Trojaner-Board - Infiziert? Avast meldete Blockieren bösartiger Website, Rechner startete neu

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Infiziert? Avast meldete Blockieren bösartiger Website, Rechner startete neu (https://www.trojaner-board.de/131340-infiziert-avast-meldete-blockieren-boesartiger-website-rechner-startete-neu.html)

Infiziert? Avast meldete Blockieren bösartiger Website, Rechner startete neu

Avast meldete heute, dass es eine "bösartige Website" blockiert hat. Kurz darauf schlossen sich alle Programme und der Rechner startete sich neu, ohne dass ich dies in irgendeiner Weise eingeleitet habe.
Nach dem Neustart verhielt sich das System unauffällig.
Secunia PSI fielen ein paar neue Dinge, die ein Update benötigen (Thunderbird, Firefox, Java SDK und JRE). Zuvor schob ich lediglich das Update der MySQL Server Version 5.5 auf die aktuellste ein paar Wochen vor mir her.
Ich wunderte mich darüber, dass laut Windows-Programmliste angeblich die neueste Java-Runtime-Environment-Version (7u15) installiert war. Ich erinnere mich lediglich 7u13 installiert zu haben.
Perplex habe ich die Java-Sachen deinstalliert und neu installiert, Firefox und Thunderbird upgedated.
Ich bezweifle, dass Java sich unbemerkt selbst upgedated hat und danach ungefragt einen Neustart durchführte.
Ich bin daher sehr unsicher, ob die Schadsoftware sich gegen Avast durchgesetzt hat und mein System nun trotz unauffälligen Verhaltens befallen ist.
Leider ist es mir nicht gelungen Avast vor dem Durchführen der Scans zu deaktivieren. Es schien jedoch auch keinen Ärger zu machen, nachdem ich die Aktivitäten der Scan-Programme erlaubt hatte.
Die Logs habe ich eingefügt. Leider war das gmer-Log zu groß zum posten oder anhängen. Es ist hier zu finden: https://www.wetransfer.com/downloads/5d5c026d243cc868b1906fb5b801991720130221131824/582757de9498f0a0a37c4799db23719920130221131824/ade889#

OTL.txt

Code:

OTL logfile created on: 21.02.2013 13:24:59 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = K:\

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,67 Gb Available Physical Memory | 66,83% Memory free

8,00 Gb Paging File | 6,48 Gb Available in Paging File | 81,06% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 63,90 Gb Total Space | 23,83 Gb Free Space | 37,30% Space Free | Partition Type: NTFS

Drive D: | 401,76 Gb Total Space | 74,07 Gb Free Space | 18,44% Space Free | Partition Type: NTFS

Drive K: | 1,89 Gb Total Space | 0,91 Gb Free Space | 48,21% Space Free | Partition Type: FAT

 

Computer Name: MYOHO | User Name: myo | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.02.21 13:19:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- K:\OTL.exe

PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2012.08.31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

PRC - [2011.10.14 07:01:50 | 000,994,360 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe

PRC - [2011.10.14 07:01:48 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\sua.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2012.08.29 10:12:24 | 009,717,760 | ---- | M] () [Auto | Running] -- C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld.exe -- (MySQL)

SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013.02.16 01:34:06 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013.02.13 12:12:13 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012.12.29 11:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2012.11.09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2012.08.31 15:02:03 | 002,754,984 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)

SRV - [2012.07.15 19:06:44 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2011.10.14 07:01:50 | 000,994,360 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe -- (Secunia PSI Agent)

SRV - [2011.10.14 07:01:48 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files (x86)\Secunia\PSI\sua.exe -- (Secunia Update Agent)

SRV - [2011.09.27 20:04:08 | 000,359,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.12.03 19:27:24 | 000,028,672 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Programme\LSI SoftModem\agr64svc.exe -- (AgereModemAudio)

SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.01.09 01:16:29 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2012.09.07 16:38:22 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)

DRV:64bit: - [2012.07.31 10:09:38 | 000,231,376 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)

DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.12.16 16:53:01 | 000,035,112 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn)

DRV:64bit: - [2011.09.02 07:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2011.09.02 07:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010.11.20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2010.09.01 09:30:58 | 000,017,976 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)

DRV:64bit: - [2010.08.12 13:58:08 | 001,213,440 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)

DRV:64bit: - [2010.03.31 03:10:18 | 000,450,048 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL8187B.sys -- (RTL8187B)

DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.03.01 23:05:32 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={sear

IE - HKCU\..\SearchScopes\{B4B818C5-8925-43DB-90D2-81CACC85C7FA}: "URL" = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll ()

FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.11.02 11:00:22 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.02.21 13:04:23 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.02.13 15:53:46 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.02.21 11:00:58 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

 

[2012.05.03 06:36:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\myo\AppData\Roaming\mozilla\Extensions

[2013.02.21 13:04:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2013.02.16 01:34:54 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2013.01.18 22:56:20 | 000,171,584 | ---- | M] (Tracker Software Products (Canada) Ltd.) -- C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll

[2013.02.16 05:15:47 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2013.02.16 05:15:47 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2013.02.16 05:15:47 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2013.02.16 05:15:47 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2013.02.16 05:15:47 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2013.02.16 05:15:47 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4:64bit: - HKLM..\RunOnce: [*Restore] C:\Windows\SysNative\rstrui.exe (Microsoft Corporation)

O4 - HKLM..\RunOnce: [aswAhAScr.dll] C:\Program Files\AVAST Software\Avast\aswRegSvr.exe (AVAST Software)

O4 - HKLM..\RunOnce: [aswasOutExt.dll] C:\Program Files\AVAST Software\Avast\aswRegSvr.exe (AVAST Software)

O4 - HKLM..\RunOnce: [aswasOutExt64.dll] C:\Program Files\AVAST Software\Avast\aswRegSvr64.exe (AVAST Software)

O4 - HKLM..\RunOnce: [InnoSetupRegFile.0000000001] C:\Windows\is-2OM07.exe ()

O4 - Startup: C:\Users\myo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Produktregistrierung.lnk = C:\Program Files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe (Leader Technologies/Logitech)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Reg Error: Value error.)

O16:64bit: - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 1.7.0_07)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 10.15.2)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Reg Error: Value error.)

O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 1.7.0_05)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 10.15.2)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CBB6238C-3968-42D1-B7D8-DCC1F5FB7705}: DhcpNameServer = 192.168.1.1

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.02.21 10:57:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2013.02.21 10:56:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

[2013.02.14 01:20:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL

[2013.02.14 00:58:28 | 000,000,000 | ---D | C] -- C:\Users\myo\AppData\Roaming\MySQL

[2013.02.13 15:53:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2013.01.25 11:03:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer

[2013.01.25 11:02:26 | 000,000,000 | ---D | C] -- C:\Users\myo\AppData\Local\Programs

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.02.21 13:23:20 | 000,000,168 | ---- | M] () -- C:\Users\myo\defogger_reenable

[2013.02.21 13:05:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013.02.21 13:04:24 | 000,001,153 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2013.02.21 13:02:16 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-860810461-1551829927-3967776457-1001UA.job

[2013.02.21 13:02:16 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013.02.21 13:01:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.02.21 11:01:00 | 000,002,092 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk

[2013.02.21 10:53:12 | 000,020,704 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.02.21 10:53:12 | 000,020,704 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.02.21 10:48:25 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013.02.21 10:47:47 | 000,316,904 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.02.21 10:47:37 | 3220,676,608 | -HS- | M] () -- C:\hiberfil.sys

[2013.02.20 19:11:13 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-860810461-1551829927-3967776457-1001Core.job

[2013.02.14 00:22:51 | 000,616,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.02.14 00:22:51 | 000,106,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.02.14 00:22:50 | 001,519,798 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.02.14 00:22:50 | 000,654,150 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.02.14 00:22:50 | 000,130,022 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

 
 ========== Files Created - No Company Name ==========

 

[2013.02.21 13:23:20 | 000,000,168 | ---- | C] () -- C:\Users\myo\defogger_reenable

[2013.02.21 13:04:24 | 000,001,165 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

[2013.02.21 13:04:24 | 000,001,153 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2013.02.21 11:01:00 | 000,002,092 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk

[2012.09.06 13:06:36 | 000,000,439 | ---- | C] () -- C:\Windows\cdplayer.ini

[2012.09.06 12:43:08 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini

[2012.07.06 20:00:19 | 000,704,512 | ---- | C] () -- C:\Windows\is-2OM07.exe

[2012.06.26 15:02:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll

[2012.06.26 15:02:38 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll

[2012.06.26 15:02:38 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll

[2012.06.26 15:02:38 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll

[2012.06.10 17:09:48 | 000,017,408 | ---- | C] () -- C:\Users\myo\AppData\Local\WebpageIcons.db

[2012.06.04 07:53:10 | 000,000,496 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2012.05.09 12:53:53 | 000,000,218 | ---- | C] () -- C:\Users\myo\AppData\Local\recently-used.xbel

[2012.04.02 19:18:53 | 000,036,363 | ---- | C] () -- C:\Windows\CSTBox.INI

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2012.05.03 16:26:42 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\DAEMON Tools Lite

[2012.05.09 12:17:17 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\inkscape

[2012.06.18 13:14:42 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\JAM Software

[2012.03.21 01:29:12 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\Leadertech

[2013.02.14 00:58:28 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\MySQL

[2013.01.27 04:51:43 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\Notepad++

[2012.07.23 08:10:54 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\pdfforge

[2012.05.03 06:47:03 | 000,000,000 | ---D | M] -- C:\Users\myo\AppData\Roaming\Thunderbird

 
 ========== Purity Check ==========

 

 
 

< End of report >

Extras.txt

Code:

OTL Extras logfile created on: 21.02.2013 13:24:59 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = K:\

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

4,00 Gb Total Physical Memory | 2,67 Gb Available Physical Memory | 66,83% Memory free

8,00 Gb Paging File | 6,48 Gb Available in Paging File | 81,06% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 63,90 Gb Total Space | 23,83 Gb Free Space | 37,30% Space Free | Partition Type: NTFS

Drive D: | 401,76 Gb Total Space | 74,07 Gb Free Space | 18,44% Space Free | Partition Type: NTFS

Drive K: | 1,89 Gb Total Space | 0,91 Gb Free Space | 48,21% Space Free | Partition Type: FAT

 

Computer Name: MYOHO | User Name: myo | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [git_gui] -- "C:\Program Files (x86)\Git\bin\wish.exe" "C:\Program Files (x86)\Git\libexec\git-core\git-gui" "--working-dir" "%1" (ActiveState Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [git_gui] -- "C:\Program Files (x86)\Git\bin\wish.exe" "C:\Program Files (x86)\Git\libexec\git-core\git-gui" "--working-dir" "%1" (ActiveState Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{06938BC8-EE76-42F6-828D-2C6F10D1CE84}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{1C6BA1B6-5CE9-4923-A7A7-BF6A00E04613}" = lport=139 | protocol=6 | dir=in | app=system | 

"{1E189597-9DA7-4748-89F0-ECC2F8A733DF}" = rport=139 | protocol=6 | dir=out | app=system | 

"{254058D3-33D4-4F7B-A43B-36FB23252C59}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{32BFB75C-03F8-473C-9269-DBC2439408BE}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{3F8E338E-3E67-485B-9330-7DD583D7B288}" = rport=137 | protocol=17 | dir=out | app=system | 

"{6A04C479-771A-4CE1-9566-7E01CBD62472}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{6F9E40DD-2A98-49A1-A0B9-7BD2624C7FE9}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{71B4813A-86FA-44FF-8C6F-049F38AF3934}" = lport=445 | protocol=6 | dir=in | app=system | 

"{7653C635-A54A-4B57-AE23-F602E4973815}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{8DF00324-75ED-4C2D-8D53-47AE1A0E46C2}" = lport=137 | protocol=17 | dir=in | app=system | 

"{917F5893-52FA-4E45-84F2-3173D48887B5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{95FD148D-C6BE-4B33-A526-A290621B7557}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{981508A7-9EA5-41A7-894E-64E5AC0B79E9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{9F6084E1-6B48-47A1-8528-AD8FE28D2827}" = rport=138 | protocol=17 | dir=out | app=system | 

"{B8C63E57-7677-4B0A-A0FF-B7BAFCA5FF0A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{B9C21A87-92A0-4F83-BD59-6BA6A78DDF70}" = rport=445 | protocol=6 | dir=out | app=system | 

"{C707617C-DD7A-4BE0-A265-EC1155F24B11}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{D88EBBE9-ECFA-4090-B47B-6648CE961CFB}" = lport=138 | protocol=17 | dir=in | app=system | 

"{E2464154-DB03-4AAD-A485-33B8BC9ADA98}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{E3934032-4ABE-4646-8326-29AD8A118338}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{E50B8A00-F98F-4FD3-A6DB-A9CBF2E60FFB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{EDE9B2CA-2967-4EBB-BA58-CF0C9F076E0B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{03942A9C-2ACD-49BB-B66C-154878D6FE7A}" = protocol=17 | dir=in | app=c:\program files (x86)\x-chat 2\xchat.exe | 

"{0B21A3E9-621B-4EA2-9CDF-265DB5936D9B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\dmolj\counter-strike\hl.exe | 

"{0CCF373D-E3B2-4D5E-A940-DD5181FE2DC2}" = protocol=6 | dir=out | app=system | 

"{0CE8FA6D-AF7A-4A5C-8365-7F87DE686D79}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{12D9AF37-8D44-4FF2-931E-F6CC9E535F54}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe | 

"{15CBF0AA-3AAF-47E6-85E9-CCEC5E7A183A}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{199027E9-1F1A-4D8C-8583-99F794B074C5}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe | 

"{1ECC44CE-CAA1-4BCA-AFA0-8B0AE812B099}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe | 

"{1F04691B-D2B3-4BE6-BE66-A843AACF8327}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 

"{1F259F13-B30E-42ED-B048-6490566B150D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"{27A40ACC-CD68-4AC7-9D44-7B1B950901C9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{2BE43CB2-82F0-4EF1-9C62-43820E4AF8BF}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe | 

"{2C19061D-4D7A-49C2-A57D-7A33AA774AF6}" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe | 

"{3398ADF9-E58C-49EE-AF7C-03C58A02A686}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{3A44280B-61E2-4563-82C7-A7E56957B5B2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\dmolj\counter-strike\hl.exe | 

"{3D3E3594-7500-43DE-9936-5C7F250CF122}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe | 

"{42AB3790-429D-4B68-B911-45AE0119D8CC}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe | 

"{4EF3E20C-9429-4D7D-9F45-DA1D7187EC97}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 

"{52BB1106-FE88-4987-BA7A-D9451B271EFA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{59A76F0D-BF9F-4644-9298-EA38F29BC9ED}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe | 

"{6730804F-5782-4EC0-94EF-602149E790D6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{69D95D79-DA95-4886-8C79-0F14FA9483F2}" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 

"{6EA2E8D3-B493-4674-9232-DD82CCCC0CD8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{721AFF93-456F-4E35-9071-4CE3501110B2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{73624FB7-D881-47EE-B0E6-DC554B2A2CAF}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 

"{790C0760-AA19-4CD7-B838-99D900BDECBF}" = protocol=6 | dir=in | app=c:\users\ho\appdata\local\programs\opera\opera.exe | 

"{82A0C7B2-8982-4C51-B391-314B08B4DF1B}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

"{8FD57D61-7796-4CB6-958C-5D35DAF14205}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{94C700D4-8902-48C6-988C-C489C3B8C4F9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{94FBADB4-3E16-498A-A8B8-628F225B0D89}" = protocol=6 | dir=in | app=c:\program files (x86)\x-chat 2\xchat.exe | 

"{9ADE8D28-A778-4D83-AFA4-52D921AE9090}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe | 

"{9AF2BCE1-F905-43CB-8505-B61DB0A469D9}" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 

"{9E2B8324-9FCE-49AE-A616-7661F692EC96}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{A5751E2E-3D5C-4836-AA95-04689202C47C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\dmolj\counter-strike\hl.exe | 

"{AC22E04E-3B8C-4AA6-B620-8AE6557134A9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{B0DC1FB9-10EF-41FD-89F1-D34D1439EF77}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\dmolj\counter-strike\hl.exe | 

"{B35F826E-0F51-4BBB-B4E6-FA353AE6CAA2}" = protocol=6 | dir=in | app=c:\windows\system32\wfs.exe | 

"{BC579CC7-A10D-46DC-876F-B7AFCD7E1F2C}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe | 

"{C3343384-940C-42E8-92C6-F78FB819BE39}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 

"{C4780D0D-05D0-4FFC-A662-0B35CC7D8736}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{C5DBBF21-EA1C-406D-BD38-6B4F48F88213}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{C897EAE1-638A-470F-BD5A-7F1FAA4A32AC}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

"{C97B11BA-DC35-4400-9857-44C4B005E4BE}" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe | 

"{CEEEBD38-5526-4452-99D9-17B9C2BFD3CE}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{D2566B31-B5E5-4C5B-AB75-D480B9FA3B56}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{D71E5C4E-9D2F-470D-9BB6-105671ADF4BE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{E2877981-8ED7-429C-A9E3-282A1FA52E52}" = protocol=17 | dir=in | app=c:\users\ho\appdata\local\programs\opera\opera.exe | 

"{E78C4CE1-1A29-4229-9CC0-9717BD7AF2CF}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 

"{E8386ECB-C114-4BA4-8786-D7647363064D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 

"{EAA6277A-F81E-4238-A315-5C06B8ACCEF2}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 

"{EE4426D3-8F71-4A66-886D-5DCA07DB044E}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe | 

"{F06FA4BF-759E-4856-B299-C5E4DBBE8F30}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{F9D25D19-6BC9-4D58-A2BD-C79670ADAD7B}" = protocol=17 | dir=in | app=c:\windows\system32\wfs.exe | 

"{FF88CCD1-3B29-4132-B3E6-DA5FDF443DE8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"TCP Query User{013654B9-20F8-4BCA-9B15-12C502312C9A}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 

"TCP Query User{50D8E50A-8D8C-4D99-9ABC-490AFB2A5E62}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

"TCP Query User{5969A7E8-BB75-4635-B6B8-9EA4D5E786BB}C:\windows\system32\wfs.exe" = protocol=6 | dir=in | app=c:\windows\system32\wfs.exe | 

"TCP Query User{6AA42E09-B3A4-470C-92D6-605A1D52526F}C:\users\ho\appdata\local\programs\opera\opera.exe" = protocol=6 | dir=in | app=c:\users\ho\appdata\local\programs\opera\opera.exe | 

"TCP Query User{CD4BDB21-D35D-4073-871C-057363507D6C}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe | 

"TCP Query User{D2AA83CC-9E53-4814-8740-986F72B37248}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | 

"TCP Query User{DDBD04B2-6D76-4AE1-B1EB-50A5D05FB52A}C:\program files (x86)\x-chat 2\xchat.exe" = protocol=6 | dir=in | app=c:\program files (x86)\x-chat 2\xchat.exe | 

"TCP Query User{F1C8FD9D-9F10-4A7F-8FDA-9F83BA75174C}C:\program files (x86)\jdownloader 2\jdownloader 2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jdownloader 2\jdownloader 2.exe | 

"TCP Query User{FE0FEB95-FF23-44A2-A9AE-DBFCDAA639F6}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 

"UDP Query User{1E341514-B3C1-46B6-9384-564D2C71441E}C:\program files (x86)\x-chat 2\xchat.exe" = protocol=17 | dir=in | app=c:\program files (x86)\x-chat 2\xchat.exe | 

"UDP Query User{21DD9B44-4687-42F5-B938-A50CCF0F3966}C:\program files (x86)\jdownloader 2\jdownloader 2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader 2\jdownloader 2.exe | 

"UDP Query User{27DF5E8C-F3D1-4DA7-982B-46042C9F5F66}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | 

"UDP Query User{3DCCAB45-2E37-467F-BD8E-393F7A6FC929}C:\program files (x86)\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jdownloader\jre\bin\javaw.exe | 

"UDP Query User{40D31FEC-EAC4-43D3-AD6D-3755506B1496}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

"UDP Query User{57BD31B5-ABD8-498A-AB7F-29B55BA54692}C:\windows\system32\wfs.exe" = protocol=17 | dir=in | app=c:\windows\system32\wfs.exe | 

"UDP Query User{61FC1558-05A4-4A96-A9D6-57351B9AE202}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 

"UDP Query User{B855A610-5158-4639-ACDF-BAD552C2D8E1}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | 

"UDP Query User{EC6EB127-4E9B-453F-BF3D-5EE6CB93D5A0}C:\users\ho\appdata\local\programs\opera\opera.exe" = protocol=17 | dir=in | app=c:\users\ho\appdata\local\programs\opera\opera.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{04D42880-78A6-43EC-BAA8-7B1D1B2BB3E7}" = MySQL Server 5.5

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)

"{26A24AE4-039D-4CA4-87B4-2F86417015FF}" = Java 7 Update 15 (64-bit)

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{5CA882E6-4BF0-4E55-B290-6C4EAD6E586E}" = MySQL Server 5.5

"{64A3A4F4-B792-11D6-A78A-00B0D0170150}" = Java SE Development Kit 7 Update 15 (64-bit)

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{9ED333F8-3E6C-4A38-BAFA-728454121CDA}" = PDF-XChange Viewer

"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 310.90

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 310.90

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"GIMP-2_is1" = GIMP 2.8.0

"LSI Soft Modem" = LSI USB 2.0 Soft Modem

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"sp6" = Logitech SetPoint 6.32

"VLC media player" = VLC media player 2.0.5

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{0DFFF131-8BA6-4236-850C-7279B9C446F1}" = LibreOffice 3.5

"{13223780-8ABA-4209-88A2-AB2AF464417D}" = MySQL Workbench 5.2 CE

"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser

"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{26A24AE4-039D-4CA4-87B4-2F83217015FF}" = Java 7 Update 15

"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP 3.80

"{65A5E87D-7A3F-4819-807D-B86990D5F369}" = inSSIDer

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{71972D00-4596-11E2-B6EA-B8AC6F97B88E}" = Google Earth Plug-in

"{7A21C722-F259-4976-B7AA-6658E5FDEDAF}" = Google Drive

"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB67580-257C-45FF-B8F4-C8C30682091A}_is1" = SIW version 2011.10.29

"{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}" = CanoScan Toolbox Ver4.9

"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0

"5513-1208-7298-9440" = JDownloader 0.9

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Audacity_is1" = Audacity 2.0.2

"avast" = avast! Free Antivirus

"DAEMON Tools Lite" = DAEMON Tools Lite

"DVD Shrink DE_is1" = DVD Shrink 3.2 deutsch (DeCSS-frei)

"DVDFab 8 Qt_is1" = DVDFab 8.1.7.8 (17/04/2012) Qt

"ElsterFormular 13.1.1.8479p" = ElsterFormular

"foobar2000" = foobar2000 v1.1.13

"GanttProject" = GanttProject

"Git_is1" = Git version 1.7.10-preview20120409

"GnuCash_is1" = GnuCash 2.4.10

"IETester" = IETester v0.4.8 (remove only)

"ImgBurn" = ImgBurn

"Inkscape" = Inkscape 0.48.3.1

"LAME_is1" = LAME v3.99.3 (for Windows)

"Mozilla Firefox 19.0 (x86 de)" = Mozilla Firefox 19.0 (x86 de)

"Mozilla Thunderbird 17.0.3 (x86 de)" = Mozilla Thunderbird 17.0.3 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Notepad++" = Notepad++

"Picasa 3" = Picasa 3

"Secunia PSI" = Secunia PSI (2.0.0.4003)

"SMPlayer" = SMPlayer 0.8.1

"Steam App 10" = Counter-Strike

"TeamViewer 7" = TeamViewer 7

"TreeSize Free_is1" = TreeSize Free V2.7

"TrueCrypt" = TrueCrypt

"X-Chat 2_is1" = X-Chat 2.8.6-2

"Zattoo4" = Zattoo4 4.0.5

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 14.10.2012 13:00:27 | Computer Name = myoho | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: googledrivesync.exe, Version: 1.4.3365.1552,

 Zeitstempel: 0x4fbf5043  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,

 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x290b0003  ID des fehlerhaften

 Prozesses: 0x1ac4  Startzeit der fehlerhaften Anwendung: 0x01cda8bacd89a4a8  Pfad der

 fehlerhaften Anwendung: C:\Program Files (x86)\Google\Drive\googledrivesync.exe

Pfad

 des fehlerhaften Moduls: unknown  Berichtskennung: a6ea5ca6-1620-11e2-8a04-001966e11ce0

 

Error - 14.10.2012 15:11:31 | Computer Name = myoho | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: googledrivesync.exe, Version: 1.4.3365.1552,

 Zeitstempel: 0x4fbf5043  Name des fehlerhaften Moduls: python26.dll, Version: 2.6.4150.1013,

 Zeitstempel: 0x4ae54ea8  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000b0005  ID des fehlerhaften

 Prozesses: 0xf30  Startzeit der fehlerhaften Anwendung: 0x01cdaa387b9ce55c  Pfad der

 fehlerhaften Anwendung: C:\Program Files (x86)\Google\Drive\googledrivesync.exe

Pfad

 des fehlerhaften Moduls: C:\Users\ho\AppData\Local\Temp\_MEI33842\python26.dll  Berichtskennung:

 f5c27938-1632-11e2-bd1a-d0d8575181e7

 

Error - 20.10.2012 01:50:37 | Computer Name = myoho | Source = MsiInstaller | ID = 10005

Description = 

 

Error - 08.01.2013 20:42:41 | Computer Name = myoho | Source = .NET Runtime Optimization Service | ID = 1107

Description = 

 

Error - 16.01.2013 06:50:52 | Computer Name = myoho | Source = MsiInstaller | ID = 11500

Description = 

 

Error - 16.01.2013 15:53:04 | Computer Name = myoho | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567,

 Zeitstempel: 0x4d672ee4  Name des fehlerhaften Moduls: googledrivesync64.dll, Version:

 1.7.4018.3496, Zeitstempel: 0x509c54ba  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000000000049981

ID

 des fehlerhaften Prozesses: 0xcc0  Startzeit der fehlerhaften Anwendung: 0x01cdee024a492659

Pfad

 der fehlerhaften Anwendung: C:\Windows\Explorer.EXE  Pfad des fehlerhaften Moduls:

 C:\Program Files (x86)\Google\Drive\googledrivesync64.dll  Berichtskennung: 56d199bc-6016-11e2-b440-001966e11ce0

 

Error - 23.01.2013 13:19:15 | Computer Name = myoho | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567,

 Zeitstempel: 0x4d672ee4  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725,

 Zeitstempel: 0x4ec4aa8e  Ausnahmecode: 0xc0000374  Fehleroffset: 0x00000000000c40f2

ID

 des fehlerhaften Prozesses: 0x1348  Startzeit der fehlerhaften Anwendung: 0x01cdf4232a371e26

Pfad

 der fehlerhaften Anwendung: C:\Windows\explorer.exe  Pfad des fehlerhaften Moduls:

 C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: 02ecfd92-6581-11e2-b440-001966e11ce0

 

Error - 13.02.2013 20:04:49 | Computer Name = myoho | Source = MySQLInstaller.ExceptionLog | ID = 0

Description = 

 

Error - 13.02.2013 20:18:43 | Computer Name = myoho | Source = .NET Runtime | ID = 1026

Description = 

 

Error - 13.02.2013 20:18:43 | Computer Name = myoho | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: MySQLWorkbench.exe, Version: 5.2.40.8790,

 Zeitstempel: 0x4fa2f938  Name des fehlerhaften Moduls: grt.dll, Version: 0.0.0.0,

 Zeitstempel: 0x4fa2e36b  Ausnahmecode: 0xc0000005  Fehleroffset: 0x000017d8  ID des fehlerhaften

 Prozesses: 0xd18  Startzeit der fehlerhaften Anwendung: 0x01ce0a48d0f70c78  Pfad der

 fehlerhaften Anwendung: C:\Program Files (x86)\MySQL\MySQL Workbench 5.2 CE\MySQLWorkbench.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files (x86)\MySQL\MySQL Workbench 5.2 CE\grt.dll

Berichtskennung:

 16da7266-763c-11e2-b17b-001966e11ce0

 

[ System Events ]

Error - 25.01.2013 05:55:10 | Computer Name = myoho | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6

Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 

im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich

 an den Computerhersteller, um aktualisierte Firmware zu erhalten.

 

Error - 26.01.2013 13:53:33 | Computer Name = myoho | Source = volsnap | ID = 393252

Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher

 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

 

Error - 31.01.2013 20:35:42 | Computer Name = myoho | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6

Description = Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden 

im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich

 an den Computerhersteller, um aktualisierte Firmware zu erhalten.

 

Error - 03.02.2013 14:06:33 | Computer Name = myoho | Source = Service Control Manager | ID = 7011

Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung

 von Dienst ShellHWDetection erreicht.

 

Error - 04.02.2013 02:28:40 | Computer Name = myoho | Source = volsnap | ID = 393252

Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher

 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

 

Error - 05.02.2013 14:37:13 | Computer Name = myoho | Source = DCOM | ID = 10005

Description = 

 

Error - 05.02.2013 14:37:12 | Computer Name = myoho | Source = Service Control Manager | ID = 7000

Description = Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden

 Fehlers nicht gestartet:   %%109

 

Error - 06.02.2013 04:38:19 | Computer Name = myoho | Source = bowser | ID = 8003

Description = 

 

Error - 06.02.2013 16:00:15 | Computer Name = myoho | Source = Service Control Manager | ID = 7011

Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung

 von Dienst Netman erreicht.

 

Error - 08.02.2013 10:35:57 | Computer Name = myoho | Source = volsnap | ID = 393252

Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher

 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

 

 

< End of report >

hi
hast du die Avast fundmeldung noch? falls ja, bitte mal als klartext posten

ich weiß leider nicht, wie ich die Meldung finden kann.

hi, musst dich mal durch avast klicken, habs grad selber nicht instaliert.

ich hab die logs im avast ordner durchstöbert und leider nichts gefunden.

Ok schaun wir mal.
Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Ich hab in der nshield.log von Avast doch noch was gefunden:
Der neueste Eintrag ist der Fragliche - sieht ja fast so aus, als wäre ich regelmäßig auf Pornoseiten!? :pfeiff:

Code:

14.07.2012  22:28:18  Network Shield: blocked access to malicious site hxxp://www1.picfront.org/picture/eUVXOhYSr/img/261.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 3784 ) ]

18.10.2012  11:04:47  Network Shield: blocked access to malicious site hxxp://potload.com/mz0mfompdk25 [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 3920 ) ]

12.02.2013  11:09:42  Network Shield: blocked access to malicious site hxxp://cdn1.image.pornhub.phncdn.com/thumbs/004/289/519/small1.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 8060 ) ]

19.02.2013  12:48:21  Network Shield: blocked access to malicious site hxxp://cdn1.image.pornhub.phncdn.com/users/003/843/409/av1347396605.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

19.02.2013  12:48:24  Network Shield: blocked access to malicious site hxxp://cdn1.image.pornhub.phncdn.com/thumbs/005/026/209/small1.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

19.02.2013  12:48:24  Network Shield: blocked access to malicious site hxxp://cdn1.image.pornhub.phncdn.com/thumbs/005/026/209/small2.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

19.02.2013  12:48:25  Network Shield: blocked access to malicious site hxxp://cdn1.image.pornhub.phncdn.com/thumbs/005/026/209/small3.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

20.02.2013  09:20:24  Network Shield: blocked access to malicious site hxxp://cdn1.static.pornhub.phncdn.com/js/playlist/playlist.js?cache=2013021901 [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

20.02.2013  09:20:24  Network Shield: blocked access to malicious site hxxp://cdn1.static.pornhub.phncdn.com/css/common.css?cache=2013021902 [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

20.02.2013  09:20:24  Network Shield: blocked access to malicious site hxxp://cdn1.static.pornhub.phncdn.com/css/buttons.css?cache=2013021401 [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

20.02.2013  09:20:24  Network Shield: blocked access to malicious site hxxp://cdn1.static.pornhub.phncdn.com/flash/player2012.swf?cache=2013021901 [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

20.02.2013  09:20:24  Network Shield: blocked access to malicious site hxxp://cdn1.static.pornhub.phncdn.com/images/sprite-pornhub-nf.png [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

21.02.2013  10:35:59  Network Shield: blocked access to malicious site hxxp://cdn3.image.pornhub.phncdn.com/users/003/143/205/av4629.jpg [ C:\Users\ho\AppData\Local\Google\Chrome\Application\chrome.exe ( 1248 ) ]

TDSS-Killer-Report:

Code:

15:43:26.0266 5548  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

15:43:26.0556 5548  ============================================================

15:43:26.0556 5548  Current date / time: 2013/02/21 15:43:26.0556

15:43:26.0556 5548  SystemInfo:

15:43:26.0556 5548  

15:43:26.0556 5548  OS Version: 6.1.7601 ServicePack: 1.0

15:43:26.0556 5548  Product type: Workstation

15:43:26.0556 5548  ComputerName: MYOHO

15:43:26.0556 5548  UserName: myo

15:43:26.0556 5548  Windows directory: C:\Windows

15:43:26.0556 5548  System windows directory: C:\Windows

15:43:26.0556 5548  Running under WOW64

15:43:26.0556 5548  Processor architecture: Intel x64

15:43:26.0556 5548  Number of processors: 2

15:43:26.0556 5548  Page size: 0x1000

15:43:26.0556 5548  Boot type: Normal boot

15:43:26.0556 5548  ============================================================

15:43:27.0360 5548  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0x38080, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000040

15:43:27.0381 5548  ============================================================

15:43:27.0381 5548  \Device\Harddisk0\DR0:

15:43:27.0381 5548  MBR partitions:

15:43:27.0381 5548  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

15:43:27.0381 5548  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x7FCC800

15:43:27.0381 5548  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x7FFF000, BlocksNum 0x32386800

15:43:27.0381 5548  ============================================================

15:43:27.0398 5548  C: <-> \Device\Harddisk0\DR0\Partition2

15:43:27.0428 5548  D: <-> \Device\Harddisk0\DR0\Partition3

15:43:27.0429 5548  ============================================================

15:43:27.0429 5548  Initialize success

15:43:27.0429 5548  ============================================================

15:44:10.0949 5160  ============================================================

15:44:10.0949 5160  Scan started

15:44:10.0949 5160  Mode: Manual; SigCheck; TDLFS; 

15:44:10.0949 5160  ============================================================

15:44:11.0355 5160  ================ Scan system memory ========================

15:44:11.0355 5160  System memory - ok

15:44:11.0355 5160  ================ Scan services =============================

15:44:11.0449 5160  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

15:44:11.0527 5160  1394ohci - ok

15:44:11.0542 5160  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

15:44:11.0574 5160  ACPI - ok

15:44:11.0589 5160  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

15:44:11.0605 5160  AcpiPmi - ok

15:44:11.0683 5160  [ 563CDCFEEAEF97163E206AF71A61AA6E ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

15:44:11.0699 5160  AdobeFlashPlayerUpdateSvc - ok

15:44:11.0730 5160  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

15:44:11.0761 5160  adp94xx - ok

15:44:11.0777 5160  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

15:44:11.0792 5160  adpahci - ok

15:44:11.0792 5160  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

15:44:11.0808 5160  adpu320 - ok

15:44:11.0839 5160  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

15:44:11.0886 5160  AeLookupSvc - ok

15:44:11.0933 5160  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys

15:44:11.0949 5160  AFD - ok

15:44:12.0011 5160  [ 48008D4EA73C1058F36D323A644410D4 ] AgereModemAudio C:\Program Files\LSI SoftModem\agr64svc.exe

15:44:12.0027 5160  AgereModemAudio - ok

15:44:12.0058 5160  [ D7CF6568AA20A5B5CDBFECD097B615DB ] AgereSoftModem  C:\Windows\system32\DRIVERS\agrsm64.sys

15:44:12.0105 5160  AgereSoftModem - ok

15:44:12.0136 5160  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys

15:44:12.0152 5160  agp440 - ok

15:44:12.0183 5160  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe

15:44:12.0214 5160  ALG - ok

15:44:12.0230 5160  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys

15:44:12.0246 5160  aliide - ok

15:44:12.0261 5160  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys

15:44:12.0277 5160  amdide - ok

15:44:12.0292 5160  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

15:44:12.0324 5160  AmdK8 - ok

15:44:12.0339 5160  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

15:44:12.0355 5160  AmdPPM - ok

15:44:12.0371 5160  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys

15:44:12.0386 5160  amdsata - ok

15:44:12.0402 5160  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

15:44:12.0417 5160  amdsbs - ok

15:44:12.0433 5160  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

15:44:12.0433 5160  amdxata - ok

15:44:12.0480 5160  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys

15:44:12.0527 5160  AppID - ok

15:44:12.0542 5160  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

15:44:12.0589 5160  AppIDSvc - ok

15:44:12.0621 5160  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll

15:44:12.0652 5160  Appinfo - ok

15:44:12.0683 5160  [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt         C:\Windows\System32\appmgmts.dll

15:44:12.0699 5160  AppMgmt - ok

15:44:12.0714 5160  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\DRIVERS\arc.sys

15:44:12.0730 5160  arc - ok

15:44:12.0746 5160  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

15:44:12.0761 5160  arcsas - ok

15:44:12.0777 5160  [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk        C:\Windows\system32\drivers\aswFsBlk.sys

15:44:12.0792 5160  aswFsBlk - ok

15:44:12.0824 5160  [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys

15:44:12.0839 5160  aswMonFlt - ok

15:44:12.0855 5160  [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr          C:\Windows\System32\Drivers\aswrdr2.sys

15:44:12.0855 5160  aswRdr - ok

15:44:12.0886 5160  [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys

15:44:12.0902 5160  aswSnx - ok

15:44:12.0949 5160  [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP           C:\Windows\system32\drivers\aswSP.sys

15:44:12.0964 5160  aswSP - ok

15:44:13.0011 5160  [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi          C:\Windows\system32\drivers\aswTdi.sys

15:44:13.0011 5160  aswTdi - ok

15:44:13.0042 5160  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

15:44:13.0105 5160  AsyncMac - ok

15:44:13.0121 5160  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys

15:44:13.0136 5160  atapi - ok

15:44:13.0167 5160  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

15:44:13.0230 5160  AudioEndpointBuilder - ok

15:44:13.0246 5160  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll

15:44:13.0277 5160  AudioSrv - ok

15:44:13.0324 5160  [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe

15:44:13.0339 5160  avast! Antivirus - ok

15:44:13.0371 5160  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll

15:44:13.0402 5160  AxInstSV - ok

15:44:13.0449 5160  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbda.sys

15:44:13.0480 5160  b06bdrv - ok

15:44:13.0511 5160  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys

15:44:13.0542 5160  b57nd60a - ok

15:44:13.0558 5160  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll

15:44:13.0589 5160  BDESVC - ok

15:44:13.0589 5160  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys

15:44:13.0652 5160  Beep - ok

15:44:13.0714 5160  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll

15:44:13.0746 5160  BFE - ok

15:44:13.0777 5160  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll

15:44:13.0839 5160  BITS - ok

15:44:13.0855 5160  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

15:44:13.0886 5160  blbdrive - ok

15:44:13.0902 5160  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

15:44:13.0917 5160  bowser - ok

15:44:13.0933 5160  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

15:44:13.0964 5160  BrFiltLo - ok

15:44:13.0964 5160  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

15:44:13.0980 5160  BrFiltUp - ok

15:44:14.0011 5160  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll

15:44:14.0027 5160  Browser - ok

15:44:14.0027 5160  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

15:44:14.0074 5160  Brserid - ok

15:44:14.0089 5160  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

15:44:14.0105 5160  BrSerWdm - ok

15:44:14.0121 5160  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

15:44:14.0136 5160  BrUsbMdm - ok

15:44:14.0152 5160  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

15:44:14.0167 5160  BrUsbSer - ok

15:44:14.0167 5160  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

15:44:14.0183 5160  BTHMODEM - ok

15:44:14.0214 5160  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll

15:44:14.0246 5160  bthserv - ok

15:44:14.0261 5160  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

15:44:14.0292 5160  cdfs - ok

15:44:14.0339 5160  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

15:44:14.0371 5160  cdrom - ok

15:44:14.0402 5160  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll

15:44:14.0433 5160  CertPropSvc - ok

15:44:14.0464 5160  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

15:44:14.0496 5160  circlass - ok

15:44:14.0511 5160  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys

15:44:14.0527 5160  CLFS - ok

15:44:14.0589 5160  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

15:44:14.0605 5160  clr_optimization_v2.0.50727_32 - ok

15:44:14.0636 5160  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

15:44:14.0652 5160  clr_optimization_v2.0.50727_64 - ok

15:44:14.0683 5160  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

15:44:14.0699 5160  clr_optimization_v4.0.30319_32 - ok

15:44:14.0714 5160  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

15:44:14.0730 5160  clr_optimization_v4.0.30319_64 - ok

15:44:14.0746 5160  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

15:44:14.0777 5160  CmBatt - ok

15:44:14.0792 5160  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys

15:44:14.0808 5160  cmdide - ok

15:44:14.0839 5160  [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG             C:\Windows\system32\Drivers\cng.sys

15:44:14.0871 5160  CNG - ok

15:44:14.0902 5160  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

15:44:14.0902 5160  Compbatt - ok

15:44:14.0949 5160  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

15:44:14.0964 5160  CompositeBus - ok

15:44:14.0996 5160  COMSysApp - ok

15:44:14.0996 5160  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

15:44:15.0011 5160  crcdisk - ok

15:44:15.0042 5160  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll

15:44:15.0058 5160  CryptSvc - ok

15:44:15.0089 5160  [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC             C:\Windows\system32\drivers\csc.sys

15:44:15.0136 5160  CSC - ok

15:44:15.0152 5160  [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService      C:\Windows\System32\cscsvc.dll

15:44:15.0183 5160  CscService - ok

15:44:15.0214 5160  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll

15:44:15.0261 5160  DcomLaunch - ok

15:44:15.0292 5160  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll

15:44:15.0339 5160  defragsvc - ok

15:44:15.0371 5160  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

15:44:15.0417 5160  DfsC - ok

15:44:15.0433 5160  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll

15:44:15.0464 5160  Dhcp - ok

15:44:15.0480 5160  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys

15:44:15.0527 5160  discache - ok

15:44:15.0558 5160  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\DRIVERS\disk.sys

15:44:15.0558 5160  Disk - ok

15:44:15.0589 5160  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

15:44:15.0621 5160  Dnscache - ok

15:44:15.0652 5160  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll

15:44:15.0699 5160  dot3svc - ok

15:44:15.0714 5160  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll

15:44:15.0761 5160  DPS - ok

15:44:15.0792 5160  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

15:44:15.0808 5160  drmkaud - ok

15:44:15.0855 5160  [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01     C:\Windows\system32\DRIVERS\dtsoftbus01.sys

15:44:15.0871 5160  dtsoftbus01 - ok

15:44:15.0902 5160  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

15:44:15.0933 5160  DXGKrnl - ok

15:44:15.0949 5160  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll

15:44:15.0996 5160  EapHost - ok

15:44:16.0058 5160  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\DRIVERS\evbda.sys

15:44:16.0121 5160  ebdrv - ok

15:44:16.0136 5160  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe

15:44:16.0167 5160  EFS - ok

15:44:16.0214 5160  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

15:44:16.0246 5160  ehRecvr - ok

15:44:16.0277 5160  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe

15:44:16.0292 5160  ehSched - ok

15:44:16.0308 5160  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

15:44:16.0339 5160  elxstor - ok

15:44:16.0355 5160  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys

15:44:16.0371 5160  ErrDev - ok

15:44:16.0402 5160  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll

15:44:16.0449 5160  EventSystem - ok

15:44:16.0464 5160  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys

15:44:16.0496 5160  exfat - ok

15:44:16.0527 5160  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys

15:44:16.0558 5160  fastfat - ok

15:44:16.0621 5160  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe

15:44:16.0652 5160  Fax - ok

15:44:16.0667 5160  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

15:44:16.0699 5160  fdc - ok

15:44:16.0730 5160  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll

15:44:16.0777 5160  fdPHost - ok

15:44:16.0777 5160  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll

15:44:16.0824 5160  FDResPub - ok

15:44:16.0855 5160  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

15:44:16.0871 5160  FileInfo - ok

15:44:16.0886 5160  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

15:44:16.0917 5160  Filetrace - ok

15:44:16.0933 5160  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

15:44:16.0949 5160  flpydisk - ok

15:44:16.0996 5160  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

15:44:17.0011 5160  FltMgr - ok

15:44:17.0042 5160  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache       C:\Windows\system32\FntCache.dll

15:44:17.0089 5160  FontCache - ok

15:44:17.0136 5160  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

15:44:17.0152 5160  FontCache3.0.0.0 - ok

15:44:17.0167 5160  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

15:44:17.0183 5160  FsDepends - ok

15:44:17.0199 5160  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

15:44:17.0214 5160  Fs_Rec - ok

15:44:17.0261 5160  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

15:44:17.0277 5160  fvevol - ok

15:44:17.0292 5160  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

15:44:17.0308 5160  gagp30kx - ok

15:44:17.0339 5160  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll

15:44:17.0402 5160  gpsvc - ok

15:44:17.0496 5160  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:44:17.0511 5160  gupdate - ok

15:44:17.0527 5160  [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

15:44:17.0527 5160  gupdatem - ok

15:44:17.0558 5160  [ C1B577B2169900F4CF7190C39F085794 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

15:44:17.0574 5160  gusvc - ok

15:44:17.0589 5160  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

15:44:17.0621 5160  hcw85cir - ok

15:44:17.0667 5160  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

15:44:17.0699 5160  HdAudAddService - ok

15:44:17.0730 5160  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

15:44:17.0746 5160  HDAudBus - ok

15:44:17.0761 5160  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

15:44:17.0792 5160  HidBatt - ok

15:44:17.0808 5160  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

15:44:17.0839 5160  HidBth - ok

15:44:17.0855 5160  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

15:44:17.0871 5160  HidIr - ok

15:44:17.0902 5160  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll

15:44:17.0933 5160  hidserv - ok

15:44:17.0980 5160  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

15:44:17.0996 5160  HidUsb - ok

15:44:18.0027 5160  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll

15:44:18.0089 5160  hkmsvc - ok

15:44:18.0105 5160  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

15:44:18.0136 5160  HomeGroupListener - ok

15:44:18.0152 5160  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

15:44:18.0183 5160  HomeGroupProvider - ok

15:44:18.0214 5160  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

15:44:18.0230 5160  HpSAMD - ok

15:44:18.0261 5160  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

15:44:18.0324 5160  HTTP - ok

15:44:18.0339 5160  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

15:44:18.0355 5160  hwpolicy - ok

15:44:18.0371 5160  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

15:44:18.0386 5160  i8042prt - ok

15:44:18.0402 5160  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

15:44:18.0433 5160  iaStorV - ok

15:44:18.0464 5160  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

15:44:18.0480 5160  idsvc - ok

15:44:18.0511 5160  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

15:44:18.0527 5160  iirsp - ok

15:44:18.0574 5160  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll

15:44:18.0621 5160  IKEEXT - ok

15:44:18.0636 5160  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys

15:44:18.0652 5160  intelide - ok

15:44:18.0667 5160  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

15:44:18.0683 5160  intelppm - ok

15:44:18.0699 5160  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

15:44:18.0746 5160  IPBusEnum - ok

15:44:18.0761 5160  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:44:18.0792 5160  IpFilterDriver - ok

15:44:18.0839 5160  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

15:44:18.0871 5160  iphlpsvc - ok

15:44:18.0886 5160  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

15:44:18.0902 5160  IPMIDRV - ok

15:44:18.0917 5160  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

15:44:18.0964 5160  IPNAT - ok

15:44:18.0980 5160  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

15:44:19.0011 5160  IRENUM - ok

15:44:19.0027 5160  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

15:44:19.0042 5160  isapnp - ok

15:44:19.0058 5160  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

15:44:19.0074 5160  iScsiPrt - ok

15:44:19.0105 5160  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

15:44:19.0105 5160  kbdclass - ok

15:44:19.0136 5160  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

15:44:19.0167 5160  kbdhid - ok

15:44:19.0183 5160  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe

15:44:19.0199 5160  KeyIso - ok

15:44:19.0214 5160  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

15:44:19.0230 5160  KSecDD - ok

15:44:19.0261 5160  [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

15:44:19.0277 5160  KSecPkg - ok

15:44:19.0292 5160  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys

15:44:19.0339 5160  ksthunk - ok

15:44:19.0355 5160  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll

15:44:19.0402 5160  KtmRm - ok

15:44:19.0449 5160  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll

15:44:19.0496 5160  LanmanServer - ok

15:44:19.0527 5160  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

15:44:19.0574 5160  LanmanWorkstation - ok

15:44:19.0652 5160  [ 7772DFAB22611050B79504E671B06E6E ] LBTServ         C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

15:44:19.0667 5160  LBTServ - ok

15:44:19.0699 5160  [ 241F2648ADF090E2A10095BD6D6F5DCB ] LHidFilt        C:\Windows\system32\DRIVERS\LHidFilt.Sys

15:44:19.0714 5160  LHidFilt - ok

15:44:19.0730 5160  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

15:44:19.0777 5160  lltdio - ok

15:44:19.0792 5160  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll

15:44:19.0839 5160  lltdsvc - ok

15:44:19.0855 5160  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll

15:44:19.0886 5160  lmhosts - ok

15:44:19.0933 5160  [ 342ED5A4B3326014438F36D22D803737 ] LMouFilt        C:\Windows\system32\DRIVERS\LMouFilt.Sys

15:44:19.0933 5160  LMouFilt - ok

15:44:19.0964 5160  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

15:44:19.0980 5160  LSI_FC - ok

15:44:19.0996 5160  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

15:44:20.0011 5160  LSI_SAS - ok

15:44:20.0027 5160  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

15:44:20.0027 5160  LSI_SAS2 - ok

15:44:20.0042 5160  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

15:44:20.0058 5160  LSI_SCSI - ok

15:44:20.0074 5160  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys

15:44:20.0121 5160  luafv - ok

15:44:20.0136 5160  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

15:44:20.0167 5160  Mcx2Svc - ok

15:44:20.0183 5160  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

15:44:20.0199 5160  megasas - ok

15:44:20.0214 5160  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

15:44:20.0230 5160  MegaSR - ok

15:44:20.0246 5160  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll

15:44:20.0292 5160  MMCSS - ok

15:44:20.0324 5160  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys

15:44:20.0355 5160  Modem - ok

15:44:20.0386 5160  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

15:44:20.0402 5160  monitor - ok

15:44:20.0417 5160  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

15:44:20.0433 5160  mouclass - ok

15:44:20.0464 5160  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

15:44:20.0464 5160  mouhid - ok

15:44:20.0496 5160  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

15:44:20.0511 5160  mountmgr - ok

15:44:20.0558 5160  [ 5C5E45DDABEFBC9F564F1D5C83258B8F ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

15:44:20.0574 5160  MozillaMaintenance - ok

15:44:20.0589 5160  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys

15:44:20.0605 5160  mpio - ok

15:44:20.0605 5160  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

15:44:20.0636 5160  mpsdrv - ok

15:44:20.0683 5160  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll

15:44:20.0746 5160  MpsSvc - ok

15:44:20.0761 5160  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

15:44:20.0792 5160  MRxDAV - ok

15:44:20.0824 5160  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

15:44:20.0839 5160  mrxsmb - ok

15:44:20.0839 5160  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:44:20.0871 5160  mrxsmb10 - ok

15:44:20.0902 5160  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:44:20.0902 5160  mrxsmb20 - ok

15:44:20.0917 5160  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys

15:44:20.0933 5160  msahci - ok

15:44:20.0964 5160  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

15:44:20.0980 5160  msdsm - ok

15:44:20.0980 5160  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe

15:44:21.0011 5160  MSDTC - ok

15:44:21.0042 5160  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

15:44:21.0089 5160  Msfs - ok

15:44:21.0089 5160  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

15:44:21.0136 5160  mshidkmdf - ok

15:44:21.0152 5160  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

15:44:21.0167 5160  msisadrv - ok

15:44:21.0183 5160  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

15:44:21.0230 5160  MSiSCSI - ok

15:44:21.0230 5160  msiserver - ok

15:44:21.0261 5160  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

15:44:21.0308 5160  MSKSSRV - ok

15:44:21.0324 5160  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

15:44:21.0355 5160  MSPCLOCK - ok

15:44:21.0371 5160  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

15:44:21.0417 5160  MSPQM - ok

15:44:21.0449 5160  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

15:44:21.0464 5160  MsRPC - ok

15:44:21.0496 5160  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

15:44:21.0496 5160  mssmbios - ok

15:44:21.0527 5160  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

15:44:21.0558 5160  MSTEE - ok

15:44:21.0574 5160  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

15:44:21.0574 5160  MTConfig - ok

15:44:21.0605 5160  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys

15:44:21.0621 5160  Mup - ok

15:44:21.0652 5160  MySQL - ok

15:44:21.0683 5160  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll

15:44:21.0730 5160  napagent - ok

15:44:21.0761 5160  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

15:44:21.0792 5160  NativeWifiP - ok

15:44:21.0855 5160  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys

15:44:21.0886 5160  NDIS - ok

15:44:21.0917 5160  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

15:44:21.0949 5160  NdisCap - ok

15:44:21.0964 5160  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

15:44:22.0011 5160  NdisTapi - ok

15:44:22.0042 5160  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

15:44:22.0089 5160  Ndisuio - ok

15:44:22.0105 5160  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

15:44:22.0152 5160  NdisWan - ok

15:44:22.0183 5160  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

15:44:22.0214 5160  NDProxy - ok

15:44:22.0246 5160  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

15:44:22.0277 5160  NetBIOS - ok

15:44:22.0308 5160  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

15:44:22.0355 5160  NetBT - ok

15:44:22.0371 5160  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe

15:44:22.0386 5160  Netlogon - ok

15:44:22.0402 5160  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll

15:44:22.0449 5160  Netman - ok

15:44:22.0464 5160  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll

15:44:22.0511 5160  netprofm - ok

15:44:22.0527 5160  [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

15:44:22.0542 5160  NetTcpPortSharing - ok

15:44:22.0558 5160  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

15:44:22.0574 5160  nfrd960 - ok

15:44:22.0605 5160  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll

15:44:22.0636 5160  NlaSvc - ok

15:44:22.0652 5160  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

15:44:22.0699 5160  Npfs - ok

15:44:22.0714 5160  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll

15:44:22.0761 5160  nsi - ok

15:44:22.0777 5160  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

15:44:22.0824 5160  nsiproxy - ok

15:44:22.0855 5160  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

15:44:22.0917 5160  Ntfs - ok

15:44:22.0917 5160  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys

15:44:22.0964 5160  Null - ok

15:44:23.0121 5160  [ 26AA3C7E6E1DB7107BF93503F6F57E88 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

15:44:23.0277 5160  nvlddmkm - ok

15:44:23.0292 5160  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys

15:44:23.0308 5160  nvraid - ok

15:44:23.0324 5160  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys

15:44:23.0339 5160  nvstor - ok

15:44:23.0402 5160  [ A83AC04D672567CAF8BE7A4D73C0B850 ] nvsvc           C:\Windows\system32\nvvsvc.exe

15:44:23.0417 5160  nvsvc - ok

15:44:23.0480 5160  [ FB660F80BDC4F13D594996976AFAECD9 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

15:44:23.0527 5160  nvUpdatusService - ok

15:44:23.0542 5160  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

15:44:23.0558 5160  nv_agp - ok

15:44:23.0574 5160  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

15:44:23.0589 5160  ohci1394 - ok

15:44:23.0621 5160  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

15:44:23.0636 5160  p2pimsvc - ok

15:44:23.0667 5160  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll

15:44:23.0683 5160  p2psvc - ok

15:44:23.0699 5160  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

15:44:23.0714 5160  Parport - ok

15:44:23.0746 5160  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys

15:44:23.0761 5160  partmgr - ok

15:44:23.0777 5160  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll

15:44:23.0792 5160  PcaSvc - ok

15:44:23.0808 5160  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys

15:44:23.0824 5160  pci - ok

15:44:23.0839 5160  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys

15:44:23.0855 5160  pciide - ok

15:44:23.0855 5160  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

15:44:23.0871 5160  pcmcia - ok

15:44:23.0886 5160  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys

15:44:23.0902 5160  pcw - ok

15:44:23.0917 5160  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

15:44:23.0964 5160  PEAUTH - ok

15:44:23.0996 5160  [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

15:44:24.0058 5160  PeerDistSvc - ok

15:44:24.0105 5160  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe

15:44:24.0121 5160  PerfHost - ok

15:44:24.0167 5160  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll

15:44:24.0246 5160  pla - ok

15:44:24.0292 5160  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

15:44:24.0308 5160  PlugPlay - ok

15:44:24.0339 5160  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

15:44:24.0355 5160  PNRPAutoReg - ok

15:44:24.0386 5160  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

15:44:24.0402 5160  PNRPsvc - ok

15:44:24.0417 5160  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

15:44:24.0480 5160  PolicyAgent - ok

15:44:24.0496 5160  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll

15:44:24.0542 5160  Power - ok

15:44:24.0574 5160  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

15:44:24.0621 5160  PptpMiniport - ok

15:44:24.0636 5160  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\DRIVERS\processr.sys

15:44:24.0652 5160  Processor - ok

15:44:24.0699 5160  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll

15:44:24.0730 5160  ProfSvc - ok

15:44:24.0746 5160  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

15:44:24.0761 5160  ProtectedStorage - ok

15:44:24.0792 5160  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

15:44:24.0839 5160  Psched - ok

15:44:24.0886 5160  [ FB46E9A827A8799EBD7BFA9128C91F37 ] PSI             C:\Windows\system32\DRIVERS\psi_mf.sys

15:44:24.0886 5160  PSI - ok

15:44:24.0933 5160  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

15:44:24.0980 5160  ql2300 - ok

15:44:24.0996 5160  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

15:44:25.0011 5160  ql40xx - ok

15:44:25.0027 5160  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll

15:44:25.0074 5160  QWAVE - ok

15:44:25.0089 5160  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

15:44:25.0121 5160  QWAVEdrv - ok

15:44:25.0136 5160  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

15:44:25.0167 5160  RasAcd - ok

15:44:25.0199 5160  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

15:44:25.0230 5160  RasAgileVpn - ok

15:44:25.0246 5160  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll

15:44:25.0292 5160  RasAuto - ok

15:44:25.0308 5160  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

15:44:25.0355 5160  Rasl2tp - ok

15:44:25.0386 5160  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll

15:44:25.0417 5160  RasMan - ok

15:44:25.0433 5160  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

15:44:25.0464 5160  RasPppoe - ok

15:44:25.0496 5160  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

15:44:25.0542 5160  RasSstp - ok

15:44:25.0574 5160  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

15:44:25.0605 5160  rdbss - ok

15:44:25.0621 5160  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

15:44:25.0636 5160  rdpbus - ok

15:44:25.0636 5160  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

15:44:25.0667 5160  RDPCDD - ok

15:44:25.0699 5160  [ 1B6163C503398B23FF8B939C67747683 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

15:44:25.0714 5160  RDPDR - ok

15:44:25.0746 5160  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

15:44:25.0792 5160  RDPENCDD - ok

15:44:25.0808 5160  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

15:44:25.0839 5160  RDPREFMP - ok

15:44:25.0855 5160  [ 70CBA1A0C98600A2AA1863479B35CB90 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

15:44:25.0886 5160  RdpVideoMiniport - ok

15:44:25.0902 5160  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

15:44:25.0933 5160  RDPWD - ok

15:44:25.0964 5160  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

15:44:25.0980 5160  rdyboost - ok

15:44:25.0996 5160  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll

15:44:26.0042 5160  RemoteAccess - ok

15:44:26.0074 5160  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

15:44:26.0121 5160  RemoteRegistry - ok

15:44:26.0136 5160  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

15:44:26.0183 5160  RpcEptMapper - ok

15:44:26.0199 5160  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe

15:44:26.0214 5160  RpcLocator - ok

15:44:26.0261 5160  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll

15:44:26.0292 5160  RpcSs - ok

15:44:26.0324 5160  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

15:44:26.0355 5160  rspndr - ok

15:44:26.0371 5160  [ ABCB5A38A0D85BDF69B7877E1AD1EED5 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys

15:44:26.0402 5160  RTL8167 - ok

15:44:26.0433 5160  [ 945AB249D12CBE044782430C6013AA1A ] RTL8187B        C:\Windows\system32\DRIVERS\rtl8187B.sys

15:44:26.0449 5160  RTL8187B - ok

15:44:26.0480 5160  [ E60C0A09F997826C7627B244195AB581 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

15:44:26.0511 5160  s3cap - ok

15:44:26.0511 5160  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe

15:44:26.0527 5160  SamSs - ok

15:44:26.0542 5160  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

15:44:26.0558 5160  sbp2port - ok

15:44:26.0574 5160  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll

15:44:26.0621 5160  SCardSvr - ok

15:44:26.0652 5160  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

15:44:26.0683 5160  scfilter - ok

15:44:26.0730 5160  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll

15:44:26.0792 5160  Schedule - ok

15:44:26.0824 5160  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll

15:44:26.0855 5160  SCPolicySvc - ok

15:44:26.0871 5160  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

15:44:26.0886 5160  SDRSVC - ok

15:44:26.0917 5160  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

15:44:26.0964 5160  secdrv - ok

15:44:26.0980 5160  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll

15:44:27.0011 5160  seclogon - ok

15:44:27.0074 5160  [ 5B66DB4877BBAC9F7493AA8D84421E49 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe

15:44:27.0105 5160  Secunia PSI Agent - ok

15:44:27.0121 5160  [ 0E88FDF474F2CDD370A4A6CE77D018F0 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe

15:44:27.0136 5160  Secunia Update Agent - ok

15:44:27.0167 5160  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll

15:44:27.0261 5160  SENS - ok

15:44:27.0324 5160  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll

15:44:27.0355 5160  SensrSvc - ok

15:44:27.0371 5160  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

15:44:27.0402 5160  Serenum - ok

15:44:27.0433 5160  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

15:44:27.0449 5160  Serial - ok

15:44:27.0464 5160  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

15:44:27.0496 5160  sermouse - ok

15:44:27.0527 5160  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll

15:44:27.0574 5160  SessionEnv - ok

15:44:27.0589 5160  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

15:44:27.0605 5160  sffdisk - ok

15:44:27.0621 5160  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

15:44:27.0652 5160  sffp_mmc - ok

15:44:27.0667 5160  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

15:44:27.0699 5160  sffp_sd - ok

15:44:27.0714 5160  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

15:44:27.0730 5160  sfloppy - ok

15:44:27.0746 5160  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll

15:44:27.0792 5160  SharedAccess - ok

15:44:27.0824 5160  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

15:44:27.0855 5160  ShellHWDetection - ok

15:44:27.0871 5160  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

15:44:27.0886 5160  SiSRaid2 - ok

15:44:27.0902 5160  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

15:44:27.0917 5160  SiSRaid4 - ok

15:44:27.0964 5160  [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe

15:44:27.0964 5160  SkypeUpdate - ok

15:44:27.0996 5160  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys

15:44:28.0027 5160  Smb - ok

15:44:28.0074 5160  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

15:44:28.0089 5160  SNMPTRAP - ok

15:44:28.0105 5160  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys

15:44:28.0121 5160  spldr - ok

15:44:28.0152 5160  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe

15:44:28.0183 5160  Spooler - ok

15:44:28.0246 5160  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe

15:44:28.0355 5160  sppsvc - ok

15:44:28.0386 5160  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

15:44:28.0417 5160  sppuinotify - ok

15:44:28.0464 5160  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys

15:44:28.0496 5160  srv - ok

15:44:28.0511 5160  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

15:44:28.0527 5160  srv2 - ok

15:44:28.0558 5160  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

15:44:28.0589 5160  srvnet - ok

15:44:28.0621 5160  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

15:44:28.0652 5160  SSDPSRV - ok

15:44:28.0667 5160  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll

15:44:28.0714 5160  SstpSvc - ok

15:44:28.0746 5160  Steam Client Service - ok

15:44:28.0761 5160  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

15:44:28.0777 5160  stexstor - ok

15:44:28.0808 5160  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll

15:44:28.0855 5160  stisvc - ok

15:44:28.0886 5160  [ 7785DC213270D2FC066538DAF94087E7 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

15:44:28.0886 5160  storflt - ok

15:44:28.0902 5160  [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

15:44:28.0917 5160  storvsc - ok

15:44:28.0917 5160  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\drivers\swenum.sys

15:44:28.0933 5160  swenum - ok

15:44:28.0964 5160  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll

15:44:29.0011 5160  swprv - ok

15:44:29.0011 5160  Synth3dVsc - ok

15:44:29.0074 5160  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll

15:44:29.0136 5160  SysMain - ok

15:44:29.0167 5160  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

15:44:29.0183 5160  TabletInputService - ok

15:44:29.0214 5160  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll

15:44:29.0261 5160  TapiSrv - ok

15:44:29.0277 5160  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll

15:44:29.0324 5160  TBS - ok

15:44:29.0371 5160  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

15:44:29.0417 5160  Tcpip - ok

15:44:29.0464 5160  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

15:44:29.0496 5160  TCPIP6 - ok

15:44:29.0527 5160  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

15:44:29.0558 5160  tcpipreg - ok

15:44:29.0574 5160  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

15:44:29.0589 5160  TDPIPE - ok

15:44:29.0605 5160  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

15:44:29.0636 5160  TDTCP - ok

15:44:29.0683 5160  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

15:44:29.0714 5160  tdx - ok

15:44:29.0808 5160  [ 5E53CF8AD0FD33B35000C113656AB37B ] TeamViewer7     C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

15:44:29.0839 5160  TeamViewer7 - ok

15:44:29.0871 5160  [ F5520DBB47C60EE83024B38720ABDA24 ] teamviewervpn   C:\Windows\system32\DRIVERS\teamviewervpn.sys

15:44:29.0886 5160  teamviewervpn - ok

15:44:29.0902 5160  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\drivers\termdd.sys

15:44:29.0917 5160  TermDD - ok

15:44:29.0933 5160  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll

15:44:29.0996 5160  TermService - ok

15:44:30.0011 5160  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll

15:44:30.0042 5160  Themes - ok

15:44:30.0058 5160  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll

15:44:30.0089 5160  THREADORDER - ok

15:44:30.0105 5160  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll

15:44:30.0152 5160  TrkWks - ok

15:44:30.0199 5160  [ 370A6907DDF79532A39319492B1FA38A ] truecrypt       C:\Windows\system32\drivers\truecrypt.sys

15:44:30.0214 5160  truecrypt - ok

15:44:30.0261 5160  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

15:44:30.0308 5160  TrustedInstaller - ok

15:44:30.0324 5160  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

15:44:30.0355 5160  tssecsrv - ok

15:44:30.0386 5160  [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

15:44:30.0402 5160  TsUsbFlt - ok

15:44:30.0402 5160  tsusbhub - ok

15:44:30.0449 5160  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

15:44:30.0480 5160  tunnel - ok

15:44:30.0511 5160  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

15:44:30.0527 5160  uagp35 - ok

15:44:30.0558 5160  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

15:44:30.0589 5160  udfs - ok

15:44:30.0621 5160  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

15:44:30.0636 5160  UI0Detect - ok

15:44:30.0652 5160  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

15:44:30.0667 5160  uliagpkx - ok

15:44:30.0683 5160  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\drivers\umbus.sys

15:44:30.0714 5160  umbus - ok

15:44:30.0730 5160  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

15:44:30.0746 5160  UmPass - ok

15:44:30.0777 5160  [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService    C:\Windows\System32\umrdp.dll

15:44:30.0808 5160  UmRdpService - ok

15:44:30.0839 5160  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll

15:44:30.0871 5160  upnphost - ok

15:44:30.0902 5160  [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys

15:44:30.0917 5160  usbaudio - ok

15:44:30.0949 5160  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

15:44:30.0964 5160  usbccgp - ok

15:44:30.0980 5160  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

15:44:31.0011 5160  usbcir - ok

15:44:31.0027 5160  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

15:44:31.0058 5160  usbehci - ok

15:44:31.0074 5160  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

15:44:31.0105 5160  usbhub - ok

15:44:31.0121 5160  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys

15:44:31.0136 5160  usbohci - ok

15:44:31.0167 5160  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

15:44:31.0183 5160  usbprint - ok

15:44:31.0230 5160  [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan         C:\Windows\system32\DRIVERS\usbscan.sys

15:44:31.0261 5160  usbscan - ok

15:44:31.0261 5160  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:44:31.0292 5160  USBSTOR - ok

15:44:31.0308 5160  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

15:44:31.0324 5160  usbuhci - ok

15:44:31.0355 5160  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll

15:44:31.0402 5160  UxSms - ok

15:44:31.0417 5160  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe

15:44:31.0433 5160  VaultSvc - ok

15:44:31.0449 5160  [ 57A6B43FB25B965869837350A6F1DA9E ] VBoxNetAdp      C:\Windows\system32\DRIVERS\VBoxNetAdp.sys

15:44:31.0464 5160  VBoxNetAdp - ok

15:44:31.0480 5160  VBoxNetFlt - ok

15:44:31.0511 5160  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

15:44:31.0527 5160  vdrvroot - ok

15:44:31.0558 5160  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe

15:44:31.0605 5160  vds - ok

15:44:31.0636 5160  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

15:44:31.0652 5160  vga - ok

15:44:31.0667 5160  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys

15:44:31.0699 5160  VgaSave - ok

15:44:31.0730 5160  VGPU - ok

15:44:31.0746 5160  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

15:44:31.0761 5160  vhdmp - ok

15:44:31.0792 5160  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys

15:44:31.0808 5160  viaide - ok

15:44:31.0824 5160  [ 86EA3E79AE350FEA5331A1303054005F ] vmbus           C:\Windows\system32\drivers\vmbus.sys

15:44:31.0839 5160  vmbus - ok

15:44:31.0855 5160  [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

15:44:31.0871 5160  VMBusHID - ok

15:44:31.0886 5160  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

15:44:31.0902 5160  volmgr - ok

15:44:31.0933 5160  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

15:44:31.0949 5160  volmgrx - ok

15:44:31.0964 5160  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

15:44:31.0980 5160  volsnap - ok

15:44:31.0996 5160  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

15:44:32.0011 5160  vsmraid - ok

15:44:32.0058 5160  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe

15:44:32.0136 5160  VSS - ok

15:44:32.0136 5160  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

15:44:32.0167 5160  vwifibus - ok

15:44:32.0199 5160  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys

15:44:32.0214 5160  vwififlt - ok

15:44:32.0246 5160  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll

15:44:32.0277 5160  W32Time - ok

15:44:32.0292 5160  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

15:44:32.0324 5160  WacomPen - ok

15:44:32.0386 5160  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

15:44:32.0464 5160  WANARP - ok

15:44:32.0527 5160  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

15:44:32.0558 5160  Wanarpv6 - ok

15:44:32.0605 5160  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

15:44:32.0636 5160  WatAdminSvc - ok

15:44:32.0683 5160  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe

15:44:32.0730 5160  wbengine - ok

15:44:32.0761 5160  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

15:44:32.0777 5160  WbioSrvc - ok

15:44:32.0808 5160  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll

15:44:32.0839 5160  wcncsvc - ok

15:44:32.0855 5160  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

15:44:32.0871 5160  WcsPlugInService - ok

15:44:32.0902 5160  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\DRIVERS\wd.sys

15:44:32.0917 5160  Wd - ok

15:44:32.0949 5160  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

15:44:32.0980 5160  Wdf01000 - ok

15:44:32.0996 5160  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll

15:44:33.0027 5160  WdiServiceHost - ok

15:44:33.0027 5160  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll

15:44:33.0042 5160  WdiSystemHost - ok

15:44:33.0074 5160  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll

15:44:33.0105 5160  WebClient - ok

15:44:33.0136 5160  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll

15:44:33.0167 5160  Wecsvc - ok

15:44:33.0183 5160  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll

15:44:33.0214 5160  wercplsupport - ok

15:44:33.0246 5160  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll

15:44:33.0277 5160  WerSvc - ok

15:44:33.0308 5160  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

15:44:33.0339 5160  WfpLwf - ok

15:44:33.0339 5160  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

15:44:33.0355 5160  WIMMount - ok

15:44:33.0355 5160  WinDefend - ok

15:44:33.0371 5160  WinHttpAutoProxySvc - ok

15:44:33.0402 5160  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

15:44:33.0433 5160  Winmgmt - ok

15:44:33.0496 5160  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll

15:44:33.0558 5160  WinRM - ok

15:44:33.0605 5160  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys

15:44:33.0621 5160  WinUsb - ok

15:44:33.0652 5160  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll

15:44:33.0699 5160  Wlansvc - ok

15:44:33.0714 5160  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

15:44:33.0730 5160  WmiAcpi - ok

15:44:33.0761 5160  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

15:44:33.0777 5160  wmiApSrv - ok

15:44:33.0808 5160  WMPNetworkSvc - ok

15:44:33.0824 5160  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll

15:44:33.0839 5160  WPCSvc - ok

15:44:33.0871 5160  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

15:44:33.0886 5160  WPDBusEnum - ok

15:44:33.0902 5160  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

15:44:33.0949 5160  ws2ifsl - ok

15:44:33.0964 5160  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll

15:44:33.0996 5160  wscsvc - ok

15:44:33.0996 5160  WSearch - ok

15:44:34.0058 5160  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll

15:44:34.0121 5160  wuauserv - ok

15:44:34.0136 5160  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

15:44:34.0167 5160  WudfPf - ok

15:44:34.0183 5160  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

15:44:34.0199 5160  WUDFRd - ok

15:44:34.0246 5160  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

15:44:34.0261 5160  wudfsvc - ok

15:44:34.0292 5160  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll

15:44:34.0324 5160  WwanSvc - ok

15:44:34.0324 5160  ================ Scan global ===============================

15:44:34.0339 5160  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

15:44:34.0371 5160  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:44:34.0386 5160  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

15:44:34.0402 5160  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

15:44:34.0417 5160  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

15:44:34.0433 5160  [Global] - ok

15:44:34.0433 5160  ================ Scan MBR ==================================

15:44:34.0433 5160  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

15:44:34.0855 5160  \Device\Harddisk0\DR0 - ok

15:44:34.0855 5160  ================ Scan VBR ==================================

15:44:34.0855 5160  [ 06C6B5FBF9F7F17C0D96E475FE3F2638 ] \Device\Harddisk0\DR0\Partition1

15:44:34.0855 5160  \Device\Harddisk0\DR0\Partition1 - ok

15:44:34.0886 5160  [ F8BEFBDFBE10FC2AA0D8DFB0A48EE1AD ] \Device\Harddisk0\DR0\Partition2

15:44:34.0886 5160  \Device\Harddisk0\DR0\Partition2 - ok

15:44:34.0886 5160  [ 89391F71FE6FA9B1792526E0C14BAA51 ] \Device\Harddisk0\DR0\Partition3

15:44:34.0902 5160  \Device\Harddisk0\DR0\Partition3 - ok

15:44:34.0902 5160  ============================================================

15:44:34.0902 5160  Scan finished

15:44:34.0902 5160  ============================================================

15:44:34.0902 4664  Detected object count: 0

15:44:34.0902 4664  Actual detected object count: 0

15:45:27.0714 1576  Deinitialize success

Hi,
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Combofix-Log:

Code:

ComboFix 13-02-21.02 - myo 21.02.2013  16:33:57.1.2 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.4095.2803 [GMT 1:00]

ausgeführt von:: d:\desktop\ComboFix.exe

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\isRS-000.tmp

c:\windows\SysWow64\muzapp.exe

.

----- Datei Replikatoren -----

.

c:\program files (x86)\Git\libexec\git-core\git-add.exe

c:\program files (x86)\Git\libexec\git-core\git-annotate.exe

c:\program files (x86)\Git\libexec\git-core\git-apply.exe

c:\program files (x86)\Git\libexec\git-core\git-archive.exe

c:\program files (x86)\Git\libexec\git-core\git-bisect--helper.exe

c:\program files (x86)\Git\libexec\git-core\git-blame.exe

c:\program files (x86)\Git\libexec\git-core\git-branch.exe

c:\program files (x86)\Git\libexec\git-core\git-bundle.exe

c:\program files (x86)\Git\libexec\git-core\git-cat-file.exe

c:\program files (x86)\Git\libexec\git-core\git-check-attr.exe

c:\program files (x86)\Git\libexec\git-core\git-check-ref-format.exe

c:\program files (x86)\Git\libexec\git-core\git-checkout-index.exe

c:\program files (x86)\Git\libexec\git-core\git-checkout.exe

c:\program files (x86)\Git\libexec\git-core\git-cherry-pick.exe

c:\program files (x86)\Git\libexec\git-core\git-cherry.exe

c:\program files (x86)\Git\libexec\git-core\git-clean.exe

c:\program files (x86)\Git\libexec\git-core\git-clone.exe

c:\program files (x86)\Git\libexec\git-core\git-commit-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-commit.exe

c:\program files (x86)\Git\libexec\git-core\git-config.exe

c:\program files (x86)\Git\libexec\git-core\git-count-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-describe.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-files.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-index.exe

c:\program files (x86)\Git\libexec\git-core\git-diff-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-diff.exe

c:\program files (x86)\Git\libexec\git-core\git-fast-export.exe

c:\program files (x86)\Git\libexec\git-core\git-fetch-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-fetch.exe

c:\program files (x86)\Git\libexec\git-core\git-fmt-merge-msg.exe

c:\program files (x86)\Git\libexec\git-core\git-for-each-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-format-patch.exe

c:\program files (x86)\Git\libexec\git-core\git-fsck-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-fsck.exe

c:\program files (x86)\Git\libexec\git-core\git-gc.exe

c:\program files (x86)\Git\libexec\git-core\git-get-tar-commit-id.exe

c:\program files (x86)\Git\libexec\git-core\git-grep.exe

c:\program files (x86)\Git\libexec\git-core\git-hash-object.exe

c:\program files (x86)\Git\libexec\git-core\git-help.exe

c:\program files (x86)\Git\libexec\git-core\git-index-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-init-db.exe

c:\program files (x86)\Git\libexec\git-core\git-init.exe

c:\program files (x86)\Git\libexec\git-core\git-log.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-files.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-ls-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-mailinfo.exe

c:\program files (x86)\Git\libexec\git-core\git-mailsplit.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-base.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-file.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-index.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-ours.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-recursive.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-subtree.exe

c:\program files (x86)\Git\libexec\git-core\git-merge-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-merge.exe

c:\program files (x86)\Git\libexec\git-core\git-mktag.exe

c:\program files (x86)\Git\libexec\git-core\git-mktree.exe

c:\program files (x86)\Git\libexec\git-core\git-mv.exe

c:\program files (x86)\Git\libexec\git-core\git-name-rev.exe

c:\program files (x86)\Git\libexec\git-core\git-notes.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-redundant.exe

c:\program files (x86)\Git\libexec\git-core\git-pack-refs.exe

c:\program files (x86)\Git\libexec\git-core\git-patch-id.exe

c:\program files (x86)\Git\libexec\git-core\git-peek-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-prune-packed.exe

c:\program files (x86)\Git\libexec\git-core\git-prune.exe

c:\program files (x86)\Git\libexec\git-core\git-push.exe

c:\program files (x86)\Git\libexec\git-core\git-read-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-receive-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-reflog.exe

c:\program files (x86)\Git\libexec\git-core\git-remote-ext.exe

c:\program files (x86)\Git\libexec\git-core\git-remote-fd.exe

c:\program files (x86)\Git\libexec\git-core\git-remote.exe

c:\program files (x86)\Git\libexec\git-core\git-replace.exe

c:\program files (x86)\Git\libexec\git-core\git-repo-config.exe

c:\program files (x86)\Git\libexec\git-core\git-rerere.exe

c:\program files (x86)\Git\libexec\git-core\git-reset.exe

c:\program files (x86)\Git\libexec\git-core\git-rev-list.exe

c:\program files (x86)\Git\libexec\git-core\git-rev-parse.exe

c:\program files (x86)\Git\libexec\git-core\git-revert.exe

c:\program files (x86)\Git\libexec\git-core\git-rm.exe

c:\program files (x86)\Git\libexec\git-core\git-send-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-shortlog.exe

c:\program files (x86)\Git\libexec\git-core\git-show-branch.exe

c:\program files (x86)\Git\libexec\git-core\git-show-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-show.exe

c:\program files (x86)\Git\libexec\git-core\git-stage.exe

c:\program files (x86)\Git\libexec\git-core\git-status.exe

c:\program files (x86)\Git\libexec\git-core\git-stripspace.exe

c:\program files (x86)\Git\libexec\git-core\git-symbolic-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-tag.exe

c:\program files (x86)\Git\libexec\git-core\git-tar-tree.exe

c:\program files (x86)\Git\libexec\git-core\git-unpack-file.exe

c:\program files (x86)\Git\libexec\git-core\git-unpack-objects.exe

c:\program files (x86)\Git\libexec\git-core\git-update-index.exe

c:\program files (x86)\Git\libexec\git-core\git-update-ref.exe

c:\program files (x86)\Git\libexec\git-core\git-update-server-info.exe

c:\program files (x86)\Git\libexec\git-core\git-upload-archive.exe

c:\program files (x86)\Git\libexec\git-core\git-var.exe

c:\program files (x86)\Git\libexec\git-core\git-verify-pack.exe

c:\program files (x86)\Git\libexec\git-core\git-verify-tag.exe

c:\program files (x86)\Git\libexec\git-core\git-whatchanged.exe

c:\program files (x86)\Git\libexec\git-core\git-write-tree.exe

c:\program files (x86)\Git\libexec\git-core\git.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-01-21 bis 2013-02-21  ))))))))))))))))))))))))))))))

.

.

2013-02-21 15:39 . 2013-02-21 15:39        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2013-02-21 15:39 . 2013-02-21 15:39        --------        d-----w-        c:\users\myo\AppData\Local\temp

2013-02-21 15:39 . 2013-02-21 15:39        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-02-21 15:28 . 2013-02-21 15:28        --------        d-----w-        c:\users\myo\AppData\Local\Macromedia

2013-02-21 15:27 . 2013-02-21 15:28        --------        d-----w-        c:\users\myo\AppData\Roaming\Skype

2013-02-21 14:36 . 2013-02-21 14:36        --------        d-----w-        c:\program files (x86)\Mythicsoft

2013-02-21 09:58 . 2013-02-21 09:58        310688        ----a-w-        c:\windows\system32\javaws.exe

2013-02-21 09:58 . 2013-02-21 09:58        108448        ----a-w-        c:\windows\system32\WindowsAccessBridge-64.dll

2013-02-21 09:58 . 2013-02-21 09:58        188832        ----a-w-        c:\windows\system32\javaw.exe

2013-02-21 09:58 . 2013-02-21 09:58        188320        ----a-w-        c:\windows\system32\java.exe

2013-02-21 09:57 . 2013-02-21 09:57        --------        d-----w-        c:\program files (x86)\Common Files\Java

2013-02-21 09:56 . 2013-02-21 09:56        95648        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-02-21 09:56 . 2013-02-21 09:56        --------        d-----w-        c:\program files (x86)\Java

2013-02-19 09:04 . 2013-01-08 05:32        9161176        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{D0D75F44-3DC1-4286-8FA0-8FAA828DE03D}\mpengine.dll

2013-02-13 23:58 . 2013-02-13 23:58        --------        d-----w-        c:\users\myo\AppData\Roaming\MySQL

2013-02-13 23:19 . 2013-01-09 01:10        996352        ----a-w-        c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 23:19 . 2013-01-08 22:01        768000        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 07:52 . 2013-01-05 05:53        5553512        ----a-w-        c:\windows\system32\ntoskrnl.exe

2013-02-13 07:52 . 2013-01-05 05:00        3967848        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2013-02-13 07:52 . 2013-01-05 05:00        3913064        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2013-02-13 07:52 . 2013-01-04 03:26        3153408        ----a-w-        c:\windows\system32\win32k.sys

2013-02-13 07:51 . 2013-01-04 05:46        215040        ----a-w-        c:\windows\system32\winsrv.dll

2013-02-13 07:51 . 2013-01-04 04:51        5120        ----a-w-        c:\windows\SysWow64\wow32.dll

2013-02-13 07:51 . 2013-01-04 02:47        25600        ----a-w-        c:\windows\SysWow64\setup16.exe

2013-02-13 07:51 . 2013-01-04 02:47        7680        ----a-w-        c:\windows\SysWow64\instnm.exe

2013-02-13 07:51 . 2013-01-04 02:47        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll

2013-02-13 07:51 . 2013-01-04 02:47        2048        ----a-w-        c:\windows\SysWow64\user.exe

2013-02-13 07:51 . 2013-01-03 06:00        1913192        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-02-13 07:51 . 2013-01-03 06:00        288088        ----a-w-        c:\windows\system32\drivers\FWPKCLNT.SYS

2013-02-08 14:05 . 2013-02-08 14:05        16365936        ----a-w-        c:\windows\SysWow64\FlashPlayerInstaller.exe

2013-01-31 23:52 . 2013-01-31 23:52        --------        d-----w-        c:\users\ho\AppData\Local\Amazon

2013-01-25 10:02 . 2013-01-25 10:02        --------        d-----w-        c:\users\myo\AppData\Local\Programs

2013-01-25 09:58 . 2013-01-25 09:58        --------        d-----w-        c:\users\ho\AppData\Local\Tracker Software

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-02-21 09:58 . 2012-03-21 19:46        963488        ----a-w-        c:\windows\system32\deployJava1.dll

2013-02-21 09:58 . 2012-03-21 19:46        1085344        ----a-w-        c:\windows\system32\npdeployJava1.dll

2013-02-21 09:56 . 2012-06-22 10:07        861088        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2013-02-21 09:56 . 2012-03-21 15:54        782240        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2013-02-13 23:24 . 2012-03-21 00:47        70004024        ----a-w-        c:\windows\system32\MRT.exe

2013-02-13 11:12 . 2012-04-01 10:10        691568        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-02-13 11:12 . 2012-03-21 23:18        71024        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-01-18 13:20 . 2012-03-21 00:28        18960        ----a-w-        c:\windows\system32\drivers\LNonPnP.sys

2013-01-17 00:28 . 2012-03-20 17:28        273840        ------w-        c:\windows\system32\MpSigStub.exe

2013-01-09 00:16 . 2013-01-09 00:16        283200        ----a-w-        c:\windows\system32\drivers\dtsoftbus01.sys

2013-01-04 04:43 . 2013-02-13 07:51        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2012-12-29 10:34 . 2013-01-08 22:52        9389888        ----a-w-        c:\windows\system32\nvcuda.dll

2012-12-29 10:34 . 2013-01-08 22:52        7931896        ----a-w-        c:\windows\SysWow64\nvcuda.dll

2012-12-29 10:34 . 2013-01-08 22:52        7565240        ----a-w-        c:\windows\system32\nvopencl.dll

2012-12-29 10:34 . 2013-01-08 22:52        6263784        ----a-w-        c:\windows\SysWow64\nvopencl.dll

2012-12-29 10:34 . 2013-01-08 22:52        2904504        ----a-w-        c:\windows\system32\nvcuvid.dll

2012-12-29 10:34 . 2013-01-08 22:52        2720696        ----a-w-        c:\windows\SysWow64\nvcuvid.dll

2012-12-29 10:34 . 2013-01-08 22:52        26931128        ----a-w-        c:\windows\system32\nvoglv64.dll

2012-12-29 10:34 . 2013-01-08 22:52        25256376        ----a-w-        c:\windows\system32\nvcompiler.dll

2012-12-29 10:34 . 2013-01-08 22:52        2344888        ----a-w-        c:\windows\system32\nvcuvenc.dll

2012-12-29 10:34 . 2013-01-08 22:52        20450232        ----a-w-        c:\windows\SysWow64\nvoglv32.dll

2012-12-29 10:34 . 2013-01-08 22:52        1985976        ----a-w-        c:\windows\SysWow64\nvcuvenc.dll

2012-12-29 10:34 . 2013-01-08 22:52        17560504        ----a-w-        c:\windows\SysWow64\nvcompiler.dll

2012-12-29 10:34 . 2013-01-08 22:52        15129064        ----a-w-        c:\windows\SysWow64\nvd3dum.dll

2012-12-29 10:34 . 2013-01-08 22:52        12641120        ----a-w-        c:\windows\SysWow64\nvwgf2um.dll

2012-12-29 10:34 . 2013-01-08 22:52        10997176        ----a-w-        c:\windows\system32\drivers\nvlddmkm.sys

2012-12-29 10:34 . 2013-01-08 22:52        2504248        ----a-w-        c:\windows\SysWow64\nvapi.dll

2012-12-29 10:34 . 2012-12-19 23:35        1813432        ----a-w-        c:\windows\system32\nvdispco64.dll

2012-12-29 10:34 . 2012-12-19 23:35        15052368        ----a-w-        c:\windows\system32\nvwgf2umx.dll

2012-12-29 10:34 . 2012-12-19 23:35        1504696        ----a-w-        c:\windows\system32\nvdispgenco64.dll

2012-12-29 10:34 . 2012-12-19 23:35        2824656        ----a-w-        c:\windows\system32\nvapi64.dll

2012-12-29 10:34 . 2012-12-19 23:35        18054312        ----a-w-        c:\windows\system32\nvd3dumx.dll

2012-12-29 08:40 . 2012-12-19 23:37        6382008        ----a-w-        c:\windows\system32\nvcpl.dll

2012-12-29 08:40 . 2012-12-19 23:37        3455416        ----a-w-        c:\windows\system32\nvsvc64.dll

2012-12-29 08:40 . 2012-12-19 23:37        884152        ----a-w-        c:\windows\system32\nvvsvc.exe

2012-12-29 08:40 . 2012-12-19 23:37        63928        ----a-w-        c:\windows\system32\nvshext.dll

2012-12-29 08:40 . 2012-12-19 23:37        2558392        ----a-w-        c:\windows\system32\nvsvcr.dll

2012-12-29 08:40 . 2012-12-19 23:37        118712        ----a-w-        c:\windows\system32\nvmctray.dll

2012-12-16 17:11 . 2012-12-21 02:01        46080        ----a-w-        c:\windows\system32\atmlib.dll

2012-12-16 14:45 . 2012-12-21 02:01        367616        ----a-w-        c:\windows\system32\atmfd.dll

2012-12-16 14:13 . 2012-12-21 02:01        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

2012-12-16 14:13 . 2012-12-21 02:01        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2012-12-07 13:20 . 2013-01-09 00:17        441856        ----a-w-        c:\windows\system32\Wpc.dll

2012-12-07 13:15 . 2013-01-09 00:17        2746368        ----a-w-        c:\windows\system32\gameux.dll

2012-12-07 12:26 . 2013-01-09 00:17        308736        ----a-w-        c:\windows\SysWow64\Wpc.dll

2012-12-07 12:20 . 2013-01-09 00:17        2576384        ----a-w-        c:\windows\SysWow64\gameux.dll

2012-12-07 11:20 . 2013-01-09 00:17        30720        ----a-w-        c:\windows\system32\usk.rs

2012-12-07 11:20 . 2013-01-09 00:17        43520        ----a-w-        c:\windows\system32\csrr.rs

2012-12-07 11:20 . 2013-01-09 00:17        23552        ----a-w-        c:\windows\system32\oflc.rs

2012-12-07 11:20 . 2013-01-09 00:17        45568        ----a-w-        c:\windows\system32\oflc-nz.rs

2012-12-07 11:20 . 2013-01-09 00:17        44544        ----a-w-        c:\windows\system32\pegibbfc.rs

2012-12-07 11:20 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\system32\pegi-fi.rs

2012-12-07 11:20 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\system32\pegi-pt.rs

2012-12-07 11:19 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\system32\pegi.rs

2012-12-07 11:19 . 2013-01-09 00:17        46592        ----a-w-        c:\windows\system32\fpb.rs

2012-12-07 11:19 . 2013-01-09 00:17        40960        ----a-w-        c:\windows\system32\cob-au.rs

2012-12-07 11:19 . 2013-01-09 00:17        15360        ----a-w-        c:\windows\system32\djctq.rs

2012-12-07 11:19 . 2013-01-09 00:17        21504        ----a-w-        c:\windows\system32\grb.rs

2012-12-07 11:19 . 2013-01-09 00:17        55296        ----a-w-        c:\windows\system32\cero.rs

2012-12-07 11:19 . 2013-01-09 00:17        51712        ----a-w-        c:\windows\system32\esrb.rs

2012-12-07 10:46 . 2013-01-09 00:17        43520        ----a-w-        c:\windows\SysWow64\csrr.rs

2012-12-07 10:46 . 2013-01-09 00:17        30720        ----a-w-        c:\windows\SysWow64\usk.rs

2012-12-07 10:46 . 2013-01-09 00:17        45568        ----a-w-        c:\windows\SysWow64\oflc-nz.rs

2012-12-07 10:46 . 2013-01-09 00:17        44544        ----a-w-        c:\windows\SysWow64\pegibbfc.rs

2012-12-07 10:46 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\SysWow64\pegi-pt.rs

2012-12-07 10:46 . 2013-01-09 00:17        23552        ----a-w-        c:\windows\SysWow64\oflc.rs

2012-12-07 10:46 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\SysWow64\pegi-fi.rs

2012-12-07 10:46 . 2013-01-09 00:17        46592        ----a-w-        c:\windows\SysWow64\fpb.rs

2012-12-07 10:46 . 2013-01-09 00:17        20480        ----a-w-        c:\windows\SysWow64\pegi.rs

2012-12-07 10:46 . 2013-01-09 00:17        21504        ----a-w-        c:\windows\SysWow64\grb.rs

2012-12-07 10:46 . 2013-01-09 00:17        40960        ----a-w-        c:\windows\SysWow64\cob-au.rs

2012-12-07 10:46 . 2013-01-09 00:17        15360        ----a-w-        c:\windows\SysWow64\djctq.rs

2012-12-07 10:46 . 2013-01-09 00:17        51712        ----a-w-        c:\windows\SysWow64\esrb.rs

2012-12-07 10:46 . 2013-01-09 00:17        55296        ----a-w-        c:\windows\SysWow64\cero.rs

2012-12-03 15:47 . 2012-12-19 23:36        60776        ----a-w-        c:\windows\system32\OpenCL.dll

2012-12-03 15:47 . 2012-12-19 23:36        52584        ----a-w-        c:\windows\SysWow64\OpenCL.dll

2012-11-30 05:45 . 2013-01-09 00:18        362496        ----a-w-        c:\windows\system32\wow64win.dll

2012-11-30 05:45 . 2013-01-09 00:18        243200        ----a-w-        c:\windows\system32\wow64.dll

2012-11-30 05:45 . 2013-01-09 00:18        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

2012-11-30 05:43 . 2013-01-09 00:18        16384        ----a-w-        c:\windows\system32\ntvdm64.dll

2012-11-30 05:41 . 2013-01-09 00:18        424448        ----a-w-        c:\windows\system32\KernelBase.dll

2012-11-30 05:41 . 2013-01-09 00:18        1161216        ----a-w-        c:\windows\system32\kernel32.dll

2012-11-30 05:38 . 2013-01-09 00:18        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2012-11-30 05:38 . 2013-01-09 00:18        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-11-09 17877168]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

.

c:\users\myo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech . Produktregistrierung.lnk - c:\program files (x86)\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2011-10-14 291896]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]

R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtl8187B.sys [2010-03-31 450048]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2011-12-16 35112]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-09-07 147288]

R3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-03-20 1255736]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-09 283200]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]

S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2011-10-14 994360]

S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2011-10-14 399416]

S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-08-31 2754984]

S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

2013-02-21 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-16 11:12]

.

2013-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-29 22:12]

.

2013-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-29 22:12]

.

2013-02-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-860810461-1551829927-3967776457-1001Core.job

- c:\users\ho\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-23 18:56]

.

2013-02-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-860810461-1551829927-3967776457-1001UA.job

- c:\users\ho\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-23 18:56]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-10-30 22:50        133400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2012-12-17 18:50        755816        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]

2012-12-17 18:50        755816        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2012-12-17 18:50        755816        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2012-12-17 18:50        755816        ----a-w-        c:\program files (x86)\Google\Drive\googledrivesync64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com/ie

mLocal Page = c:\windows\SysWOW64\blank.htm

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\myo\AppData\Roaming\Mozilla\Firefox\Profiles\dzk1hqui.default\

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]

"ImagePath"="\"c:\program files\MySQL\MySQL Server 5.5\bin\mysqld\" --defaults-file=\"c:\program files\MySQL\MySQL Server 5.5\my.ini\" MySQL"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_168_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_168_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_168_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_168.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_168.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_168.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_168.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:000000b5

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-02-21  16:41:48

ComboFix-quarantined-files.txt  2013-02-21 15:41

.

Vor Suchlauf: 8 Verzeichnis(se), 25.237.872.640 Bytes frei

Nach Suchlauf: 12 Verzeichnis(se), 27.383.693.312 Bytes frei

.

- - End Of File - - 7E85C464B747DBC7284158D9CC8EB3DF

Hi,
malwarebytes:
Downloade Dir bitte Malwarebytes

Installiere
das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche
nach Aktualisierung
Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
Wenn der Scan beendet
ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste
das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Code:

Malwarebytes Anti-Malware 1.70.0.1100

www.malwarebytes.org
 

Datenbank Version: v2013.02.21.06
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

myo :: MYOHO [Administrator]
 

21.02.2013 17:23:22

mbam-log-2013-02-21 (17-23-22).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 475621

Laufzeit: 41 Minute(n), 35 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 1

D:\Alt\wl\Wilkinson Longs\Wilkinson Longs.exe (Trojan.Inject) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Hi,
lade den CCleaner standard:
CCleaner - Download - Filepony
falls der CCleaner
bereits instaliert, überspringen.
öffnen, Tools (extras),uninstall Llist, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.

Code:

7-Zip 9.20 (x64 edition)        Igor Pavlov        21.03.2012        4,53 MB        9.20.00.0 notwendig

Adobe Flash Player 11 ActiveX        Adobe Systems Incorporated        13.02.2013        6,00 MB        11.6.602.168 notwendig

Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        13.02.2013        6,00 MB        11.6.602.168 notwendig

Agent Ransack Version 1.7.3                21.02.2013 notwendig

Amazon Kindle        Amazon        01.02.2013 notwendig        

Audacity 2.0.2        Audacity Team        28.10.2012        43,5 MB        2.0.2 notwendig

avast! Free Antivirus        AVAST Software        02.11.2012                7.0.1474.0 notwendig

CanoScan Toolbox Ver4.9                02.04.2012                 notwendig

CCleaner        Piriform        23.01.2013                3.27 notwendig

Counter-Strike        Valve        15.07.2012                 notwendig

DAEMON Tools Lite        DT Soft Ltd        09.01.2013                4.46.1.0328 notwendig

DVD Shrink 3.2 deutsch (DeCSS-frei)        DVD Shrink        26.09.2012         notwendig        

DVDFab 8.1.7.8 (17/04/2012) Qt        Fengtao Software Inc.        11.05.2012        51,5 MB         notwendig

ElsterFormular        Landesfinanzdirektion Thüringen        21.03.2012        160 MB        13.1.1.8479p notwendig

foobar2000 v1.1.13        Peter Pawlowski        21.06.2012        7,40 MB        1.1.13 notwendig

FreeRIP 3.80        GreenTree Applications SRL        06.09.2012                3.80 notwendig

GanttProject                17.08.2012                 notwendig

GIMP 2.8.0        The GIMP Team        03.06.2012        241 MB        2.8.0 notwendig

Git version 1.7.10-preview20120409                15.05.2012        75,4 MB        1.7.10-preview20120409 notwendig

GnuCash 2.4.10        GnuCash Development Team        27.06.2012        282 MB         notwendig

Google Chrome        Google Inc.        23.03.2012                24.0.1312.57 notwendig

Google Drive        Google, Inc.        16.01.2013        16,2 MB        1.7.4018.3496 notwendig

Google Earth Plug-in        Google        21.01.2013        80,7 MB        7.0.2.8415 notwendig

IETester v0.4.8 (remove only)        Core Services        21.07.2012                0.4.8 notwendig

ImgBurn        LIGHTNING UK!        11.05.2012                2.5.7.0 notwendig

Inkscape 0.48.3.1                09.05.2012                0.48.3.1 notwendig

inSSIDer        MetaGeek        07.11.2012        4,31 MB        2.1.6 notwendig

Java 7 Update 15        Oracle        21.02.2013        129 MB        7.0.150 notwendig

Java 7 Update 15 (64-bit)        Oracle        21.02.2013        128 MB        7.0.150 notwendig

Java SE Development Kit 7 Update 15 (64-bit)        Oracle        21.02.2013        189 MB        1.7.0.150 notwendig

JDownloader 0.9        AppWork GmbH        09.08.2012                0.9 notwendig

JDownloader 2        AppWork GmbH        15.02.2013                2 notwendig

LAME v3.99.3 (for Windows)                28.10.2012        1,52 MB         notwendig

LibreOffice 3.5        The Document Foundation        17.12.2012        533 MB        3.5.7.2 notwendig

Logitech SetPoint 6.32        Logitech        21.03.2012        39,0 MB        6.32.20 notwendig

LSI USB 2.0 Soft Modem        LSI Corporation        29.05.2012        16,0 KB        2.2.102 notwendig

Malwarebytes Anti-Malware Version 1.70.0.1100        Malwarebytes Corporation        21.02.2013        18,4 MB        1.70.0.1100 notwendig

Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        08.08.2012        38,8 MB        4.0.30320 unbekannt

Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        08.08.2012        2,93 MB        4.0.30320 unbekannt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17        Microsoft Corporation        21.03.2012        788 KB        9.0.30729 unbekannt

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148        Microsoft Corporation        21.03.2012        788 KB        9.0.30729.4148 unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        20.03.2012        596 KB        9.0.30729.4148 unbekannt

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        21.03.2012        600 KB        9.0.30729.6161 unbekannt

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319        Microsoft Corporation        01.08.2012        11,0 MB        10.0.30319 unbekannt

Mozilla Firefox 19.0 (x86 de)        Mozilla        21.02.2013        44,0 MB        19.0 notwendig

Mozilla Maintenance Service        Mozilla        21.02.2013        330 KB        19.0 unbekannt

Mozilla Thunderbird 17.0.3 (x86 de)        Mozilla        21.02.2013        41,9 MB        17.0.3 notwendig

MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        28.05.2012        1,27 MB        4.20.9870.0 unbekannt

MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        28.05.2012        1,33 MB        4.20.9876.0 unbekannt

MSXML 4.0 SP3 Parser        Microsoft Corporation        02.09.2012        1,47 MB        4.30.2100.0 unbekannt

MSXML 4.0 SP3 Parser (KB2721691)        Microsoft Corporation        02.09.2012        1,53 MB        4.30.2114.0 unbekannt

MSXML 4.0 SP3 Parser (KB2758694)        Microsoft Corporation        09.01.2013        1,54 MB        4.30.2117.0 unbekannt

MySQL Server 5.5        Oracle Corporation        01.08.2012        123 MB        5.5.26 notwendig

MySQL Workbench 5.2 CE        Oracle Corporation        14.02.2013        107 MB        5.2.46 notwendig

Notepad++                27.01.2013                6.2.2 notwendig

NVIDIA Grafiktreiber 310.90        NVIDIA Corporation        08.01.2013                310.90 notwendig

NVIDIA PhysX-Systemsoftware 9.12.1031        NVIDIA Corporation        20.12.2012                9.12.1031 unbekannt

NVIDIA Update 1.11.3        NVIDIA Corporation        08.01.2013                1.11.3 notwendig

Opera 12.14        Opera Software ASA        08.02.2013                12.14.1738 notwendig

PDF-Viewer        Tracker Software Products Ltd        25.01.2013        46,6 MB        2.5.208.0 notwendig

PDF-XChange Viewer        Tracker Software Products Ltd.        21.03.2012        66,5 MB        2.5.201.0 notwendig

PDFCreator        Frank Heindörfer, Philip Chinery        23.07.2012                1.4.2 notwendig

Picasa 3        Google, Inc.        02.04.2012                3.8 notwendig

Secunia PSI (2.0.0.4003)        Secunia        21.03.2012        3,47 MB        2.0.0.4003 notwendig

SIW version 2011.10.29        Topala Software Solutions        27.05.2012        5,84 MB        2011.10.29 notwendig

Skype™ 6.0        Skype Technologies S.A.        22.11.2012        20,3 MB        6.0.126 notwendig

SMPlayer 0.8.1        Ricardo Villalba        16.11.2012                0.8.1 notwendig

Steam        Valve Corporation        15.07.2012        35,4 MB        1.0.0.0 notwendig

TeamViewer 7        TeamViewer        16.10.2012                7.0.14563 notwendig

TreeSize Free V2.7        JAM Software        18.06.2012        3,96 MB        2.7 notwendig

TrueCrypt        TrueCrypt Foundation        31.07.2012                7.1a notwendig

VLC media player 2.0.5        VideoLAN        06.01.2013                2.0.5 notwendig

X-Chat 2.8.6-2        SilvereX        14.06.2012                2.8.6-2 notwendig

Zattoo4 4.0.5        Zattoo Inc.        10.06.2012                4.0.5 notwendig

deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden, instalieren.
Secunia : mal auf Version 3 upgraden.
TeamViewer : würde ich nur bei Bedarf instalieren, falls es drauf bleiben muss, Version 8 hohlen.

System ist ganz gut mit Updates versorgt, sehr gut.

Öffne CCleaner, analysieren, starten, PC neustarten.
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Adobe Flash Player habe ich deinstalliert, obwohl sie meines Wissen uptodate waren. Aber da ich für fast alles ohnehin nur Chrome nutze...

Auf Secunia bin ich ein wenig stinkig:
Mittlerweile nehme ich an, dass Secunia meinen Rechner heute vormittag neu gestartet hat. Um 10:36 gab es die Avast Meldung über die bösartige Website und in der Secunia PSI Auto-Updates History ist Java Runtime Environment um 10:42 mit "Success" angegeben. Komisch nur, dass ich die JRE bisher immer selbst installieren musste und ein Neustart nie nötig war.
Sowas ist bisher nie vorgekommen.
Ich werde Secunia in Kürze upgraden.

TeamViewer habe ich erstmal deinstalliert. Ich kann ich ja schnell neu laden, wenn ich ihn brauche.

CCleaner wollte mir geschlagene 260 MB freigeben, verlangte dafür aber, meine Cookies und Session-Daten zu löschen... muss ich?

AdwCleaner ist in ca. 20 Sekunden durchgelaufen und es gab nichts zum bestätigen. Danach startete der Rechner dennoch neu. Als kein Log-File auftauchte, ließ ich es noch mal durchlaufen, neustarten: nichts. Noch ein Neustart: Nichts... Weder ein sich öffnendes Log-File, noch unter C:\.