Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Netgear HiJack Fehler (https://www.trojaner-board.de/136697-netgear-hijack-fehler.html)

Nico#7 16.06.2013 13:10
Netgear HiJack Fehler
 
Hallo Forum

meine Name ist Nico ich bin 23 Jahre alt und habe vermutlich ein Problem oder Virus auf meinem Laptop. Meine Computer Kenntnisse sind "normal".
So nun zu dem Problem. Ich habe einen Samsung Laptop mit Windows 7 64Bit und unten bei meinen Eltern eine FritzBox und bei mir oben in der Wohnung einen Netgear Repeater. Denn Repeater habe ich seit ca.3 Monaten da ich meine WLAN Verbindung verbessern wollte. Teilweise funktioniert das auch sehr gut nur leider nicht immer. Ich finde das mein Laptop manchmal sehr langsam läuft und die WLAN Verbindung dermaßen langsam ist und dann bekomme ich meistens eine Fehler Meldung.
Wenn ich z.B google.de eingebe komme ich auf den Netgear Repaeter und muss mich da anmelden. In der Eingabezeile steht dann was mit HiJack This.
Darauf hin habe ich mir das Programm HiJack This besorgt jedoch weis ich leider nicht wie ich es Anwenden soll. Ich hoffe ihr könnt mir da weiter Helfen da ich echt schon am verzweifeln bin.
Ich stelle hier schonmal das Log File:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:07:08, on 16.06.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Nico\Downloads\HiJackThis204.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SamsungDeviceConfiguration (SamsungDeviceConfigurationWinService) - Unknown owner - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 9682 bytes


Falls ich leider im falschen Unterforum bin bitte entschuldigt dies.

Grüße Nico

markusg 16.06.2013 13:11
Hi,
wie is die Signalstärke wenn das netz langsam ist?

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Nico#7 16.06.2013 13:45
Also meine Verbindung hat volle 5 Balken manchmal auch nur 4 von 5 Balken. Hier hab ich das Protokol hoffe es hilft irgendwie bei meinem Problem.OTL Logfile:
Code:
OTL logfile created on: 16.06.2013 14:19:06 - Run 1
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\Nico\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,92 Gb Total Physical Memory | 6,25 Gb Available Physical Memory | 78,97% Memory free
15,83 Gb Paging File | 14,04 Gb Available in Paging File | 88,70% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 177,00 Gb Total Space | 79,13 Gb Free Space | 44,71% Space Free | Partition Type: NTFS
Drive D: | 265,34 Gb Total Space | 259,71 Gb Free Space | 97,88% Space Free | Partition Type: NTFS
Unable to calculate disk information.
 
Computer Name: SAMSUNG | User Name: Nico | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.06.16 14:17:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Nico\Downloads\OTL.exe
PRC - [2013.05.15 14:23:06 | 002,956,336 | ---- | M] (Samsung Electronics CO., LTD.) -- C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe
PRC - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.11.13 15:08:12 | 003,487,240 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
PRC - [2012.11.13 15:07:24 | 000,168,384 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
PRC - [2012.11.13 15:07:20 | 001,369,624 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
PRC - [2012.11.13 15:07:16 | 001,103,392 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
PRC - [2012.10.30 11:03:54 | 004,471,416 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
PRC - [2012.05.30 21:55:26 | 001,112,968 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe
PRC - [2012.05.02 09:03:44 | 002,279,304 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe
PRC - [2012.04.25 14:18:10 | 000,784,264 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe
PRC - [2012.02.13 16:02:24 | 000,031,624 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
PRC - [2012.01.31 16:56:48 | 001,640,328 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe
PRC - [2011.05.05 14:44:54 | 002,656,536 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2011.05.05 14:44:52 | 000,326,424 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010.08.27 10:52:12 | 002,782,064 | ---- | M] (Samsung Electronics) -- C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2011.09.08 20:40:10 | 001,645,056 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll
MOD - [2011.02.17 02:03:20 | 000,203,776 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\WinCRT.dll
MOD - [2006.08.12 13:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Samsung\Easy Settings\HookDllPS2.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2012.08.23 17:05:12 | 003,342,640 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
SRV:64bit: - [2012.08.23 17:04:00 | 000,629,040 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2012.08.23 17:03:14 | 000,149,296 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2012.08.23 14:39:38 | 000,135,984 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2012.07.18 01:52:16 | 000,659,472 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2010.09.22 11:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2013.05.16 19:29:12 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.05.15 14:23:06 | 002,956,336 | ---- | M] (Samsung Electronics CO., LTD.) [Auto | Running] -- C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe -- (SWUpdateService)
SRV - [2013.05.10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.10.08 12:42:54 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.02.13 16:02:24 | 000,031,624 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe -- (SamsungDeviceConfigurationWinService)
SRV - [2011.05.05 14:44:54 | 002,656,536 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2011.05.05 14:44:52 | 000,326,424 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.02.12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:64bit: - [2012.12.13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012.10.08 12:42:36 | 000,030,056 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2012.09.30 12:24:08 | 011,523,072 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.08.21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012.07.18 01:49:00 | 000,198,144 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2012.07.18 01:49:00 | 000,198,144 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.01.10 15:28:16 | 012,311,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011.08.23 06:12:56 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2011.07.30 00:47:20 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI)
DRV:64bit: - [2011.07.06 07:16:24 | 000,289,704 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2011.05.13 04:13:08 | 001,440,816 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011.04.22 12:17:04 | 000,471,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.04.11 12:55:24 | 000,007,680 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SGDrv64.sys -- (SGDrv)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.02.18 01:11:54 | 000,439,320 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.10.20 18:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2012.04.14 02:32:32 | 000,015,144 | ---- | M] (Windows (R) 2003 DDK 3790 provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\rtport.sys -- (rtport)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2008.11.23 11:23:06 | 000,097,792 | ---- | M] (T0r0 2008) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\NSHE.SYS -- (NSHE)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "msn.de"
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14
FF - prefs.js..extensions.enabledAddons: ich%40maltegoetz.de:1.4.8
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:8.0.1489
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..keyword.URL: "hxxp://search.sweetim.com/search.asp?src=2&q="
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.3: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.05.21 07:59:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013.02.11 19:42:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\Extensions
[2013.02.11 19:42:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2013.05.19 19:21:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\Firefox\Profiles\cworoa6y.default\extensions
[2013.02.23 14:05:12 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Nico\AppData\Roaming\mozilla\Firefox\Profiles\cworoa6y.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013.05.19 19:21:51 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Nico\AppData\Roaming\mozilla\Firefox\Profiles\cworoa6y.default\extensions\ich@maltegoetz.de
[2012.10.23 16:29:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\Firefox\Profiles\xllk1f3y.default-1348670347175\extensions
[2013.01.05 22:00:45 | 000,220,411 | ---- | M] () (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\firefox\profiles\cworoa6y.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2013.02.14 21:51:15 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Nico\AppData\Roaming\mozilla\firefox\profiles\cworoa6y.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.05.25 09:42:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.05.25 09:42:17 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013.05.21 07:59:46 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1EB6FE8A-A7E7-44DC-A43C-700F2B798425}: DhcpNameServer = 192.168.178.1
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - AppInit_DLLs: (C:\windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\windows\SYSTEM32\Userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\windows\System32\ie4uinit.exe -UserConfig
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\windows\system32\cmd.exe /D /C start C:\windows\system32\ie4uinit.exe -ClearIconCache
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
 
MsConfig:64bit - StartUpReg: Adobe ARM - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig:64bit - StartUpReg: Spybot-S&D Cleaning - hkey= - key= - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
MsConfig:64bit - State: "services" - Reg Error: Key error.
MsConfig:64bit - State: "startup" - Reg Error: Key error.
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.06.11 21:51:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.06.11 21:50:39 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.06.11 21:50:38 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013.06.11 21:50:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2013.06.11 21:50:38 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013.06.11 21:48:29 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013.05.30 14:06:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013.05.30 14:06:24 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.05.25 09:42:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2 C:\Users\Nico\Desktop\*.tmp files -> C:\Users\Nico\Desktop\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.06.16 14:17:25 | 000,001,087 | ---- | M] () -- C:\Users\Nico\Desktop\OTL - Verknüpfung.lnk
[2013.06.16 13:04:47 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.16 13:04:47 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.16 12:56:16 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013.06.16 12:56:12 | 4204,314,623 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.13 00:52:38 | 001,520,734 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2013.06.13 00:52:38 | 000,654,400 | ---- | M] () -- C:\windows\SysNative\perfh007.dat
[2013.06.13 00:52:38 | 000,616,242 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2013.06.13 00:52:38 | 000,130,240 | ---- | M] () -- C:\windows\SysNative\perfc007.dat
[2013.06.13 00:52:38 | 000,106,622 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2013.06.11 21:51:17 | 000,001,743 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.31 17:03:47 | 000,000,884 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2013.05.30 14:09:45 | 000,002,954 | ---- | M] () -- C:\Users\Nico\Documents\cc_20130530_140939.reg
[2013.05.30 14:09:20 | 000,169,546 | ---- | M] () -- C:\Users\Nico\Documents\cc_20130530_140907.reg
[2013.05.30 14:06:27 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.05.29 22:56:11 | 000,001,906 | ---- | M] () -- C:\Users\Public\Desktop\SW Update.lnk
[2013.05.29 22:19:01 | 000,000,000 | ---- | M] () -- C:\windows\SysWow64\config.nt
[2013.05.29 22:12:18 | 000,001,396 | ---- | M] () -- C:\Users\Nico\Desktop\Klimabedienteil für mein Golf - Verknüpfung.lnk
[2013.05.18 12:44:55 | 000,297,616 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2 C:\Users\Nico\Desktop\*.tmp files -> C:\Users\Nico\Desktop\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.06.16 14:17:25 | 000,001,087 | ---- | C] () -- C:\Users\Nico\Desktop\OTL - Verknüpfung.lnk
[2013.06.11 21:51:17 | 000,001,743 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.05.30 14:09:43 | 000,002,954 | ---- | C] () -- C:\Users\Nico\Documents\cc_20130530_140939.reg
[2013.05.30 14:09:11 | 000,169,546 | ---- | C] () -- C:\Users\Nico\Documents\cc_20130530_140907.reg
[2013.05.30 14:06:27 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.05.29 22:12:18 | 000,001,396 | ---- | C] () -- C:\Users\Nico\Desktop\Klimabedienteil für mein Golf - Verknüpfung.lnk
[2013.05.21 07:59:50 | 000,189,936 | ---- | C] () -- C:\windows\SysNative\drivers\aswVmm.sys
[2013.05.21 07:59:50 | 000,065,336 | ---- | C] () -- C:\windows\SysNative\drivers\aswRvrt.sys
[2013.02.17 21:51:58 | 000,153,088 | ---- | C] () -- C:\windows\SysWow64\UNWISE.EXE
[2013.02.17 21:51:58 | 000,006,836 | ---- | C] () -- C:\windows\SysWow64\UNWISE.INI
[2012.12.27 01:41:56 | 000,149,880 | ---- | C] () -- C:\windows\wiainst64.exe
[2012.10.24 07:12:23 | 001,815,118 | ---- | C] () -- C:\Users\Nico\Localizable.strings
[2012.09.29 18:16:40 | 000,000,400 | ---- | C] () -- C:\windows\ODBC.INI
[2012.09.29 10:00:46 | 002,151,330 | ---- | C] () -- C:\Users\Nico\Handbuch_FRITZ_Box_Fon_WLAN_7050.pdf
[2012.09.25 20:50:24 | 001,500,444 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2012.01.10 15:27:24 | 000,963,884 | ---- | C] () -- C:\windows\SysWow64\igkrng600.bin
[2012.01.10 15:27:24 | 000,221,264 | ---- | C] () -- C:\windows\SysWow64\igfcg600m.bin
[2012.01.10 15:16:52 | 000,056,832 | ---- | C] () -- C:\windows\SysWow64\igdde32.dll
[2012.01.10 14:29:52 | 013,904,384 | ---- | C] () -- C:\windows\SysWow64\ig4icd32.dll
[2012.01.10 05:02:05 | 000,066,856 | ---- | C] () -- C:\windows\SysWow64\SynTPEnhPS.dll
[2012.01.09 14:11:25 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2012.01.09 13:09:08 | 000,002,660 | ---- | C] () -- C:\windows\HotFixList.ini
[2011.12.02 13:12:10 | 000,260,688 | ---- | C] () -- C:\windows\SUPDRun.exe
[2011.07.21 07:51:12 | 000,145,804 | ---- | C] () -- C:\windows\SysWow64\igcompkrng600.bin
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2012.10.24 07:10:23 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\DVDVideoSoft
[2013.03.17 13:52:32 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\Easy File Share
[2012.09.26 16:08:51 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\elsterformular
[2012.11.09 14:17:32 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\ImgBurn
[2012.10.24 07:12:23 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\mediAvatar
[2012.09.25 18:03:41 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\ProtectDISC
[2012.11.24 17:52:55 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\SoftGrid Client
[2013.02.11 19:42:57 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\TomTom
[2012.09.25 20:51:11 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\TP
[2012.10.23 16:24:58 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\VideoConverterPackages
[2012.10.24 07:31:43 | 000,000,000 | ---D | M] -- C:\Users\Nico\AppData\Roaming\XMedia Recode
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
< %SYSTEMDRIVE%\*. >
[2012.09.25 17:59:29 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012.12.27 01:42:33 | 000,000,000 | ---D | M] -- C:\Intel
[2013.04.16 20:44:44 | 000,000,000 | ---D | M] -- C:\MP4ToMP3Converter
[2013.04.16 21:48:50 | 000,000,000 | ---D | M] -- C:\Output
[2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2013.06.11 21:50:39 | 000,000,000 | R--D | M] -- C:\Program Files
[2013.06.11 21:50:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)
[2013.06.11 21:50:38 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.09.25 17:54:02 | 000,000,000 | -HSD | M] -- C:\Recovery
[2013.06.16 14:21:20 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012.09.25 17:55:46 | 000,000,000 | R--D | M] -- C:\Users
[2013.06.16 13:03:40 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< C:\Windows\system32\*.tsp >
[2009.07.14 03:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\hidphone.tsp
[2009.07.14 03:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\kmddsp.tsp
[2009.07.14 03:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\ndptsp.tsp
[2009.07.14 03:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\remotesp.tsp
[2010.11.21 05:23:55 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\unimdm.tsp
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,032,632 | ---- | C] () -- C:\windows\Tasks\SCHEDLGU.TXT
[2012.09.25 20:02:33 | 000,000,884 | ---- | C] () -- C:\windows\Tasks\Adobe Flash Player Updater.job
 
< MD5 for: AGP440.SYS  >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.11.21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2012.11.13 15:07:52 | 003,906,584 | ---- | M] (Safer-Networking Ltd.) MD5=E4A0900CF535888DDD85B10040CA3E34 -- C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe
 
< MD5 for: IASTOR.SYS  >
[2011.02.18 01:11:54 | 000,439,320 | ---- | M] (Intel Corporation) MD5=53CC5BF8B5A219119953C7ABB19A7705 -- C:\windows\SysNative\drivers\iaStor.sys
[2011.02.18 01:11:54 | 000,439,320 | ---- | M] (Intel Corporation) MD5=53CC5BF8B5A219119953C7ABB19A7705 -- C:\windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_52b32c0ad3e84c62\iaStor.sys
 
< MD5 for: IASTORV.SYS  >
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.21 05:23:47 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 08:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\windows\SysNative\drivers\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 08:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\windows\SysNative\netlogon.dll
[2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.11 08:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\windows\SysNative\drivers\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 08:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.21 05:23:47 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\windows\SysNative\scecli.dll
[2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.21 05:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\windows\SysNative\user32.dll
[2010.11.21 05:24:09 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\windows\SysNative\userinit.exe
[2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\windows\SysNative\winlogon.exe
[2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2012.09.29 10:00:46 | 002,151,330 | ---- | M] () -- C:\Users\Nico\Handbuch_FRITZ_Box_Fon_WLAN_7050.pdf
[2012.09.10 00:06:38 | 001,815,118 | ---- | M] () -- C:\Users\Nico\Localizable.strings
[2013.06.16 14:27:41 | 002,097,152 | -HS- | M] () -- C:\Users\Nico\NTUSER.DAT
[2013.06.16 14:27:41 | 000,262,144 | -HS- | M] () -- C:\Users\Nico\ntuser.dat.LOG1
[2012.09.25 17:55:46 | 000,000,000 | -HS- | M] () -- C:\Users\Nico\ntuser.dat.LOG2
[2012.09.25 18:21:47 | 000,065,536 | -HS- | M] () -- C:\Users\Nico\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2012.09.25 18:21:47 | 000,524,288 | -HS- | M] () -- C:\Users\Nico\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2012.09.25 18:21:47 | 000,524,288 | -HS- | M] () -- C:\Users\Nico\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2012.09.25 17:55:47 | 000,000,020 | -HS- | M] () -- C:\Users\Nico\ntuser.ini
[2013.06.14 18:15:56 | 000,019,456 | -HS- | M] () -- C:\Users\Nico\Thumbs.db
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
<          >

< End of report >
--- --- ---


Und was meinen die Profis dazu ? Oder fehlen noch irgend welche Angaben oder Files ?

Kann jemand daraus was schließen oder mir weiter Helfen. Wäre echt super von euch.


Grüße Nico

markusg 16.06.2013 18:08
Hi,
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Nico#7 16.06.2013 18:31
So hier das File:

19:25:46.0721 5600 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:25:47.0049 5600 ============================================================
19:25:47.0049 5600 Current date / time: 2013/06/16 19:25:47.0049
19:25:47.0049 5600 SystemInfo:
19:25:47.0049 5600
19:25:47.0049 5600 OS Version: 6.1.7601 ServicePack: 1.0
19:25:47.0049 5600 Product type: Workstation
19:25:47.0049 5600 ComputerName: SAMSUNG
19:25:47.0049 5600 UserName: Nico
19:25:47.0049 5600 Windows directory: C:\windows
19:25:47.0049 5600 System windows directory: C:\windows
19:25:47.0049 5600 Running under WOW64
19:25:47.0049 5600 Processor architecture: Intel x64
19:25:47.0049 5600 Number of processors: 4
19:25:47.0049 5600 Page size: 0x1000
19:25:47.0049 5600 Boot type: Normal boot
19:25:47.0049 5600 ============================================================
19:25:47.0688 5600 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:25:47.0704 5600 ============================================================
19:25:47.0704 5600 \Device\Harddisk0\DR0:
19:25:47.0704 5600 MBR partitions:
19:25:47.0704 5600 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
19:25:47.0704 5600 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x16200000
19:25:47.0719 5600 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x16233000, BlocksNum 0x212B0000
19:25:47.0719 5600 ============================================================
19:25:47.0766 5600 C: <-> \Device\Harddisk0\DR0\Partition2
19:25:47.0860 5600 D: <-> \Device\Harddisk0\DR0\Partition3
19:25:47.0860 5600 ============================================================
19:25:47.0860 5600 Initialize success
19:25:47.0860 5600 ============================================================
19:26:28.0404 4560 ============================================================
19:26:28.0404 4560 Scan started
19:26:28.0404 4560 Mode: Manual; SigCheck; TDLFS;
19:26:28.0404 4560 ============================================================
19:26:28.0919 4560 ================ Scan system memory ========================
19:26:28.0919 4560 System memory - ok
19:26:28.0919 4560 ================ Scan services =============================
19:26:29.0153 4560 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
19:26:29.0309 4560 1394ohci - ok
19:26:29.0356 4560 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
19:26:29.0403 4560 ACPI - ok
19:26:29.0465 4560 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
19:26:29.0512 4560 AcpiPmi - ok
19:26:29.0699 4560 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:26:29.0730 4560 AdobeARMservice - ok
19:26:29.0855 4560 [ F040037B149FD0F5A5044AE563390FA7 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:26:29.0886 4560 AdobeFlashPlayerUpdateSvc - ok
19:26:29.0949 4560 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys
19:26:30.0011 4560 adp94xx - ok
19:26:30.0042 4560 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys
19:26:30.0074 4560 adpahci - ok
19:26:30.0089 4560 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys
19:26:30.0120 4560 adpu320 - ok
19:26:30.0152 4560 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
19:26:30.0245 4560 AeLookupSvc - ok
19:26:30.0308 4560 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
19:26:30.0370 4560 AFD - ok
19:26:30.0401 4560 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
19:26:30.0432 4560 agp440 - ok
19:26:30.0432 4560 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
19:26:30.0479 4560 ALG - ok
19:26:30.0510 4560 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
19:26:30.0542 4560 aliide - ok
19:26:30.0573 4560 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
19:26:30.0604 4560 amdide - ok
19:26:30.0620 4560 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys
19:26:30.0651 4560 AmdK8 - ok
19:26:30.0666 4560 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys
19:26:30.0698 4560 AmdPPM - ok
19:26:30.0776 4560 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
19:26:30.0791 4560 amdsata - ok
19:26:30.0822 4560 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys
19:26:30.0854 4560 amdsbs - ok
19:26:30.0885 4560 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
19:26:30.0900 4560 amdxata - ok
19:26:30.0947 4560 [ 18A8E8A19CD826D31D2E74E740220001 ] AMPPAL C:\windows\system32\DRIVERS\AMPPAL.sys
19:26:31.0010 4560 AMPPAL - ok
19:26:31.0041 4560 [ 18A8E8A19CD826D31D2E74E740220001 ] AMPPALP C:\windows\system32\DRIVERS\amppal.sys
19:26:31.0072 4560 AMPPALP - ok
19:26:31.0197 4560 [ B4837176B2DBBC8E3D6F31D4853EEAEB ] AMPPALR3 C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
19:26:31.0259 4560 AMPPALR3 - ok
19:26:31.0306 4560 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
19:26:31.0384 4560 AppID - ok
19:26:31.0415 4560 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
19:26:31.0478 4560 AppIDSvc - ok
19:26:31.0509 4560 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\windows\System32\appinfo.dll
19:26:31.0556 4560 Appinfo - ok
19:26:31.0618 4560 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:26:31.0649 4560 Apple Mobile Device - ok
19:26:31.0696 4560 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys
19:26:31.0727 4560 arc - ok
19:26:31.0727 4560 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys
19:26:31.0758 4560 arcsas - ok
19:26:31.0790 4560 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk C:\windows\system32\drivers\aswFsBlk.sys
19:26:31.0821 4560 aswFsBlk - ok
19:26:31.0868 4560 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt C:\windows\system32\drivers\aswMonFlt.sys
19:26:31.0883 4560 aswMonFlt - ok
19:26:31.0930 4560 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr C:\windows\System32\Drivers\aswrdr2.sys
19:26:31.0961 4560 aswRdr - ok
19:26:31.0992 4560 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt C:\windows\system32\drivers\aswRvrt.sys
19:26:32.0024 4560 aswRvrt - ok
19:26:32.0086 4560 [ 10ED1CAB84AA65983C41A11F60294C9B ] aswSnx C:\windows\system32\drivers\aswSnx.sys
19:26:32.0148 4560 aswSnx - ok
19:26:32.0180 4560 [ 00E5253353717D3CA12A0F5A6F9991EC ] aswSP C:\windows\system32\drivers\aswSP.sys
19:26:32.0211 4560 aswSP - ok
19:26:32.0226 4560 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi C:\windows\system32\drivers\aswTdi.sys
19:26:32.0242 4560 aswTdi - ok
19:26:32.0289 4560 [ 6359B99C955DB9F40B653159A0EED261 ] aswVmm C:\windows\system32\drivers\aswVmm.sys
19:26:32.0336 4560 aswVmm - ok
19:26:32.0367 4560 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
19:26:32.0445 4560 AsyncMac - ok
19:26:32.0476 4560 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
19:26:32.0492 4560 atapi - ok
19:26:32.0585 4560 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
19:26:32.0679 4560 AudioEndpointBuilder - ok
19:26:32.0694 4560 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
19:26:32.0772 4560 AudioSrv - ok
19:26:32.0819 4560 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
19:26:32.0850 4560 avast! Antivirus - ok
19:26:32.0882 4560 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
19:26:32.0928 4560 AxInstSV - ok
19:26:32.0960 4560 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys
19:26:33.0038 4560 b06bdrv - ok
19:26:33.0069 4560 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
19:26:33.0116 4560 b57nd60a - ok
19:26:33.0147 4560 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
19:26:33.0194 4560 BDESVC - ok
19:26:33.0225 4560 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
19:26:33.0303 4560 Beep - ok
19:26:33.0365 4560 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
19:26:33.0459 4560 BFE - ok
19:26:33.0506 4560 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\System32\qmgr.dll
19:26:33.0646 4560 BITS - ok
19:26:33.0662 4560 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
19:26:33.0693 4560 blbdrive - ok
19:26:33.0771 4560 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:26:33.0818 4560 Bonjour Service - ok
19:26:33.0864 4560 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
19:26:33.0911 4560 bowser - ok
19:26:33.0942 4560 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys
19:26:33.0989 4560 BrFiltLo - ok
19:26:33.0989 4560 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys
19:26:34.0036 4560 BrFiltUp - ok
19:26:34.0067 4560 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
19:26:34.0130 4560 Browser - ok
19:26:34.0145 4560 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
19:26:34.0192 4560 Brserid - ok
19:26:34.0192 4560 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
19:26:34.0223 4560 BrSerWdm - ok
19:26:34.0223 4560 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
19:26:34.0254 4560 BrUsbMdm - ok
19:26:34.0254 4560 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
19:26:34.0286 4560 BrUsbSer - ok
19:26:34.0332 4560 [ 9D95F74875491CECBF9E10A5936A570E ] BtFilter C:\windows\system32\DRIVERS\btfilter.sys
19:26:34.0426 4560 BtFilter ( UnsignedFile.Multi.Generic ) - warning
19:26:34.0426 4560 BtFilter - detected UnsignedFile.Multi.Generic (1)
19:26:34.0473 4560 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys
19:26:34.0520 4560 BthEnum - ok
19:26:34.0535 4560 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\drivers\bthmodem.sys
19:26:34.0582 4560 BTHMODEM - ok
19:26:34.0613 4560 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys
19:26:34.0644 4560 BthPan - ok
19:26:34.0676 4560 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys
19:26:34.0722 4560 BTHPORT - ok
19:26:34.0754 4560 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
19:26:34.0832 4560 bthserv - ok
19:26:34.0863 4560 [ B9D49E4288F56C053B4C12D2F9042948 ] BTHSSecurityMgr C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
19:26:34.0878 4560 BTHSSecurityMgr - ok
19:26:34.0910 4560 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys
19:26:34.0925 4560 BTHUSB - ok
19:26:34.0956 4560 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
19:26:35.0050 4560 cdfs - ok
19:26:35.0097 4560 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
19:26:35.0128 4560 cdrom - ok
19:26:35.0175 4560 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
19:26:35.0253 4560 CertPropSvc - ok
19:26:35.0268 4560 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys
19:26:35.0300 4560 circlass - ok
19:26:35.0315 4560 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
19:26:35.0346 4560 CLFS - ok
19:26:35.0409 4560 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:26:35.0440 4560 clr_optimization_v2.0.50727_32 - ok
19:26:35.0487 4560 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:26:35.0518 4560 clr_optimization_v2.0.50727_64 - ok
19:26:35.0596 4560 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:26:35.0627 4560 clr_optimization_v4.0.30319_32 - ok
19:26:35.0658 4560 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:26:35.0674 4560 clr_optimization_v4.0.30319_64 - ok
19:26:35.0705 4560 clwvd - ok
19:26:35.0721 4560 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
19:26:35.0752 4560 CmBatt - ok
19:26:35.0814 4560 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
19:26:35.0830 4560 cmdide - ok
19:26:35.0877 4560 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\windows\system32\Drivers\cng.sys
19:26:35.0939 4560 CNG - ok
19:26:35.0970 4560 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\DRIVERS\compbatt.sys
19:26:35.0986 4560 Compbatt - ok
19:26:36.0017 4560 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys
19:26:36.0048 4560 CompositeBus - ok
19:26:36.0064 4560 COMSysApp - ok
19:26:36.0095 4560 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys
19:26:36.0111 4560 crcdisk - ok
19:26:36.0158 4560 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\windows\system32\cryptsvc.dll
19:26:36.0220 4560 CryptSvc - ok
19:26:36.0267 4560 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
19:26:36.0345 4560 DcomLaunch - ok
19:26:36.0392 4560 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
19:26:36.0532 4560 defragsvc - ok
19:26:36.0563 4560 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
19:26:36.0626 4560 DfsC - ok
19:26:36.0657 4560 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
19:26:36.0719 4560 Dhcp - ok
19:26:36.0750 4560 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
19:26:36.0828 4560 discache - ok
19:26:36.0860 4560 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys
19:26:36.0875 4560 Disk - ok
19:26:36.0906 4560 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
19:26:37.0000 4560 Dnscache - ok
19:26:37.0016 4560 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
19:26:37.0094 4560 dot3svc - ok
19:26:37.0125 4560 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
19:26:37.0187 4560 DPS - ok
19:26:37.0218 4560 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
19:26:37.0265 4560 drmkaud - ok
19:26:37.0312 4560 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
19:26:37.0359 4560 DXGKrnl - ok
19:26:37.0406 4560 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
19:26:37.0515 4560 EapHost - ok
19:26:37.0608 4560 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys
19:26:37.0718 4560 ebdrv - ok
19:26:37.0749 4560 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
19:26:37.0796 4560 EFS - ok
19:26:37.0858 4560 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
19:26:37.0905 4560 ehRecvr - ok
19:26:37.0936 4560 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
19:26:37.0967 4560 ehSched - ok
19:26:38.0014 4560 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys
19:26:38.0061 4560 elxstor - ok
19:26:38.0076 4560 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
19:26:38.0108 4560 ErrDev - ok
19:26:38.0154 4560 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
19:26:38.0232 4560 EventSystem - ok
19:26:38.0388 4560 [ 770B15B8261A444B817F296EC27CE71E ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
19:26:38.0420 4560 EvtEng - ok
19:26:38.0435 4560 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
19:26:38.0513 4560 exfat - ok
19:26:38.0529 4560 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
19:26:38.0669 4560 fastfat - ok
19:26:38.0716 4560 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
19:26:38.0778 4560 Fax - ok
19:26:38.0810 4560 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys
19:26:38.0841 4560 fdc - ok
19:26:38.0872 4560 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
19:26:38.0997 4560 fdPHost - ok
19:26:39.0028 4560 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
19:26:39.0090 4560 FDResPub - ok
19:26:39.0122 4560 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
19:26:39.0137 4560 FileInfo - ok
19:26:39.0153 4560 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
19:26:39.0215 4560 Filetrace - ok
19:26:39.0231 4560 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys
19:26:39.0246 4560 flpydisk - ok
19:26:39.0278 4560 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
19:26:39.0309 4560 FltMgr - ok
19:26:39.0387 4560 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\windows\system32\FntCache.dll
19:26:39.0465 4560 FontCache - ok
19:26:39.0512 4560 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:26:39.0527 4560 FontCache3.0.0.0 - ok
19:26:39.0558 4560 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
19:26:39.0574 4560 FsDepends - ok
19:26:39.0621 4560 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
19:26:39.0636 4560 Fs_Rec - ok
19:26:39.0699 4560 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
19:26:39.0746 4560 fvevol - ok
19:26:39.0777 4560 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys
19:26:39.0808 4560 gagp30kx - ok
19:26:39.0855 4560 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
19:26:39.0886 4560 GEARAspiWDM - ok
19:26:39.0948 4560 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
19:26:40.0026 4560 gpsvc - ok
19:26:40.0058 4560 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
19:26:40.0089 4560 hcw85cir - ok
19:26:40.0120 4560 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
19:26:40.0151 4560 HdAudAddService - ok
19:26:40.0167 4560 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys
19:26:40.0214 4560 HDAudBus - ok
19:26:40.0229 4560 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys
19:26:40.0245 4560 HidBatt - ok
19:26:40.0260 4560 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys
19:26:40.0292 4560 HidBth - ok
19:26:40.0323 4560 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys
19:26:40.0354 4560 HidIr - ok
19:26:40.0385 4560 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\system32\hidserv.dll
19:26:40.0448 4560 hidserv - ok
19:26:40.0479 4560 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
19:26:40.0510 4560 HidUsb - ok
19:26:40.0557 4560 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
19:26:40.0650 4560 hkmsvc - ok
19:26:40.0666 4560 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
19:26:40.0697 4560 HomeGroupListener - ok
19:26:40.0728 4560 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
19:26:40.0760 4560 HomeGroupProvider - ok
19:26:40.0791 4560 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
19:26:40.0806 4560 HpSAMD - ok
19:26:40.0869 4560 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
19:26:40.0994 4560 HTTP - ok
19:26:41.0009 4560 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
19:26:41.0040 4560 hwpolicy - ok
19:26:41.0056 4560 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys
19:26:41.0087 4560 i8042prt - ok
19:26:41.0150 4560 [ 53CC5BF8B5A219119953C7ABB19A7705 ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
19:26:41.0181 4560 iaStor - ok
19:26:41.0228 4560 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
19:26:41.0274 4560 iaStorV - ok
19:26:41.0337 4560 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:26:41.0384 4560 idsvc - ok
19:26:41.0664 4560 [ F4F91789C7C7A159CE8215C1F69F2A85 ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
19:26:42.0132 4560 igfx - ok
19:26:42.0164 4560 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys
19:26:42.0179 4560 iirsp - ok
19:26:42.0242 4560 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
19:26:42.0335 4560 IKEEXT - ok
19:26:42.0444 4560 [ 8E05ADB4B809B478B2EC65A1A1633DEB ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys
19:26:42.0554 4560 IntcAzAudAddService - ok
19:26:42.0600 4560 [ AE594CC17C33AC146739494615E14851 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys
19:26:42.0725 4560 IntcDAud - ok
19:26:42.0741 4560 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
19:26:42.0772 4560 intelide - ok
19:26:42.0819 4560 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
19:26:42.0881 4560 intelppm - ok
19:26:42.0928 4560 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
19:26:43.0037 4560 IPBusEnum - ok
19:26:43.0068 4560 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
19:26:43.0131 4560 IpFilterDriver - ok
19:26:43.0193 4560 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
19:26:43.0256 4560 iphlpsvc - ok
19:26:43.0256 4560 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
19:26:43.0287 4560 IPMIDRV - ok
19:26:43.0302 4560 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
19:26:43.0380 4560 IPNAT - ok
19:26:43.0490 4560 [ 0FF335D687C85097725A53458160E81E ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
19:26:43.0536 4560 iPod Service - ok
19:26:43.0552 4560 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
19:26:43.0583 4560 IRENUM - ok
19:26:43.0614 4560 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
19:26:43.0630 4560 isapnp - ok
19:26:43.0661 4560 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
19:26:43.0692 4560 iScsiPrt - ok
19:26:43.0708 4560 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
19:26:43.0739 4560 kbdclass - ok
19:26:43.0755 4560 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\drivers\kbdhid.sys
19:26:43.0786 4560 kbdhid - ok
19:26:43.0802 4560 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
19:26:43.0833 4560 KeyIso - ok
19:26:43.0864 4560 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
19:26:43.0880 4560 KSecDD - ok
19:26:43.0911 4560 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
19:26:43.0942 4560 KSecPkg - ok
19:26:43.0942 4560 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
19:26:44.0020 4560 ksthunk - ok
19:26:44.0036 4560 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
19:26:44.0114 4560 KtmRm - ok
19:26:44.0160 4560 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\system32\srvsvc.dll
19:26:44.0238 4560 LanmanServer - ok
19:26:44.0254 4560 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
19:26:44.0332 4560 LanmanWorkstation - ok
19:26:44.0379 4560 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
19:26:44.0457 4560 lltdio - ok
19:26:44.0488 4560 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
19:26:44.0582 4560 lltdsvc - ok
19:26:44.0613 4560 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
19:26:44.0706 4560 lmhosts - ok
19:26:44.0847 4560 [ F4A17DCAB576267C85663E64F3ACE5A4 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19:26:44.0878 4560 LMS - ok
19:26:44.0909 4560 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys
19:26:44.0940 4560 LSI_FC - ok
19:26:44.0987 4560 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys
19:26:45.0018 4560 LSI_SAS - ok
19:26:45.0034 4560 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys
19:26:45.0065 4560 LSI_SAS2 - ok
19:26:45.0081 4560 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys
19:26:45.0112 4560 LSI_SCSI - ok
19:26:45.0128 4560 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
19:26:45.0206 4560 luafv - ok
19:26:45.0237 4560 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
19:26:45.0268 4560 Mcx2Svc - ok
19:26:45.0299 4560 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys
19:26:45.0315 4560 megasas - ok
19:26:45.0346 4560 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys
19:26:45.0377 4560 MegaSR - ok
19:26:45.0408 4560 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys
19:26:45.0424 4560 MEIx64 - ok
19:26:45.0455 4560 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
19:26:45.0533 4560 MMCSS - ok
19:26:45.0549 4560 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
19:26:45.0627 4560 Modem - ok
19:26:45.0658 4560 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
19:26:45.0674 4560 monitor - ok
19:26:45.0689 4560 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
19:26:45.0720 4560 mouclass - ok
19:26:45.0767 4560 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
19:26:45.0798 4560 mouhid - ok
19:26:45.0845 4560 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
19:26:45.0861 4560 mountmgr - ok
19:26:45.0892 4560 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
19:26:45.0908 4560 mpio - ok
19:26:45.0923 4560 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
19:26:45.0986 4560 mpsdrv - ok
19:26:46.0048 4560 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
19:26:46.0142 4560 MpsSvc - ok
19:26:46.0173 4560 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
19:26:46.0204 4560 MRxDAV - ok
19:26:46.0235 4560 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
19:26:46.0329 4560 mrxsmb - ok
19:26:46.0344 4560 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
19:26:46.0391 4560 mrxsmb10 - ok
19:26:46.0407 4560 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
19:26:46.0438 4560 mrxsmb20 - ok
19:26:46.0469 4560 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
19:26:46.0485 4560 msahci - ok
19:26:46.0516 4560 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
19:26:46.0532 4560 msdsm - ok
19:26:46.0547 4560 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
19:26:46.0578 4560 MSDTC - ok
19:26:46.0610 4560 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
19:26:46.0688 4560 Msfs - ok
19:26:46.0703 4560 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
19:26:46.0766 4560 mshidkmdf - ok
19:26:46.0781 4560 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
19:26:46.0812 4560 msisadrv - ok
19:26:46.0828 4560 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
19:26:46.0906 4560 MSiSCSI - ok
19:26:46.0906 4560 msiserver - ok
19:26:46.0937 4560 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
19:26:47.0000 4560 MSKSSRV - ok
19:26:47.0015 4560 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
19:26:47.0078 4560 MSPCLOCK - ok
19:26:47.0093 4560 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
19:26:47.0156 4560 MSPQM - ok
19:26:47.0171 4560 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
19:26:47.0202 4560 MsRPC - ok
19:26:47.0234 4560 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys
19:26:47.0249 4560 mssmbios - ok
19:26:47.0280 4560 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
19:26:47.0343 4560 MSTEE - ok
19:26:47.0358 4560 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys
19:26:47.0390 4560 MTConfig - ok
19:26:47.0405 4560 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
19:26:47.0421 4560 Mup - ok
19:26:47.0468 4560 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
19:26:47.0561 4560 napagent - ok
19:26:47.0608 4560 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
19:26:47.0639 4560 NativeWifiP - ok
19:26:47.0686 4560 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
19:26:47.0748 4560 NDIS - ok
19:26:47.0764 4560 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
19:26:47.0826 4560 NdisCap - ok
19:26:47.0858 4560 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
19:26:47.0920 4560 NdisTapi - ok
19:26:47.0951 4560 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
19:26:48.0014 4560 Ndisuio - ok
19:26:48.0029 4560 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
19:26:48.0107 4560 NdisWan - ok
19:26:48.0123 4560 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
19:26:48.0201 4560 NDProxy - ok
19:26:48.0216 4560 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
19:26:48.0341 4560 NetBIOS - ok
19:26:48.0372 4560 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
19:26:48.0497 4560 NetBT - ok
19:26:48.0513 4560 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
19:26:48.0528 4560 Netlogon - ok
19:26:48.0575 4560 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
19:26:48.0669 4560 Netman - ok
19:26:48.0684 4560 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
19:26:48.0762 4560 netprofm - ok
19:26:48.0794 4560 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:26:48.0809 4560 NetTcpPortSharing - ok
19:26:49.0106 4560 [ 62A8A81674F71B76289E460615A0AC73 ] NETwNs64 C:\windows\system32\DRIVERS\Netwsw00.sys
19:26:49.0480 4560 NETwNs64 - ok
19:26:49.0527 4560 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys
19:26:49.0542 4560 nfrd960 - ok
19:26:49.0574 4560 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll
19:26:49.0605 4560 NlaSvc - ok
19:26:49.0620 4560 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
19:26:49.0683 4560 Npfs - ok
19:26:49.0730 4560 NSHE - ok
19:26:49.0761 4560 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
19:26:49.0854 4560 nsi - ok
19:26:49.0886 4560 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
19:26:49.0948 4560 nsiproxy - ok
19:26:50.0010 4560 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
19:26:50.0088 4560 Ntfs - ok
19:26:50.0120 4560 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
19:26:50.0182 4560 Null - ok
19:26:50.0494 4560 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\windows\system32\DRIVERS\nvlddmkm.sys
19:26:51.0087 4560 nvlddmkm - ok
19:26:51.0134 4560 [ 918841B2454F4F2BD94479692079490B ] nvpciflt C:\windows\system32\DRIVERS\nvpciflt.sys
19:26:51.0165 4560 nvpciflt - ok
19:26:51.0180 4560 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
19:26:51.0212 4560 nvraid - ok
19:26:51.0258 4560 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
19:26:51.0290 4560 nvstor - ok
19:26:51.0368 4560 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] NVSvc C:\windows\system32\nvvsvc.exe
19:26:51.0414 4560 NVSvc - ok
19:26:51.0492 4560 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
19:26:51.0570 4560 nvUpdatusService - ok
19:26:51.0602 4560 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
19:26:51.0617 4560 nv_agp - ok
19:26:51.0648 4560 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
19:26:51.0680 4560 ohci1394 - ok
19:26:51.0742 4560 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:26:51.0773 4560 ose - ok
19:26:51.0804 4560 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
19:26:51.0851 4560 p2pimsvc - ok
19:26:51.0882 4560 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
19:26:51.0914 4560 p2psvc - ok
19:26:51.0945 4560 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys
19:26:51.0976 4560 Parport - ok
19:26:52.0007 4560 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
19:26:52.0038 4560 partmgr - ok
19:26:52.0054 4560 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
19:26:52.0101 4560 PcaSvc - ok
19:26:52.0116 4560 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
19:26:52.0148 4560 pci - ok
19:26:52.0163 4560 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
19:26:52.0179 4560 pciide - ok
19:26:52.0194 4560 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys
19:26:52.0226 4560 pcmcia - ok
19:26:52.0272 4560 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
19:26:52.0304 4560 pcw - ok
19:26:52.0319 4560 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
19:26:52.0413 4560 PEAUTH - ok
19:26:52.0538 4560 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
19:26:52.0584 4560 PerfHost - ok
19:26:52.0647 4560 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
19:26:52.0787 4560 pla - ok
19:26:52.0818 4560 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
19:26:52.0865 4560 PlugPlay - ok
19:26:52.0896 4560 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
19:26:52.0928 4560 PNRPAutoReg - ok
19:26:52.0959 4560 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
19:26:52.0990 4560 PNRPsvc - ok
19:26:53.0021 4560 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
19:26:53.0115 4560 PolicyAgent - ok
19:26:53.0146 4560 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll
19:26:53.0224 4560 Power - ok
19:26:53.0271 4560 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
19:26:53.0349 4560 PptpMiniport - ok
19:26:53.0364 4560 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys
19:26:53.0380 4560 Processor - ok
19:26:53.0411 4560 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
19:26:53.0489 4560 ProfSvc - ok
19:26:53.0505 4560 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
19:26:53.0536 4560 ProtectedStorage - ok
19:26:53.0567 4560 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
19:26:53.0630 4560 Psched - ok
19:26:53.0692 4560 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys
19:26:53.0770 4560 ql2300 - ok
19:26:53.0786 4560 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys
19:26:53.0817 4560 ql40xx - ok
19:26:53.0848 4560 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
19:26:53.0879 4560 QWAVE - ok
19:26:53.0910 4560 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
19:26:53.0942 4560 QWAVEdrv - ok
19:26:53.0942 4560 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
19:26:54.0004 4560 RasAcd - ok
19:26:54.0098 4560 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
19:26:54.0160 4560 RasAgileVpn - ok
19:26:54.0176 4560 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
19:26:54.0316 4560 RasAuto - ok
19:26:54.0347 4560 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
19:26:54.0425 4560 Rasl2tp - ok
19:26:54.0456 4560 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
19:26:54.0534 4560 RasMan - ok
19:26:54.0550 4560 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
19:26:54.0612 4560 RasPppoe - ok
19:26:54.0628 4560 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
19:26:54.0690 4560 RasSstp - ok
19:26:54.0722 4560 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
19:26:54.0784 4560 rdbss - ok
19:26:54.0800 4560 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys
19:26:54.0831 4560 rdpbus - ok
19:26:54.0862 4560 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
19:26:54.0940 4560 RDPCDD - ok
19:26:54.0956 4560 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
19:26:55.0018 4560 RDPENCDD - ok
19:26:55.0034 4560 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
19:26:55.0112 4560 RDPREFMP - ok
19:26:55.0221 4560 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
19:26:55.0252 4560 RdpVideoMiniport - ok
19:26:55.0283 4560 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
19:26:55.0346 4560 RDPWD - ok
19:26:55.0392 4560 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
19:26:55.0424 4560 rdyboost - ok
19:26:55.0548 4560 [ 992E3160D3AB2D8F083B6808D73A4016 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
19:26:55.0580 4560 RegSrvc - ok
19:26:55.0611 4560 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
19:26:55.0704 4560 RemoteAccess - ok
19:26:55.0736 4560 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
19:26:55.0829 4560 RemoteRegistry - ok
19:26:55.0860 4560 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys
19:26:55.0907 4560 RFCOMM - ok
19:26:55.0923 4560 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
19:26:56.0001 4560 RpcEptMapper - ok
19:26:56.0016 4560 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
19:26:56.0032 4560 RpcLocator - ok
19:26:56.0063 4560 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll
19:26:56.0141 4560 RpcSs - ok
19:26:56.0172 4560 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
19:26:56.0235 4560 rspndr - ok
19:26:56.0282 4560 [ F4C374B1C46DE294B573BB43723AC3F6 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
19:26:56.0328 4560 RTL8167 - ok
19:26:56.0453 4560 [ 4CA0DBA9E224473D664C25E411F5A3BD ] rtport C:\windows\SysWOW64\drivers\rtport.sys
19:26:56.0484 4560 rtport - ok
19:26:56.0500 4560 [ 62DB6CC4B0818F1B5F3441241B098F12 ] SABI C:\windows\system32\Drivers\SABI.sys
19:26:56.0547 4560 SABI - ok
19:26:56.0562 4560 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
19:26:56.0594 4560 SamSs - ok
19:26:56.0672 4560 [ 5E66ABD041D76C46CBF55AEF910FCA56 ] SamsungDeviceConfigurationWinService C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
19:26:56.0703 4560 SamsungDeviceConfigurationWinService - ok
19:26:56.0890 4560 SBIOSIO - ok
19:26:56.0921 4560 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
19:26:56.0968 4560 sbp2port - ok
19:26:57.0015 4560 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
19:26:57.0155 4560 SCardSvr - ok
19:26:57.0171 4560 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
19:26:57.0233 4560 scfilter - ok
19:26:57.0264 4560 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
19:26:57.0374 4560 Schedule - ok
19:26:57.0405 4560 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
19:26:57.0467 4560 SCPolicySvc - ok
19:26:57.0498 4560 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
19:26:57.0545 4560 SDRSVC - ok
19:26:57.0670 4560 [ 206387AB881E93A1A6EB89966C8651F1 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
19:26:57.0748 4560 SDScannerService - ok
19:26:57.0826 4560 [ A529CFE32565C0B145578FFB2B32C9A5 ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
19:26:57.0904 4560 SDUpdateService - ok
19:26:57.0920 4560 [ CB63BDB77BB86549FC3303C2F11EDC18 ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
19:26:57.0951 4560 SDWSCService - ok
19:26:57.0998 4560 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
19:26:58.0076 4560 secdrv - ok
19:26:58.0091 4560 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
19:26:58.0169 4560 seclogon - ok
19:26:58.0185 4560 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\System32\sens.dll
19:26:58.0247 4560 SENS - ok
19:26:58.0278 4560 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
19:26:58.0356 4560 SensrSvc - ok
19:26:58.0372 4560 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys
19:26:58.0403 4560 Serenum - ok
19:26:58.0434 4560 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys
19:26:58.0512 4560 Serial - ok
19:26:58.0544 4560 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys
19:26:58.0575 4560 sermouse - ok
19:26:58.0622 4560 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
19:26:58.0700 4560 SessionEnv - ok
19:26:58.0715 4560 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
19:26:58.0746 4560 sffdisk - ok
19:26:58.0746 4560 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
19:26:58.0778 4560 sffp_mmc - ok
19:26:58.0778 4560 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
19:26:58.0809 4560 sffp_sd - ok
19:26:58.0809 4560 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys
19:26:58.0840 4560 sfloppy - ok
19:26:58.0871 4560 [ 2FE1CD3AA602414841DB10AD96C95A5E ] SGDrv C:\windows\system32\DRIVERS\SGdrv64.sys
19:26:58.0949 4560 SGDrv - ok
19:26:58.0980 4560 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
19:26:59.0058 4560 SharedAccess - ok
19:26:59.0090 4560 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
19:26:59.0152 4560 ShellHWDetection - ok
19:26:59.0183 4560 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys
19:26:59.0214 4560 SiSRaid2 - ok
19:26:59.0246 4560 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys
19:26:59.0261 4560 SiSRaid4 - ok
19:26:59.0324 4560 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
19:26:59.0402 4560 Smb - ok
19:26:59.0448 4560 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
19:26:59.0480 4560 SNMPTRAP - ok
19:26:59.0495 4560 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
19:26:59.0511 4560 spldr - ok
19:26:59.0558 4560 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
19:26:59.0620 4560 Spooler - ok
19:26:59.0714 4560 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
19:26:59.0870 4560 sppsvc - ok
19:26:59.0885 4560 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
19:26:59.0948 4560 sppuinotify - ok
19:26:59.0994 4560 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
19:27:00.0041 4560 srv - ok
19:27:00.0072 4560 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
19:27:00.0104 4560 srv2 - ok
19:27:00.0119 4560 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
19:27:00.0150 4560 srvnet - ok
19:27:00.0182 4560 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
19:27:00.0260 4560 SSDPSRV - ok
19:27:00.0275 4560 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
19:27:00.0353 4560 SstpSvc - ok
19:27:00.0369 4560 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys
19:27:00.0400 4560 stexstor - ok
19:27:00.0416 4560 [ DECACB6921DED1A38642642685D77DAC ] StillCam C:\windows\system32\DRIVERS\serscan.sys
19:27:00.0462 4560 StillCam - ok
19:27:00.0494 4560 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
19:27:00.0540 4560 stisvc - ok
19:27:00.0556 4560 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys
19:27:00.0587 4560 swenum - ok
19:27:00.0603 4560 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
19:27:00.0696 4560 swprv - ok
19:27:00.0821 4560 SWUpdateService - ok
19:27:00.0915 4560 [ E2CF0E655048CD8CA863631BE8B1F09A ] SynTP C:\windows\system32\DRIVERS\SynTP.sys
19:27:00.0977 4560 SynTP - ok
19:27:01.0024 4560 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
19:27:01.0102 4560 SysMain - ok
19:27:01.0118 4560 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
19:27:01.0164 4560 TabletInputService - ok
19:27:01.0196 4560 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
19:27:01.0274 4560 TapiSrv - ok
19:27:01.0289 4560 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
19:27:01.0367 4560 TBS - ok
19:27:01.0445 4560 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\windows\system32\drivers\tcpip.sys
19:27:01.0539 4560 Tcpip - ok
19:27:01.0570 4560 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
19:27:01.0648 4560 TCPIP6 - ok
19:27:01.0679 4560 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
19:27:01.0710 4560 tcpipreg - ok
19:27:01.0742 4560 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
19:27:01.0788 4560 TDPIPE - ok
19:27:01.0820 4560 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
19:27:01.0851 4560 TDTCP - ok
19:27:01.0866 4560 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
19:27:01.0944 4560 tdx - ok
19:27:01.0976 4560 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys
19:27:02.0007 4560 TermDD - ok
19:27:02.0038 4560 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
19:27:02.0116 4560 TermService - ok
19:27:02.0163 4560 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
19:27:02.0194 4560 Themes - ok
19:27:02.0225 4560 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
19:27:02.0288 4560 THREADORDER - ok
19:27:02.0303 4560 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
19:27:02.0381 4560 TrkWks - ok
19:27:02.0428 4560 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
19:27:02.0506 4560 TrustedInstaller - ok
19:27:02.0537 4560 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
19:27:02.0600 4560 tssecsrv - ok
19:27:02.0646 4560 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
19:27:02.0709 4560 TsUsbFlt - ok
19:27:02.0756 4560 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys
19:27:02.0787 4560 TsUsbGD - ok
19:27:02.0834 4560 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
19:27:02.0912 4560 tunnel - ok
19:27:02.0927 4560 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys
19:27:02.0943 4560 uagp35 - ok
19:27:02.0958 4560 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
19:27:03.0036 4560 udfs - ok
19:27:03.0052 4560 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
19:27:03.0083 4560 UI0Detect - ok
19:27:03.0099 4560 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
19:27:03.0130 4560 uliagpkx - ok
19:27:03.0146 4560 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys
19:27:03.0161 4560 umbus - ok
19:27:03.0192 4560 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys
19:27:03.0208 4560 UmPass - ok
19:27:03.0395 4560 [ DB641944F7E4B14C13C3FEFC89843F69 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
19:27:03.0489 4560 UNS - ok
19:27:03.0520 4560 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
19:27:03.0598 4560 upnphost - ok
19:27:03.0692 4560 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys
19:27:03.0754 4560 USBAAPL64 - ok
19:27:03.0770 4560 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
19:27:03.0863 4560 usbccgp - ok
19:27:03.0894 4560 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
19:27:03.0926 4560 usbcir - ok
19:27:03.0926 4560 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\drivers\usbehci.sys
19:27:03.0957 4560 usbehci - ok
19:27:03.0988 4560 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
19:27:04.0019 4560 usbhub - ok
19:27:04.0035 4560 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
19:27:04.0082 4560 usbohci - ok
19:27:04.0113 4560 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
19:27:04.0160 4560 usbprint - ok
19:27:04.0191 4560 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
19:27:04.0238 4560 USBSTOR - ok
19:27:04.0238 4560 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys
19:27:04.0269 4560 usbuhci - ok
19:27:04.0347 4560 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
19:27:04.0378 4560 usbvideo - ok
19:27:04.0425 4560 [ 7B28E2FBE75115660FAB31079C0A9F29 ] usb_rndisx C:\windows\system32\drivers\usb8023x.sys
19:27:04.0503 4560 usb_rndisx - ok
19:27:04.0534 4560 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
19:27:04.0612 4560 UxSms - ok
19:27:04.0628 4560 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
19:27:04.0659 4560 VaultSvc - ok
19:27:04.0659 4560 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
19:27:04.0690 4560 vdrvroot - ok
19:27:04.0706 4560 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
19:27:04.0784 4560 vds - ok
19:27:04.0815 4560 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
19:27:04.0846 4560 vga - ok
19:27:04.0862 4560 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
19:27:04.0924 4560 VgaSave - ok
19:27:04.0955 4560 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
19:27:04.0986 4560 vhdmp - ok
19:27:05.0002 4560 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
19:27:05.0018 4560 viaide - ok
19:27:05.0033 4560 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
19:27:05.0064 4560 volmgr - ok
19:27:05.0096 4560 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
19:27:05.0111 4560 volmgrx - ok
19:27:05.0158 4560 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\windows\system32\drivers\volsnap.sys
19:27:05.0189 4560 volsnap - ok
19:27:05.0220 4560 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys
19:27:05.0236 4560 vsmraid - ok
19:27:05.0314 4560 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
19:27:05.0423 4560 VSS - ok
19:27:05.0439 4560 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
19:27:05.0486 4560 vwifibus - ok
19:27:05.0517 4560 [ 13A0DECD1794DE60A8427862C8669D27 ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
19:27:05.0548 4560 vwififlt - ok
19:27:05.0579 4560 [ 49003B357D101CDC474937437ECF5ABC ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
19:27:05.0610 4560 vwifimp - ok
19:27:05.0626 4560 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
19:27:05.0704 4560 W32Time - ok
19:27:05.0751 4560 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys
19:27:05.0782 4560 WacomPen - ok
19:27:05.0813 4560 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
19:27:05.0891 4560 WANARP - ok
19:27:05.0907 4560 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
19:27:05.0969 4560 Wanarpv6 - ok
19:27:06.0016 4560 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
19:27:06.0078 4560 wbengine - ok
19:27:06.0141 4560 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
19:27:06.0188 4560 WbioSrvc - ok
19:27:06.0219 4560 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
19:27:06.0281 4560 wcncsvc - ok
19:27:06.0312 4560 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
19:27:06.0344 4560 WcsPlugInService - ok
19:27:06.0390 4560 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys
19:27:06.0406 4560 Wd - ok
19:27:06.0453 4560 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
19:27:06.0500 4560 Wdf01000 - ok
19:27:06.0531 4560 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
19:27:06.0624 4560 WdiServiceHost - ok
19:27:06.0624 4560 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
19:27:06.0671 4560 WdiSystemHost - ok
19:27:06.0687 4560 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
19:27:06.0734 4560 WebClient - ok
19:27:06.0765 4560 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
19:27:06.0843 4560 Wecsvc - ok
19:27:06.0874 4560 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
19:27:06.0936 4560 wercplsupport - ok
19:27:06.0968 4560 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
19:27:07.0030 4560 WerSvc - ok
19:27:07.0061 4560 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
19:27:07.0124 4560 WfpLwf - ok
19:27:07.0155 4560 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
19:27:07.0170 4560 WIMMount - ok
19:27:07.0202 4560 WinDefend - ok
19:27:07.0248 4560 WinHttpAutoProxySvc - ok
19:27:07.0326 4560 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
19:27:07.0404 4560 Winmgmt - ok
19:27:07.0467 4560 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
19:27:07.0576 4560 WinRM - ok
19:27:07.0638 4560 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
19:27:07.0670 4560 WinUsb - ok
19:27:07.0716 4560 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
19:27:07.0779 4560 Wlansvc - ok
19:27:07.0826 4560 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
19:27:07.0857 4560 wlcrasvc - ok
19:27:07.0966 4560 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:27:08.0060 4560 wlidsvc - ok
19:27:08.0091 4560 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys
19:27:08.0122 4560 WmiAcpi - ok
19:27:08.0169 4560 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
19:27:08.0200 4560 wmiApSrv - ok
19:27:08.0247 4560 WMPNetworkSvc - ok
19:27:08.0278 4560 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
19:27:08.0325 4560 WPCSvc - ok
19:27:08.0356 4560 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
19:27:08.0387 4560 WPDBusEnum - ok
19:27:08.0418 4560 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
19:27:08.0481 4560 ws2ifsl - ok
19:27:08.0496 4560 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\System32\wscsvc.dll
19:27:08.0543 4560 wscsvc - ok
19:27:08.0543 4560 WSearch - ok
19:27:08.0621 4560 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
19:27:08.0777 4560 wuauserv - ok
19:27:08.0808 4560 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys
19:27:08.0871 4560 WudfPf - ok
19:27:08.0902 4560 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
19:27:08.0933 4560 WUDFRd - ok
19:27:08.0964 4560 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll
19:27:09.0011 4560 wudfsvc - ok
19:27:09.0042 4560 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\windows\System32\wwansvc.dll
19:27:09.0089 4560 WwanSvc - ok
19:27:09.0276 4560 [ 9FA1347D0E96998C3793F51BB94D7AC3 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
19:27:09.0401 4560 ZeroConfigService - ok
19:27:09.0479 4560 ================ Scan global ===============================
19:27:09.0510 4560 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
19:27:09.0588 4560 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll
19:27:09.0604 4560 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll
19:27:09.0651 4560 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
19:27:09.0682 4560 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe
19:27:09.0682 4560 [Global] - ok
19:27:09.0682 4560 ================ Scan MBR ==================================
19:27:09.0744 4560 [ 2E5DEBB2116B3417023E0D6562D7ED07 ] \Device\Harddisk0\DR0
19:27:10.0088 4560 \Device\Harddisk0\DR0 - ok
19:27:10.0088 4560 ================ Scan VBR ==================================
19:27:10.0103 4560 [ 9175F45EE127626E640D3E67F2247BD7 ] \Device\Harddisk0\DR0\Partition1
19:27:10.0103 4560 \Device\Harddisk0\DR0\Partition1 - ok
19:27:10.0134 4560 [ 63C5F54581E58D960DABF6B376AB09BC ] \Device\Harddisk0\DR0\Partition2
19:27:10.0134 4560 \Device\Harddisk0\DR0\Partition2 - ok
19:27:10.0212 4560 [ 9029AE052F863B0A305CFB80B5664E85 ] \Device\Harddisk0\DR0\Partition3
19:27:10.0212 4560 \Device\Harddisk0\DR0\Partition3 - ok
19:27:10.0212 4560 ============================================================
19:27:10.0212 4560 Scan finished
19:27:10.0212 4560 ============================================================
19:27:10.0244 4040 Detected object count: 1
19:27:10.0244 4040 Actual detected object count: 1
19:28:19.0497 4040 BtFilter ( UnsignedFile.Multi.Generic ) - skipped by user
19:28:19.0497 4040 BtFilter ( UnsignedFile.Multi.Generic ) - User select action: Skip


Ich danke jetzt schon mal sehr für deine Hilfe und das du dir Zeit nimmst für mich. Entschuldige bitte das ich so unruhig bin ich will wirklich nicht Stören und jeden sein Wochenende genießen lassen.

Grüße Nico

markusg 16.06.2013 18:35
Hi
bitte mal prüfen, ob der Router die neueste Firmware instaliert hatt.
Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Nico#7 16.06.2013 19:17
Code:
ComboFix 13-06-15.01 - Nico 16.06.2013  19:51:35.1.4 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.8106.6471 [GMT 2:00]
ausgeführt von:: c:\users\Nico\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\programdata\SAMSUNG
c:\programdata\SAMSUNG\DeleteOOBEWPP.exe
c:\programdata\SAMSUNG\Easy Display Manager\2.0\dmlg.log
c:\programdata\SAMSUNG\Easy Software Manager\ADD_ADDSW_IMG6074A56-I00101.XML
c:\programdata\SAMSUNG\Easy Software Manager\ADD_ADDSW_IMG6074A56-I00102.XML
c:\programdata\SAMSUNG\Easy Software Manager\BKG_IMG6074A44-I001.XML
c:\programdata\SAMSUNG\Easy Software Manager\HDM_IMG6074A56-I00101.XML
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-01472A16_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-01576A42_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-01584A23_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11856A10_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11856A10_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11856A10_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11859A14_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11859A14_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11897A19_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11897A19_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11897A19_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11987A12_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11987A12_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-11987A12_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12037A22_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12147A23_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12147A23_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12147A23_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12168A08_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12168A08_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12168A08_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12185A22_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12185A22_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12185A22_scr3.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-12185A22_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13169A25_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13171A22_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13171A22_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13171A22_scr3.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13171A22_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13177A39_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13177A39_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13177A39_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13498A07_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13498A07_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13498A07_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13525A16_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13525A16_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13525A16_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13544A34_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13544A34_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13544A34_scr3.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13544A34_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13582A24_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13582A24_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13596A05_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13596A05_scr2.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13596A05_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13610A04_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13631A08_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13631A08_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13686A01_scr1.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG\BASW-13686A01_thumb.png
c:\programdata\SAMSUNG\Easy Software Manager\IMG6074A44-I001.XML
c:\programdata\SAMSUNG\Easy Software Manager\PATCH_PATCH_IMG6074A56-I00101.XML
c:\programdata\SAMSUNG\Easy Software Manager\PATCH_PATCH_IMG6074A56-I00102.XML
c:\programdata\SAMSUNG\Easy Software Manager\PATCH_PATCH_IMG6074A56-I00103.XML
c:\programdata\SAMSUNG\Easy Software Manager\PATCH_PATCH_IMG6074A56-I00104.XML
c:\programdata\SAMSUNG\Easy Software Manager\SelfUpdate\SWM_Setup.exe
c:\programdata\SAMSUNG\Easy Software Manager\SWMData.db
c:\programdata\SAMSUNG\Easy Software Manager\SWMLogging.db
c:\programdata\SAMSUNG\Easy Support Center\Log.txt
c:\programdata\SAMSUNG\Easy Support Center\MBR.dat
c:\programdata\SAMSUNG\Easy Support Center\SamoyedDB.db3
c:\programdata\SAMSUNG\SW Update Service\License.txt
c:\programdata\SAMSUNG\SW Update Service\sManager.lang
c:\programdata\SAMSUNG\SW Update Service\SWMAgent.exe
c:\programdata\SAMSUNG\SW Update Service\SWMFileDownloadUtil.exe
c:\programdata\SAMSUNG\SW Update Service\SWMFuncDLL.dll
c:\programdata\SAMSUNG\SW Update Service\SWMLauncher.exe
c:\programdata\SAMSUNG\SW Update Service\SWMSQLData.dat
c:\programdata\SAMSUNG\SW Update Service\SWUInterfaceLauncher.exe
c:\programdata\SAMSUNG\SW Update Service\SWUpdateIF.dll
c:\programdata\SAMSUNG\SW Update\IMG\BASW-01472A16_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-01576A42_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-01576A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-01584A23_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11828A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11828A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11830A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11830A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11830A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11831A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11831A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11831A99_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11831A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11856A10_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11856A10_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11856A10_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11856A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11856A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11859A14_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11859A14_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A19_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A19_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A19_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11897A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11987A12_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11987A12_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11987A12_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11987A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-11987A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12037A22_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12037A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12147A23_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12147A23_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12147A23_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12168A08_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12168A08_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12168A08_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A22_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A22_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A22_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A22_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-12185A99_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13169A25_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13171A22_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13171A22_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13171A22_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13171A22_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A39_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A39_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A39_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13177A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13479A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13479A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13479A99_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13479A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13498A07_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13498A07_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13498A07_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A16_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A16_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A16_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13525A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13544A34_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13544A34_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13544A34_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13544A34_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13582A24_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13582A24_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13582A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13582A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13596A05_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13596A05_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13596A05_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13596A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13610A04_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13610A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13631A08_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13631A08_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13674A02_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13674A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13686A01_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13686A01_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13686A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-13686A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83138A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83138A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83138A99_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83138A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83288A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83288A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83356A99_scr1.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83356A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83356A99_scr3.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83356A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-83512A99_thumb.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-84141A99_scr2.png
c:\programdata\SAMSUNG\SW Update\IMG\BASW-84141A99_scr3.png
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-01472A25_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-01472A25_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-01472A29_107374CA.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-01472A29_139264E2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11828A15_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11828A15_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11828A15_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11828A15_55CD7CD1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11830A18_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11830A18_874F5406.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11831A10_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11831A10_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11831A10_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-11831A10_A06C2BF4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13479A37_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13479A37_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13479A37_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13479A37_F5A23D5F.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13674A02_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-13674A02_FD5192FC.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-83317A08_1D196664.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-83317A08_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-83317A08_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-83317A08_4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_ADD_BASW-83356A55_6146F2C2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_HDM_MAX_MAX6074A44.XML
c:\programdata\SAMSUNG\SW Update\ORCA_HDM_SGL_SGL6074A44-C01-R004-S0001.XML
c:\programdata\SAMSUNG\SW Update\ORCA_HDM_SGL_SGL6074A44-C01-R004-S0001_9649AA3A.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-01472A29_B43014FC.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11570A65_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11570A65_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11570A65_E61ED6BD.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11850A45_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11850A45_367C8965.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11850A45_CEBDA3A7.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11897A39_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11897A39_498AB0D4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11995A89_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-11995A89_93BDB241.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-12037A70_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-12037A70_4D82C4B5.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-13525A36_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-13525A36_4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-13525A36_D231CA00.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83138A37_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83138A37_8983825F.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83138A37_BF60161D.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83288A01_3.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83288A01_4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83288A01_C5BD96E4.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83319A04_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83319A04_FEFCF8F6.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83356A56_C5041BBF.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83512A12_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83512A12_C16DD50B.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83512A15_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-83512A15_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-84013A01_7.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-84013A01_D6F260CD.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_BASW-84141A26_55AFC042.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_ORCA-10106P01_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_ORCA-10109P01_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_ORCA-10109P01_86BB69CB.XML
c:\programdata\SAMSUNG\SW Update\ORCA_PATCH_ORCA-10224P01_35E6C36B.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A61_INT_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A62_2.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A62_INT_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A70_1.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A70_C536B133.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A74_186F097B.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A76_91D35EB9.XML
c:\programdata\SAMSUNG\SW Update\ORCA_SELF_BASW-20000A77_125FE020.XML
c:\programdata\SAMSUNG\SW Update\SHelperIcon\Icon.png
c:\programdata\SAMSUNG\SW Update\SRS_HDM_IMG_IMG6074A44-I001.XML
c:\programdata\SAMSUNG\SW Update\SWMCacheData_2.1.0.0.db
c:\programdata\SAMSUNG\SW Update\SWMCacheData_2.1.5.0.db
c:\programdata\SAMSUNG\SW Update\SWMCacheData_2.1.9.0.db
c:\windows\SysWow64\UNWISE.EXE
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SWUpdateService
-------\Service_SWUpdateService
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-05-16 bis 2013-06-16  ))))))))))))))))))))))))))))))
.
.
2013-06-15 21:03 . 2013-06-08 14:08        279040        ----a-w-        c:\program files\Internet Explorer\sqmapi.dll
2013-06-14 15:53 . 2013-05-13 06:37        9460464        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{2D0A870F-0799-43C2-9F34-CB4A49BA4BC3}\mpengine.dll
2013-06-11 20:45 . 2013-05-17 01:25        257536        ----a-w-        c:\program files (x86)\Internet Explorer\ieproxy.dll
2013-06-11 20:45 . 2013-05-17 01:25        61440        ----a-w-        c:\windows\SysWow64\iesetup.dll
2013-06-11 20:45 . 2013-05-17 01:25        235520        ----a-w-        c:\program files (x86)\Internet Explorer\IEShims.dll
2013-06-11 20:45 . 2013-05-17 00:58        701952        ----a-w-        c:\program files\Internet Explorer\ieproxy.dll
2013-06-11 20:45 . 2013-05-17 00:58        67072        ----a-w-        c:\windows\system32\iesetup.dll
2013-06-11 20:45 . 2013-05-17 00:58        356352        ----a-w-        c:\program files\Internet Explorer\IEShims.dll
2013-06-11 19:50 . 2013-06-11 19:50        --------        d-----w-        c:\program files\iPod
2013-06-11 19:50 . 2013-06-11 19:51        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-11 19:50 . 2013-06-11 19:51        --------        d-----w-        c:\program files\iTunes
2013-06-11 19:50 . 2013-06-11 19:51        --------        d-----w-        c:\program files (x86)\iTunes
2013-06-11 19:48 . 2013-06-11 19:48        --------        d-----w-        c:\program files\Bonjour
2013-06-11 18:11 . 2013-05-08 06:39        1910632        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-05-30 12:06 . 2013-05-30 12:06        --------        d-----w-        c:\program files\CCleaner
2013-05-21 05:59 . 2013-05-09 08:59        65336        ----a-w-        c:\windows\system32\drivers\aswRvrt.sys
2013-05-21 05:59 . 2013-05-09 08:59        189936        ----a-w-        c:\windows\system32\drivers\aswVmm.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-11 20:45 . 2012-09-26 13:35        75825640        ----a-w-        c:\windows\system32\MRT.exe
2013-05-16 17:29 . 2012-09-25 18:02        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 17:29 . 2012-09-25 18:02        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-12 07:18 . 2011-03-28 09:36        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-09 08:59 . 2012-09-25 18:14        378432        ----a-w-        c:\windows\system32\drivers\aswSP.sys
2013-05-09 08:59 . 2012-09-25 18:14        72016        ----a-w-        c:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59 . 2012-09-25 18:14        64288        ----a-w-        c:\windows\system32\drivers\aswTdi.sys
2013-05-09 08:59 . 2012-09-25 18:14        1025808        ----a-w-        c:\windows\system32\drivers\aswSnx.sys
2013-05-09 08:59 . 2012-09-25 18:14        33400        ----a-w-        c:\windows\system32\drivers\aswFsBlk.sys
2013-05-09 08:59 . 2012-09-25 18:14        80816        ----a-w-        c:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58 . 2012-09-25 18:14        41664        ----a-w-        c:\windows\avastSS.scr
2013-05-09 08:58 . 2012-09-25 18:14        287840        ----a-w-        c:\windows\system32\aswBoot.exe
2013-05-02 00:06 . 2010-11-21 03:27        278800        ------w-        c:\windows\system32\MpSigStub.exe
2013-04-13 05:49 . 2013-05-16 10:48        135168        ----a-w-        c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-16 10:48        350208        ----a-w-        c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-16 10:48        308736        ----a-w-        c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-16 10:48        111104        ----a-w-        c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-16 10:48        474624        ----a-w-        c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-16 10:48        2176512        ----a-w-        c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 10:28        1656680        ----a-w-        c:\windows\system32\drivers\ntfs.sys
2013-04-10 06:01 . 2013-05-16 10:48        265064        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 06:01 . 2013-05-16 10:48        983400        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 03:30 . 2013-05-16 10:45        3153920        ----a-w-        c:\windows\system32\win32k.sys
2013-03-19 06:04 . 2013-04-12 08:54        5550424        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-03-19 05:53 . 2013-05-16 10:45        48640        ----a-w-        c:\windows\system32\wwanprotdim.dll
2013-03-19 05:53 . 2013-05-16 10:45        230400        ----a-w-        c:\windows\system32\wwansvc.dll
2013-03-19 05:46 . 2013-04-12 08:54        43520        ----a-w-        c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-12 08:54        3968856        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-12 08:54        3913560        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-12 08:54        6656        ----a-w-        c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-12 08:54        112640        ----a-w-        c:\windows\system32\smss.exe
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 NSHE;Guardant Emulator Driver;c:\windows\system32\Drivers\NSHE.SYS;c:\windows\SYSNATIVE\Drivers\NSHE.SYS [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protokoll;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]
R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 SBIOSIO;SBIOSIO;c:\users\Nico\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys;c:\users\Nico\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 SamsungDeviceConfigurationWinService;SamsungDeviceConfiguration;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe;c:\program files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe [x]
S2 SGDrv;SGDrv;c:\windows\system32\DRIVERS\SGdrv64.sys;c:\windows\SYSNATIVE\DRIVERS\SGdrv64.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed - Virtueller Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-05-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-25 17:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58        133840        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-07-12 12558440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Nico\AppData\Roaming\Mozilla\Firefox\Profiles\cworoa6y.default\
FF - prefs.js: browser.startup.homepage - msn.de
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - ExtSQL: 2013-05-19 19:21; ich@maltegoetz.de; c:\users\Nico\AppData\Roaming\Mozilla\Firefox\Profiles\cworoa6y.default\extensions\ich@maltegoetz.de
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-06-16  20:08:53 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-06-16 18:08
.
Vor Suchlauf: 9 Verzeichnis(se), 84.217.589.760 Bytes frei
Nach Suchlauf: 13 Verzeichnis(se), 83.465.871.360 Bytes frei
.
- - End Of File - - F0832D865D1989B280A4240FD632680C
D41D8CD98F00B204E9800998ECF8427E
Hat alles wunderbar geklappt. Beim ersten Start des Programms kam eine Meldung das ich Spybot ausmachen soll obwohl es nicht lief. Darauf hin habe ich es vorrübergehend Deinstalliert. Dann Combofix neugestartet und durchlaufen lassen ohne Probleme. Auch nach dem Neustart kam keine Fehlermeldung. Jedoch startete mein Avast nicht. Nach einem Neustart ging er aber wieder von alleine an.

Diese Fehlermeldung bekomme ich manchmal:

hxxp://www.powerflex-buchsen.de/cgi-bin/check_hijack.html

Kann man aus dem File schon was raussehen ? Oder fehlt noch was ?

markusg 17.06.2013 14:17
spybot kann weg bleiben.
was ist mit der frage nach router update
welche fehlermeldung bekommst du, die aus dem link mal als text posten.
sieht bisher gut aus

Nico#7 17.06.2013 14:24
Ja Spybot lass ich jetzt auch mal weg. Die Fritz-Box ist auf dem neusten Firmware Stand und der Netgear Repeater auch.
Ich bekomme ansich keine Fehlermeldung. Nur wenn ich jetzt beispielsweise auf web.de gehe gelange ich nicht zur Webseite sondern es öffnet sich das Anmeldefenster von Netgear obwohl ich das gar nicht wollte.
Dies passiert aber nicht immer sondern nur manchmal. Es ist auch nicht Hompage abhängig.
Und das Internet ist teilweise sehr langsam obwohl ich volle Verbindung habe laut den Windows Balken.

markusg 17.06.2013 14:28
schon mal ein Reset beider Geräte versucht, achtung, zugangsdaten speichern und firmware evtl. neu aufspielen

Nico#7 17.06.2013 18:29
Einen Reset der beiden Geräte habe ich in diesem Sinne noch nicht gemacht. Habe nur von beiden Geräten für einige Zeit mal die Stecker gezogen. Ich werde bei 1&1 mal anfragen ob sie mir vielleicht einen neuen Router schicken da meiner schon 8 Jahre alt ist. Es ist eine Fritz.Box 7050 das Gerät ist denke ich auch schon in die Jahre gekommen.
Wie führe ich den einen Rest korrekt durch ?
Muss ich da auf das Gerät zugreifen und von da aus einen Rest durchführen ?

markusg 18.06.2013 14:58
nein, eigendlich müsste es da an der unterseite ein "loch" geen wo man 30 sekunden mit nem spitzen gegenstand einen schalter drückt


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:18 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131