Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 18.11.2011, 06:14   #1
rockenderbik
 
w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen - Standard

w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen



hatte ich vor deiner nachricht schon gemacht, trozdem danke...*g*
tdsskiller hab ich mehrmals durchlaufen lassen...

13:57:27.0034 4696 TDSS rootkit removing tool 2.6.18.0 Nov 11 2011 15:47:15
13:57:27.0180 4696 ============================================================
13:57:27.0180 4696 Current date / time: 2011/11/13 13:57:27.0180
13:57:27.0180 4696 SystemInfo:
13:57:27.0181 4696
13:57:27.0181 4696 OS Version: 6.1.7600 ServicePack: 0.0
13:57:27.0181 4696 Product type: Workstation
13:57:27.0181 4696 ComputerName: ANDY-PC
13:57:27.0181 4696 UserName: Andy
13:57:27.0181 4696 Windows directory: C:\Windows
13:57:27.0181 4696 System windows directory: C:\Windows
13:57:27.0181 4696 Running under WOW64
13:57:27.0181 4696 Processor architecture: Intel x64
13:57:27.0181 4696 Number of processors: 4
13:57:27.0181 4696 Page size: 0x1000
13:57:27.0181 4696 Boot type: Normal boot
13:57:27.0181 4696 ============================================================
13:57:28.0007 4696 Initialize success
13:57:40.0350 4316 ============================================================
13:57:40.0350 4316 Scan started
13:57:40.0350 4316 Mode: Manual;
13:57:40.0350 4316 ============================================================
13:57:41.0215 4316 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\drivers\1394ohci.sys
13:57:41.0219 4316 1394ohci - ok
13:57:41.0266 4316 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\drivers\ACPI.sys
13:57:41.0271 4316 ACPI - ok
13:57:41.0302 4316 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\drivers\acpipmi.sys
13:57:41.0303 4316 AcpiPmi - ok
13:57:41.0331 4316 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
13:57:41.0337 4316 adp94xx - ok
13:57:41.0351 4316 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
13:57:41.0355 4316 adpahci - ok
13:57:41.0366 4316 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
13:57:41.0369 4316 adpu320 - ok
13:57:41.0411 4316 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
13:57:41.0416 4316 AFD - ok
13:57:41.0432 4316 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
13:57:41.0434 4316 agp440 - ok
13:57:41.0449 4316 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
13:57:41.0450 4316 aliide - ok
13:57:41.0485 4316 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
13:57:41.0485 4316 amdide - ok
13:57:41.0495 4316 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
13:57:41.0496 4316 AmdK8 - ok
13:57:41.0658 4316 amdkmdag (85193e1bcefe65d0a1befd4fda9180f9) C:\Windows\system32\DRIVERS\atikmdag.sys
13:57:41.0741 4316 amdkmdag - ok
13:57:41.0765 4316 amdkmdap (60ab0b979198da597b7251b3c7444f7e) C:\Windows\system32\DRIVERS\atikmpag.sys
13:57:41.0767 4316 amdkmdap - ok
13:57:41.0779 4316 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
13:57:41.0780 4316 AmdPPM - ok
13:57:41.0808 4316 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
13:57:41.0810 4316 amdsata - ok
13:57:41.0823 4316 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
13:57:41.0825 4316 amdsbs - ok
13:57:41.0842 4316 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
13:57:41.0843 4316 amdxata - ok
13:57:41.0864 4316 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
13:57:41.0865 4316 AppID - ok
13:57:41.0896 4316 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
13:57:41.0897 4316 arc - ok
13:57:41.0910 4316 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
13:57:41.0912 4316 arcsas - ok
13:57:41.0953 4316 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
13:57:41.0953 4316 aswFsBlk - ok
13:57:41.0992 4316 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
13:57:41.0994 4316 aswMonFlt - ok
13:57:42.0008 4316 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
13:57:42.0009 4316 aswRdr - ok
13:57:42.0028 4316 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
13:57:42.0034 4316 aswSnx - ok
13:57:42.0056 4316 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
13:57:42.0059 4316 aswSP - ok
13:57:42.0078 4316 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
13:57:42.0079 4316 aswTdi - ok
13:57:42.0102 4316 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
13:57:42.0103 4316 AsyncMac - ok
13:57:42.0134 4316 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
13:57:42.0135 4316 atapi - ok
13:57:42.0197 4316 AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
13:57:42.0199 4316 AtiHDAudioService - ok
13:57:42.0252 4316 AtiHdmiService (fb7602c5c508be281368aae0b61b51c6) C:\Windows\system32\drivers\AtiHdmi.sys
13:57:42.0254 4316 AtiHdmiService - ok
13:57:42.0332 4316 atillk64 (26d973d6d9a0d133dfda7d8c1adc04b7) C:\Users\Andy\Downloads\winflash\atillk64.sys
13:57:42.0333 4316 atillk64 - ok
13:57:42.0345 4316 ATITool (a6fad7a5ada4675ba9c9feaf4e0542ba) C:\Windows\system32\DRIVERS\ATITool64.sys
13:57:42.0347 4316 ATITool - ok
13:57:42.0388 4316 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
13:57:42.0394 4316 b06bdrv - ok
13:57:42.0420 4316 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
13:57:42.0424 4316 b57nd60a - ok
13:57:42.0458 4316 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
13:57:42.0459 4316 Beep - ok
13:57:42.0491 4316 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
13:57:42.0493 4316 blbdrive - ok
13:57:42.0540 4316 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
13:57:42.0542 4316 bowser - ok
13:57:42.0561 4316 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
13:57:42.0562 4316 BrFiltLo - ok
13:57:42.0569 4316 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
13:57:42.0570 4316 BrFiltUp - ok
13:57:42.0583 4316 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
13:57:42.0587 4316 Brserid - ok
13:57:42.0599 4316 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
13:57:42.0600 4316 BrSerWdm - ok
13:57:42.0616 4316 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
13:57:42.0617 4316 BrUsbMdm - ok
13:57:42.0624 4316 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
13:57:42.0625 4316 BrUsbSer - ok
13:57:42.0640 4316 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
13:57:42.0641 4316 BTHMODEM - ok
13:57:42.0663 4316 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
13:57:42.0664 4316 cdfs - ok
13:57:42.0711 4316 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\drivers\cdrom.sys
13:57:42.0714 4316 cdrom - ok
13:57:42.0723 4316 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
13:57:42.0725 4316 circlass - ok
13:57:42.0758 4316 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
13:57:42.0763 4316 CLFS - ok
13:57:42.0792 4316 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
13:57:42.0793 4316 CmBatt - ok
13:57:42.0809 4316 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
13:57:42.0810 4316 cmdide - ok
13:57:42.0834 4316 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
13:57:42.0839 4316 CNG - ok
13:57:42.0846 4316 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
13:57:42.0847 4316 Compbatt - ok
13:57:42.0886 4316 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\drivers\CompositeBus.sys
13:57:42.0887 4316 CompositeBus - ok
13:57:42.0910 4316 cpuz130 - ok
13:57:42.0930 4316 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
13:57:42.0931 4316 crcdisk - ok
13:57:42.0958 4316 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
13:57:42.0964 4316 CSC - ok
13:57:42.0996 4316 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
13:57:42.0998 4316 DfsC - ok
13:57:43.0015 4316 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
13:57:43.0016 4316 discache - ok
13:57:43.0041 4316 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
13:57:43.0042 4316 Disk - ok
13:57:43.0104 4316 Dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
13:57:43.0106 4316 Dot4 - ok
13:57:43.0129 4316 Dot4Print (85135ad27e79b689335c08167d917cde) C:\Windows\system32\DRIVERS\Dot4Prt.sys
13:57:43.0130 4316 Dot4Print - ok
13:57:43.0146 4316 dot4usb (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys
13:57:43.0147 4316 dot4usb - ok
13:57:43.0182 4316 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
13:57:43.0183 4316 drmkaud - ok
13:57:43.0229 4316 DslMNLwf (d52eeb224df107aad9059597f0eb95cc) C:\Windows\system32\DRIVERS\dslmnlwf.sys
13:57:43.0230 4316 DslMNLwf - ok
13:57:43.0264 4316 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
13:57:43.0274 4316 DXGKrnl - ok
13:57:43.0341 4316 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
13:57:43.0371 4316 ebdrv - ok
13:57:43.0416 4316 ElbyCDIO (9a47ac3dfcf81d30922cdaaf1c2d579f) C:\Windows\system32\Drivers\ElbyCDIO.sys
13:57:43.0418 4316 ElbyCDIO - ok
13:57:43.0440 4316 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
13:57:43.0446 4316 elxstor - ok
13:57:43.0482 4316 ENTECH64 (12c061d9f9621be916d58191872ec281) C:\Windows\system32\DRIVERS\ENTECH64.sys
13:57:43.0484 4316 ENTECH64 - ok
13:57:43.0508 4316 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
13:57:43.0509 4316 ErrDev - ok
13:57:43.0539 4316 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
13:57:43.0541 4316 exfat - ok
13:57:43.0556 4316 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
13:57:43.0559 4316 fastfat - ok
13:57:43.0584 4316 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
13:57:43.0585 4316 fdc - ok
13:57:43.0603 4316 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
13:57:43.0604 4316 FileInfo - ok
13:57:43.0615 4316 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
13:57:43.0616 4316 Filetrace - ok
13:57:43.0642 4316 FLASHSYS - ok
13:57:43.0657 4316 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
13:57:43.0658 4316 flpydisk - ok
13:57:43.0679 4316 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
13:57:43.0682 4316 FltMgr - ok
13:57:43.0694 4316 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
13:57:43.0695 4316 FsDepends - ok
13:57:43.0708 4316 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
13:57:43.0709 4316 Fs_Rec - ok
13:57:43.0738 4316 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
13:57:43.0741 4316 fvevol - ok
13:57:43.0757 4316 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
13:57:43.0759 4316 gagp30kx - ok
13:57:43.0773 4316 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
13:57:43.0775 4316 hcw85cir - ok
13:57:43.0813 4316 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
13:57:43.0817 4316 HdAudAddService - ok
13:57:43.0837 4316 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
13:57:43.0839 4316 HDAudBus - ok
13:57:43.0852 4316 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
13:57:43.0854 4316 HidBatt - ok
13:57:43.0870 4316 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
13:57:43.0872 4316 HidBth - ok
13:57:43.0885 4316 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
13:57:43.0887 4316 HidIr - ok
13:57:43.0934 4316 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
13:57:43.0935 4316 HidUsb - ok
13:57:43.0946 4316 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\drivers\HpSAMD.sys
13:57:43.0948 4316 HpSAMD - ok
13:57:43.0982 4316 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
13:57:43.0989 4316 HTTP - ok
13:57:43.0999 4316 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
13:57:44.0000 4316 hwpolicy - ok
13:57:44.0022 4316 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
13:57:44.0024 4316 i8042prt - ok
13:57:44.0076 4316 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys
13:57:44.0081 4316 iaStor - ok
13:57:44.0109 4316 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
13:57:44.0114 4316 iaStorV - ok
13:57:44.0145 4316 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
13:57:44.0146 4316 iirsp - ok
13:57:44.0231 4316 IntcAzAudAddService (028e40182a6f0374978c755f85b9f07c) C:\Windows\system32\drivers\RTKVHD64.sys
13:57:44.0254 4316 IntcAzAudAddService - ok
13:57:44.0280 4316 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
13:57:44.0281 4316 intelide - ok
13:57:44.0302 4316 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
13:57:44.0304 4316 intelppm - ok
13:57:44.0319 4316 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:57:44.0321 4316 IpFilterDriver - ok
13:57:44.0338 4316 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\drivers\IPMIDrv.sys
13:57:44.0339 4316 IPMIDRV - ok
13:57:44.0353 4316 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
13:57:44.0355 4316 IPNAT - ok
13:57:44.0385 4316 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
13:57:44.0386 4316 IRENUM - ok
13:57:44.0404 4316 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
13:57:44.0405 4316 isapnp - ok
13:57:44.0414 4316 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\drivers\msiscsi.sys
13:57:44.0417 4316 iScsiPrt - ok
13:57:44.0438 4316 iteio - ok
13:57:44.0454 4316 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
13:57:44.0455 4316 kbdclass - ok
13:57:44.0483 4316 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
13:57:44.0484 4316 kbdhid - ok
13:57:44.0498 4316 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
13:57:44.0500 4316 KSecDD - ok
13:57:44.0511 4316 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
13:57:44.0514 4316 KSecPkg - ok
13:57:44.0522 4316 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
13:57:44.0523 4316 ksthunk - ok
13:57:44.0599 4316 LHidFilt (ceb6e18dcfad5c72b81c7da1ac3c1cc1) C:\Windows\system32\DRIVERS\LHidFilt.Sys
13:57:44.0601 4316 LHidFilt - ok
13:57:44.0636 4316 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
13:57:44.0638 4316 lltdio - ok
13:57:44.0652 4316 LMouFilt (f9e48f18be4d2b365f138987b8e7885b) C:\Windows\system32\DRIVERS\LMouFilt.Sys
13:57:44.0654 4316 LMouFilt - ok
13:57:44.0671 4316 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
13:57:44.0673 4316 LSI_FC - ok
13:57:44.0683 4316 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
13:57:44.0685 4316 LSI_SAS - ok
13:57:44.0699 4316 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
13:57:44.0700 4316 LSI_SAS2 - ok
13:57:44.0726 4316 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
13:57:44.0727 4316 LSI_SCSI - ok
13:57:44.0751 4316 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
13:57:44.0753 4316 luafv - ok
13:57:44.0772 4316 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
13:57:44.0773 4316 megasas - ok
13:57:44.0790 4316 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
13:57:44.0793 4316 MegaSR - ok
13:57:44.0816 4316 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
13:57:44.0817 4316 Modem - ok
13:57:44.0837 4316 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
13:57:44.0838 4316 monitor - ok
13:57:44.0849 4316 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
13:57:44.0851 4316 mouclass - ok
13:57:44.0861 4316 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
13:57:44.0863 4316 mouhid - ok
13:57:44.0874 4316 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
13:57:44.0876 4316 mountmgr - ok
13:57:44.0907 4316 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\drivers\mpio.sys
13:57:44.0909 4316 mpio - ok
13:57:44.0924 4316 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
13:57:44.0925 4316 mpsdrv - ok
13:57:44.0943 4316 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
13:57:44.0946 4316 MRxDAV - ok
13:57:44.0975 4316 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
13:57:44.0977 4316 mrxsmb - ok
13:57:45.0014 4316 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:57:45.0017 4316 mrxsmb10 - ok
13:57:45.0034 4316 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:57:45.0036 4316 mrxsmb20 - ok
13:57:45.0044 4316 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\drivers\msahci.sys
13:57:45.0045 4316 msahci - ok
13:57:45.0064 4316 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\drivers\msdsm.sys
13:57:45.0067 4316 msdsm - ok
13:57:45.0094 4316 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
13:57:45.0095 4316 Msfs - ok
13:57:45.0111 4316 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
13:57:45.0113 4316 mshidkmdf - ok
13:57:45.0127 4316 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
13:57:45.0128 4316 msisadrv - ok
13:57:45.0157 4316 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
13:57:45.0158 4316 MSKSSRV - ok
13:57:45.0175 4316 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
13:57:45.0177 4316 MSPCLOCK - ok
13:57:45.0190 4316 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
13:57:45.0191 4316 MSPQM - ok
13:57:45.0213 4316 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
13:57:45.0217 4316 MsRPC - ok
13:57:45.0236 4316 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
13:57:45.0238 4316 mssmbios - ok
13:57:45.0245 4316 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
13:57:45.0246 4316 MSTEE - ok
13:57:45.0260 4316 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
13:57:45.0262 4316 MTConfig - ok
13:57:45.0279 4316 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
13:57:45.0281 4316 Mup - ok
13:57:45.0322 4316 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
13:57:45.0327 4316 NativeWifiP - ok
13:57:45.0356 4316 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
13:57:45.0366 4316 NDIS - ok
13:57:45.0380 4316 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
13:57:45.0381 4316 NdisCap - ok
13:57:45.0399 4316 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
13:57:45.0401 4316 NdisTapi - ok
13:57:45.0420 4316 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
13:57:45.0422 4316 Ndisuio - ok
13:57:45.0442 4316 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
13:57:45.0444 4316 NdisWan - ok
13:57:45.0453 4316 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
13:57:45.0454 4316 NDProxy - ok
13:57:45.0500 4316 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
13:57:45.0501 4316 NetBIOS - ok
13:57:45.0521 4316 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
13:57:45.0523 4316 NetBT - ok
13:57:45.0565 4316 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
13:57:45.0566 4316 nfrd960 - ok
13:57:45.0578 4316 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
13:57:45.0579 4316 Npfs - ok
13:57:45.0601 4316 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
13:57:45.0602 4316 nsiproxy - ok
13:57:45.0645 4316 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
13:57:45.0660 4316 Ntfs - ok
13:57:45.0673 4316 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
13:57:45.0674 4316 Null - ok
13:57:45.0704 4316 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
13:57:45.0706 4316 nvraid - ok
13:57:45.0722 4316 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
13:57:45.0724 4316 nvstor - ok
13:57:45.0755 4316 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
13:57:45.0757 4316 nv_agp - ok
13:57:45.0785 4316 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
13:57:45.0787 4316 ohci1394 - ok
13:57:45.0825 4316 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
13:57:45.0826 4316 Parport - ok
13:57:45.0843 4316 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
13:57:45.0844 4316 partmgr - ok
13:57:45.0905 4316 pbfilter (55223eefabfdb84a926515febab50d9a) C:\Program Files\PeerBlock\pbfilter.sys
13:57:45.0905 4316 pbfilter - ok
13:57:45.0922 4316 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\drivers\pci.sys
13:57:45.0924 4316 pci - ok
13:57:45.0953 4316 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
13:57:45.0955 4316 pciide - ok
13:57:45.0963 4316 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
13:57:45.0965 4316 pcmcia - ok
13:57:45.0972 4316 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
13:57:45.0973 4316 pcw - ok
13:57:45.0995 4316 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
13:57:46.0002 4316 PEAUTH - ok
13:57:46.0067 4316 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
13:57:46.0068 4316 PptpMiniport - ok
13:57:46.0080 4316 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
13:57:46.0081 4316 Processor - ok
13:57:46.0117 4316 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
13:57:46.0120 4316 Psched - ok
13:57:46.0159 4316 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
13:57:46.0172 4316 ql2300 - ok
13:57:46.0181 4316 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
13:57:46.0183 4316 ql40xx - ok
13:57:46.0199 4316 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
13:57:46.0200 4316 QWAVEdrv - ok
13:57:46.0217 4316 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
13:57:46.0218 4316 RasAcd - ok
13:57:46.0245 4316 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
13:57:46.0247 4316 RasAgileVpn - ok
13:57:46.0263 4316 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
13:57:46.0265 4316 Rasl2tp - ok
13:57:46.0288 4316 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
13:57:46.0290 4316 RasPppoe - ok
13:57:46.0306 4316 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
13:57:46.0308 4316 RasSstp - ok
13:57:46.0324 4316 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
13:57:46.0327 4316 rdbss - ok
13:57:46.0355 4316 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
13:57:46.0356 4316 rdpbus - ok
13:57:46.0365 4316 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
13:57:46.0366 4316 RDPCDD - ok
13:57:46.0385 4316 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
13:57:46.0387 4316 RDPDR - ok
13:57:46.0404 4316 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
13:57:46.0405 4316 RDPENCDD - ok
13:57:46.0414 4316 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
13:57:46.0415 4316 RDPREFMP - ok
13:57:46.0428 4316 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
13:57:46.0431 4316 RDPWD - ok
13:57:46.0448 4316 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
13:57:46.0450 4316 rdyboost - ok
13:57:46.0509 4316 RivaTuner64 (a10b40cf9eb57d24e44717a2d38a00f4) C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys
13:57:46.0511 4316 RivaTuner64 - ok
13:57:46.0542 4316 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
13:57:46.0544 4316 rspndr - ok
13:57:46.0578 4316 RTL8167 (abcb5a38a0d85bdf69b7877e1ad1eed5) C:\Windows\system32\DRIVERS\Rt64win7.sys
13:57:46.0582 4316 RTL8167 - ok
13:57:46.0628 4316 s115bus (e0f0977caafdf719929c8ca02a1c5147) C:\Windows\system32\DRIVERS\s115bus.sys
13:57:46.0630 4316 s115bus - ok
13:57:46.0647 4316 s115mdfl (136328e6c3086a19eb3154058bc7b3a3) C:\Windows\system32\DRIVERS\s115mdfl.sys
13:57:46.0648 4316 s115mdfl - ok
13:57:46.0658 4316 s115mdm (54552277de7eae1a2e108a4cff7abb07) C:\Windows\system32\DRIVERS\s115mdm.sys
13:57:46.0661 4316 s115mdm - ok
13:57:46.0686 4316 s115mgmt (e9b3966836cb9c2107264e44249267df) C:\Windows\system32\DRIVERS\s115mgmt.sys
13:57:46.0688 4316 s115mgmt - ok
13:57:46.0714 4316 s115obex (f6ab3b6e35981c4f3fed4198d3f29674) C:\Windows\system32\DRIVERS\s115obex.sys
13:57:46.0716 4316 s115obex - ok
13:57:46.0750 4316 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\drivers\vms3cap.sys
13:57:46.0752 4316 s3cap - ok
13:57:46.0771 4316 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\drivers\sbp2port.sys
13:57:46.0773 4316 sbp2port - ok
13:57:46.0783 4316 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
13:57:46.0785 4316 scfilter - ok
13:57:46.0811 4316 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
13:57:46.0813 4316 secdrv - ok
13:57:46.0836 4316 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
13:57:46.0837 4316 Serenum - ok
13:57:46.0865 4316 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
13:57:46.0867 4316 Serial - ok
13:57:46.0895 4316 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
13:57:46.0896 4316 sermouse - ok
13:57:46.0926 4316 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
13:57:46.0928 4316 sffdisk - ok
13:57:46.0941 4316 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
13:57:46.0943 4316 sffp_mmc - ok
13:57:46.0951 4316 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\drivers\sffp_sd.sys
13:57:46.0953 4316 sffp_sd - ok
13:57:46.0968 4316 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
13:57:46.0970 4316 sfloppy - ok
13:57:46.0990 4316 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
13:57:46.0991 4316 SiSRaid2 - ok
13:57:47.0008 4316 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
13:57:47.0009 4316 SiSRaid4 - ok
13:57:47.0028 4316 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
13:57:47.0030 4316 Smb - ok
13:57:47.0068 4316 speedfan - ok
13:57:47.0087 4316 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
13:57:47.0088 4316 spldr - ok
13:57:47.0142 4316 sptd (4c33f139236fd9bd14a920f60c1cb072) C:\Windows\system32\Drivers\sptd.sys
13:57:47.0142 4316 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 4c33f139236fd9bd14a920f60c1cb072
13:57:47.0144 4316 sptd ( LockedFile.Multi.Generic ) - warning
13:57:47.0144 4316 sptd - detected LockedFile.Multi.Generic (1)
13:57:47.0179 4316 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
13:57:47.0185 4316 srv - ok
13:57:47.0201 4316 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
13:57:47.0206 4316 srv2 - ok
13:57:47.0244 4316 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
13:57:47.0247 4316 srvnet - ok
13:57:47.0265 4316 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
13:57:47.0267 4316 stexstor - ok
13:57:47.0289 4316 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\drivers\vmstorfl.sys
13:57:47.0291 4316 storflt - ok
13:57:47.0307 4316 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\drivers\storvsc.sys
13:57:47.0308 4316 storvsc - ok
13:57:47.0316 4316 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
13:57:47.0318 4316 swenum - ok
13:57:47.0382 4316 Tcpip (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\drivers\tcpip.sys
13:57:47.0399 4316 Tcpip - ok
13:57:47.0427 4316 TCPIP6 (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\DRIVERS\tcpip.sys
13:57:47.0436 4316 TCPIP6 - ok
13:57:47.0453 4316 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
13:57:47.0454 4316 tcpipreg - ok
13:57:47.0512 4316 Tcpz-x64 - ok
13:57:47.0528 4316 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
13:57:47.0529 4316 TDPIPE - ok
13:57:47.0553 4316 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
13:57:47.0554 4316 TDTCP - ok
13:57:47.0578 4316 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
13:57:47.0580 4316 tdx - ok
13:57:47.0596 4316 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\drivers\termdd.sys
13:57:47.0598 4316 TermDD - ok
13:57:47.0624 4316 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
13:57:47.0625 4316 tssecsrv - ok
13:57:47.0650 4316 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
13:57:47.0652 4316 tunnel - ok
13:57:47.0678 4316 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
13:57:47.0680 4316 uagp35 - ok
13:57:47.0702 4316 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
13:57:47.0706 4316 udfs - ok
13:57:47.0737 4316 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
13:57:47.0738 4316 uliagpkx - ok
13:57:47.0768 4316 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\drivers\umbus.sys
13:57:47.0769 4316 umbus - ok
13:57:47.0786 4316 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
13:57:47.0787 4316 UmPass - ok
13:57:47.0859 4316 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys
13:57:47.0873 4316 usbccgp - ok
13:57:47.0930 4316 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
13:57:47.0940 4316 usbcir - ok
13:57:47.0970 4316 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys
13:57:47.0971 4316 usbehci - ok
13:57:47.0984 4316 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys
13:57:47.0987 4316 usbhub - ok
13:57:48.0000 4316 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\drivers\usbohci.sys
13:57:48.0001 4316 usbohci - ok
13:57:48.0014 4316 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
13:57:48.0015 4316 usbprint - ok
13:57:48.0046 4316 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
13:57:48.0048 4316 usbscan - ok
13:57:48.0068 4316 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\drivers\USBSTOR.SYS
13:57:48.0070 4316 USBSTOR - ok
13:57:48.0085 4316 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\DRIVERS\usbuhci.sys
13:57:48.0087 4316 usbuhci - ok
13:57:48.0110 4316 vcdrom - ok
13:57:48.0150 4316 VClone (84bb306b7863883018d7f3eb0c453bd5) C:\Windows\system32\DRIVERS\VClone.sys
13:57:48.0151 4316 VClone - ok
13:57:48.0167 4316 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
13:57:48.0169 4316 vdrvroot - ok
13:57:48.0191 4316 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
13:57:48.0193 4316 vga - ok
13:57:48.0207 4316 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
13:57:48.0208 4316 VgaSave - ok
13:57:48.0243 4316 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\drivers\vhdmp.sys
13:57:48.0246 4316 vhdmp - ok
13:57:48.0274 4316 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
13:57:48.0276 4316 viaide - ok
13:57:48.0305 4316 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\drivers\vmbus.sys
13:57:48.0308 4316 vmbus - ok
13:57:48.0325 4316 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\drivers\VMBusHID.sys
13:57:48.0326 4316 VMBusHID - ok
13:57:48.0343 4316 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\drivers\volmgr.sys
13:57:48.0345 4316 volmgr - ok
13:57:48.0366 4316 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
13:57:48.0371 4316 volmgrx - ok
13:57:48.0392 4316 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\drivers\volsnap.sys
13:57:48.0396 4316 volsnap - ok
13:57:48.0421 4316 vpcbus (abd9b4a7e2d0ae51a3b8df1af3152d61) C:\Windows\system32\DRIVERS\vpchbus.sys
13:57:48.0424 4316 vpcbus - ok
13:57:48.0443 4316 vpcnfltr (8acda395841538ce9713a67fe8b2a3eb) C:\Windows\system32\DRIVERS\vpcnfltr.sys
13:57:48.0445 4316 vpcnfltr - ok
13:57:48.0474 4316 vpcusb (31924e31bc315773e6d149b157db46d5) C:\Windows\system32\DRIVERS\vpcusb.sys
13:57:48.0476 4316 vpcusb - ok
13:57:48.0517 4316 vpcvmm (c5b651e52540e6f46da66574c74b4898) C:\Windows\system32\drivers\vpcvmm.sys
13:57:48.0521 4316 vpcvmm - ok
13:57:48.0549 4316 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
13:57:48.0551 4316 vsmraid - ok
13:57:48.0576 4316 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
13:57:48.0577 4316 vwifibus - ok
13:57:48.0594 4316 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
13:57:48.0596 4316 WacomPen - ok
13:57:48.0621 4316 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
13:57:48.0623 4316 WANARP - ok
13:57:48.0627 4316 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
13:57:48.0628 4316 Wanarpv6 - ok
13:57:48.0652 4316 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
13:57:48.0654 4316 Wd - ok
13:57:48.0674 4316 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
13:57:48.0681 4316 Wdf01000 - ok
13:57:48.0720 4316 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
13:57:48.0721 4316 WfpLwf - ok
13:57:48.0739 4316 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
13:57:48.0740 4316 WIMMount - ok
13:57:48.0774 4316 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
13:57:48.0775 4316 WinUsb - ok
13:57:48.0805 4316 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
13:57:48.0806 4316 WmiAcpi - ok
13:57:48.0828 4316 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
13:57:48.0829 4316 ws2ifsl - ok
13:57:48.0856 4316 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
13:57:48.0858 4316 WudfPf - ok
13:57:48.0889 4316 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
13:57:48.0891 4316 WUDFRd - ok
13:57:48.0922 4316 zntport - ok
13:57:48.0933 4316 MBR (0x1B8) (e24810ee950b6f5f27cb02111df934e3) \Device\Harddisk0\DR0
13:57:48.0933 4316 \Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - infected
13:57:48.0933 4316 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Wistler.a (0)
13:57:48.0939 4316 Boot (0x1200) (b53ff22f5333bc165a38abbb47576bf6) \Device\Harddisk0\DR0\Partition0
13:57:48.0939 4316 \Device\Harddisk0\DR0\Partition0 - ok
13:57:48.0958 4316 Boot (0x1200) (d3efc9492dcb9cff9420909ecd0c28f1) \Device\Harddisk0\DR0\Partition1
13:57:48.0958 4316 \Device\Harddisk0\DR0\Partition1 - ok
13:57:48.0959 4316 ============================================================
13:57:48.0959 4316 Scan finished
13:57:48.0959 4316 ============================================================
13:57:48.0965 3524 Detected object count: 2
13:57:48.0965 3524 Actual detected object count: 2
14:00:36.0110 3524 HKLM\SYSTEM\ControlSet001\services\sptd - will be deleted on reboot
14:00:36.0128 3524 HKLM\SYSTEM\ControlSet002\services\sptd - will be deleted on reboot
14:00:36.0140 3524 C:\Windows\system32\Drivers\sptd.sys - will be deleted on reboot
14:00:36.0140 3524 sptd ( LockedFile.Multi.Generic ) - User select action: Delete
14:00:36.0176 3524 \Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - will be cured on reboot
14:00:36.0176 3524 \Device\Harddisk0\DR0 - ok
14:00:36.0176 3524 \Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - User select action: Cure
14:00:44.0546 4780 Deinitialize success


Vielen Dank erst mal Arne,

Gruß, Andy

Antwort

Themen zu w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen
.dll, antivirus, avast, bho, combofix, defender, device driver, entfernen, explorer, firefox, format, helper, kaspersky, langs, launch, logfile, mbamservice.exe, mozilla, mozilla thunderbird, nodrives, object, plug-in, programme, prozesse, realtek, registry, scan, senden, server, software, sweetim, temp, windows, windows 7 ultimate, ändern




Ähnliche Themen: w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen


  1. Virus mit Combofix entfernt
    Plagegeister aller Art und deren Bekämpfung - 07.06.2013 (17)
  2. ZeuS/Zbot Trojaner, was tun? Avira schon durchlaufen lassen
    Plagegeister aller Art und deren Bekämpfung - 24.04.2013 (36)
  3. Nach GVU Trojaner (bereits entfernt durch euch), möglicherweise noch Rootkit auf meinem Rechner?
    Log-Analyse und Auswertung - 10.01.2013 (11)
  4. Avira Free Antivirus reagiert nicht, Malwarebytes durchlaufen lassen
    Plagegeister aller Art und deren Bekämpfung - 11.12.2012 (4)
  5. Rootkit.Boot.Whistler.a auf Systembootsektoren
    Log-Analyse und Auswertung - 15.11.2012 (10)
  6. Trojaner: Spy(Farko), Banker(Jorik),Downloader(Java) und Rootkit Funde durch Kaspersky '12
    Plagegeister aller Art und deren Bekämpfung - 15.05.2012 (13)
  7. [doppelt]rootkit w7 64 bit whistler, durch ein kaps tool entfernt.
    Mülltonne - 17.11.2011 (3)
  8. rootkit w7 64 bit whistler
    Alles rund um Windows - 15.11.2011 (1)
  9. Nur Combofix zeigt rootkit an löscht aber nichts
    Log-Analyse und Auswertung - 21.07.2011 (22)
  10. mscj2.exe erfolgreich entfernt mit Combofix ?
    Plagegeister aller Art und deren Bekämpfung - 04.07.2011 (1)
  11. Combofix - immer wieder Rootkit!
    Mülltonne - 13.12.2010 (1)
  12. Whistler / Black Internet Rootkit - Infektionsforschung
    Diskussionsforum - 08.08.2010 (9)
  13. ich hab das anti virus programm durchlaufen lassen hab alles am ande kopiert...
    Plagegeister aller Art und deren Bekämpfung - 08.06.2010 (1)
  14. Combofix durchlaufen lassen
    Antiviren-, Firewall- und andere Schutzprogramme - 05.04.2010 (6)
  15. Probleme nach Entfernen von Security Tool mit Combofix.exe
    Plagegeister aller Art und deren Bekämpfung - 25.10.2009 (4)
  16. TDSS eingefangen - Malwarebytes und ComboFix lassen sich nicht starten
    Plagegeister aller Art und deren Bekämpfung - 15.01.2009 (10)

Zum Thema w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen - hatte ich vor deiner nachricht schon gemacht, trozdem danke...*g* tdsskiller hab ich mehrmals durchlaufen lassen... 13:57:27.0034 4696 TDSS rootkit removing tool 2.6.18.0 Nov 11 2011 15:47:15 13:57:27.0180 4696 ============================================================ 13:57:27.0180 - w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen...
Archiv
Du betrachtest: w7 64 bit/rootkit whistler, durch ein kaspersky tool entfernt. combofix durchlaufen lassen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.