|
Plagegeister aller Art und deren Bekämpfung: Windows teilweise ohne Funktion, Rouge.FakeHDD, PUM.Hijack.StartMenuWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
21.04.2012, 08:17 | #16 |
| Windows teilweise ohne Funktion, Rouge.FakeHDD, PUM.Hijack.StartMenu TDSS Killer Log mit allen Optionen Aktiv und allem auf skip Code:
ATTFilter 09:10:59.0864 3768 TDSS rootkit removing tool 2.7.31.0 Apr 20 2012 19:49:47 09:11:00.0222 3768 ============================================================ 09:11:00.0222 3768 Current date / time: 2012/04/21 09:11:00.0222 09:11:00.0222 3768 SystemInfo: 09:11:00.0222 3768 09:11:00.0222 3768 OS Version: 6.1.7601 ServicePack: 1.0 09:11:00.0222 3768 Product type: Workstation 09:11:00.0222 3768 ComputerName: KFZ-HUMMEL-PC 09:11:00.0222 3768 UserName: KFZ-Hummel 09:11:00.0222 3768 Windows directory: C:\Windows 09:11:00.0222 3768 System windows directory: C:\Windows 09:11:00.0222 3768 Processor architecture: Intel x86 09:11:00.0222 3768 Number of processors: 2 09:11:00.0222 3768 Page size: 0x1000 09:11:00.0222 3768 Boot type: Normal boot 09:11:00.0222 3768 ============================================================ 09:11:01.0283 3768 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0x38080, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000050 09:11:01.0283 3768 \Device\Harddisk0\DR0: 09:11:01.0283 3768 MBR partitions: 09:11:01.0283 3768 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 09:11:01.0283 3768 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xC800000 09:11:01.0283 3768 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC832800, BlocksNum 0x2DB4E830 09:11:01.0299 3768 C: <-> \Device\Harddisk0\DR0\Partition1 09:11:01.0330 3768 D: <-> \Device\Harddisk0\DR0\Partition2 09:11:01.0330 3768 Initialize success 09:11:01.0330 3768 ============================================================ 09:11:34.0663 3248 ============================================================ 09:11:34.0663 3248 Scan started 09:11:34.0663 3248 Mode: Manual; SigCheck; TDLFS; 09:11:34.0663 3248 ============================================================ 09:11:35.0662 3248 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys 09:11:35.0724 3248 1394ohci - ok 09:11:35.0755 3248 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys 09:11:35.0771 3248 ACPI - ok 09:11:35.0787 3248 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys 09:11:35.0833 3248 AcpiPmi - ok 09:11:35.0943 3248 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 09:11:35.0958 3248 AdobeARMservice - ok 09:11:35.0989 3248 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys 09:11:36.0005 3248 adp94xx - ok 09:11:36.0036 3248 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys 09:11:36.0052 3248 adpahci - ok 09:11:36.0067 3248 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys 09:11:36.0083 3248 adpu320 - ok 09:11:36.0099 3248 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll 09:11:36.0145 3248 AeLookupSvc - ok 09:11:36.0177 3248 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys 09:11:36.0192 3248 AFD - ok 09:11:36.0208 3248 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys 09:11:36.0223 3248 agp440 - ok 09:11:36.0239 3248 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys 09:11:36.0255 3248 aic78xx - ok 09:11:36.0270 3248 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe 09:11:36.0301 3248 ALG - ok 09:11:36.0317 3248 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys 09:11:36.0333 3248 aliide - ok 09:11:36.0348 3248 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys 09:11:36.0348 3248 amdagp - ok 09:11:36.0395 3248 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys 09:11:36.0411 3248 amdide - ok 09:11:36.0426 3248 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys 09:11:36.0473 3248 AmdK8 - ok 09:11:36.0489 3248 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys 09:11:36.0520 3248 AmdPPM - ok 09:11:36.0551 3248 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys 09:11:36.0567 3248 amdsata - ok 09:11:36.0598 3248 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys 09:11:36.0598 3248 amdsbs - ok 09:11:36.0613 3248 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys 09:11:36.0629 3248 amdxata - ok 09:11:36.0645 3248 AN983 (5dc7357b101aef8f5cc292bb8539f5d6) C:\Windows\system32\DRIVERS\AN983.sys 09:11:36.0691 3248 AN983 - ok 09:11:36.0707 3248 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys 09:11:36.0738 3248 AppID - ok 09:11:36.0754 3248 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll 09:11:36.0801 3248 AppIDSvc - ok 09:11:36.0832 3248 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll 09:11:36.0863 3248 Appinfo - ok 09:11:36.0894 3248 AppMgmt (a45d184df6a8803da13a0b329517a64a) C:\Windows\System32\appmgmts.dll 09:11:36.0925 3248 AppMgmt - ok 09:11:36.0941 3248 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys 09:11:36.0941 3248 arc - ok 09:11:36.0972 3248 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys 09:11:36.0972 3248 arcsas - ok 09:11:37.0003 3248 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys 09:11:37.0097 3248 AsyncMac - ok 09:11:37.0113 3248 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys 09:11:37.0113 3248 atapi - ok 09:11:37.0144 3248 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll 09:11:37.0175 3248 AudioEndpointBuilder - ok 09:11:37.0191 3248 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll 09:11:37.0222 3248 Audiosrv - ok 09:11:37.0284 3248 Autodata Limited License Service (0d52aa08491a827fba10de8de0e2885f) C:\Program Files\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe 09:11:37.0284 3248 Autodata Limited License Service ( UnsignedFile.Multi.Generic ) - warning 09:11:37.0284 3248 Autodata Limited License Service - detected UnsignedFile.Multi.Generic (1) 09:11:37.0331 3248 AVMCOWAN (d730aa8494ec4c8c6c976f5eb04d3ac2) C:\Windows\system32\DRIVERS\AVMCOWAN.sys 09:11:37.0378 3248 AVMCOWAN - ok 09:11:37.0409 3248 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll 09:11:37.0456 3248 AxInstSV - ok 09:11:37.0487 3248 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys 09:11:37.0518 3248 b06bdrv - ok 09:11:37.0534 3248 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys 09:11:37.0549 3248 b57nd60x - ok 09:11:37.0581 3248 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll 09:11:37.0612 3248 BDESVC - ok 09:11:37.0627 3248 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys 09:11:37.0674 3248 Beep - ok 09:11:37.0705 3248 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll 09:11:37.0752 3248 BFE - ok 09:11:37.0815 3248 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll 09:11:37.0861 3248 BITS - ok 09:11:37.0877 3248 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys 09:11:37.0908 3248 blbdrive - ok 09:11:37.0939 3248 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys 09:11:37.0971 3248 bowser - ok 09:11:37.0986 3248 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys 09:11:38.0017 3248 BrFiltLo - ok 09:11:38.0033 3248 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys 09:11:38.0049 3248 BrFiltUp - ok 09:11:38.0080 3248 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll 09:11:38.0111 3248 Browser - ok 09:11:38.0142 3248 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys 09:11:38.0173 3248 Brserid - ok 09:11:38.0205 3248 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys 09:11:38.0236 3248 BrSerWdm - ok 09:11:38.0251 3248 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys 09:11:38.0283 3248 BrUsbMdm - ok 09:11:38.0298 3248 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys 09:11:38.0314 3248 BrUsbSer - ok 09:11:38.0329 3248 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys 09:11:38.0361 3248 BTHMODEM - ok 09:11:38.0392 3248 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll 09:11:38.0407 3248 bthserv - ok 09:11:38.0423 3248 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys 09:11:38.0454 3248 cdfs - ok 09:11:38.0485 3248 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys 09:11:38.0501 3248 cdrom - ok 09:11:38.0532 3248 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll 09:11:38.0563 3248 CertPropSvc - ok 09:11:38.0579 3248 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys 09:11:38.0595 3248 circlass - ok 09:11:38.0610 3248 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys 09:11:38.0626 3248 CLFS - ok 09:11:38.0688 3248 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 09:11:38.0704 3248 clr_optimization_v2.0.50727_32 - ok 09:11:38.0766 3248 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 09:11:38.0782 3248 clr_optimization_v4.0.30319_32 - ok 09:11:38.0797 3248 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys 09:11:38.0797 3248 CmBatt - ok 09:11:38.0829 3248 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys 09:11:38.0829 3248 cmdide - ok 09:11:38.0875 3248 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys 09:11:38.0891 3248 CNG - ok 09:11:38.0907 3248 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys 09:11:38.0922 3248 Compbatt - ok 09:11:38.0938 3248 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys 09:11:38.0969 3248 CompositeBus - ok 09:11:38.0969 3248 COMSysApp - ok 09:11:38.0985 3248 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys 09:11:39.0000 3248 crcdisk - ok 09:11:39.0000 3248 Crypkey License - ok 09:11:39.0031 3248 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll 09:11:39.0078 3248 CryptSvc - ok 09:11:39.0109 3248 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys 09:11:39.0156 3248 CSC - ok 09:11:39.0172 3248 CscService (15f93b37f6801943360d9eb42485d5d3) C:\Windows\System32\cscsvc.dll 09:11:39.0187 3248 CscService - ok 09:11:39.0203 3248 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll 09:11:39.0250 3248 DcomLaunch - ok 09:11:39.0281 3248 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll 09:11:39.0312 3248 defragsvc - ok 09:11:39.0343 3248 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys 09:11:39.0375 3248 DfsC - ok 09:11:39.0406 3248 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll 09:11:39.0453 3248 Dhcp - ok 09:11:39.0468 3248 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys 09:11:39.0499 3248 discache - ok 09:11:39.0515 3248 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys 09:11:39.0531 3248 Disk - ok 09:11:39.0562 3248 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll 09:11:39.0577 3248 Dnscache - ok 09:11:39.0609 3248 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll 09:11:39.0655 3248 dot3svc - ok 09:11:39.0671 3248 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll 09:11:39.0702 3248 DPS - ok 09:11:39.0733 3248 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys 09:11:39.0749 3248 drmkaud - ok 09:11:39.0780 3248 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys 09:11:39.0811 3248 DXGKrnl - ok 09:11:39.0843 3248 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll 09:11:39.0874 3248 EapHost - ok 09:11:39.0936 3248 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys 09:11:40.0030 3248 ebdrv - ok 09:11:40.0061 3248 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe 09:11:40.0108 3248 EFS - ok 09:11:40.0123 3248 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys 09:11:40.0155 3248 elxstor - ok 09:11:40.0170 3248 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys 09:11:40.0201 3248 ErrDev - ok 09:11:40.0233 3248 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll 09:11:40.0279 3248 EventSystem - ok 09:11:40.0295 3248 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys 09:11:40.0342 3248 exfat - ok 09:11:40.0357 3248 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys 09:11:40.0389 3248 fastfat - ok 09:11:40.0435 3248 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe 09:11:40.0467 3248 Fax - ok 09:11:40.0482 3248 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys 09:11:40.0513 3248 fdc - ok 09:11:40.0529 3248 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll 09:11:40.0560 3248 fdPHost - ok 09:11:40.0576 3248 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll 09:11:40.0607 3248 FDResPub - ok 09:11:40.0623 3248 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys 09:11:40.0623 3248 FileInfo - ok 09:11:40.0654 3248 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys 09:11:40.0685 3248 Filetrace - ok 09:11:40.0716 3248 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys 09:11:40.0732 3248 flpydisk - ok 09:11:40.0747 3248 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys 09:11:40.0763 3248 FltMgr - ok 09:11:40.0810 3248 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll 09:11:40.0857 3248 FontCache - ok 09:11:40.0919 3248 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 09:11:40.0919 3248 FontCache3.0.0.0 - ok 09:11:40.0966 3248 FPCIBASE (58992bb216d65a3165be62b21b0b4196) C:\Windows\system32\DRIVERS\fpcibase.sys 09:11:40.0997 3248 FPCIBASE - ok 09:11:41.0028 3248 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys 09:11:41.0028 3248 FsDepends - ok 09:11:41.0059 3248 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\Windows\system32\drivers\Fs_Rec.sys 09:11:41.0075 3248 Fs_Rec - ok 09:11:41.0106 3248 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys 09:11:41.0122 3248 fvevol - ok 09:11:41.0137 3248 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys 09:11:41.0137 3248 gagp30kx - ok 09:11:41.0169 3248 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll 09:11:41.0215 3248 gpsvc - ok 09:11:41.0262 3248 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 09:11:41.0262 3248 gupdate - ok 09:11:41.0278 3248 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 09:11:41.0293 3248 gupdatem - ok 09:11:41.0293 3248 Hardlock - ok 09:11:41.0309 3248 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys 09:11:41.0340 3248 hcw85cir - ok 09:11:41.0371 3248 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys 09:11:41.0403 3248 HdAudAddService - ok 09:11:41.0434 3248 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys 09:11:41.0465 3248 HDAudBus - ok 09:11:41.0481 3248 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys 09:11:41.0496 3248 HidBatt - ok 09:11:41.0512 3248 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys 09:11:41.0543 3248 HidBth - ok 09:11:41.0543 3248 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys 09:11:41.0559 3248 HidIr - ok 09:11:41.0590 3248 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll 09:11:41.0621 3248 hidserv - ok 09:11:41.0637 3248 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\drivers\hidusb.sys 09:11:41.0652 3248 HidUsb - ok 09:11:41.0683 3248 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll 09:11:41.0715 3248 hkmsvc - ok 09:11:41.0746 3248 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll 09:11:41.0777 3248 HomeGroupListener - ok 09:11:41.0808 3248 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll 09:11:41.0839 3248 HomeGroupProvider - ok 09:11:41.0871 3248 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys 09:11:41.0871 3248 HpSAMD - ok 09:11:41.0917 3248 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys 09:11:41.0933 3248 HTTP - ok 09:11:41.0964 3248 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys 09:11:41.0964 3248 hwpolicy - ok 09:11:41.0995 3248 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys 09:11:42.0027 3248 i8042prt - ok 09:11:42.0058 3248 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys 09:11:42.0073 3248 iaStorV - ok 09:11:42.0151 3248 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 09:11:42.0183 3248 idsvc - ok 09:11:42.0214 3248 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys 09:11:42.0214 3248 iirsp - ok 09:11:42.0245 3248 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll 09:11:42.0292 3248 IKEEXT - ok 09:11:42.0385 3248 IntcAzAudAddService (b38852f597f0e0d1cffe11a19a08a9d9) C:\Windows\system32\drivers\RTKVHDA.sys 09:11:42.0744 3248 IntcAzAudAddService - ok 09:11:42.0760 3248 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys 09:11:42.0775 3248 intelide - ok 09:11:42.0791 3248 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys 09:11:42.0807 3248 intelppm - ok 09:11:42.0838 3248 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll 09:11:42.0869 3248 IPBusEnum - ok 09:11:42.0885 3248 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys 09:11:42.0931 3248 IpFilterDriver - ok 09:11:42.0963 3248 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll 09:11:42.0994 3248 iphlpsvc - ok 09:11:43.0025 3248 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys 09:11:43.0056 3248 IPMIDRV - ok 09:11:43.0072 3248 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys 09:11:43.0119 3248 IPNAT - ok 09:11:43.0134 3248 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys 09:11:43.0165 3248 IRENUM - ok 09:11:43.0197 3248 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys 09:11:43.0197 3248 isapnp - ok 09:11:43.0228 3248 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys 09:11:43.0243 3248 iScsiPrt - ok 09:11:43.0275 3248 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys 09:11:43.0290 3248 kbdclass - ok 09:11:43.0321 3248 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\drivers\kbdhid.sys 09:11:43.0353 3248 kbdhid - ok 09:11:43.0384 3248 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe 09:11:43.0399 3248 KeyIso - ok 09:11:43.0415 3248 KMService (4635935fc972c582632bf45c26bfcb0e) C:\Windows\system32\srvany.exe 09:11:43.0446 3248 KMService ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0446 3248 KMService - detected UnsignedFile.Multi.Generic (1) 09:11:43.0462 3248 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys 09:11:43.0462 3248 KSecDD - ok 09:11:43.0477 3248 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys 09:11:43.0493 3248 KSecPkg - ok 09:11:43.0509 3248 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll 09:11:43.0555 3248 KtmRm - ok 09:11:43.0602 3248 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll 09:11:43.0649 3248 LanmanServer - ok 09:11:43.0665 3248 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll 09:11:43.0711 3248 LanmanWorkstation - ok 09:11:43.0774 3248 LcSvrAdm (0133518cc3624d173f997d21e9e9d2a2) c:\ElsaWin\bin\LcSvrAdm.exe 09:11:43.0805 3248 LcSvrAdm ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0805 3248 LcSvrAdm - detected UnsignedFile.Multi.Generic (1) 09:11:43.0836 3248 LcSvrAuf (904704ffb404b8a1d27023230a14ef12) c:\ElsaWin\bin\LcSvrAuf.exe 09:11:43.0867 3248 LcSvrAuf ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0867 3248 LcSvrAuf - detected UnsignedFile.Multi.Generic (1) 09:11:43.0883 3248 LcSvrDba (78d2af7ea8c7668aacc78082cfba1894) c:\ElsaWin\bin\LcSvrDba.exe 09:11:43.0899 3248 LcSvrDba ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0899 3248 LcSvrDba - detected UnsignedFile.Multi.Generic (1) 09:11:43.0914 3248 LcSvrHis (59dc1ac0cce60325b35d724094043544) c:\ElsaWin\bin\LcSvrHis.exe 09:11:43.0930 3248 LcSvrHis ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0930 3248 LcSvrHis - detected UnsignedFile.Multi.Generic (1) 09:11:43.0945 3248 LcSvrPAS (da76d1c6bd8f439c827917102c4371ca) c:\ElsaWin\bin\LcSvrPas.exe 09:11:43.0977 3248 LcSvrPAS ( UnsignedFile.Multi.Generic ) - warning 09:11:43.0977 3248 LcSvrPAS - detected UnsignedFile.Multi.Generic (1) 09:11:43.0992 3248 LcSvrSaz (8e5bb98631d87975ac1fe0453f34b449) c:\ElsaWin\bin\LcSvrSaz.exe 09:11:44.0008 3248 LcSvrSaz ( UnsignedFile.Multi.Generic ) - warning 09:11:44.0008 3248 LcSvrSaz - detected UnsignedFile.Multi.Generic (1) 09:11:44.0055 3248 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys 09:11:44.0086 3248 lltdio - ok 09:11:44.0117 3248 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll 09:11:44.0148 3248 lltdsvc - ok 09:11:44.0148 3248 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll 09:11:44.0195 3248 lmhosts - ok 09:11:44.0211 3248 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys 09:11:44.0226 3248 LSI_FC - ok 09:11:44.0226 3248 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys 09:11:44.0242 3248 LSI_SAS - ok 09:11:44.0257 3248 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys 09:11:44.0273 3248 LSI_SAS2 - ok 09:11:44.0289 3248 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys 09:11:44.0304 3248 LSI_SCSI - ok 09:11:44.0320 3248 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys 09:11:44.0335 3248 luafv - ok 09:11:44.0351 3248 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys 09:11:44.0367 3248 megasas - ok 09:11:44.0382 3248 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys 09:11:44.0398 3248 MegaSR - ok 09:11:44.0413 3248 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll 09:11:44.0460 3248 MMCSS - ok 09:11:44.0476 3248 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys 09:11:44.0507 3248 Modem - ok 09:11:44.0523 3248 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys 09:11:44.0554 3248 monitor - ok 09:11:44.0569 3248 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\drivers\mouclass.sys 09:11:44.0585 3248 mouclass - ok 09:11:44.0585 3248 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys 09:11:44.0601 3248 mouhid - ok 09:11:44.0647 3248 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys 09:11:44.0647 3248 mountmgr - ok 09:11:44.0679 3248 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\Windows\system32\DRIVERS\MpFilter.sys 09:11:44.0694 3248 MpFilter - ok 09:11:44.0725 3248 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys 09:11:44.0741 3248 mpio - ok 09:11:44.0757 3248 MpNWMon (2c3489660d4a8d514c123c3f0d67df46) C:\Windows\system32\DRIVERS\MpNWMon.sys 09:11:44.0757 3248 MpNWMon - ok 09:11:44.0772 3248 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys 09:11:44.0819 3248 mpsdrv - ok 09:11:44.0850 3248 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll 09:11:44.0897 3248 MpsSvc - ok 09:11:44.0928 3248 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys 09:11:44.0928 3248 MRxDAV - ok 09:11:44.0975 3248 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys 09:11:45.0006 3248 mrxsmb - ok 09:11:45.0037 3248 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys 09:11:45.0069 3248 mrxsmb10 - ok 09:11:45.0100 3248 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys 09:11:45.0115 3248 mrxsmb20 - ok 09:11:45.0162 3248 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys 09:11:45.0162 3248 msahci - ok 09:11:45.0178 3248 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys 09:11:45.0193 3248 msdsm - ok 09:11:45.0225 3248 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe 09:11:45.0240 3248 MSDTC - ok 09:11:45.0271 3248 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys 09:11:45.0303 3248 Msfs - ok 09:11:45.0318 3248 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys 09:11:45.0349 3248 mshidkmdf - ok 09:11:45.0381 3248 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys 09:11:45.0396 3248 msisadrv - ok 09:11:45.0427 3248 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll 09:11:45.0459 3248 MSiSCSI - ok 09:11:45.0459 3248 msiserver - ok 09:11:45.0490 3248 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys 09:11:45.0505 3248 MSKSSRV - ok 09:11:45.0583 3248 MsMpSvc (cfce43b70ca0cc4dcc8adb62b792b173) C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe 09:11:45.0599 3248 MsMpSvc - ok 09:11:45.0615 3248 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys 09:11:45.0646 3248 MSPCLOCK - ok 09:11:45.0661 3248 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys 09:11:45.0693 3248 MSPQM - ok 09:11:45.0724 3248 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys 09:11:45.0739 3248 MsRPC - ok 09:11:45.0755 3248 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys 09:11:45.0771 3248 mssmbios - ok 09:11:45.0786 3248 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys 09:11:45.0802 3248 MSTEE - ok 09:11:45.0833 3248 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys 09:11:45.0833 3248 MTConfig - ok 09:11:45.0864 3248 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\Windows\system32\DRIVERS\ASACPI.sys 09:11:45.0880 3248 MTsensor - ok 09:11:45.0895 3248 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys 09:11:45.0911 3248 Mup - ok 09:11:45.0942 3248 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll 09:11:45.0973 3248 napagent - ok 09:11:46.0020 3248 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys 09:11:46.0036 3248 NativeWifiP - ok 09:11:46.0067 3248 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys 09:11:46.0114 3248 NDIS - ok 09:11:46.0114 3248 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys 09:11:46.0145 3248 NdisCap - ok 09:11:46.0176 3248 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys 09:11:46.0207 3248 NdisTapi - ok 09:11:46.0239 3248 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys 09:11:46.0270 3248 Ndisuio - ok 09:11:46.0285 3248 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys 09:11:46.0317 3248 NdisWan - ok 09:11:46.0348 3248 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys 09:11:46.0379 3248 NDProxy - ok 09:11:46.0395 3248 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys 09:11:46.0441 3248 NetBIOS - ok 09:11:46.0473 3248 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys 09:11:46.0519 3248 NetBT - ok 09:11:46.0551 3248 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe 09:11:46.0551 3248 Netlogon - ok 09:11:46.0582 3248 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll 09:11:46.0629 3248 Netman - ok 09:11:46.0660 3248 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll 09:11:46.0707 3248 netprofm - ok 09:11:46.0769 3248 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 09:11:46.0769 3248 NetTcpPortSharing - ok 09:11:46.0800 3248 NetworkX (9446d03271baf3496bbd2957d2732fd2) C:\Windows\system32\ckldrv.sys 09:11:46.0816 3248 NetworkX - ok 09:11:46.0925 3248 Netzmanager Service (70b5b4e69a07895df30291cab6abda54) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe 09:11:46.0987 3248 Netzmanager Service ( UnsignedFile.Multi.Generic ) - warning 09:11:46.0987 3248 Netzmanager Service - detected UnsignedFile.Multi.Generic (1) 09:11:47.0034 3248 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys 09:11:47.0050 3248 nfrd960 - ok 09:11:47.0081 3248 NisDrv (7b01c6172cfd0b10116175e09200d4b4) C:\Windows\system32\DRIVERS\NisDrvWFP.sys 09:11:47.0081 3248 NisDrv - ok 09:11:47.0112 3248 NisSrv (a5cb074f34bbd89948e34a630d459c0c) C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe 09:11:47.0128 3248 NisSrv - ok 09:11:47.0143 3248 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll 09:11:47.0175 3248 NlaSvc - ok 09:11:47.0206 3248 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys 09:11:47.0237 3248 Npfs - ok 09:11:47.0268 3248 NSHE (f8e396f5e703d7a8f37d90f59c776268) C:\Windows\system32\Drivers\NSHE.SYS 09:11:47.0284 3248 NSHE ( UnsignedFile.Multi.Generic ) - warning 09:11:47.0284 3248 NSHE - detected UnsignedFile.Multi.Generic (1) 09:11:47.0315 3248 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll 09:11:47.0346 3248 nsi - ok 09:11:47.0362 3248 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys 09:11:47.0393 3248 nsiproxy - ok 09:11:47.0455 3248 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys 09:11:47.0487 3248 Ntfs - ok 09:11:47.0518 3248 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys 09:11:47.0549 3248 Null - ok 09:11:47.0580 3248 NVENETFD (b5e37e31c053bc9950455a257526514b) C:\Windows\system32\DRIVERS\nvm62x32.sys 09:11:47.0596 3248 NVENETFD - ok 09:11:47.0814 3248 nvlddmkm (377140a534d013bd661c69f1741de43c) C:\Windows\system32\DRIVERS\nvlddmkm.sys 09:11:47.0955 3248 nvlddmkm - ok 09:11:47.0970 3248 NVNET (1de923088878b495cd4219e47ba34eb8) C:\Windows\system32\DRIVERS\nvmf6232.sys 09:11:47.0986 3248 NVNET - ok 09:11:48.0017 3248 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys 09:11:48.0033 3248 nvraid - ok 09:11:48.0064 3248 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys 09:11:48.0064 3248 nvstor - ok 09:11:48.0095 3248 nvstor32 (3ff57a9a657c9690ecbc8b1e3b6e3979) C:\Windows\system32\DRIVERS\nvstor32.sys 09:11:48.0111 3248 nvstor32 - ok 09:11:48.0126 3248 nvsvc (4ed813efd77a9b7e57e341cdc1c5cbc4) C:\Windows\system32\nvvsvc.exe 09:11:48.0126 3248 nvsvc - ok 09:11:48.0173 3248 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys 09:11:48.0173 3248 nv_agp - ok 09:11:48.0204 3248 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys 09:11:48.0220 3248 ohci1394 - ok 09:11:48.0282 3248 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 09:11:48.0282 3248 ose - ok 09:11:48.0407 3248 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 09:11:48.0547 3248 osppsvc - ok 09:11:48.0579 3248 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll 09:11:48.0625 3248 p2pimsvc - ok 09:11:48.0657 3248 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll 09:11:48.0672 3248 p2psvc - ok 09:11:48.0703 3248 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys 09:11:48.0719 3248 Parport - ok 09:11:48.0750 3248 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys 09:11:48.0750 3248 partmgr - ok 09:11:48.0781 3248 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys 09:11:48.0797 3248 Parvdm - ok 09:11:48.0828 3248 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll 09:11:48.0844 3248 PcaSvc - ok 09:11:48.0875 3248 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys 09:11:48.0891 3248 pci - ok 09:11:48.0891 3248 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys 09:11:48.0906 3248 pciide - ok 09:11:48.0922 3248 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys 09:11:48.0937 3248 pcmcia - ok 09:11:48.0953 3248 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys 09:11:48.0969 3248 pcw - ok 09:11:48.0984 3248 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys 09:11:49.0031 3248 PEAUTH - ok 09:11:49.0078 3248 PeerDistSvc (af4d64d2a57b9772cf3801950b8058a6) C:\Windows\system32\peerdistsvc.dll 09:11:49.0125 3248 PeerDistSvc - ok 09:11:49.0171 3248 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll 09:11:49.0249 3248 pla - ok 09:11:49.0281 3248 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll 09:11:49.0312 3248 PlugPlay - ok 09:11:49.0343 3248 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll 09:11:49.0374 3248 PNRPAutoReg - ok 09:11:49.0390 3248 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll 09:11:49.0405 3248 PNRPsvc - ok 09:11:49.0437 3248 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll 09:11:49.0468 3248 PolicyAgent - ok 09:11:49.0515 3248 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll 09:11:49.0530 3248 Power - ok 09:11:49.0577 3248 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys 09:11:49.0593 3248 PptpMiniport - ok 09:11:49.0624 3248 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys 09:11:49.0639 3248 Processor - ok 09:11:49.0671 3248 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll 09:11:49.0702 3248 ProfSvc - ok 09:11:49.0733 3248 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe 09:11:49.0749 3248 ProtectedStorage - ok 09:11:49.0780 3248 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys 09:11:49.0811 3248 Psched - ok 09:11:49.0842 3248 PTBSync - ok 09:11:49.0889 3248 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys 09:11:49.0936 3248 ql2300 - ok 09:11:49.0967 3248 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys 09:11:49.0967 3248 ql40xx - ok 09:11:49.0998 3248 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll 09:11:50.0014 3248 QWAVE - ok 09:11:50.0045 3248 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys 09:11:50.0061 3248 QWAVEdrv - ok 09:11:50.0076 3248 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys 09:11:50.0107 3248 RasAcd - ok 09:11:50.0123 3248 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys 09:11:50.0154 3248 RasAgileVpn - ok 09:11:50.0170 3248 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll 09:11:50.0201 3248 RasAuto - ok 09:11:50.0201 3248 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys 09:11:50.0232 3248 Rasl2tp - ok 09:11:50.0279 3248 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll 09:11:50.0310 3248 RasMan - ok 09:11:50.0326 3248 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys 09:11:50.0341 3248 RasPppoe - ok 09:11:50.0341 3248 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys 09:11:50.0373 3248 RasSstp - ok 09:11:50.0404 3248 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys 09:11:50.0451 3248 rdbss - ok 09:11:50.0451 3248 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys 09:11:50.0482 3248 rdpbus - ok 09:11:50.0513 3248 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys 09:11:50.0544 3248 RDPCDD - ok 09:11:50.0560 3248 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys 09:11:50.0591 3248 RDPDR - ok 09:11:50.0607 3248 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys 09:11:50.0622 3248 RDPENCDD - ok 09:11:50.0638 3248 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys 09:11:50.0653 3248 RDPREFMP - ok 09:11:50.0685 3248 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys 09:11:50.0716 3248 RDPWD - ok 09:11:50.0747 3248 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys 09:11:50.0763 3248 rdyboost - ok 09:11:50.0809 3248 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll 09:11:50.0841 3248 RemoteAccess - ok 09:11:50.0872 3248 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll 09:11:50.0887 3248 RemoteRegistry - ok 09:11:50.0919 3248 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll 09:11:50.0934 3248 RpcEptMapper - ok 09:11:50.0950 3248 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe 09:11:50.0965 3248 RpcLocator - ok 09:11:50.0981 3248 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll 09:11:51.0012 3248 RpcSs - ok 09:11:51.0012 3248 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys 09:11:51.0043 3248 rspndr - ok 09:11:51.0075 3248 RTLWUSB (26b8b7b8afd1bc7a447144fa3a2a21a5) C:\Windows\system32\DRIVERS\RTL8187.sys 09:11:51.0090 3248 RTLWUSB ( UnsignedFile.Multi.Generic ) - warning 09:11:51.0090 3248 RTLWUSB - detected UnsignedFile.Multi.Generic (1) 09:11:51.0121 3248 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys 09:11:51.0168 3248 s3cap - ok 09:11:51.0184 3248 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe 09:11:51.0199 3248 SamSs - ok 09:11:51.0231 3248 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys 09:11:51.0246 3248 sbp2port - ok 09:11:51.0277 3248 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll 09:11:51.0293 3248 SCardSvr - ok 09:11:51.0324 3248 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys 09:11:51.0355 3248 scfilter - ok 09:11:51.0402 3248 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll 09:11:51.0449 3248 Schedule - ok 09:11:51.0480 3248 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll 09:11:51.0496 3248 SCPolicySvc - ok 09:11:51.0543 3248 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll 09:11:51.0558 3248 SDRSVC - ok 09:11:51.0589 3248 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 09:11:51.0636 3248 secdrv - ok 09:11:51.0652 3248 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll 09:11:51.0699 3248 seclogon - ok 09:11:51.0714 3248 SelectDoc DB - ok 09:11:51.0730 3248 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll 09:11:51.0777 3248 SENS - ok 09:11:51.0792 3248 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll 09:11:51.0808 3248 SensrSvc - ok 09:11:51.0823 3248 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys 09:11:51.0839 3248 Serenum - ok 09:11:51.0870 3248 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys 09:11:51.0901 3248 Serial - ok 09:11:51.0917 3248 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys 09:11:51.0948 3248 sermouse - ok 09:11:51.0995 3248 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll 09:11:52.0026 3248 SessionEnv - ok 09:11:52.0057 3248 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys 09:11:52.0073 3248 sffdisk - ok 09:11:52.0104 3248 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys 09:11:52.0120 3248 sffp_mmc - ok 09:11:52.0135 3248 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys 09:11:52.0151 3248 sffp_sd - ok 09:11:52.0167 3248 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys 09:11:52.0182 3248 sfloppy - ok 09:11:52.0245 3248 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll 09:11:52.0276 3248 SharedAccess - ok 09:11:52.0307 3248 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll 09:11:52.0338 3248 ShellHWDetection - ok 09:11:52.0385 3248 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys 09:11:52.0385 3248 sisagp - ok 09:11:52.0416 3248 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys 09:11:52.0416 3248 SiSRaid2 - ok 09:11:52.0432 3248 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys 09:11:52.0447 3248 SiSRaid4 - ok 09:11:52.0525 3248 SkypeUpdate (6128e98eaaed364ed1a32708d2fd22cb) C:\Program Files\Skype\Updater\Updater.exe 09:11:52.0541 3248 SkypeUpdate - ok 09:11:52.0557 3248 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys 09:11:52.0588 3248 Smb - ok 09:11:52.0619 3248 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe 09:11:52.0635 3248 SNMPTRAP - ok 09:11:52.0650 3248 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys 09:11:52.0650 3248 spldr - ok 09:11:52.0681 3248 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe 09:11:52.0697 3248 Spooler - ok 09:11:52.0775 3248 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe 09:11:52.0869 3248 sppsvc - ok 09:11:52.0900 3248 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll 09:11:52.0931 3248 sppuinotify - ok 09:11:52.0978 3248 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\System32\Drivers\sptd.sys 09:11:53.0009 3248 sptd - ok 09:11:53.0040 3248 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys 09:11:53.0071 3248 srv - ok 09:11:53.0087 3248 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys 09:11:53.0118 3248 srv2 - ok 09:11:53.0134 3248 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys 09:11:53.0149 3248 srvnet - ok 09:11:53.0181 3248 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll 09:11:53.0212 3248 SSDPSRV - ok 09:11:53.0227 3248 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll 09:11:53.0259 3248 SstpSvc - ok 09:11:53.0290 3248 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys 09:11:53.0290 3248 stexstor - ok 09:11:53.0321 3248 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll 09:11:53.0352 3248 StiSvc - ok 09:11:53.0399 3248 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys 09:11:53.0399 3248 storflt - ok 09:11:53.0415 3248 StorSvc (0bf669f0a910beda4a32258d363af2a5) C:\Windows\system32\storsvc.dll 09:11:53.0446 3248 StorSvc - ok 09:11:53.0461 3248 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys 09:11:53.0461 3248 storvsc - ok 09:11:53.0493 3248 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys 09:11:53.0493 3248 swenum - ok 09:11:53.0508 3248 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll 09:11:53.0539 3248 swprv - ok 09:11:53.0586 3248 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll 09:11:53.0617 3248 SysMain - ok 09:11:53.0633 3248 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll 09:11:53.0664 3248 TabletInputService - ok 09:11:53.0695 3248 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll 09:11:53.0727 3248 TapiSrv - ok 09:11:53.0742 3248 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll 09:11:53.0789 3248 TBS - ok 09:11:53.0851 3248 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys 09:11:53.0883 3248 Tcpip - ok 09:11:53.0914 3248 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys 09:11:53.0945 3248 TCPIP6 - ok 09:11:53.0976 3248 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys 09:11:54.0007 3248 tcpipreg - ok 09:11:54.0054 3248 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys 09:11:54.0070 3248 TDPIPE - ok 09:11:54.0085 3248 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys 09:11:54.0101 3248 TDTCP - ok 09:11:54.0117 3248 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys 09:11:54.0163 3248 tdx - ok 09:11:54.0241 3248 TelekomNM3 (5d528200679c3b4595b4237e02c077d5) C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys 09:11:54.0257 3248 TelekomNM3 - ok 09:11:54.0288 3248 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys 09:11:54.0288 3248 TermDD - ok 09:11:54.0319 3248 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll 09:11:54.0351 3248 TermService - ok 09:11:54.0382 3248 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll 09:11:54.0397 3248 Themes - ok 09:11:54.0429 3248 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll 09:11:54.0444 3248 THREADORDER - ok 09:11:54.0460 3248 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll 09:11:54.0507 3248 TrkWks - ok 09:11:54.0538 3248 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe 09:11:54.0569 3248 TrustedInstaller - ok 09:11:54.0600 3248 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys 09:11:54.0631 3248 tssecsrv - ok 09:11:54.0647 3248 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys 09:11:54.0678 3248 TsUsbFlt - ok 09:11:54.0709 3248 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys 09:11:54.0741 3248 tunnel - ok 09:11:54.0772 3248 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys 09:11:54.0772 3248 uagp35 - ok 09:11:54.0803 3248 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys 09:11:54.0834 3248 udfs - ok 09:11:54.0850 3248 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe 09:11:54.0881 3248 UI0Detect - ok 09:11:54.0897 3248 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys 09:11:54.0912 3248 uliagpkx - ok 09:11:54.0928 3248 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys 09:11:54.0943 3248 umbus - ok 09:11:54.0959 3248 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys 09:11:54.0975 3248 UmPass - ok 09:11:54.0990 3248 UmRdpService (409994a8eaceee4e328749c0353527a0) C:\Windows\System32\umrdp.dll 09:11:55.0021 3248 UmRdpService - ok 09:11:55.0037 3248 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll 09:11:55.0068 3248 upnphost - ok 09:11:55.0084 3248 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\Windows\system32\drivers\usbccgp.sys 09:11:55.0099 3248 usbccgp - ok 09:11:55.0146 3248 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys 09:11:55.0162 3248 usbcir - ok 09:11:55.0177 3248 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys 09:11:55.0193 3248 usbehci - ok 09:11:55.0209 3248 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys 09:11:55.0240 3248 usbhub - ok 09:11:55.0255 3248 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\Windows\system32\DRIVERS\usbohci.sys 09:11:55.0271 3248 usbohci - ok 09:11:55.0287 3248 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys 09:11:55.0302 3248 usbprint - ok 09:11:55.0318 3248 USBSTOR (f991ab9cc6b908db552166768176896a) C:\Windows\system32\DRIVERS\USBSTOR.SYS 09:11:55.0365 3248 USBSTOR - ok 09:11:55.0380 3248 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\drivers\usbuhci.sys 09:11:55.0380 3248 usbuhci - ok 09:11:55.0396 3248 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll 09:11:55.0443 3248 UxSms - ok 09:11:55.0474 3248 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe 09:11:55.0489 3248 VaultSvc - ok 09:11:55.0521 3248 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys 09:11:55.0536 3248 vdrvroot - ok 09:11:55.0567 3248 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe 09:11:55.0599 3248 vds - ok 09:11:55.0630 3248 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys 09:11:55.0645 3248 vga - ok 09:11:55.0661 3248 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys 09:11:55.0692 3248 VgaSave - ok 09:11:55.0723 3248 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys 09:11:55.0739 3248 vhdmp - ok 09:11:55.0755 3248 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys 09:11:55.0770 3248 viaagp - ok 09:11:55.0786 3248 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys 09:11:55.0801 3248 ViaC7 - ok 09:11:55.0817 3248 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys 09:11:55.0833 3248 viaide - ok 09:11:55.0848 3248 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys 09:11:55.0848 3248 vmbus - ok 09:11:55.0879 3248 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys 09:11:55.0879 3248 VMBusHID - ok 09:11:55.0911 3248 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys 09:11:55.0911 3248 volmgr - ok 09:11:55.0926 3248 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys 09:11:55.0942 3248 volmgrx - ok 09:11:55.0957 3248 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys 09:11:55.0973 3248 volsnap - ok 09:11:56.0020 3248 VSGate (e92536e95fbd518f56b5cf932a987349) c:\ElsaWin\bin\VSgate.exe 09:11:56.0035 3248 VSGate ( UnsignedFile.Multi.Generic ) - warning 09:11:56.0035 3248 VSGate - detected UnsignedFile.Multi.Generic (1) 09:11:56.0067 3248 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys 09:11:56.0067 3248 vsmraid - ok 09:11:56.0113 3248 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe 09:11:56.0176 3248 VSS - ok 09:11:56.0223 3248 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys 09:11:56.0238 3248 vwifibus - ok 09:11:56.0285 3248 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll 09:11:56.0332 3248 W32Time - ok 09:11:56.0347 3248 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys 09:11:56.0363 3248 WacomPen - ok 09:11:56.0394 3248 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys 09:11:56.0425 3248 WANARP - ok 09:11:56.0425 3248 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys 09:11:56.0441 3248 Wanarpv6 - ok 09:11:56.0488 3248 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe 09:11:56.0550 3248 wbengine - ok 09:11:56.0566 3248 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll 09:11:56.0581 3248 WbioSrvc - ok 09:11:56.0613 3248 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll 09:11:56.0644 3248 wcncsvc - ok 09:11:56.0675 3248 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll 09:11:56.0706 3248 WcsPlugInService - ok 09:11:56.0722 3248 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys 09:11:56.0737 3248 Wd - ok 09:11:56.0753 3248 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys 09:11:56.0769 3248 Wdf01000 - ok 09:11:56.0784 3248 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll 09:11:56.0815 3248 WdiServiceHost - ok 09:11:56.0831 3248 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll 09:11:56.0831 3248 WdiSystemHost - ok 09:11:56.0878 3248 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll 09:11:56.0893 3248 WebClient - ok 09:11:56.0909 3248 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll 09:11:56.0940 3248 Wecsvc - ok 09:11:56.0940 3248 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll 09:11:56.0987 3248 wercplsupport - ok 09:11:57.0003 3248 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll 09:11:57.0034 3248 WerSvc - ok 09:11:57.0049 3248 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys 09:11:57.0081 3248 WfpLwf - ok 09:11:57.0096 3248 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys 09:11:57.0112 3248 WIMMount - ok 09:11:57.0174 3248 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll 09:11:57.0237 3248 WinDefend - ok 09:11:57.0237 3248 WinHttpAutoProxySvc - ok 09:11:57.0315 3248 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll 09:11:57.0346 3248 Winmgmt - ok 09:11:57.0377 3248 WinRing0_1_2_0 (845af1ba23c8d5e64def61bcc441604c) C:\Windows\system32\Drivers\ptbring0.sys 09:11:57.0377 3248 WinRing0_1_2_0 - ok 09:11:57.0424 3248 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll 09:11:57.0486 3248 WinRM - ok 09:11:57.0564 3248 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll 09:11:57.0595 3248 Wlansvc - ok 09:11:57.0611 3248 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys 09:11:57.0627 3248 WmiAcpi - ok 09:11:57.0658 3248 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe 09:11:57.0673 3248 wmiApSrv - ok 09:11:57.0736 3248 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe 09:11:57.0814 3248 WMPNetworkSvc - ok 09:11:57.0829 3248 WorkshopDBService - ok 09:11:57.0845 3248 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll 09:11:57.0892 3248 WPCSvc - ok 09:11:57.0907 3248 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll 09:11:57.0954 3248 WPDBusEnum - ok 09:11:57.0985 3248 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys 09:11:58.0017 3248 ws2ifsl - ok 09:11:58.0048 3248 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll 09:11:58.0063 3248 wscsvc - ok 09:11:58.0063 3248 WSearch - ok 09:11:58.0110 3248 wuauserv (3026418a50c5b4761befa632cedb7406) C:\Windows\system32\wuaueng.dll 09:11:58.0173 3248 wuauserv - ok 09:11:58.0204 3248 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys 09:11:58.0235 3248 WudfPf - ok 09:11:58.0251 3248 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys 09:11:58.0266 3248 WUDFRd - ok 09:11:58.0297 3248 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll 09:11:58.0329 3248 wudfsvc - ok 09:11:58.0344 3248 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll 09:11:58.0360 3248 WwanSvc - ok 09:11:58.0375 3248 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 09:11:58.0407 3248 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected 09:11:58.0407 3248 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0) 09:11:58.0438 3248 \Device\Harddisk0\DR0 ( TDSS File System ) - warning 09:11:58.0438 3248 \Device\Harddisk0\DR0 - detected TDSS File System (1) 09:11:58.0469 3248 Boot (0x1200) (c8d27e7e1df4dd3e66b926fe0b686909) \Device\Harddisk0\DR0\Partition0 09:11:58.0469 3248 \Device\Harddisk0\DR0\Partition0 - ok 09:11:58.0485 3248 Boot (0x1200) (c993edd476c8cf37496e1b9cad03c751) \Device\Harddisk0\DR0\Partition1 09:11:58.0485 3248 \Device\Harddisk0\DR0\Partition1 - ok 09:11:58.0500 3248 Boot (0x1200) (579eddc3611210dc2a44b6e33ef0124d) \Device\Harddisk0\DR0\Partition2 09:11:58.0500 3248 \Device\Harddisk0\DR0\Partition2 - ok 09:11:58.0500 3248 ============================================================ 09:11:58.0500 3248 Scan finished 09:11:58.0500 3248 ============================================================ 09:11:58.0516 3544 Detected object count: 10 09:11:58.0516 3544 Actual detected object count: 10 09:12:23.0725 3544 LcSvrAdm ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrAdm ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 LcSvrAuf ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrAuf ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 LcSvrDba ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrDba ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 LcSvrHis ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrHis ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 LcSvrPAS ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrPAS ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 LcSvrSaz ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 LcSvrSaz ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0725 3544 Netzmanager Service ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0725 3544 Netzmanager Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0741 3544 NSHE ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0741 3544 NSHE ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0741 3544 RTLWUSB ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0741 3544 RTLWUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0741 3544 VSGate ( UnsignedFile.Multi.Generic ) - skipped by user 09:12:23.0741 3544 VSGate ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:12:23.0741 3544 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - skipped by user 09:12:23.0741 3544 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Skip 09:12:23.0741 3544 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user 09:12:23.0741 3544 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip |
21.04.2012, 14:53 | #17 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Windows teilweise ohne Funktion, Rouge.FakeHDD, PUM.Hijack.StartMenuZitat:
Diese beiden Fieslinge (TDSS File System & Rootkit.Boot.SST.b) mit dem TDSS-Killer löschen lassen, starte Windows danach neu und mach ein neues Log mit diesem Tool. Poste es wieder mit CODE-Tags umschlossen.
__________________ |
Themen zu Windows teilweise ohne Funktion, Rouge.FakeHDD, PUM.Hijack.StartMenu |
administrator, adobe, antivir, avira, computer, dateisystem, defender, document, explorer, firefox, flash player, google, google earth, helper, heuristiks/extra, heuristiks/shuriken, locker, löschen, mozilla, pdf, plug-in, programm, programme, realtek, registry, revo uninstaller, security, software, svchost.exe, temp, updates, windows, wlan |