MBAM stops and cannot be restarted

Poldi77 · October 4, 2011

Hello,

I have a problem with my laptop, which got infected. Avira Antivir is stopped and cannot finish a scan, the same applies for MBAM, which in effect is disabled and cannot be restarted thereafter (Message is that I don't have the rights to run it).

In the safe mode there is a scan possible, but it is not detecting anything.

I have done a cleaning with the ATF-Tool as well as on with tdsskiller.

Thank you in advance for your help.

Here are the logs:

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26

Run by lsy at 13:54:05 on 2011-10-03

Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.3002.2194 [GMT 2:00]

.

AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

FW: ZoneAlarm Firewall *Disabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

svchost.exe

C:\WINDOWS\1117667205:2059428285.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Avira\AntiVir Desktop\sched.exe

svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

C:\Programme\Gemeinsame Dateien\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

C:\WINDOWS\system32\agrsmsvc.exe

C:\Programme\Cisco Systems\VPN Client\cvpnd.exe

C:\Programme\Ashampoo\Ashampoo WinOptimizer 6\DfsdkS.exe

C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe

C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe

C:\Programme\Intel\Intel Matrix Storage Manager\IAANTMon.exe

C:\Programme\Java\jre6\bin\jqs.exe

C:\Programme\Funkwerk Secure IPSec Client\ncpclcfg.exe

C:\Programme\Funkwerk Secure IPSec Client\ncprwsnt.exe

C:\Programme\Funkwerk Secure IPSec Client\ncpsec.exe

C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe

C:\WINDOWS\system32\o2flash.exe

C:\Programme\Funkwerk Secure IPSec Client\rwsrsu.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe

C:\Programme\Intel\Intel Matrix Storage Manager\iaanotif.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Programme\Synaptics\SynTP\SynTPEnh.exe

C:\Addon\Fujitsu\PSUtility\TrayManager.exe

C:\Programme\Fujitsu\FUJ02E3\FUJ02E3.exe

C:\Programme\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe

C:\Programme\Fujitsu\BtnHnd\BtnHnd.exe

C:\WINDOWS\ZSSnp211.exe

C:\Programme\Avira\AntiVir Desktop\avgnt.exe

C:\Programme\Funkwerk Secure IPSec Client\NcpBudgetGui.exe

C:\Programme\Funkwerk Secure IPSec Client\rwsrsu.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe

C:\Programme\Epson Software\Event Manager\EEventManager.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Gemeinsame Dateien\Nero\Lib\NMBgMonitor.exe

C:\Programme\Ashampoo\Ashampoo UnInstaller 2010\UIWatcher.exe

C:\Programme\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe

C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexStoreSvr.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Programme\Mozilla Firefox\firefox.exe

C:\Programme\Mozilla Firefox\plugin-container.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = about:blank

uInternet Settings,ProxyOverride = fritz.box

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll

BHO: Easy Photo Print: {9421dd08-935f-4701-a9ca-22df90ac4ea6} - c:\programme\epson software\easy photo print\EPTBL.dll

BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\programme\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\microsoft office\office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programme\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\programme\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: Easy Photo Print: {9421dd08-935f-4701-a9ca-22df90ac4ea6} - c:\programme\epson software\easy photo print\EPTBL.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [spybotSD TeaTimer] c:\programme\spybot - search & destroy\TeaTimer.exe

uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\programme\gemeinsame dateien\nero\lib\NMBgMonitor.exe"

uRun: [uIWatcher] c:\programme\ashampoo\ashampoo uninstaller 2010\UIWatcher.exe

uRun: [ABBYY Screenshot Reader Bonus]

uRun: [EPSON SX218 Series] c:\windows\system32\spool\drivers\w32x86\3\e_fatigde.exe /fu "c:\windows\temp\E_S60.tmp" /EF "HKCU"

mRun: [iAAnotif] c:\programme\intel\intel matrix storage manager\iaanotif.exe

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [soundMan] SOUNDMAN.EXE

mRun: [AlcWzrd] ALCWZRD.EXE

mRun: [Alcmtr] ALCMTR.EXE

mRun: [synTPEnh] c:\programme\synaptics\syntp\SynTPEnh.exe

mRun: [PSUtility] c:\addon\fujitsu\psutility\TrayManager.exe

mRun: [TvOutSwitch] c:\addon\fujitsu\dispswitch\DispSwitchLauncher.exe

mRun: [LoadFUJ02E3] c:\programme\fujitsu\fuj02e3\FUJ02E3.exe

mRun: [indicatorUtility] c:\programme\fujitsu\fujitsu hotkey utility\IndicatorUty.exe

mRun: [LoadFujitsuQuickTouch] c:\addon\fujitsu\application panel\QuickTouch.exe

mRun: [LoadBtnHnd] c:\programme\fujitsu\btnhnd\BtnHnd.exe

mRun: [ZoneAlarm Client] "c:\programme\zone labs\zonealarm\zlclient.exe"

mRun: [NeroFilterCheck] c:\programme\gemeinsame dateien\nero\lib\NeroCheck.exe

mRun: [NBKeyScan] "c:\programme\nero\nero8\nero backitup\NBKeyScan.exe"

mRun: [ZSSnp211] c:\windows\ZSSnp211.exe

mRun: [avgnt] "c:\programme\avira\antivir desktop\avgnt.exe" /min

mRun: [NcpBudgetGui] "c:\programme\funkwerk secure ipsec client\NcpBudgetGui.exe" -start

mRun: [NcpPopup] "c:\programme\funkwerk secure ipsec client\ncppopup.exe" noerrmsg

mRun: [NcpMonitor] "c:\programme\funkwerk secure ipsec client\ncpmon.exe" autorun

mRun: [NcpRsuGui] "c:\programme\funkwerk secure ipsec client\rwsrsu.exe" -gui

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [sunJavaUpdateSched] "c:\programme\gemeinsame dateien\java\java update\jusched.exe"

mRun: [EEventManager] "c:\programme\epson software\event manager\EEventManager.exe"

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

StartupFolder: c:\dokume~1\alluse~1\startm~1\progra~1\autost~1\vpn client.lnk - c:\windows\installer\{b0bf7057-6869-4e4b-920c-ea2a58da07f0}\Icon3E5562ED7.ico

StartupFolder: c:\dokume~1\alluse~1\startm~1\progra~1\autost~1\web'n'walk manager.lnk - c:\programme\t-mobile\web'n'walk manager\web'n'walk Manager.exe

mPolicies-explorer: NoResolveTrack = 1 (0x1)

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Nach Microsoft E&xel exportieren - c:\progra~1\office\office12\EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programme\messenger\msmsgs.exe

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\programme\skype\toolbars\internet explorer\skypeieplugin.dll

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll

LSP: mswsock.dll

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1248270700551

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1248337956218

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

TCP: DhcpNameServer = 10.129.32.1 10.111.81.129

TCP: Interfaces\{AEEB99AA-511C-4314-8EEA-17AB8E0DECEC} : DhcpNameServer = 10.129.32.1 10.111.81.129

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\programme\skype\toolbars\internet explorer\skypeieplugin.dll

Notify: igfxcui - igfxdev.dll

Notify: PSUTY - PSUWNP.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

Hosts: 127.0.0.1 www.spywareinfo.com

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\dokumente und einstellungen\lsy\anwendungsdaten\mozilla\firefox\profiles\8xhgcz5a.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.net/

FF - component: c:\programme\nokia\nokia pc suite 7\bkmrksync\components\BkMrkExt.dll

FF - plugin: c:\progra~1\microsoft office\office14\NPAUTHZ.DLL

FF - plugin: c:\programme\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\programme\google\picasa3\npPicasa3.dll

FF - plugin: c:\programme\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\programme\microsoft silverlight\4.0.60531.0\npctrlui.dll

FF - plugin: c:\programme\mozilla firefox\plugins\npdeployJava1.dll

FF - plugin: c:\programme\mozilla firefox\plugins\npwachk.dll

FF - plugin: c:\programme\nitro pdf\reader 2\npdf.dll

FF - plugin: c:\programme\nitro pdf\reader 2\npnitromozilla.dll

.

============= SERVICES / DRIVERS ===============

.

R1 avgio;avgio;c:\programme\avira\antivir desktop\avgio.sys [2010-3-31 11608]

R1 KLIF;KLIF;c:\windows\system32\drivers\klif.sys [2009-10-24 127768]

R2 AAV UpdateService;AAV UpdateService;c:\programme\akademische arbeitsgemeinschaft\aavupdatemanager\aavus.exe [2008-10-24 128296]

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\programme\gemeinsame dateien\abbyy\finereadersprint\9.00\licensing\NetworkLicenseServer.exe [2009-5-14 759048]

R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\avira\antivir desktop\sched.exe [2010-3-31 136360]

R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-10-24 66616]

R2 DfSdkS;Defragmentation-Service;c:\programme\ashampoo\ashampoo winoptimizer 6\DfSdkS.exe [2010-2-24 406016]

R2 EPGService;EPGService;c:\progra~1\wintv\epg services\system\EPGService.exe [2010-7-3 435200]

R2 gtdetectsc;GtDetectSc;c:\programme\t-mobile\web'n'walk manager\GtDetectSc.exe [2007-11-5 204915]

R2 ncpclcfg;ncpclcfg;c:\programme\funkwerk secure ipsec client\ncpclcfg.exe [2010-5-11 86016]

R2 ncprwsnt;ncprwsnt;c:\programme\funkwerk secure ipsec client\NCPRWSNT.EXE [2010-5-11 1078792]

R2 NcpSec;NcpSec;c:\programme\funkwerk secure ipsec client\NCPSEC.EXE [2010-5-11 32768]

R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;c:\programme\nitro pdf\reader 2\NitroPDFReaderDriverService2.exe [2011-6-21 196912]

R2 rwsrsu;RwsRsu;c:\programme\funkwerk secure ipsec client\rwsrsu.exe [2010-5-11 850432]

R2 vsdatant;vsdatant;c:\windows\system32\vsdatant.sys [2005-1-26 394952]

R2 WirelessSelectorService;WirelessSelectorService;c:\program files\fujitsu\wirelessselector\WSUService.exe [2008-10-9 62760]

R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\fuj02e3.sys [2009-7-22 4864]

R3 GT72NDISIPXP;GT 72 IP NDIS;c:\windows\system32\drivers\Gt51Ip.sys [2007-7-9 95744]

R3 GT72UBUS;GT 72 U BUS;c:\windows\system32\drivers\gt72ubus.sys [2007-6-26 51968]

R3 NcpFiltMP;NcpFiltMP;c:\windows\system32\drivers\ncpvaxp.sys [2010-5-11 79528]

R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [2010-2-8 47448]

R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [2010-2-8 44064]

R4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-10-3 41272]

S2 AntiVirService;Avira AntiVir Guard;c:\programme\avira\antivir desktop\avguard.exe [2010-3-31 269480]

S2 vsmon;TrueVector Internet Monitor;c:\windows\system32\zonelabs\vsmon.exe -service --> c:\windows\system32\zonelabs\vsmon.exe -service [?]

S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [2011-7-5 15104]

S3 DisplayLinkGA;DisplayLinkGA;c:\windows\system32\drivers\displaylinkgaport.sys --> c:\windows\system32\drivers\DisplayLinkGAport.sys [?]

S3 DisplayLinkmirror;DisplayLinkmirror;c:\windows\system32\drivers\displaylinkmirrorport.sys --> c:\windows\system32\drivers\DisplayLinkmirrorport.sys [?]

S3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\drivers\displaylinkusbport.sys --> c:\windows\system32\drivers\DisplayLinkUsbPort.sys [?]

S3 hcw66xxx;WinTV HVR-900H;c:\windows\system32\drivers\hcw66xxx.sys [2010-7-3 418304]

S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys --> c:\windows\system32\drivers\massfilter.sys [?]

S3 NcpFilt;Ncp Filter Service;c:\windows\system32\drivers\ncpvaxp.sys [2010-5-11 79528]

S3 ncpvaxp;NCP Secure Client Virtual Adapter Driver;c:\windows\system32\drivers\ncpvaxp.sys [2010-5-11 79528]

S3 osppsvc;Office Software Protection Platform;c:\programme\gemeinsame dateien\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]

S3 RTLWUSB;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187.sys [2009-10-24 332928]

S3 S6U12BScanner;MUSTEK 1200 UB Still Image Device Service;c:\windows\system32\drivers\usbscan.sys [2009-10-23 15104]

.

=============== Created Last 30 ================

.

2011-10-03 11:51:30 -------- d-----w- C:\TDSSKiller_Quarantine

2011-10-03 10:22:56 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-10-03 09:35:04 -------- d-----w- c:\windows\system32\wbem\repository\FS

2011-10-03 09:35:04 -------- d-----w- c:\windows\system32\wbem\Repository

2011-10-03 07:54:07 -------- d-----w- c:\programme\M4a to MP3 Converter

.

==================== Find3M ====================

.

2011-09-30 12:25:52 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-09 09:11:59 604160 ----a-w- c:\windows\system32\crypt32.dll

2011-08-31 18:08:01 231248 ----a-w- c:\windows\system32\drivers\truecrypt.sys

2011-08-31 15:00:50 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-07-15 13:29:31 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2011-07-08 14:02:00 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys

2006-05-03 10:06:54 163328 --sha-r- c:\windows\system32\flvDX.dll

2007-02-21 11:47:16 31232 --sha-r- c:\windows\system32\msfDX.dll

2008-03-16 13:30:52 216064 --sha-r- c:\windows\system32\nbDX.dll

2010-01-06 22:00:00 107520 --sha-r- c:\windows\system32\TAKDSDecoder.dll

.

============= FINISH: 13:54:29,48 ===============

13:52:09.0593 4020 TDSS rootkit removing tool 2.6.3.0 Oct 1 2011 13:14:27

13:52:11.0234 4020 ============================================================

13:52:11.0234 4020 Current date / time: 2011/10/03 13:52:11.0234

13:52:11.0234 4020 SystemInfo:

13:52:11.0234 4020

13:52:11.0234 4020 OS Version: 5.1.2600 ServicePack: 3.0

13:52:11.0234 4020 Product type: Workstation

13:52:11.0234 4020 ComputerName: WORKPADSJ

13:52:11.0234 4020 UserName: lsy

13:52:11.0234 4020 Windows directory: C:\WINDOWS

13:52:11.0234 4020 System windows directory: C:\WINDOWS

13:52:11.0234 4020 Processor architecture: Intel x86

13:52:11.0234 4020 Number of processors: 2

13:52:11.0234 4020 Page size: 0x1000

13:52:11.0234 4020 Boot type: Normal boot

13:52:11.0234 4020 ============================================================

13:52:11.0343 4020 Initialize success

13:52:16.0984 2468 ============================================================

13:52:16.0984 2468 Scan started

13:52:16.0984 2468 Mode: Manual; SigCheck; TDLFS;

13:52:16.0984 2468 ============================================================

13:52:17.0015 2468 853f9e42 (8f2bb1827cac01aee6a16e30a1260199) C:\WINDOWS\1117667205:2059428285.exe

13:52:17.0015 2468 Suspicious file (Hidden): C:\WINDOWS\1117667205:2059428285.exe. md5: 8f2bb1827cac01aee6a16e30a1260199

13:52:17.0015 2468 853f9e42 ( HiddenFile.Multi.Generic ) - warning

13:52:17.0015 2468 853f9e42 - detected HiddenFile.Multi.Generic (1)

13:52:17.0031 2468 Abiosdsk - ok

13:52:17.0046 2468 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS

13:52:17.0296 2468 abp480n5 - ok

13:52:17.0312 2468 ACPI (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys

13:52:17.0390 2468 ACPI - ok

13:52:17.0406 2468 ACPIEC (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys

13:52:17.0484 2468 ACPIEC - ok

13:52:17.0500 2468 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys

13:52:17.0562 2468 adpu160m - ok

13:52:17.0578 2468 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

13:52:17.0656 2468 aec - ok

13:52:17.0671 2468 AegisP (023867b6606fbabcdd52e089c4a507da) C:\WINDOWS\system32\DRIVERS\AegisP.sys

13:52:17.0671 2468 AegisP ( UnsignedFile.Multi.Generic ) - warning

13:52:17.0671 2468 AegisP - detected UnsignedFile.Multi.Generic (1)

13:52:17.0687 2468 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys

13:52:17.0703 2468 AFD - ok

13:52:17.0734 2468 AgereSoftModem (1cfeba39fc613e45b49d3eddfbcda289) C:\WINDOWS\system32\DRIVERS\AGRSM.sys

13:52:17.0750 2468 AgereSoftModem - ok

13:52:17.0765 2468 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

13:52:17.0875 2468 agp440 - ok

13:52:17.0890 2468 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys

13:52:17.0968 2468 agpCPQ - ok

13:52:17.0984 2468 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys

13:52:18.0015 2468 Aha154x - ok

13:52:18.0031 2468 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys

13:52:18.0125 2468 aic78u2 - ok

13:52:18.0140 2468 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys

13:52:18.0218 2468 aic78xx - ok

13:52:18.0234 2468 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys

13:52:18.0296 2468 AliIde - ok

13:52:18.0312 2468 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys

13:52:18.0390 2468 alim1541 - ok

13:52:18.0406 2468 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys

13:52:18.0484 2468 amdagp - ok

13:52:18.0500 2468 AmdK7 (3a0dafac778236559c14c7203fb550eb) C:\WINDOWS\system32\DRIVERS\amdk7.sys

13:52:18.0578 2468 AmdK7 - ok

13:52:18.0593 2468 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys

13:52:18.0625 2468 amsint - ok

13:52:18.0640 2468 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

13:52:18.0718 2468 Arp1394 - ok

13:52:18.0734 2468 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys

13:52:18.0812 2468 asc - ok

13:52:18.0828 2468 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys

13:52:18.0859 2468 asc3350p - ok

13:52:18.0875 2468 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys

13:52:18.0953 2468 asc3550 - ok

13:52:18.0968 2468 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

13:52:19.0046 2468 AsyncMac - ok

13:52:19.0062 2468 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

13:52:19.0140 2468 atapi - ok

13:52:19.0156 2468 Atdisk - ok

13:52:19.0171 2468 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

13:52:19.0250 2468 Atmarpc - ok

13:52:19.0265 2468 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

13:52:19.0343 2468 audstub - ok

13:52:19.0343 2468 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Programme\Avira\AntiVir Desktop\avgio.sys

13:52:19.0343 2468 avgio - ok

13:52:19.0359 2468 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys

13:52:28.0375 2468 avgntflt - ok

13:52:28.0390 2468 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys

13:52:28.0406 2468 avipbb - ok

13:52:28.0421 2468 AVMUNET (077b3692f4376d1539755761feef659a) C:\WINDOWS\system32\DRIVERS\avmunet.sys

13:52:28.0437 2468 AVMUNET - ok

13:52:28.0437 2468 AX88772 (26a378d112677fb8ae08e1dfcecda44d) C:\WINDOWS\system32\DRIVERS\ax88772.sys

13:52:28.0453 2468 AX88772 - ok

13:52:28.0468 2468 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

13:52:28.0546 2468 Beep - ok

13:52:28.0562 2468 BtnHnd (c84e0365e1b1d1f96ebdf3b403de5feb) C:\Programme\Fujitsu\BtnHnd\BtnHnd.sys

13:52:28.0562 2468 BtnHnd ( UnsignedFile.Multi.Generic ) - warning

13:52:28.0562 2468 BtnHnd - detected UnsignedFile.Multi.Generic (1)

13:52:28.0578 2468 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys

13:52:28.0640 2468 cbidf - ok

13:52:28.0656 2468 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

13:52:28.0734 2468 cbidf2k - ok

13:52:28.0750 2468 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys

13:52:28.0828 2468 CCDECODE - ok

13:52:28.0843 2468 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys

13:52:28.0875 2468 cd20xrnt - ok

13:52:28.0890 2468 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

13:52:28.0968 2468 Cdaudio - ok

13:52:28.0984 2468 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

13:52:29.0062 2468 Cdfs - ok

13:52:29.0078 2468 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

13:52:29.0140 2468 Cdrom - ok

13:52:29.0156 2468 Changer - ok

13:52:29.0187 2468 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys

13:52:29.0250 2468 CmBatt - ok

13:52:29.0265 2468 CmdIde (c687f81290303d90099b027a6474f99f) C:\WINDOWS\system32\DRIVERS\cmdide.sys

13:52:29.0343 2468 CmdIde - ok

13:52:29.0359 2468 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys

13:52:29.0437 2468 Compbatt - ok

13:52:29.0453 2468 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys

13:52:29.0531 2468 Cpqarray - ok

13:52:29.0546 2468 CVirtA (b5ecadf7708960f1818c7fa015f4c239) C:\WINDOWS\system32\DRIVERS\CVirtA.sys

13:52:29.0562 2468 CVirtA - ok

13:52:29.0578 2468 CVPNDRVA (18994842386fd3039279d7865740abbd) C:\WINDOWS\system32\Drivers\CVPNDRVA.sys

13:52:29.0578 2468 CVPNDRVA ( UnsignedFile.Multi.Generic ) - warning

13:52:29.0578 2468 CVPNDRVA - detected UnsignedFile.Multi.Generic (1)

13:52:29.0593 2468 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys

13:52:29.0671 2468 dac2w2k - ok

13:52:29.0687 2468 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys

13:52:29.0765 2468 dac960nt - ok

13:52:29.0781 2468 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

13:52:29.0859 2468 Disk - ok

13:52:29.0875 2468 DisplayLinkGA - ok

13:52:29.0890 2468 DisplayLinkmirror - ok

13:52:29.0906 2468 DisplayLinkUsbPort - ok

13:52:29.0921 2468 dmboot (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys

13:52:30.0015 2468 dmboot - ok

13:52:30.0031 2468 dmio (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys

13:52:30.0093 2468 dmio - ok

13:52:30.0109 2468 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

13:52:30.0187 2468 dmload - ok

13:52:30.0203 2468 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

13:52:30.0281 2468 DMusic - ok

13:52:30.0296 2468 DNE (b5aa5aa5ac327bd7c1aec0c58f0c1144) C:\WINDOWS\system32\DRIVERS\dne2000.sys

13:52:30.0296 2468 DNE - ok

13:52:30.0328 2468 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys

13:52:30.0390 2468 dot4 - ok

13:52:30.0406 2468 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys

13:52:30.0484 2468 Dot4Print - ok

13:52:30.0500 2468 dot4ufd (0a57b5876530febb4ebf6ad501864f96) C:\WINDOWS\system32\DRIVERS\hppaufd0.sys

13:52:30.0562 2468 dot4ufd - ok

13:52:30.0562 2468 dot4usb (29e86af2f3457d0441348020fe3cfbd0) C:\WINDOWS\system32\DRIVERS\dot4usb.sys

13:52:30.0640 2468 dot4usb - ok

13:52:30.0656 2468 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys

13:52:30.0734 2468 dpti2o - ok

13:52:30.0750 2468 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

13:52:30.0828 2468 drmkaud - ok

13:52:30.0828 2468 dvd43llh (1fc1eed3ea0c3a0ecf8a95b97e1b4831) C:\WINDOWS\system32\DRIVERS\dvd43llh.sys

13:52:30.0843 2468 dvd43llh ( UnsignedFile.Multi.Generic ) - warning

13:52:30.0843 2468 dvd43llh - detected UnsignedFile.Multi.Generic (1)

13:52:30.0859 2468 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

13:52:30.0937 2468 Fastfat - ok

13:52:30.0953 2468 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys

13:52:31.0015 2468 Fdc - ok

13:52:31.0031 2468 FETNDIS (e9648254056bce81a85380c0c3647dc4) C:\WINDOWS\system32\DRIVERS\fetnd5.sys

13:52:31.0109 2468 FETNDIS - ok

13:52:31.0125 2468 Fips (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys

13:52:31.0203 2468 Fips - ok

13:52:31.0218 2468 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys

13:52:31.0281 2468 Flpydisk - ok

13:52:31.0296 2468 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys

13:52:31.0375 2468 FltMgr - ok

13:52:31.0390 2468 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

13:52:31.0468 2468 Fs_Rec - ok

13:52:31.0484 2468 Ftdisk (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

13:52:31.0546 2468 Ftdisk - ok

13:52:31.0562 2468 FUJ02B1 (00845dcd64fe6348ddf7890c310c17b9) C:\WINDOWS\system32\DRIVERS\FUJ02B1.sys

13:52:31.0578 2468 FUJ02B1 - ok

13:52:31.0593 2468 FUJ02E3 (ef9f310f86fd504afcdcedf8280091fb) C:\WINDOWS\system32\DRIVERS\FUJ02E3.sys

13:52:31.0687 2468 FUJ02E3 - ok

13:52:31.0703 2468 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

13:52:31.0781 2468 Gpc - ok

13:52:31.0781 2468 grmnusb (d956358054e99e6ffac69cd87e893a89) C:\WINDOWS\system32\drivers\grmnusb.sys

13:52:31.0796 2468 grmnusb - ok

13:52:31.0812 2468 GT72NDISIPXP (9eb33545bc9b1ca0c9b9e6d780ce0d27) C:\WINDOWS\system32\DRIVERS\Gt51Ip.sys

13:52:31.0828 2468 GT72NDISIPXP - ok

13:52:31.0843 2468 GT72UBUS (687a4b740f14c2dff6dd7b848f50f0a6) C:\WINDOWS\system32\DRIVERS\gt72ubus.sys

13:52:31.0859 2468 GT72UBUS - ok

13:52:31.0875 2468 GTPTSER (346ddaefa04e49ad804ee12d4baa0ed3) C:\WINDOWS\system32\DRIVERS\gtptser.sys

13:52:31.0890 2468 GTPTSER - ok

13:52:31.0906 2468 hcw66xxx (081c32475cfc1aa48e281d5d2dd24c68) C:\WINDOWS\system32\Drivers\hcw66xxx.sys

13:52:31.0921 2468 hcw66xxx - ok

13:52:31.0937 2468 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

13:52:32.0015 2468 HDAudBus - ok

13:52:32.0031 2468 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

13:52:32.0109 2468 HidUsb - ok

13:52:32.0125 2468 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys

13:52:32.0187 2468 hpn - ok

13:52:32.0203 2468 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys

13:52:32.0250 2468 HPZid412 - ok

13:52:32.0265 2468 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys

13:52:32.0312 2468 HPZipr12 - ok

13:52:32.0328 2468 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys

13:52:32.0375 2468 HPZius12 - ok

13:52:32.0390 2468 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

13:52:32.0406 2468 HTTP - ok

13:52:32.0421 2468 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys

13:52:32.0500 2468 i2omgmt - ok

13:52:32.0515 2468 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys

13:52:32.0578 2468 i2omp - ok

13:52:32.0593 2468 i8042prt (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

13:52:32.0671 2468 i8042prt - ok

13:52:32.0750 2468 ialm (0d2bce63a792b6fe1b2b6b98137d3e1f) C:\WINDOWS\system32\DRIVERS\igxpmp32.sys

13:52:32.0843 2468 ialm - ok

13:52:32.0875 2468 iaStor (80c633722da72e97f3f5b3b11325696d) C:\WINDOWS\system32\DRIVERS\iaStor.sys

13:52:32.0875 2468 iaStor - ok

13:52:32.0890 2468 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

13:52:32.0968 2468 Imapi - ok

13:52:32.0984 2468 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys

13:52:33.0062 2468 ini910u - ok

13:52:33.0125 2468 IntcAzAudAddService (b2957d6c1226f029230dac2c46d34286) C:\WINDOWS\system32\drivers\RtkHDAud.sys

13:52:33.0203 2468 IntcAzAudAddService - ok

13:52:33.0234 2468 IntelIde (69c4e3c9e67a1f103b94e14fdd5f3213) C:\WINDOWS\system32\DRIVERS\intelide.sys

13:52:33.0312 2468 IntelIde - ok

13:52:33.0328 2468 intelppm (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys

13:52:33.0406 2468 intelppm - ok

13:52:33.0421 2468 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys

13:52:33.0484 2468 Ip6Fw - ok

13:52:33.0500 2468 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

13:52:33.0578 2468 IpFilterDriver - ok

13:52:33.0593 2468 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

13:52:33.0671 2468 IpInIp - ok

13:52:33.0687 2468 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

13:52:33.0765 2468 IpNat - ok

13:52:33.0781 2468 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

13:52:33.0859 2468 IPSec - ok

13:52:33.0875 2468 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

13:52:33.0906 2468 IRENUM - ok

13:52:33.0921 2468 isapnp (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys

13:52:34.0000 2468 isapnp - ok

13:52:34.0015 2468 Kbdclass (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

13:52:34.0093 2468 Kbdclass - ok

13:52:34.0109 2468 KLIF (2cf7c3dd0102a32a680ef97f3b1c861a) C:\WINDOWS\system32\DRIVERS\klif.sys

13:52:34.0109 2468 KLIF - ok

13:52:34.0125 2468 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

13:52:34.0203 2468 kmixer - ok

13:52:34.0218 2468 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

13:52:34.0234 2468 KSecDD - ok

13:52:34.0250 2468 lbrtfdc - ok

13:52:34.0265 2468 massfilter - ok

13:52:34.0281 2468 MBAMSwissArmy (0905dc0814d738cff53577a59ccd81e0) C:\WINDOWS\system32\drivers\mbamswissarmy.sys

13:52:34.0296 2468 MBAMSwissArmy - ok

13:52:34.0312 2468 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

13:52:34.0375 2468 mnmdd - ok

13:52:34.0390 2468 Modem (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys

13:52:34.0468 2468 Modem - ok

13:52:34.0484 2468 Mouclass (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys

13:52:34.0546 2468 Mouclass - ok

13:52:34.0562 2468 mouhid (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys

13:52:34.0640 2468 mouhid - ok

13:52:34.0656 2468 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

13:52:34.0718 2468 MountMgr - ok

13:52:34.0734 2468 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys

13:52:34.0812 2468 MPE - ok

13:52:34.0828 2468 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys

13:52:34.0890 2468 mraid35x - ok

13:52:34.0906 2468 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

13:52:34.0984 2468 MRxDAV - ok

13:52:35.0000 2468 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

13:52:35.0015 2468 MRxSmb - ok

13:52:35.0031 2468 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

13:52:35.0109 2468 Msfs - ok

13:52:35.0125 2468 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

13:52:35.0203 2468 MSKSSRV - ok

13:52:35.0203 2468 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

13:52:35.0281 2468 MSPCLOCK - ok

13:52:35.0296 2468 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

13:52:35.0375 2468 MSPQM - ok

13:52:35.0390 2468 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

13:52:35.0453 2468 mssmbios - ok

13:52:35.0468 2468 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys

13:52:35.0531 2468 MSTEE - ok

13:52:35.0546 2468 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

13:52:35.0562 2468 Mup - ok

13:52:35.0578 2468 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys

13:52:35.0687 2468 NABTSFEC - ok

13:52:35.0703 2468 NcpFilt (259e62a7edbcca4992e9af04b933c5cb) C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys

13:52:35.0703 2468 NcpFilt - ok

13:52:35.0703 2468 NcpFiltMP (259e62a7edbcca4992e9af04b933c5cb) C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys

13:52:35.0718 2468 NcpFiltMP - ok

13:52:35.0718 2468 ncpvaxp (259e62a7edbcca4992e9af04b933c5cb) C:\WINDOWS\system32\DRIVERS\ncpvaxp.sys

13:52:35.0734 2468 ncpvaxp - ok

13:52:35.0750 2468 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

13:52:35.0812 2468 NDIS - ok

13:52:35.0828 2468 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys

13:52:35.0906 2468 NdisIP - ok

13:52:35.0921 2468 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

13:52:35.0937 2468 NdisTapi - ok

13:52:35.0953 2468 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

13:52:36.0015 2468 Ndisuio - ok

13:52:36.0031 2468 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

13:52:36.0109 2468 NdisWan - ok

13:52:36.0125 2468 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

13:52:36.0125 2468 NDProxy - ok

13:52:36.0140 2468 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

13:52:36.0218 2468 NetBIOS - ok

13:52:36.0234 2468 NetBT (933842f7206ba692b469b44f26373531) C:\WINDOWS\system32\DRIVERS\netbt.sys

13:52:36.0234 2468 NetBT ( UnsignedFile.Multi.Generic ) - warning

13:52:36.0234 2468 NetBT - detected UnsignedFile.Multi.Generic (1)

13:52:36.0296 2468 NETw5x32 (05743fffc2bc88cc8e426321bc6a762e) C:\WINDOWS\system32\DRIVERS\NETw5x32.sys

13:52:36.0359 2468 NETw5x32 - ok

13:52:36.0375 2468 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

13:52:36.0453 2468 NIC1394 - ok

13:52:36.0468 2468 nmwcd (c3963d85b721a7f80d8a55f4e2867a3a) C:\WINDOWS\system32\drivers\ccdcmb.sys

13:52:36.0531 2468 nmwcd - ok

13:52:36.0546 2468 nmwcdc (3859c69a77793180548802dac9f34a38) C:\WINDOWS\system32\drivers\ccdcmbo.sys

13:52:36.0578 2468 nmwcdc - ok

13:52:36.0593 2468 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

13:52:36.0671 2468 Npfs - ok

13:52:36.0687 2468 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

13:52:36.0765 2468 Ntfs - ok

13:52:36.0781 2468 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

13:52:36.0859 2468 Null - ok

13:52:36.0875 2468 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

13:52:36.0937 2468 NwlnkFlt - ok

13:52:36.0953 2468 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

13:52:37.0031 2468 NwlnkFwd - ok

13:52:37.0046 2468 O2MDRDR (908593eac1ffe529fe760b0a378b3600) C:\WINDOWS\system32\DRIVERS\o2media.sys

13:52:37.0046 2468 O2MDRDR - ok

13:52:37.0062 2468 O2SDRDR (e01889c539d4a021a1c7aad7bd72c33b) C:\WINDOWS\system32\DRIVERS\o2sd.sys

13:52:37.0078 2468 O2SDRDR - ok

13:52:37.0093 2468 odysseyIM4 (7af6ec0ea4261ecf7da084103be31ea8) C:\WINDOWS\system32\DRIVERS\odysseyIM4.sys

13:52:37.0109 2468 odysseyIM4 - ok

13:52:37.0125 2468 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

13:52:37.0187 2468 ohci1394 - ok

13:52:37.0203 2468 Parport (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys

13:52:37.0281 2468 Parport - ok

13:52:37.0296 2468 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

13:52:37.0359 2468 PartMgr - ok

13:52:37.0375 2468 ParVdm (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys

13:52:37.0453 2468 ParVdm - ok

13:52:37.0468 2468 PCASp50 - ok

13:52:37.0484 2468 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys

13:52:37.0484 2468 pccsmcfd - ok

13:52:37.0500 2468 PCI (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys

13:52:37.0578 2468 PCI - ok

13:52:37.0593 2468 PCIDump - ok

13:52:37.0609 2468 PCIIde (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys

13:52:37.0671 2468 PCIIde - ok

13:52:37.0687 2468 Pcmcia (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\DRIVERS\pcmcia.sys

13:52:37.0765 2468 Pcmcia - ok

13:52:37.0781 2468 PDCOMP - ok

13:52:37.0796 2468 PDFRAME - ok

13:52:37.0812 2468 PDRELI - ok

13:52:37.0828 2468 PDRFRAME - ok

13:52:37.0843 2468 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys

13:52:37.0906 2468 perc2 - ok

13:52:37.0921 2468 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys

13:52:38.0000 2468 perc2hib - ok

13:52:38.0015 2468 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

13:52:38.0093 2468 PptpMiniport - ok

13:52:38.0109 2468 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

13:52:38.0171 2468 PSched - ok

13:52:38.0187 2468 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

13:52:38.0265 2468 Ptilink - ok

13:52:38.0281 2468 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys

13:52:38.0281 2468 PxHelp20 - ok

13:52:38.0296 2468 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys

13:52:38.0375 2468 ql1080 - ok

13:52:38.0390 2468 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys

13:52:38.0453 2468 Ql10wnt - ok

13:52:38.0468 2468 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys

13:52:38.0531 2468 ql12160 - ok

13:52:38.0546 2468 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys

13:52:38.0671 2468 ql1240 - ok

13:52:38.0687 2468 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys

13:52:38.0750 2468 ql1280 - ok

13:52:38.0765 2468 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

13:52:38.0843 2468 RasAcd - ok

13:52:38.0859 2468 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

13:52:38.0921 2468 Rasl2tp - ok

13:52:38.0937 2468 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

13:52:39.0015 2468 RasPppoe - ok

13:52:39.0031 2468 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

13:52:39.0093 2468 Raspti - ok

13:52:39.0125 2468 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

13:52:39.0187 2468 Rdbss - ok

13:52:39.0203 2468 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

13:52:39.0281 2468 RDPCDD - ok

13:52:39.0296 2468 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

13:52:39.0359 2468 rdpdr - ok

13:52:39.0375 2468 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys

13:52:39.0390 2468 RDPWD - ok

13:52:39.0406 2468 redbook (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys

13:52:39.0484 2468 redbook - ok

13:52:39.0500 2468 RTLWUSB (5a850259b849a899990379a75460a4eb) C:\WINDOWS\system32\DRIVERS\RTL8187.sys

13:52:39.0515 2468 RTLWUSB - ok

13:52:39.0531 2468 s217bus (0266151de3f36429f6ac3c4b28085061) C:\WINDOWS\system32\DRIVERS\s217bus.sys

13:52:39.0546 2468 s217bus - ok

13:52:39.0562 2468 s217mdfl (a43c0af0e46be7ef0c7e8ccf0f058600) C:\WINDOWS\system32\DRIVERS\s217mdfl.sys

13:52:39.0562 2468 s217mdfl - ok

13:52:39.0578 2468 s217mdm (005f5ded1ed8f8a9d2399d765ead20f1) C:\WINDOWS\system32\DRIVERS\s217mdm.sys

13:52:39.0593 2468 s217mdm - ok

13:52:39.0609 2468 s217mgmt (de9562ad0c91e1857d11f65a91ee1a47) C:\WINDOWS\system32\DRIVERS\s217mgmt.sys

13:52:39.0609 2468 s217mgmt - ok

13:52:39.0625 2468 s217nd5 (11cc5d7f992799e7e75d018e9c018563) C:\WINDOWS\system32\DRIVERS\s217nd5.sys

13:52:39.0640 2468 s217nd5 - ok

13:52:39.0656 2468 s217obex (0f9f4045799afb66b85eef999d0609ec) C:\WINDOWS\system32\DRIVERS\s217obex.sys

13:52:39.0656 2468 s217obex - ok

13:52:39.0671 2468 s217unic (1c91e1023f07b6407d84b5a43537d984) C:\WINDOWS\system32\DRIVERS\s217unic.sys

13:52:39.0687 2468 s217unic - ok

13:52:39.0703 2468 S3SavageNB (0dbcc071a268e0340a2ba6bdd98bace4) C:\WINDOWS\system32\DRIVERS\s3gnbm.sys

13:52:39.0781 2468 S3SavageNB - ok

13:52:39.0796 2468 S6U12BScanner (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\drivers\usbscan.sys

13:52:39.0859 2468 S6U12BScanner - ok

13:52:39.0875 2468 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys

13:52:39.0953 2468 sdbus - ok

13:52:39.0968 2468 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

13:52:40.0015 2468 Secdrv - ok

13:52:40.0031 2468 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

13:52:40.0093 2468 Serenum - ok

13:52:40.0109 2468 Serial (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys

13:52:40.0187 2468 Serial - ok

13:52:40.0203 2468 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys

13:52:40.0281 2468 Sfloppy - ok

13:52:40.0296 2468 Simbad - ok

13:52:40.0312 2468 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys

13:52:40.0375 2468 sisagp - ok

13:52:40.0390 2468 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys

13:52:40.0468 2468 SLIP - ok

13:52:40.0484 2468 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys

13:52:40.0515 2468 Sparrow - ok

13:52:40.0531 2468 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

13:52:40.0640 2468 splitter - ok

13:52:40.0656 2468 sr (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys

13:52:40.0718 2468 sr - ok

13:52:40.0718 2468 srescan (bda0ecc7cba1d3b9fd7ff2881bf9b463) C:\WINDOWS\system32\ZoneLabs\srescan.sys

13:52:40.0734 2468 srescan - ok

13:52:40.0750 2468 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

13:52:40.0765 2468 Srv - ok

13:52:40.0781 2468 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

13:52:40.0796 2468 ssmdrv - ok

13:52:40.0812 2468 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys

13:52:40.0875 2468 streamip - ok

13:52:40.0890 2468 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

13:52:40.0968 2468 swenum - ok

13:52:40.0984 2468 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

13:52:41.0046 2468 swmidi - ok

13:52:41.0078 2468 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys

13:52:41.0140 2468 symc810 - ok

13:52:41.0156 2468 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys

13:52:41.0218 2468 symc8xx - ok

13:52:41.0234 2468 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys

13:52:41.0312 2468 sym_hi - ok

13:52:41.0328 2468 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys

13:52:41.0390 2468 sym_u3 - ok

13:52:41.0406 2468 SynTP (948b204198f80b319055b59758033742) C:\WINDOWS\system32\DRIVERS\SynTP.sys

13:52:41.0421 2468 SynTP - ok

13:52:41.0437 2468 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

13:52:41.0515 2468 sysaudio - ok

13:52:41.0531 2468 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

13:52:41.0546 2468 Tcpip - ok

13:52:41.0562 2468 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

13:52:41.0625 2468 TDPIPE - ok

13:52:41.0640 2468 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

13:52:41.0718 2468 TDTCP - ok

13:52:41.0734 2468 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

13:52:41.0796 2468 TermDD - ok

13:52:41.0828 2468 TosIde (d213a9247dc347f305a2d4cc9b951487) C:\WINDOWS\system32\DRIVERS\toside.sys

13:52:41.0890 2468 TosIde - ok

13:52:41.0906 2468 truecrypt (be45dad1c73a3216edc8c485916f6594) C:\WINDOWS\system32\drivers\truecrypt.sys

13:52:41.0921 2468 truecrypt - ok

13:52:41.0937 2468 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

13:52:42.0015 2468 Udfs - ok

13:52:42.0031 2468 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys

13:52:42.0078 2468 ultra - ok

13:52:42.0093 2468 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

13:52:42.0171 2468 Update - ok

13:52:42.0187 2468 upperdev (0ccadc7391021376edbb8aa649d04e68) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys

13:52:42.0218 2468 upperdev - ok

13:52:42.0234 2468 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys

13:52:42.0312 2468 usbaudio - ok

13:52:42.0328 2468 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

13:52:42.0390 2468 usbccgp - ok

13:52:42.0406 2468 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

13:52:42.0484 2468 usbehci - ok

13:52:42.0500 2468 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

13:52:42.0562 2468 usbhub - ok

13:52:42.0578 2468 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

13:52:42.0656 2468 usbohci - ok

13:52:42.0671 2468 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

13:52:42.0734 2468 usbprint - ok

13:52:42.0750 2468 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys

13:52:42.0828 2468 usbscan - ok

13:52:42.0843 2468 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys

13:52:42.0906 2468 usbser - ok

13:52:42.0921 2468 UsbserFilt (68b4f83cccf70a2ff32ee142c234332a) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys

13:52:42.0968 2468 UsbserFilt - ok

13:52:42.0984 2468 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

13:52:43.0046 2468 USBSTOR - ok

13:52:43.0062 2468 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

13:52:43.0140 2468 usbuhci - ok

13:52:43.0156 2468 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

13:52:43.0218 2468 VgaSave - ok

13:52:43.0234 2468 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

13:52:43.0312 2468 viaagp - ok

13:52:43.0328 2468 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

13:52:43.0390 2468 ViaIde - ok

13:52:43.0406 2468 VolSnap (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys

13:52:43.0484 2468 VolSnap - ok

13:52:43.0500 2468 vsdatant (279761ad6562c0d4309cb1bbb260233f) C:\WINDOWS\system32\vsdatant.sys

13:52:43.0515 2468 vsdatant - ok

13:52:43.0531 2468 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

13:52:43.0593 2468 Wanarp - ok

13:52:43.0625 2468 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys

13:52:43.0640 2468 Wdf01000 - ok

13:52:43.0656 2468 WDICA - ok

13:52:43.0671 2468 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

13:52:43.0734 2468 wdmaud - ok

13:52:43.0765 2468 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys

13:52:43.0781 2468 WpdUsb - ok

13:52:43.0796 2468 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

13:52:43.0875 2468 WS2IFSL - ok

13:52:43.0890 2468 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS

13:52:43.0953 2468 WSTCODEC - ok

13:52:43.0968 2468 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

13:52:43.0984 2468 WudfPf - ok

13:52:44.0000 2468 WudfRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\WINDOWS\system32\DRIVERS\wudfrd.sys

13:52:44.0015 2468 WudfRd - ok

13:52:44.0046 2468 yukonwxp (4322c32ced8c4772e039616dcbf01d3f) C:\WINDOWS\system32\DRIVERS\yk51x86.sys

13:52:44.0062 2468 yukonwxp - ok

13:52:44.0093 2468 ZSMC211 (01f13e2ea55146e9caa63926de3f937b) C:\WINDOWS\system32\Drivers\ZS211.sys

13:52:44.0125 2468 ZSMC211 ( UnsignedFile.Multi.Generic ) - warning

13:52:44.0125 2468 ZSMC211 - detected UnsignedFile.Multi.Generic (1)

13:52:44.0156 2468 MBR (0x1B8) (01d1810d034c72a59b1e17a8767ec082) \Device\Harddisk0\DR0

13:52:44.0296 2468 \Device\Harddisk0\DR0 - ok

13:52:44.0296 2468 Boot (0x1200) (a2b276f0bfb56707d58767cbb296ad55) \Device\Harddisk0\DR0\Partition0

13:52:44.0296 2468 \Device\Harddisk0\DR0\Partition0 - ok

13:52:44.0296 2468 ============================================================

13:52:44.0296 2468 Scan finished

13:52:44.0296 2468 ============================================================

13:52:44.0406 1464 Detected object count: 7

13:52:44.0406 1464 Actual detected object count: 7

13:53:22.0546 1464 C:\WINDOWS\1117667205:2059428285.exe - copied to quarantine

13:53:22.0546 1464 853f9e42 ( HiddenFile.Multi.Generic ) - User select action: Quarantine

13:53:22.0562 1464 C:\WINDOWS\system32\DRIVERS\AegisP.sys - copied to quarantine

13:53:22.0562 1464 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

13:53:22.0578 1464 C:\Programme\Fujitsu\BtnHnd\BtnHnd.sys - copied to quarantine

13:53:22.0578 1464 BtnHnd ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

13:53:22.0593 1464 C:\WINDOWS\system32\Drivers\CVPNDRVA.sys - copied to quarantine

13:53:22.0593 1464 CVPNDRVA ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

13:53:22.0609 1464 C:\WINDOWS\system32\DRIVERS\dvd43llh.sys - copied to quarantine

13:53:22.0609 1464 dvd43llh ( UnsignedFile.Multi.Generic ) - User select action: Quarantine

13:53:22.0609 1464 NetBT ( UnsignedFile.Multi.Generic ) - skipped by user

13:53:22.0609 1464 NetBT ( UnsignedFile.Multi.Generic ) - User select action: Skip

13:53:22.0609 1464 ZSMC211 ( UnsignedFile.Multi.Generic ) - skipped by user

13:53:22.0609 1464 ZSMC211 ( UnsignedFile.Multi.Generic ) - User select action: Skip

13:53:28.0984 0588 Deinitialize success

screen317 · October 8, 2011

Hello and welcome to Malwarebytes.

Please visit this webpage for instructions for running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new DDS log so we may continue cleaning the system.

-screen317

Poldi77 · October 9, 2011

Hi,

I had combofix run two times and here are the requested logs.

In the meantime I had reinstalled MBAM and Antivir and run it in the safe mode, which had already removed a few things.

It looks like there is a rootkit present.

Have a look.

Thank you.

ComboFix 11-10-09.01 - lsy 09.10.2011 13:25:31.1.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.3002.2519 [GMT 2:00]

ausgeführt von:: c:\dokumente und einstellungen\lsy\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

* Neuer Wiederherstellungspunkt wurde erstellt

.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\dokumente und einstellungen\lsy\Anwendungsdaten\Local

c:\dokumente und einstellungen\lsy\WINDOWS

c:\windows\$NtUninstallKB58498$

c:\windows\$NtUninstallKB58498$\2235539010\@

c:\windows\$NtUninstallKB58498$\2235539010\L\vbsidxak

c:\windows\$NtUninstallKB58498$\3704701377

c:\windows\{2521BB91-29B1-4d7e-9137-AC9875D77735}

c:\windows\IsUn0407.exe

c:\windows\system32\

c:\windows\system32\drivers\10CF_FUJITSU_FTS_LIFEBOOK S6420_PI_FUJITSU_FJNB1E6_Version 1.23_FSC - 1230000_Version 1.23 .MRK

c:\windows\unin0407.exe

c:\windows\WindowsUpdate.log . . . . Nicht in der Lage zu löschen

.

((((((((((((((((((((((( Dateien erstellt von 2011-09-09 bis 2011-10-09 ))))))))))))))))))))))))))))))

.

2011-10-05 12:02 . 2011-10-05 12:02 -------- d-----w- c:\programme\Gemeinsame Dateien\Deterministic Networks

2011-10-05 11:57 . 2011-10-05 11:57 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware

2011-10-05 11:57 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-10-05 11:42 . 2011-10-05 11:42 -------- d-----w- c:\dokumente und einstellungen\lsy\Lokale Einstellungen\Anwendungsdaten\Ashampoo

2011-10-05 11:12 . 2011-10-05 11:12 372 ----a-w- c:\windows\delrws.bat

2011-10-05 07:18 . 2011-10-05 07:18 -------- d-----w- c:\dokumente und einstellungen\lsy\Anwendungsdaten\Avira

2011-10-05 07:18 . 2011-10-05 07:18 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira

2011-10-05 07:18 . 2011-09-18 06:39 134344 ----a-w- c:\windows\system32\drivers\avipbb.sys

2011-10-05 07:18 . 2011-09-15 21:55 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys

2011-10-05 07:18 . 2011-09-15 21:55 74640 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2011-10-03 09:35 . 2011-10-03 09:35 -------- d-----w- c:\windows\system32\wbem\Repository

2011-10-03 07:54 . 2011-10-03 09:35 -------- d-----w- c:\programme\M4a to MP3 Converter

.

(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-05 07:17 . 2008-04-14 07:27 40448 ----a-w- c:\windows\system32\drivers\intelppm.sys

2011-10-04 20:16 . 2008-04-14 00:11 42112 ----a-w- c:\windows\system32\drivers\imapi.sys

2011-09-30 12:25 . 2011-05-23 20:04 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-09 09:11 . 2009-05-20 04:26 604160 ----a-w- c:\windows\system32\crypt32.dll

2011-08-31 18:08 . 2009-12-04 16:58 231248 ----a-w- c:\windows\system32\drivers\truecrypt.sys

2011-09-13 16:05 . 2011-06-23 06:51 134104 ----a-w- c:\programme\mozilla firefox\components\browsercomps.dll

2006-05-03 10:06 163328 --sha-r- c:\windows\system32\flvDX.dll

2007-02-21 11:47 31232 --sha-r- c:\windows\system32\msfDX.dll

2008-03-16 13:30 216064 --sha-r- c:\windows\system32\nbDX.dll

2010-01-06 22:00 107520 --sha-r- c:\windows\system32\TAKDSDecoder.dll

.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\programme\Gemeinsame Dateien\Nero\Lib\NMBgMonitor.exe" [2007-08-03 202024]

"UIWatcher"="c:\programme\Ashampoo\Ashampoo UnInstaller 2010\UIWatcher.exe" [2009-11-17 2530656]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\programme\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-05-07 178712]

"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]

"SoundMan"="SOUNDMAN.EXE" [2006-07-21 86016]

"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 2808832]

"SynTPEnh"="c:\programme\Synaptics\SynTP\SynTPEnh.exe" [2008-04-10 1040384]

"PSUtility"="c:\addon\Fujitsu\PSUtility\TrayManager.exe" [2008-04-17 118784]

"TvOutSwitch"="c:\addon\Fujitsu\DispSwitch\DispSwitchLauncher.exe" [2008-04-02 102400]

"LoadFUJ02E3"="c:\programme\Fujitsu\FUJ02E3\FUJ02E3.exe" [2008-01-31 88616]

"IndicatorUtility"="c:\programme\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe" [2006-04-20 90112]

"LoadFujitsuQuickTouch"="c:\addon\Fujitsu\Application Panel\QuickTouch.exe" [2005-07-21 353792]

"LoadBtnHnd"="c:\programme\Fujitsu\BtnHnd\BtnHnd.exe" [2005-07-21 61440]

"NeroFilterCheck"="c:\programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]

"NBKeyScan"="c:\programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 1828136]

"ZSSnp211"="c:\windows\ZSSnp211.exe" [2007-04-06 57344]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-08 173592]

"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-08 142360]

"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2011-04-08 254696]

"EEventManager"="c:\programme\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320]

"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2011-09-23 258512]

"Ashampoo FireWall"="c:\programme\Ashampoo\Ashampoo FireWall\FireWall.exe" [2007-04-05 3251800]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

.

c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\

VPN Client.lnk - c:\windows\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico [2011-10-5 6144]

web'n'walk Manager.lnk - c:\programme\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe [2007-11-7 798720]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Taskman"=""

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PSUTY]

2008-04-17 12:00 32768 ----a-r- c:\windows\system32\PSUWNP.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0DfSDKBt

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]

2010-05-14 08:32 1479680 ----a-w- c:\programme\Nokia\Nokia PC Suite 7\PCSuite.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"Nero BackItUp Scheduler 3"=2 (0x2)

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Programme\\ALFA\\AWUS036H Wireless LAN Utility\\RtWLan.exe"=

"c:\\Programme\\Skype\\Phone\\Skype.exe"=

"c:\\Programme\\Winamp\\winamp.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"1542:TCP"= 1542:TCP:Realtek WPS TCP Prot

"1542:UDP"= 1542:UDP:Realtek WPS UDP Prot

"53:UDP"= 53:UDP:Realtek AP UDP Prot

.

R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [05.10.2011 09:18 36000]

R2 AntiVirSchedulerService;Avira Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [05.10.2011 09:18 86224]

R2 Iprip;RIP-Überwachung;c:\windows\System32\svchost.exe -k netsvcs [20.05.2009 06:27 14336]

R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\fuj02e3.sys [22.07.2009 15:24 4864]

R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [08.02.2010 15:48 47448]

R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [08.02.2010 15:48 44064]

S2 AAV UpdateService;AAV UpdateService;"c:\programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe" --> c:\programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [?]

S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;"c:\programme\Gemeinsame Dateien\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe" -service --> c:\programme\Gemeinsame Dateien\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [?]

S2 DfSdkS;Defragmentation-Service;"c:\programme\Ashampoo\Ashampoo WinOptimizer 6\DfsdkS.exe" --> c:\programme\Ashampoo\Ashampoo WinOptimizer 6\DfsdkS.exe [?]

S2 EPGService;EPGService;c:\progra~1\WinTV\EPG Services\System\EPGService.exe --> c:\progra~1\WinTV\EPG Services\System\EPGService.exe [?]

S2 gtdetectsc;GtDetectSc;"c:\programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe" --> c:\programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe [?]

S2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCreatorReadSpool2;"c:\programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe" --> c:\programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe [?]

S2 WirelessSelectorService;WirelessSelectorService;c:\program files\Fujitsu\WirelessSelector\WSUService.exe --> c:\program files\Fujitsu\WirelessSelector\WSUService.exe [?]

S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [05.07.2011 09:59 15104]

S3 DisplayLinkGA;DisplayLinkGA;c:\windows\system32\DRIVERS\DisplayLinkGAport.sys --> c:\windows\system32\DRIVERS\DisplayLinkGAport.sys [?]

S3 DisplayLinkmirror;DisplayLinkmirror;c:\windows\system32\DRIVERS\DisplayLinkmirrorport.sys --> c:\windows\system32\DRIVERS\DisplayLinkmirrorport.sys [?]

S3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\DRIVERS\DisplayLinkUsbPort.sys --> c:\windows\system32\DRIVERS\DisplayLinkUsbPort.sys [?]

S3 GT72NDISIPXP;GT 72 IP NDIS;c:\windows\system32\drivers\Gt51Ip.sys [09.07.2007 14:17 95744]

S3 GT72UBUS;GT 72 U BUS;c:\windows\system32\drivers\gt72ubus.sys [26.06.2007 13:38 51968]

S3 hcw66xxx;WinTV HVR-900H;c:\windows\system32\drivers\hcw66xxx.sys [03.07.2010 15:52 418304]

S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys --> c:\windows\system32\drivers\massfilter.sys [?]

S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]

S3 osppsvc;Office Software Protection Platform;c:\programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [09.01.2010 22:37 4640000]

S3 RTLWUSB;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187.sys [24.10.2009 04:14 332928]

S3 S6U12BScanner;MUSTEK 1200 UB Still Image Device Service;c:\windows\system32\drivers\usbscan.sys [23.10.2009 15:18 15104]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:blank

uInternet Settings,ProxyOverride = fritz.box

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Nach Microsoft E&xel exportieren - c:\progra~1\Office\Office12\EXCEL.EXE/3000

LSP: c:\programme\Ashampoo\Ashampoo FireWall\spi.dll

TCP: Interfaces\{53B738C1-7B83-4F45-8C4E-E6C2A096D24F}: NameServer = 192.168.178.1

FF - ProfilePath - c:\dokumente und einstellungen\lsy\Anwendungsdaten\Mozilla\Firefox\Profiles\8xhgcz5a.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.gmx.net/

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKCU-Run-ABBYY Screenshot Reader Bonus - (no file)

SafeBoot-10795320.sys

SafeBoot-23072938.sys

SafeBoot-32396684.sys

SafeBoot-50398596.sys

SafeBoot-57808212.sys

SafeBoot-67548352.sys

SafeBoot-72789260.sys

AddRemove-Microsoft Interactive Training - c:\windows\IsUn0407.exe

AddRemove-MUSTEK 1200 UB v2.1 - c:\windows\TWAIN_32\1200UB\UNINST.EXE

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2011-10-09 13:29

Windows 5.1.2600 Service Pack 3 NTFS

.

Scanne versteckte Prozesse...

.

Scanne versteckte Autostarteinträge...

.

Scanne versteckte Dateien...

.

Scan erfolgreich abgeschlossen

versteckte Dateien: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\.imapi]

"ImagePath"="\*"

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ASFWHide]

"ImagePath"="\??\c:\dokume~1\lsy\LOKALE~1\Temp\ASFWHide"

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'winlogon.exe'(1660)

c:\windows\system32\PSUWNP.dll

.

- - - - - - - > 'explorer.exe'(2644)

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\programme\Ashampoo\Ashampoo FireWall\spi.dll

c:\programme\Nokia\Nokia PC Suite 7\PhoneBrowser.dll

c:\programme\Nokia\Nokia PC Suite 7\NGSCM.DLL

c:\programme\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_ger.nlr

c:\programme\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\programme\Avira\AntiVir Desktop\avguard.exe

c:\programme\Cisco Systems\VPN Client\cvpnd.exe

c:\windows\system32\tcpsvcs.exe

c:\windows\System32\snmp.exe

c:\programme\Avira\AntiVir Desktop\avshadow.exe

c:\windows\RTHDCPL.EXE

c:\windows\SOUNDMAN.EXE

c:\windows\system32\igfxsrvc.exe

c:\\?\c:\windows\system32\WBEM\WMIADAP.EXE

.

**************************************************************************

.

Zeit der Fertigstellung: 2011-10-09 13:30:35 - PC wurde neu gestartet

ComboFix-quarantined-files.txt 2011-10-09 11:30

.

Vor Suchlauf: 3.059.265.536 Bytes frei

Nach Suchlauf: 3.064.508.416 Bytes frei

.

WindowsXP-KB310994-SP2-Pro-BootDisk-DEU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(7)\windows

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(7)\windows="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

.

- - End Of File - - 00ACF76F6065682E4376B2BE3FFD777A

ComboFix 11-10-09.01 - lsy 09.10.2011 13:43:40.2.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.3002.2292 [GMT 2:00]