutsch        Adobe Systems Incorporated        30.08.2012        122,2MB        10.1.4        -> notwendig

Adobe Shockwave Player 11.5        Adobe Systems, Inc        16.07.2010        29,5MB        11.5.7.609        -> notwendig

ATI Catalyst Install Manager        ATI Technologies, Inc.        18.09.2010        22,3MB        3.0.778.0        -> unbekannt

avast! Free Antivirus        AVAST Software        30.08.2012                7.0.1466.0        -> notwendig

Babylon        Babylon        12.11.2011                -> unnötig

Bing Bar        Microsoft Corporation        16.03.2011        24,4MB        7.0.609.0        -> unnötig

Broadcom 802.11 Wireless LAN Adapter        Broadcom Corporation        19.09.2010                5.60.350.6        -> notwendig

CCleaner        Piriform        14.02.2012                3.11        -> notwendig

CDBurnerXP        CDBurnerXP        12.11.2011        12,2MB        4.3.9.2783        -> notwendig

Conduit Engine        Conduit Ltd.        20.08.2011                -> unbekannt

CyberLink DVD Suite        CyberLink Corp.        16.07.2010        37,6MB        7.0.3003        -> notwendig

CyberLink PowerDVD 9        CyberLink Corp.        18.09.2010        134,0MB        9.0.1.4217        -> notwendig

CyberLink YouCam        CyberLink Corp.        18.09.2010        129,9MB        3.0.2511        -> notwendig

DVDVideoSoftTB Toolbar        DVDVideoSoftTB        20.08.2011                6.3.3.3                -> unnötig

Energy Star Digital Logo        Hewlett-Packard        18.09.2010        0,29MB        1.0.1        -> unbekannt

Free Audio CD Burner version 1.4.7        DVDVideoSoft Limited.        18.07.2011        10,4MB        -> unnötig

Free YouTube Download 3 version 3.0.7.718        DVDVideoSoft Limited.        18.07.2011        44,7MB        -> notwendig

Free YouTube to MP3 Converter version 3.10.815        DVDVideoSoft Ltd..        20.08.2011        45,3MB        -> notwendig

GIMP 2.6.11        The GIMP Team        26.01.2012        107,7MB        2.6.11        -> notwendig

Google Chrome        Google Inc.        07.04.2012                21.0.1180.89        -> unnötig

HP Advisor        Hewlett-Packard        16.07.2010        54,9MB        3.4.10262.3295        -> unbekannt

HP Documentation        Hewlett-Packard        16.07.2010        516MB        1.1.0.0        -> unbekannt

HP Games        WildTangent        18.09.2010                1.0.1.3        -> unnötig

HP Power Manager        Hewlett-Packard Company        18.09.2010        2,00MB        1.0.3        -> unbekannt

HP Quick Launch        Hewlett-Packard Company        16.07.2010        3,72MB        2.1.5        -> unbekannt

HP Setup        Hewlett-Packard        16.07.2010                8.1.4186.3400        -> unbekannt

HP Software Framework        Hewlett-Packard Company        16.07.2010        2,17MB        3.5.23.1        -> unbekannt

HP Support Assistant        Hewlett-Packard Company        16.07.2010        67,4MB        5.0.14.2        -> unbekannt

HP Wireless Assistant        Hewlett-Packard        16.07.2010        5,60MB        4.0.9.0                -> unbekannt

Intel(R) Control Center        Intel Corporation        19.09.2010                1.2.1.1007        -> unbekannt

Intel(R) Management Engine Components        Intel Corporation        19.09.2010                6.0.0.1179        -> unbekannt

Intel(R) Rapid Storage Technology        Intel Corporation        19.09.2010                9.6.2.1001        -> unbekannt

IrfanView (remove only)        Irfan Skiljan        29.01.2011        1,50MB        4.28        -> notwendig

Java(TM) 6 Update 20 (64-bit)        Sun Microsystems, Inc.        16.07.2010        90,6MB        6.0.200        -> unnötig

Java(TM) 6 Update 26        Sun Microsystems, Inc.        16.07.2010        97,2MB        6.0.260        -> notwendig

LabelPrint        CyberLink Corp.        16.07.2010        281MB        2.5.2907        -> unnötig

LightScribe System Software        LightScribe        18.09.2010        24,6MB        1.18.15.1        -> unnötig

Magic Desktop        EasyBits Software AS        18.09.2010        -> unnötig        

Malwarebytes Anti-Malware Version 1.62.0.1300        Malwarebytes Corporation        31.08.2012        18,8MB        1.62.0.1300        -> unnötig

Media Player Classic - Home Cinema v1.5.0.2827        MPC-HC Team        07.04.2011        30,3MB        1.5.0.2827        -> notwendig

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        31.01.2011        38,8MB        4.0.30319        -> notwendig

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        31.01.2011        2,94MB        4.0.30319        -> notwendig

Microsoft Office 2010        Microsoft Corporation        16.07.2010        6,31MB        14.0.4763.1000        -> notwendig

Microsoft Office Klick-und-Los 2010        Microsoft Corporation        21.01.2011                14.0.4763.1000        -> unbekannt

Microsoft Office Starter 2010 - Deutsch        Microsoft Corporation        21.01.2011                14.0.4763.1000        -> notwendig

Microsoft Silverlight        Microsoft Corporation        09.05.2012        180,0MB        4.1.10329.0        -> notwendig

Microsoft SQL Server 2005 Compact Edition [ENU]        Microsoft Corporation        16.07.2010        1,72MB        3.1.0000        -> notwendig

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        29.01.2011        0,24MB        8.0.50727.4053        -> unbekannt

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        15.06.2011        0,29MB        8.0.61001        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570        Microsoft Corporation        23.04.2011        0,77MB        9.0.30729.5570        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570        Microsoft Corporation        23.04.2011        0,58MB        9.0.30729.5570        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17        Microsoft Corporation        16.07.2010        0,77MB        9.0.30729        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        18.09.2010        0,77MB        9.0.30729.4148        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161        Microsoft Corporation        15.06.2011        0,77MB        9.0.30729.6161        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411        Microsoft Corporation        13.06.2012        1,46MB        9.0.30411        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        16.07.2010        0,58MB        9.0.30729        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        18.09.2010        0,58MB        9.0.30729.4148        -> unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        15.06.2011        0,59MB        9.0.30729.6161        -> unbekannt

Mozilla Firefox 15.0.1 (x86 de)        Mozilla        09.09.2012        39,3MB        15.0.1        -> notwendig

Mozilla Maintenance Service        Mozilla        09.09.2012        0,32MB        15.0.1        -> unbekannt

OpenOffice.org 3.4        OpenOffice.org        13.06.2012        328MB        3.4.9590        -> notwendig

PhotoNow!        CyberLink Corp.        18.09.2010        39,4MB        1.1.6904        -> notwendig

Power2Go        CyberLink Corp.        16.07.2010        198,6MB        6.1.4204        -> unbekannt

PowerDirector        CyberLink Corp.        16.07.2010        829MB        8.0.3003        -> unbekannt

Realtek Ethernet Controller Driver For Windows 7        Realtek        18.09.2010                7.21.531.2010        -> notwendig

Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        18.09.2010                6.0.1.6066        -> notwendig

Realtek USB 2.0 Card Reader        Realtek Semiconductor Corp.        18.09.2010                6.1.7600.30105        -> notwendig

RtVOsd        Realtek Semiconductor Corp.        18.09.2010        1,54MB        1.0.3        -> unbekannt

SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49        eRightSoft        12.11.2011        42,7MB        v2011.build.49        -> notwendig

Synaptics Pointing Device Driver        Synaptics Incorporated        18.09.2010        46,4MB        15.0.17.0        -> notwendig

TrueCrypt        TrueCrypt Foundation        15.12.2011                7.1        -> notwendig

Uninstall 1.0.0.1                18.07.2011        10,4MB        -> unbekannt

VLC media player 1.1.11        VideoLAN        12.11.2011                1.1.11        -> notwendig

Windows Live Essentials        Microsoft Corporation        16.07.2010                14.0.8117.0416        -> unbekannt

Windows Live ID Sign-in Assistant        Microsoft Corporation        18.09.2010        10,0MB        6.500.3165.0        -> unbekannt

Windows Live Sync        Microsoft Corporation        16.07.2010        2,79MB        14.0.8117.416        -> unbekannt

Windows Live-Uploadtool        Microsoft Corporation        16.07.2010        0,22MB        14.0.8014.1029        -> unbekannt

deinstaliere:
Acrobat.com
Adobe AIR
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok

deinstaliere:
Babylon
Bing
Conduit
DVDVideoSoftTB
Free Audio
Google Chrome
Java: alle
Download der kostenlosen Java-Software
downloade java jre instalieren

deinstaliere:
LabelPrint
LightScribe
Magic Desktop
Windows Live : alle die, die du nicht nutzt.

öffne ccleaner, analysieren, starten.
pc neustarten.
Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Suche.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste
mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

Hallo,
Hier nun der Log von adwCleaner.

Code:

# AdwCleaner v2.002 - Datei am 09/23/2012 um 17:05:16 erstellt

# Aktualisiert am 16/09/2012 von Xplode

# Betriebssystem : Windows 7 Home Premium  (64 bits)

# Benutzer : Weise - WEISE-HP

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Weise\Desktop\adwcleaner.exe

# Option [Suche]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk

Datei Gefunden : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\searchplugins\Askcom.xml

Datei Gefunden : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\searchplugins\Conduit.xml

Ordner Gefunden : C:\Program Files\Babylon

Ordner Gefunden : C:\Users\Weise\AppData\Local\Conduit

Ordner Gefunden : C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Ordner Gefunden : C:\Users\Weise\AppData\LocalLow\Conduit

Ordner Gefunden : C:\Users\Weise\AppData\LocalLow\PriceGong

Ordner Gefunden : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\Conduit

Ordner Gefunden : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\ConduitEngine

Ordner Gefunden : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\extensions\engine@conduit.com
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}

Schlüssel Gefunden : HKCU\Software\Softonic

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Conduit.Engine

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2269050

Schlüssel Gefunden : HKLM\Software\Conduit

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Schlüssel Gefunden : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gefunden : HKU\S-1-5-21-4064333300-1550520147-146747255-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v8.0.7600.16385
 

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
 

-\\ Mozilla Firefox v15.0.1 (de)
 

Profilname : default 

Datei : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\prefs.js
 

Gefunden : user_pref("CT2269050..clientLogIsEnabled", false);

Gefunden : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Gefunden : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Gefunden : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Gefunden : user_pref("CT2269050.CTID", "CT2269050");

Gefunden : user_pref("CT2269050.CurrentServerDate", "17-12-2011");

Gefunden : user_pref("CT2269050.DialogsAlignMode", "LTR");

Gefunden : user_pref("CT2269050.DialogsGetterLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.DownloadReferralCookieData", "");

Gefunden : user_pref("CT2269050.EMailNotifierPollDate", "Fri Feb 11 2011 19:06:53 GMT+0100");

Gefunden : user_pref("CT2269050.FirstServerDate", "10-2-2011");

Gefunden : user_pref("CT2269050.FirstTime", true);

Gefunden : user_pref("CT2269050.FirstTimeFF3", true);

Gefunden : user_pref("CT2269050.FirstTimeSettingsDone", true);

Gefunden : user_pref("CT2269050.FixPageNotFoundErrors", true);

Gefunden : user_pref("CT2269050.GroupingServerCheckInterval", 1440);

Gefunden : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Gefunden : user_pref("CT2269050.HasUserGlobalKeys", true);

Gefunden : user_pref("CT2269050.Initialize", true);

Gefunden : user_pref("CT2269050.InitializeCommonPrefs", true);

Gefunden : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);

Gefunden : user_pref("CT2269050.InstallationType", "UnknownIntegration");

Gefunden : user_pref("CT2269050.InstalledDate", "Thu Feb 10 2011 19:05:26 GMT+0100");

Gefunden : user_pref("CT2269050.InvalidateCache", false);

Gefunden : user_pref("CT2269050.IsGrouping", false);

Gefunden : user_pref("CT2269050.IsMulticommunity", false);

Gefunden : user_pref("CT2269050.IsOpenThankYouPage", false);

Gefunden : user_pref("CT2269050.IsOpenUninstallPage", false);

Gefunden : user_pref("CT2269050.LanguagePackLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);

Gefunden : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Gefunden : user_pref("CT2269050.LastLogin_2.7.2.0", "Fri Feb 11 2011 16:16:53 GMT+0100");

Gefunden : user_pref("CT2269050.LastLogin_3.6.0.10", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.LatestVersion", "3.8.1.0");

Gefunden : user_pref("CT2269050.Locale", "en");

Gefunden : user_pref("CT2269050.LoginCache", 4);

Gefunden : user_pref("CT2269050.MCDetectTooltipHeight", "83");

Gefunden : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Gefunden : user_pref("CT2269050.MCDetectTooltipWidth", "295");

Gefunden : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);

Gefunden : user_pref("CT2269050.RadioIsPodcast", false);

Gefunden : user_pref("CT2269050.RadioLastCheckTime", "Fri Feb 11 2011 19:05:54 GMT+0100");

Gefunden : user_pref("CT2269050.RadioLastUpdateIPServer", "3");

Gefunden : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");

Gefunden : user_pref("CT2269050.RadioMediaID", "12473383");

Gefunden : user_pref("CT2269050.RadioMediaType", "Media Player");

Gefunden : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");

Gefunden : user_pref("CT2269050.RadioStationName", "Hotmix%20108");

Gefunden : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");

Gefunden : user_pref("CT2269050.SavedHomepage", "hohesc.net");

Gefunden : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]

Gefunden : user_pref("CT2269050.SearchFromAddressBarIsInit", true);

Gefunden : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]

Gefunden : user_pref("CT2269050.SearchInNewTabEnabled", true);

Gefunden : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);

Gefunden : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Gefunden : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]

Gefunden : user_pref("CT2269050.ServiceMapLastCheckTime", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gefunden : user_pref("CT2269050.SettingsCheckIntervalMin", 120);

Gefunden : user_pref("CT2269050.SettingsLastCheckTime", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gefunden : user_pref("CT2269050.SettingsLastUpdate", "1323933002");

Gefunden : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);

Gefunden : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gefunden : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1312887586");

Gefunden : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");

Gefunden : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Gefunden : user_pref("CT2269050.Uninstall", true);

Gefunden : user_pref("CT2269050.UserID", "UN20877697615386304");

Gefunden : user_pref("CT2269050.ValidationData_Toolbar", 2);

Gefunden : user_pref("CT2269050.WeatherNetwork", "");

Gefunden : user_pref("CT2269050.WeatherPollDate", "Fri Feb 11 2011 18:46:54 GMT+0100");

Gefunden : user_pref("CT2269050.WeatherUnit", "C");

Gefunden : user_pref("CT2269050.alertChannelId", "666138");

Gefunden : user_pref("CT2269050.clientLogIsEnabled", true);

Gefunden : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]

Gefunden : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Gefunden : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.homepageProtectorEnableByLogin", true);

Gefunden : user_pref("CT2269050.initDone", true);

Gefunden : user_pref("CT2269050.isAppTrackingManagerOn", true);

Gefunden : user_pref("CT2269050.myStuffEnabled", true);

Gefunden : user_pref("CT2269050.myStuffPublihserMinWidth", 400);

Gefunden : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Gefunden : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);

Gefunden : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Gefunden : user_pref("CT2269050.oldAppsList", "128834881989343894,128834881989343895,111,129466585399606892,129[...]

Gefunden : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);

Gefunden : user_pref("CT2269050.searchProtectorEnableByLogin", true);

Gefunden : user_pref("CT2269050.testingCtid", "");

Gefunden : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gefunden : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]

Gefunden : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"1d8[...]

Gefunden : user_pref("CommunityToolbar.EngineHiddenByUser", true);

Gefunden : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");

Gefunden : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");

Gefunden : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");

Gefunden : user_pref("CommunityToolbar.IsEngineShown", false);

Gefunden : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Gefunden : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");

Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");

Gefunden : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");

Gefunden : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]

Gefunden : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine");

Gefunden : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");

Gefunden : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri Mar 25 2011 21:58:58 GMT+01[...]

Gefunden : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Gefunden : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jan 23 2012 17:47:17 GMT+0100");

Gefunden : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Gefunden : user_pref("CommunityToolbar.alert.locale", "en");

Gefunden : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Gefunden : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jan 23 2012 17:47:06 GMT+0100");

Gefunden : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");

Gefunden : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Gefunden : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Gefunden : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Gefunden : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Gefunden : user_pref("CommunityToolbar.alert.userId", "3a102720-33e4-4e1d-94f6-6e10e64eb996");

Gefunden : user_pref("CommunityToolbar.globalUserId", "72be278e-2dc2-4c1f-85dc-11d7d8c235d2");

Gefunden : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Gefunden : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Gefunden : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");

Gefunden : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Jan 23 2012 17:47:26 GMT+0100");

Gefunden : user_pref("ConduitEngine.CTID", "ConduitEngine");

Gefunden : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Thu May 26 2011 16:24:31 GMT+0200");

Gefunden : user_pref("ConduitEngine.FirstServerDate", "03/25/2011 23");

Gefunden : user_pref("ConduitEngine.FirstTime", true);

Gefunden : user_pref("ConduitEngine.FirstTimeFF3", true);

Gefunden : user_pref("ConduitEngine.HasUserGlobalKeys", true);

Gefunden : user_pref("ConduitEngine.Initialize", true);

Gefunden : user_pref("ConduitEngine.InitializeCommonPrefs", true);

Gefunden : user_pref("ConduitEngine.InstalledDate", "Fri Mar 25 2011 21:59:01 GMT+0100");

Gefunden : user_pref("ConduitEngine.IsGrouping", false);

Gefunden : user_pref("ConduitEngine.IsMulticommunity", false);

Gefunden : user_pref("ConduitEngine.IsOpenThankYouPage", false);

Gefunden : user_pref("ConduitEngine.IsOpenUninstallPage", true);

Gefunden : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri May 27 2011 16:49:30 GMT+0200");

Gefunden : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Fri May 27 2011 22:20:59 GMT+0200");

Gefunden : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);

Gefunden : user_pref("ConduitEngine.SettingsLastCheckTime", "Fri May 27 2011 22:20:58 GMT+0200");

Gefunden : user_pref("ConduitEngine.UserID", "UN26104973394912380");

Gefunden : user_pref("ConduitEngine.componentAlertEnabled", false);

Gefunden : user_pref("ConduitEngine.engineLocale", "de");

Gefunden : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri May 27 2011 16:49:29 GMT+0200");

Gefunden : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri May 27 2011 22:20:59 GMT+0200");

Gefunden : user_pref("ConduitEngine.initDone", true);

Gefunden : user_pref("ConduitEngine.isAppTrackingManagerOn", true);

Gefunden : user_pref("ConduitEngine.usagesFlag", 2);

Gefunden : user_pref("browser.search.defaultengine", "Ask.com");

Gefunden : user_pref("browser.search.defaultenginename", "Ask.com");

Gefunden : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&Sea[...]

Gefunden : user_pref("browser.search.order.1", "Ask.com");

Gefunden : user_pref("browser.startup.homepage", "hxxp://de.ask.com/?l=dis&o=1586&gct=hp");

Gefunden : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
 

-\\ Google Chrome v [Version kann nicht ermittelt werden]
 

Datei : C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [17537 octets] - [23/09/2012 17:05:16]
 

########## EOF - C:\AdwCleaner[R1].txt - [17598 octets] ##########

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Löschen.
Bestätige
jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die
Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

Hier ist der neue Log.

Code:

# AdwCleaner v2.002 - Datei am 09/24/2012 um 16:31:04 erstellt

# Aktualisiert am 16/09/2012 von Xplode

# Betriebssystem : Windows 7 Home Premium  (64 bits)

# Benutzer : Weise - WEISE-HP

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Weise\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk

Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk

Datei Gelöscht : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\searchplugins\Askcom.xml

Datei Gelöscht : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\searchplugins\Conduit.xml

Ordner Gelöscht : C:\Program Files\Babylon

Ordner Gelöscht : C:\Users\Weise\AppData\Local\Conduit

Ordner Gelöscht : C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Ordner Gelöscht : C:\Users\Weise\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\Weise\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\Conduit

Ordner Gelöscht : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\ConduitEngine

Ordner Gelöscht : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\extensions\engine@conduit.com
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v8.0.7600.16385
 

Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050 --> hxxp://www.google.com
 

-\\ Mozilla Firefox v15.0.1 (de)
 

Profilname : default 

Datei : C:\Users\Weise\AppData\Roaming\Mozilla\Firefox\Profiles\fx4gye73.default\prefs.js
 

Gelöscht : user_pref("CT2269050..clientLogIsEnabled", false);

Gelöscht : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Gelöscht : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Gelöscht : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Gelöscht : user_pref("CT2269050.CTID", "CT2269050");

Gelöscht : user_pref("CT2269050.CurrentServerDate", "17-12-2011");

Gelöscht : user_pref("CT2269050.DialogsAlignMode", "LTR");

Gelöscht : user_pref("CT2269050.DialogsGetterLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.DownloadReferralCookieData", "");

Gelöscht : user_pref("CT2269050.EMailNotifierPollDate", "Fri Feb 11 2011 19:06:53 GMT+0100");

Gelöscht : user_pref("CT2269050.FirstServerDate", "10-2-2011");

Gelöscht : user_pref("CT2269050.FirstTime", true);

Gelöscht : user_pref("CT2269050.FirstTimeFF3", true);

Gelöscht : user_pref("CT2269050.FirstTimeSettingsDone", true);

Gelöscht : user_pref("CT2269050.FixPageNotFoundErrors", true);

Gelöscht : user_pref("CT2269050.GroupingServerCheckInterval", 1440);

Gelöscht : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Gelöscht : user_pref("CT2269050.HasUserGlobalKeys", true);

Gelöscht : user_pref("CT2269050.Initialize", true);

Gelöscht : user_pref("CT2269050.InitializeCommonPrefs", true);

Gelöscht : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);

Gelöscht : user_pref("CT2269050.InstallationType", "UnknownIntegration");

Gelöscht : user_pref("CT2269050.InstalledDate", "Thu Feb 10 2011 19:05:26 GMT+0100");

Gelöscht : user_pref("CT2269050.InvalidateCache", false);

Gelöscht : user_pref("CT2269050.IsGrouping", false);

Gelöscht : user_pref("CT2269050.IsMulticommunity", false);

Gelöscht : user_pref("CT2269050.IsOpenThankYouPage", false);

Gelöscht : user_pref("CT2269050.IsOpenUninstallPage", false);

Gelöscht : user_pref("CT2269050.LanguagePackLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Gelöscht : user_pref("CT2269050.LastLogin_2.7.2.0", "Fri Feb 11 2011 16:16:53 GMT+0100");

Gelöscht : user_pref("CT2269050.LastLogin_3.6.0.10", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.LatestVersion", "3.8.1.0");

Gelöscht : user_pref("CT2269050.Locale", "en");

Gelöscht : user_pref("CT2269050.LoginCache", 4);

Gelöscht : user_pref("CT2269050.MCDetectTooltipHeight", "83");

Gelöscht : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Gelöscht : user_pref("CT2269050.MCDetectTooltipWidth", "295");

Gelöscht : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);

Gelöscht : user_pref("CT2269050.RadioIsPodcast", false);

Gelöscht : user_pref("CT2269050.RadioLastCheckTime", "Fri Feb 11 2011 19:05:54 GMT+0100");

Gelöscht : user_pref("CT2269050.RadioLastUpdateIPServer", "3");

Gelöscht : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");

Gelöscht : user_pref("CT2269050.RadioMediaID", "12473383");

Gelöscht : user_pref("CT2269050.RadioMediaType", "Media Player");

Gelöscht : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");

Gelöscht : user_pref("CT2269050.RadioStationName", "Hotmix%20108");

Gelöscht : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");

Gelöscht : user_pref("CT2269050.SavedHomepage", "hohesc.net");

Gelöscht : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]

Gelöscht : user_pref("CT2269050.SearchFromAddressBarIsInit", true);

Gelöscht : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]

Gelöscht : user_pref("CT2269050.SearchInNewTabEnabled", true);

Gelöscht : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Gelöscht : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]

Gelöscht : user_pref("CT2269050.ServiceMapLastCheckTime", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gelöscht : user_pref("CT2269050.SettingsCheckIntervalMin", 120);

Gelöscht : user_pref("CT2269050.SettingsLastCheckTime", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gelöscht : user_pref("CT2269050.SettingsLastUpdate", "1323933002");

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sat Dec 17 2011 16:39:50 GMT+0100");

Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1312887586");

Gelöscht : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");

Gelöscht : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Gelöscht : user_pref("CT2269050.Uninstall", true);

Gelöscht : user_pref("CT2269050.UserID", "UN20877697615386304");

Gelöscht : user_pref("CT2269050.ValidationData_Toolbar", 2);

Gelöscht : user_pref("CT2269050.WeatherNetwork", "");

Gelöscht : user_pref("CT2269050.WeatherPollDate", "Fri Feb 11 2011 18:46:54 GMT+0100");

Gelöscht : user_pref("CT2269050.WeatherUnit", "C");

Gelöscht : user_pref("CT2269050.alertChannelId", "666138");

Gelöscht : user_pref("CT2269050.clientLogIsEnabled", true);

Gelöscht : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]

Gelöscht : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Gelöscht : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.homepageProtectorEnableByLogin", true);

Gelöscht : user_pref("CT2269050.initDone", true);

Gelöscht : user_pref("CT2269050.isAppTrackingManagerOn", true);

Gelöscht : user_pref("CT2269050.myStuffEnabled", true);

Gelöscht : user_pref("CT2269050.myStuffPublihserMinWidth", 400);

Gelöscht : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Gelöscht : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);

Gelöscht : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Gelöscht : user_pref("CT2269050.oldAppsList", "128834881989343894,128834881989343895,111,129466585399606892,129[...]

Gelöscht : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);

Gelöscht : user_pref("CT2269050.searchProtectorEnableByLogin", true);

Gelöscht : user_pref("CT2269050.testingCtid", "");

Gelöscht : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Sat Dec 17 2011 16:39:51 GMT+0100");

Gelöscht : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"")[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]

Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"1d8[...]

Gelöscht : user_pref("CommunityToolbar.EngineHiddenByUser", true);

Gelöscht : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");

Gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");

Gelöscht : user_pref("CommunityToolbar.IsEngineShown", false);

Gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");

Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");

Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]

Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine");

Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");

Gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri Mar 25 2011 21:58:58 GMT+01[...]

Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jan 23 2012 17:47:17 GMT+0100");

Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Gelöscht : user_pref("CommunityToolbar.alert.locale", "en");

Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jan 23 2012 17:47:06 GMT+0100");

Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");

Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Gelöscht : user_pref("CommunityToolbar.alert.userId", "3a102720-33e4-4e1d-94f6-6e10e64eb996");

Gelöscht : user_pref("CommunityToolbar.globalUserId", "72be278e-2dc2-4c1f-85dc-11d7d8c235d2");

Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");

Gelöscht : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Jan 23 2012 17:47:26 GMT+0100");

Gelöscht : user_pref("ConduitEngine.CTID", "ConduitEngine");

Gelöscht : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Thu May 26 2011 16:24:31 GMT+0200");

Gelöscht : user_pref("ConduitEngine.FirstServerDate", "03/25/2011 23");

Gelöscht : user_pref("ConduitEngine.FirstTime", true);

Gelöscht : user_pref("ConduitEngine.FirstTimeFF3", true);

Gelöscht : user_pref("ConduitEngine.HasUserGlobalKeys", true);

Gelöscht : user_pref("ConduitEngine.Initialize", true);

Gelöscht : user_pref("ConduitEngine.InitializeCommonPrefs", true);

Gelöscht : user_pref("ConduitEngine.InstalledDate", "Fri Mar 25 2011 21:59:01 GMT+0100");

Gelöscht : user_pref("ConduitEngine.IsGrouping", false);

Gelöscht : user_pref("ConduitEngine.IsMulticommunity", false);

Gelöscht : user_pref("ConduitEngine.IsOpenThankYouPage", false);

Gelöscht : user_pref("ConduitEngine.IsOpenUninstallPage", true);

Gelöscht : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri May 27 2011 16:49:30 GMT+0200");

Gelöscht : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Fri May 27 2011 22:20:59 GMT+0200");

Gelöscht : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);

Gelöscht : user_pref("ConduitEngine.SettingsLastCheckTime", "Fri May 27 2011 22:20:58 GMT+0200");

Gelöscht : user_pref("ConduitEngine.UserID", "UN26104973394912380");

Gelöscht : user_pref("ConduitEngine.componentAlertEnabled", false);

Gelöscht : user_pref("ConduitEngine.engineLocale", "de");

Gelöscht : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri May 27 2011 16:49:29 GMT+0200");

Gelöscht : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri May 27 2011 22:20:59 GMT+0200");

Gelöscht : user_pref("ConduitEngine.initDone", true);

Gelöscht : user_pref("ConduitEngine.isAppTrackingManagerOn", true);

Gelöscht : user_pref("ConduitEngine.usagesFlag", 2);

Gelöscht : user_pref("browser.search.defaultengine", "Ask.com");

Gelöscht : user_pref("browser.search.defaultenginename", "Ask.com");

Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&Sea[...]

Gelöscht : user_pref("browser.search.order.1", "Ask.com");

Gelöscht : user_pref("browser.startup.homepage", "hxxp://de.ask.com/?l=dis&o=1586&gct=hp");

Gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
 

-\\ Google Chrome v [Version kann nicht ermittelt werden]
 

Datei : C:\Users\Weise\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[R1].txt - [17666 octets] - [23/09/2012 17:05:16]

AdwCleaner[S1].txt - [18178 octets] - [24/09/2012 16:31:04]
 

########## EOF - C:\AdwCleaner[S1].txt - [18239 octets] ##########

wenn der pc läuft wie gewünscht, absichern:
als antimalware programm würde ich emsisoft empfehlen.
diese haben für mich den besten schutz kostet aber etwas.
http://www.trojaner-board.de/103809-...i-malware.html
testversion:
Meine Antivirus-Empfehlung: Emsisoft Anti-Malware
insbesondere wenn du onlinebanking, einkäufe, sonstige zahlungsabwicklungen oder ähnlich wichtiges, wie zb berufliches machst, also sensible daten zu schützen sind, solltest du in sicherheitssoftware investieren.
vor dem aktivieren der lizenz die 30 tage testzeitraum ausnutzen.

kostenlos, aber eben nicht ganz so gut wäre avast zu empfehlen.
http://www.trojaner-board.de/110895-...antivirus.html

sag mir welches du nutzt, dann gebe ich konfigurationshinweise.
bitte dein bisheriges av deinstalieren
die folgende anleitung ist umfangreich, dass ist mir klar, sie sollte aber umgesetzt werden, da nur dann dein pc sicher ist. stelle so viele fragen wie nötig, ich arbeite gern alles mit dir durch!

http://www.trojaner-board.de/96344-a...-rechners.html
Starte bitte mit der Passage, Windows Vista und Windows 7
Bitte beginne damit, Windows Updates zu instalieren.
Am besten geht dies, wenn du über Start, Suchen gehst, und dort Windows Updates eingibst.
Prüfe unter "Einstellungen ändern" dass folgendes ausgewählt ist:
- Updates automatisch Instalieren,
- Täglich
- Uhrzeit wählen
- Bitte den gesammten rest anhaken, außer:
- detailierte benachichtungen anzeigen, wenn neue Microsoft software verfügbar ist.
Klicke jetzt die Schaltfläche "OK"
Klicke jetzt "nach Updates suchen".
Bitte instaliere zunächst wichtige Updates.
Es wird nötig sein, den PC zwischendurch neu zu starten. falls dies der Fall ist, musst du erneut über Start, Suchen, Windows Update aufrufen, auf Updates suchen klicken und die nächsten instalieren.
Mache das selbe bitte mit den optionalen Updates.
Bitte übernimm den rest so, wie es im Abschnitt windows 7 / Vista zu lesen ist.
aus dem Abschnitt xp, bitte den punkt "datenausführungsverhinderung, dep" übernehmen.
als browser rate ich dir zu chrome:
Installation von Google Chrome für mehrere Nutzerkonten - Google Chrome-Hilfe
anleitung lesen bitte
falls du nen andern nutzen willst, sags mir dann muss ich teile der nun folgenden anleitung

Sandboxie
Die devinition einer Sandbox ist hier nachzulesen:
Sandbox
Kurz gesagt, man kann Programme fast 100 %ig isuliert vom System ausführen.

Der Vorteil liegt klar auf der Hand, wenn über den Browser Schadcode eingeschläust wird, kann dieser nicht nach außen dringen.
Download Link:
Sandboxie Download - Sandboxie 3.74

anleitung:
http://www.trojaner-board.de/71542-a...sandboxie.html
ausführliche anleitung als pdf, auch abarbeiten:
Sandbox Einstellungen |

bitte folgende zusatz konfiguration machen:
sandboxie control öffnen, menü sandbox anklicken, defauldbox wählen.
dort klicke auf sandbox einstellungen.
beschrenkungen, bei programm start und internet zugriff schreibe:
chrome.exe
dann gehe auf anwendungen, webbrowser, chrome.
dort aktiviere alles außer gesammten profil ordner freigeben.
Wie du evtl. schon gesehen hast, kannst du einige Funktionen nicht nutzen.
Dies ist nur in der Vollversion nötig, zu deren Kauf ich dir rate.
Du kannst zb unter "Erzwungene Programmstarts" festlegen, dass alle Browser in der Sandbox starten.
Ansonsten musst du immer auf "Sandboxed webbrowser" klicken bzw Rechtsklick, in Sandboxie starten.
Eine lebenslange Lizenz kostet 30 €, und ist auf allen deinen PC's nutzbar.

Weiter mit:
Maßnahmen für ALLE Windows-Versionen
alles komplett durcharbeiten
anmerkung zu file hippo.
in den settings zusätzlich auswählen:
hide beta updates.
Run updateChecker when Windows starts

Backup Programm:
in meiner Anleitung ist bereits ein Backup Programm verlinkt, als Alternative bietet sich auch das Windows eigene Backup Programm an:
http://www.trojaner-board.de/82962-w...en-backup.html
Dies ist aber leider nur für Windows 7 Nutzer vernünftig nutzbar.
Alle Anderen sollten sich aber auf jeden fall auch ein Backup Programm instalieren, denn dies kann unter Umständen sehr wichtig sein, zum Beispiel, wenn die Festplatte einmal kaputt ist.

Zum Schluss, die allgemeinen sicherheitstipps beachten, wenn es dich betrifft, den Tipp zum Onlinebanking beachten und alle Passwörter ändern
bitte auch lesen, wie mache ich programme für alle sichtbar:
Programme für alle Konten nutzbar machen - PCtipp.ch - Praxis & Hilfe
surfe jetzt also nur noch im standard nutzer konto und dort in der sandbox.
wenn du die kostenlose version nutzt, dann mit klick auf sandboxed web browser, wenn du die bezahlversion hast, kannst du erzwungene programm starts festlegen, dann wird sandboxie immer gestartet wenn du nen browser aufrufst.
wenn du mit der maus über den browser fährst sollte der eingerahmt sein, dann bist du im sandboxed web browser

passwort sicherheit:
jeder dienst benötigt ein eigenes, mindestens 12-stelliges passwort
bei der passwort verwaltung und erstellung hilft roboform
Passwort Manager, Formular Ausfueller, Passwort Management | RoboForm Passwort Manager
anleitung:
RoboForm-Bedienungsanleitung: Passwort-Manager, Verwalten von Passwörtern und persönlichen Daten

Ich benutze Avast.
Bei dem Browser würde ich allerdings gern bei Firefox bleiben.
Da dies ja Maßnahmen zur Absicherung sind würde mich jetzt interessieren ob der Virus nun weg ist und ob ich meinem PC wieder uneingeschränkt nutzen kann, Außerdem noch ob ich bei defogger den Re-enable Button drücken darf.
Ansonsten bin ich fast durch mit den Absicherungsmaßnahmen.

defogger, ja
surfen sobald abgesichert ist, schon mal chrome angesehen, er bietet einige sicherheitsfeatures mehr als der ff und sollte auch schneller laufen

Ja, ich habe Google Chrome, schon ausprobiert, allerdings finde ich mich bei Firefox besser zurecht, außerdem fande ich es nicht so toll das man alle Seiten die ich besucht hatte später nachzuvollziehbar waren.

sind sie doch im ff auch, im verlauf...
den kann man, wie bei jedem andern browser auch, deaktivieren.
aber wenns der firefox sein muss, musst du bei sandboxie folgenes freigeben:
firefox.exe
plugin-container.exe
und bei anwendung, webbrowser, alles bei firefox, außer gesammten profil ordner

So nun habe ich endlich alles geschaft und wollte mich nochmal für deine Hilfe Bedanken, also vielen Dank.

ich möchte erst mal anhand einer checkliste prüfen ob du alles hast.
- instalieren von optionalen und wichtigen updates.
- konfigurieren von windows updates.
- dep für alle prozesse aktivieren.
- sehop aktivieren.
- sandboxie instalieren.
- autorun deaktivieren.
- panda vaccine instalieren.
- secunia instalieren.
- file hippo instalieren.
beachte:
secunia und file hippo bieten englische updates, überall wo du auf die nutzeroberfläche zugreifst, wie zb reader, browser, etc benötigst du deutsche updates, also hier die hersteller seiten in den favoriten deines browsers speichern und wenn ein update gezeigt wird, von dort hohlen, bei java, flash quicktime, ist es egal ob deutsch oder englisch.
- backup software instalieren, backup und rettungsdvd erstellen.
hier ne kurze anleitung:
Anleitung: Systemabbild mit Paragon Drive Backup - NETZWELT

- wenn du onlinebanking machst, kann ich noch kurz was über die vorteile von card reader und banking software sagen.
- passwort manager instaliert.

Ja das habe ich alles gemacht

Gut, dann hast du deine Ruhe vor mir.
Wenn dir unsere Arbeit gefallen hatt, kannst du gerne spenden, damit wir das Forum aufrecht erhalten können.
Ansonsten, gutes neues.

Vielen Dank noch mal.
Du hast mir sehr geholfen.

Kein Prob, bei Fragen, melden