download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

Hallo,
den Scan habe ich durchgefürt, es entsteht die Liste "Treats detecdet" in der 40 Funde dokumentiert sind. Alle sind auf skip gesetzt.
Diese Liste kann ich aber nicht posten. Außerdem entsteht eine Report-Datei. Was soll ich posten und wie? Beide Dateien bzw. Listen lassen sich nicht kopieren und hier einfügen.

MfG Theodoro

die report datei, entweder anhängen oder einkopieren

Hallo,
ich habe nun die Reportdatei und kopiere sie hier rein
Reort-Datei:18:37:16.0921 0852 TDSS rootkit removing tool 2.7.44.0 Jul 2 2012 20:01:08
18:37:17.0656 0852 ============================================================
18:37:17.0656 0852 Current date / time: 2012/07/05 18:37:17.0656
18:37:17.0656 0852 SystemInfo:
18:37:17.0656 0852
18:37:17.0656 0852 OS Version: 5.1.2600 ServicePack: 3.0
18:37:17.0656 0852 Product type: Workstation
18:37:17.0656 0852 ComputerName: COMPUTER
18:37:17.0656 0852 UserName: Besitzer
18:37:17.0656 0852 Windows directory: C:\windows
18:37:17.0656 0852 System windows directory: C:\windows
18:37:17.0671 0852 Processor architecture: Intel x86
18:37:17.0671 0852 Number of processors: 2
18:37:17.0671 0852 Page size: 0x1000
18:37:17.0671 0852 Boot type: Normal boot
18:37:17.0671 0852 ============================================================
18:37:19.0609 0852 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
18:37:19.0609 0852 Drive \Device\Harddisk1\DR1 - Size: 0x951CC0000 (37.28 Gb), SectorSize: 0x200, Cylinders: 0x1302, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
18:37:19.0609 0852 ============================================================
18:37:19.0609 0852 \Device\Harddisk0\DR0:
18:37:19.0609 0852 MBR partitions:
18:37:19.0609 0852 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xDF8F8C1
18:37:19.0609 0852 \Device\Harddisk1\DR1:
18:37:19.0609 0852 MBR partitions:
18:37:19.0609 0852 \Device\Harddisk1\DR1\Partition0: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x4A8D043
18:37:19.0609 0852 ============================================================
18:37:19.0640 0852 C: <-> \Device\Harddisk0\DR0\Partition0
18:37:19.0640 0852 F: <-> \Device\Harddisk1\DR1\Partition0
18:37:19.0640 0852 ============================================================
18:37:19.0640 0852 Initialize success
18:37:19.0640 0852 ============================================================
18:38:01.0796 4324 ============================================================
18:38:01.0796 4324 Scan started
18:38:01.0796 4324 Mode: Manual; SigCheck; TDLFS;
18:38:01.0796 4324 ============================================================
18:38:02.0281 4324 Abiosdsk - ok
18:38:02.0281 4324 abp480n5 - ok
18:38:02.0343 4324 ACPI (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\windows\system32\DRIVERS\ACPI.sys
18:38:05.0390 4324 ACPI - ok
18:38:05.0421 4324 ACPIEC (9e1ca3160dafb159ca14f83b1e317f75) C:\windows\system32\drivers\ACPIEC.sys
18:38:05.0656 4324 ACPIEC - ok
18:38:05.0734 4324 AdobeFlashPlayerUpdateSvc (990dc6edc9f933194d7cd4e65146bc94) C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:38:05.0812 4324 AdobeFlashPlayerUpdateSvc - ok
18:38:05.0812 4324 adpu160m - ok
18:38:05.0843 4324 aec (8bed39e3c35d6a489438b8141717a557) C:\windows\system32\drivers\aec.sys
18:38:06.0062 4324 aec - ok
18:38:06.0093 4324 Afc (a7b8a3a79d35215d798a300df49ed23f) C:\windows\system32\drivers\Afc.sys
18:38:06.0140 4324 Afc ( UnsignedFile.Multi.Generic ) - warning
18:38:06.0140 4324 Afc - detected UnsignedFile.Multi.Generic (1)
18:38:06.0171 4324 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\windows\System32\drivers\afd.sys
18:38:06.0250 4324 AFD - ok
18:38:06.0296 4324 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\windows\system32\DRIVERS\agp440.sys
18:38:06.0515 4324 agp440 - ok
18:38:06.0531 4324 Aha154x - ok
18:38:06.0546 4324 aic78u2 - ok
18:38:06.0546 4324 aic78xx - ok
18:38:06.0671 4324 ALCXSENS (cc06826e154e78d5ebf82898802a7fec) C:\windows\system32\drivers\ALCXSENS.SYS
18:38:06.0937 4324 ALCXSENS - ok
18:38:07.0000 4324 ALCXWDM (df0736098c648fa95c0720e816cfd63d) C:\windows\system32\drivers\ALCXWDM.SYS
18:38:07.0140 4324 ALCXWDM - ok
18:38:07.0171 4324 Alerter (738d80cc01d7bc7584be917b7f544394) C:\windows\system32\alrsvc.dll
18:38:07.0406 4324 Alerter - ok
18:38:07.0421 4324 ALG (190cd73d4984f94d823f9444980513e5) C:\windows\System32\alg.exe
18:38:07.0609 4324 ALG - ok
18:38:07.0609 4324 AliIde - ok
18:38:07.0625 4324 amsint - ok
18:38:07.0734 4324 AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Programme\Avira\AntiVir Desktop\sched.exe
18:38:07.0796 4324 AntiVirSchedulerService - ok
18:38:07.0843 4324 AntiVirService (a489be6bb0aa1ff406b488b60542314b) C:\Programme\Avira\AntiVir Desktop\avguard.exe
18:38:07.0875 4324 AntiVirService - ok
18:38:07.0953 4324 AOL ACS (85180cf88c5ebad73b452a43a004ca51) C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe
18:38:08.0000 4324 AOL ACS - ok
18:38:08.0046 4324 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:38:08.0062 4324 Apple Mobile Device - ok
18:38:08.0078 4324 AppMgmt - ok
18:38:08.0078 4324 asc - ok
18:38:08.0093 4324 asc3350p - ok
18:38:08.0109 4324 asc3550 - ok
18:38:08.0187 4324 ASKUpgrade (1f9d6ef4c36cc984689cd85245e31dcf) C:\Programme\AskBarDis\bar\bin\ASKUpgrade.exe
18:38:08.0281 4324 ASKUpgrade - ok
18:38:08.0375 4324 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
18:38:08.0593 4324 aspnet_state - ok
18:38:08.0625 4324 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\windows\system32\DRIVERS\asyncmac.sys
18:38:08.0812 4324 AsyncMac - ok
18:38:08.0843 4324 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\windows\system32\DRIVERS\atapi.sys
18:38:09.0031 4324 atapi - ok
18:38:09.0046 4324 Atdisk - ok
18:38:09.0093 4324 Ati HotKey Poller (bba22521d24625c7a7b8d57fb20a812e) C:\windows\system32\Ati2evxx.exe
18:38:09.0250 4324 Ati HotKey Poller - ok
18:38:09.0265 4324 ATI Smart (8b0acb9ad9d903e6e6b36c7667ca3664) C:\WINDOWS\system32\ati2sgag.exe
18:38:09.0296 4324 ATI Smart ( UnsignedFile.Multi.Generic ) - warning
18:38:09.0312 4324 ATI Smart - detected UnsignedFile.Multi.Generic (1)
18:38:09.0406 4324 ati2mtag (07ac9a98ea70b5a6655a5797174bd282) C:\windows\system32\DRIVERS\ati2mtag.sys
18:38:09.0578 4324 ati2mtag - ok
18:38:09.0703 4324 Atmarpc (9916c1225104ba14794209cfa8012159) C:\windows\system32\DRIVERS\atmarpc.sys
18:38:09.0906 4324 Atmarpc - ok
18:38:09.0937 4324 AudioSrv (58ed0d5452df7be732193e7999c6b9a4) C:\windows\System32\audiosrv.dll
18:38:10.0140 4324 AudioSrv - ok
18:38:10.0171 4324 audstub (d9f724aa26c010a217c97606b160ed68) C:\windows\system32\DRIVERS\audstub.sys
18:38:10.0375 4324 audstub - ok
18:38:10.0500 4324 Automatic LiveUpdate Scheduler (7c813eb232c7aefa627a12a104dda221) C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe
18:38:10.0531 4324 Automatic LiveUpdate Scheduler - ok
18:38:10.0578 4324 avgntflt (d5541f0afb767e85fc412fc609d96a74) C:\windows\system32\DRIVERS\avgntflt.sys
18:38:10.0796 4324 avgntflt - ok
18:38:10.0843 4324 avipbb (7d967a682d4694df7fa57d63a2db01fe) C:\windows\system32\DRIVERS\avipbb.sys
18:38:10.0890 4324 avipbb - ok
18:38:10.0906 4324 avkmgr (271cfd1a989209b1964e24d969552bf7) C:\windows\system32\DRIVERS\avkmgr.sys
18:38:10.0937 4324 avkmgr - ok
18:38:10.0984 4324 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\windows\system32\drivers\Beep.sys
18:38:11.0296 4324 Beep - ok
18:38:11.0343 4324 bgsvcgen (acc9c8c560c567fad6f79c977ab2ea09) C:\WINDOWS\system32\bgsvcgen.exe
18:38:11.0390 4324 bgsvcgen - ok
18:38:11.0437 4324 BITS (d6f603772a789bb3228f310d650b8bd1) C:\windows\system32\qmgr.dll
18:38:11.0734 4324 BITS - ok
18:38:11.0765 4324 bizVSerial (66f655b08eed3230e059d197c8a1969b) C:\windows\system32\drivers\bizVSerialNT.sys
18:38:11.0828 4324 bizVSerial ( UnsignedFile.Multi.Generic ) - warning
18:38:11.0828 4324 bizVSerial - detected UnsignedFile.Multi.Generic (1)
18:38:12.0421 4324 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
18:38:12.0484 4324 Bonjour Service - ok
18:38:12.0531 4324 Browser (b42057f06bbb98b31876c0b3f2b54e33) C:\windows\System32\browser.dll
18:38:12.0859 4324 Browser - ok
18:38:12.0906 4324 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\windows\system32\DRIVERS\BthEnum.sys
18:38:13.0203 4324 BthEnum - ok
18:38:13.0234 4324 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\windows\system32\DRIVERS\bthpan.sys
18:38:13.0484 4324 BthPan - ok
18:38:13.0531 4324 BTHPORT (592e1cedbe314d0ef184dc6f46141e76) C:\windows\system32\Drivers\BTHport.sys
18:38:13.0625 4324 BTHPORT - ok
18:38:13.0656 4324 BthServ (26c601ef7525e31379744abfc6f35a1b) C:\windows\System32\bthserv.dll
18:38:13.0921 4324 BthServ - ok
18:38:13.0968 4324 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\windows\system32\Drivers\BTHUSB.sys
18:38:14.0187 4324 BTHUSB - ok
18:38:14.0203 4324 catchme - ok
18:38:14.0234 4324 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\windows\system32\drivers\cbidf2k.sys
18:38:14.0453 4324 cbidf2k - ok
18:38:14.0500 4324 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\windows\system32\DRIVERS\CCDECODE.sys
18:38:14.0656 4324 CCDECODE - ok
18:38:14.0671 4324 cd20xrnt - ok
18:38:14.0718 4324 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\windows\system32\drivers\Cdaudio.sys
18:38:14.0906 4324 Cdaudio - ok
18:38:14.0937 4324 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\windows\system32\drivers\Cdfs.sys
18:38:15.0140 4324 Cdfs - ok
18:38:15.0171 4324 cdrbsdrv (e0042bd5bef17a6a3ef1df576bde24d1) C:\windows\system32\drivers\cdrbsdrv.sys
18:38:15.0203 4324 cdrbsdrv ( UnsignedFile.Multi.Generic ) - warning
18:38:15.0203 4324 cdrbsdrv - detected UnsignedFile.Multi.Generic (1)
18:38:15.0234 4324 cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\windows\system32\DRIVERS\cdrom.sys
18:38:15.0484 4324 cdrom - ok
18:38:15.0484 4324 Changer - ok
18:38:15.0531 4324 CiSvc (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\windows\system32\cisvc.exe
18:38:15.0703 4324 CiSvc - ok
18:38:15.0765 4324 cjpcsc (8fee4423d682394eb436c975d0a3a994) C:\windows\system32\cjpcsc.exe
18:38:15.0859 4324 cjpcsc - ok
18:38:15.0906 4324 cjusb (b0dfc4adb1ff150ac466f3dad323196a) C:\windows\system32\DRIVERS\cjusb.sys
18:38:15.0937 4324 cjusb - ok
18:38:16.0000 4324 ClipSrv (778a30ed3c134eb7e406afc407e9997d) C:\windows\system32\clipsrv.exe
18:38:16.0203 4324 ClipSrv - ok
18:38:16.0281 4324 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:38:16.0468 4324 clr_optimization_v2.0.50727_32 - ok
18:38:16.0484 4324 CmdIde - ok
18:38:16.0531 4324 cmpci (e5842ccf0953d3d46d5e26427b67e901) C:\windows\system32\drivers\cmaudio.sys
18:38:16.0656 4324 cmpci - ok
18:38:16.0734 4324 cmuda (53f4cc55f3c255439c5973e31f0adce7) C:\windows\system32\drivers\cmuda.sys
18:38:16.0984 4324 cmuda - ok
18:38:17.0093 4324 CoachUsb (38d7513e99497eb26d3424ab1eea61cd) C:\windows\system32\DRIVERS\CoachUsb.sys
18:38:17.0187 4324 CoachUsb - ok
18:38:17.0234 4324 CoachVc (4c38e9d104e3e79073e6f27647994d3c) C:\windows\system32\DRIVERS\CoachVc.sys
18:38:17.0281 4324 CoachVc - ok
18:38:17.0328 4324 CommAgnt (a45afd7d1c5afc26cc92ab0cefc92a04) C:\windows\system32\DRIVERS\commagnt.sys
18:38:17.0359 4324 CommAgnt ( UnsignedFile.Multi.Generic ) - warning
18:38:17.0359 4324 CommAgnt - detected UnsignedFile.Multi.Generic (1)
18:38:17.0375 4324 COMSysApp - ok
18:38:17.0390 4324 Cpqarray - ok
18:38:17.0437 4324 CryptSvc (611f824e5c703a5a899f84c5f1699e4d) C:\windows\System32\cryptsvc.dll
18:38:17.0640 4324 CryptSvc - ok
18:38:17.0671 4324 CrystalSysInfo - ok
18:38:17.0718 4324 cwcspud (21c937acd961a0be4218dcf2ce364176) C:\windows\system32\drivers\cwcspud.sys
18:38:17.0765 4324 cwcspud ( UnsignedFile.Multi.Generic ) - warning
18:38:17.0765 4324 cwcspud - detected UnsignedFile.Multi.Generic (1)
18:38:17.0812 4324 cwcwdm (774d6cc23b0e8c04f2be717b6e9a96eb) C:\windows\system32\drivers\cwcwdm.sys
18:38:17.0906 4324 cwcwdm ( UnsignedFile.Multi.Generic ) - warning
18:38:17.0906 4324 cwcwdm - detected UnsignedFile.Multi.Generic (1)
18:38:17.0906 4324 dac2w2k - ok
18:38:17.0921 4324 dac960nt - ok
18:38:17.0968 4324 DcomLaunch (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\windows\system32\rpcss.dll
18:38:18.0062 4324 DcomLaunch - ok
18:38:18.0109 4324 DFSVC (31d00aedba4a1dc84919c7bada974a88) C:\Programme\T-Online\Dialerschutz-Software\DFInject.exe
18:38:18.0156 4324 DFSVC - ok
18:38:18.0171 4324 DFSYS (01a24a444594994f5fe33b28181dca37) C:\Programme\T-Online\Dialerschutz-Software\DFSYS.SYS
18:38:18.0203 4324 DFSYS - ok
18:38:18.0265 4324 Dhcp (c29a1c9b75ba38fa37f8c44405dec360) C:\windows\System32\dhcpcsvc.dll
18:38:18.0484 4324 Dhcp - ok
18:38:18.0515 4324 Disk (044452051f3e02e7963599fc8f4f3e25) C:\windows\system32\DRIVERS\disk.sys
18:38:18.0750 4324 Disk - ok
18:38:18.0750 4324 dmadmin - ok
18:38:18.0812 4324 dmboot (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\windows\system32\drivers\dmboot.sys
18:38:19.0078 4324 dmboot - ok
18:38:19.0125 4324 dmio (53720ab12b48719d00e327da470a619a) C:\windows\system32\drivers\dmio.sys
18:38:19.0328 4324 dmio - ok
18:38:19.0375 4324 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\windows\system32\drivers\dmload.sys
18:38:19.0593 4324 dmload - ok
18:38:19.0625 4324 dmserver (25c83ffbba13b554eb6d59a9b2e2ee78) C:\windows\System32\dmserver.dll
18:38:19.0812 4324 dmserver - ok
18:38:19.0828 4324 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\windows\system32\drivers\DMusic.sys
18:38:20.0031 4324 DMusic - ok
18:38:20.0062 4324 Dnscache (407f3227ac618fd1ca54b335b083de07) C:\windows\System32\dnsrslvr.dll
18:38:20.0125 4324 Dnscache - ok
18:38:20.0156 4324 Dot3svc (676e36c4ff5bcea1900f44182b9723e6) C:\windows\System32\dot3svc.dll
18:38:20.0812 4324 Dot3svc - ok
18:38:20.0812 4324 dpti2o - ok
18:38:20.0843 4324 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\windows\system32\drivers\drmkaud.sys
18:38:21.0031 4324 drmkaud - ok
18:38:21.0046 4324 EapHost (4e4f2fddab0a0736d7671134dcce91fb) C:\windows\System32\eapsvc.dll
18:38:21.0218 4324 EapHost - ok
18:38:21.0265 4324 ERSvc (877c18558d70587aa7823a1a308ac96b) C:\windows\System32\ersvc.dll
18:38:21.0578 4324 ERSvc - ok
18:38:21.0609 4324 Eventlog (a3edbe9053889fb24ab22492472b39dc) C:\windows\system32\services.exe
18:38:21.0671 4324 Eventlog - ok
18:38:21.0718 4324 EventSystem (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\System32\es.dll
18:38:21.0796 4324 EventSystem - ok
18:38:21.0859 4324 Fastfat (38d332a6d56af32635675f132548343e) C:\windows\system32\drivers\Fastfat.sys
18:38:22.0078 4324 Fastfat - ok
18:38:22.0109 4324 FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\windows\System32\shsvcs.dll
18:38:22.0171 4324 FastUserSwitchingCompatibility - ok
18:38:22.0203 4324 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\windows\system32\DRIVERS\fdc.sys
18:38:22.0375 4324 Fdc - ok
18:38:22.0406 4324 Fips (b0678a548587c5f1967b0d70bacad6c1) C:\windows\system32\drivers\Fips.sys
18:38:22.0625 4324 Fips - ok
18:38:22.0656 4324 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\windows\system32\DRIVERS\flpydisk.sys
18:38:22.0859 4324 Flpydisk - ok
18:38:22.0875 4324 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\windows\system32\drivers\fltmgr.sys
18:38:23.0093 4324 FltMgr - ok
18:38:23.0234 4324 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:38:23.0265 4324 FontCache3.0.0.0 - ok
18:38:23.0281 4324 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\windows\system32\drivers\Fs_Rec.sys
18:38:23.0515 4324 Fs_Rec - ok
18:38:23.0531 4324 Ftdisk (8f1955ce42e1484714b542f341647778) C:\windows\system32\DRIVERS\ftdisk.sys
18:38:23.0765 4324 Ftdisk - ok
18:38:23.0781 4324 gameenum (065639773d8b03f33577f6cdaea21063) C:\windows\system32\DRIVERS\gameenum.sys
18:38:23.0984 4324 gameenum - ok
18:38:24.0015 4324 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys
18:38:24.0031 4324 GEARAspiWDM - ok
18:38:24.0078 4324 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\windows\system32\DRIVERS\msgpc.sys
18:38:24.0343 4324 Gpc - ok
18:38:24.0468 4324 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Programme\Google\Update\GoogleUpdate.exe
18:38:24.0546 4324 gupdate - ok
18:38:24.0562 4324 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Programme\Google\Update\GoogleUpdate.exe
18:38:24.0593 4324 gupdatem - ok
18:38:24.0656 4324 helpsvc (cb66bf85bf599befd6c6a57c2e20357f) C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:38:24.0953 4324 helpsvc - ok
18:38:25.0000 4324 hidgame (923ee4eef2582909a056904ca8026015) C:\windows\system32\DRIVERS\hidgame.sys
18:38:25.0265 4324 hidgame - ok
18:38:25.0312 4324 HidServ (b35da85e60c0103f2e4104532da2f12b) C:\windows\System32\hidserv.dll
18:38:25.0578 4324 HidServ - ok
18:38:25.0609 4324 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\windows\system32\DRIVERS\hidusb.sys
18:38:25.0875 4324 HidUsb - ok
18:38:25.0906 4324 hkmsvc (ed29f14101523a6e0e808107405d452c) C:\windows\System32\kmsvc.dll
18:38:26.0156 4324 hkmsvc - ok
18:38:26.0171 4324 hpn - ok
18:38:26.0250 4324 hpqcxs08 (f50f7984fdd151edd8a70a8dbd9e2a44) C:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll
18:38:26.0296 4324 hpqcxs08 ( UnsignedFile.Multi.Generic ) - warning
18:38:26.0296 4324 hpqcxs08 - detected UnsignedFile.Multi.Generic (1)
18:38:26.0312 4324 hpqddsvc (df446ba625cc441617843e87798ce048) C:\Programme\HP\Digital Imaging\bin\hpqddsvc.dll
18:38:26.0328 4324 hpqddsvc ( UnsignedFile.Multi.Generic ) - warning
18:38:26.0328 4324 hpqddsvc - detected UnsignedFile.Multi.Generic (1)
18:38:26.0375 4324 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\windows\system32\DRIVERS\HPZid412.sys
18:38:26.0546 4324 HPZid412 - ok
18:38:26.0578 4324 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\windows\system32\DRIVERS\HPZipr12.sys
18:38:26.0625 4324 HPZipr12 - ok
18:38:26.0671 4324 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\windows\system32\DRIVERS\HPZius12.sys
18:38:26.0734 4324 HPZius12 - ok
18:38:26.0781 4324 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\windows\system32\Drivers\HTTP.sys
18:38:26.0875 4324 HTTP - ok
18:38:26.0921 4324 HTTPFilter (9e4adb854cebcfb81a4b36718feecd16) C:\windows\System32\w3ssl.dll
18:38:27.0156 4324 HTTPFilter - ok
18:38:27.0171 4324 i2omgmt - ok
18:38:27.0187 4324 i2omp - ok
18:38:27.0218 4324 i8042prt (e283b97cfbeb86c1d86baed5f7846a92) C:\windows\system32\DRIVERS\i8042prt.sys
18:38:27.0421 4324 i8042prt - ok
18:38:27.0484 4324 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:38:27.0531 4324 IDriverT ( UnsignedFile.Multi.Generic ) - warning
18:38:27.0531 4324 IDriverT - detected UnsignedFile.Multi.Generic (1)
18:38:27.0656 4324 idsvc (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:38:27.0859 4324 idsvc - ok
18:38:27.0953 4324 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\windows\system32\DRIVERS\imapi.sys
18:38:28.0156 4324 Imapi - ok
18:38:28.0203 4324 ImapiService (d4b413aa210c21e46aedd2ba5b68d38e) C:\windows\system32\imapi.exe
18:38:28.0390 4324 ImapiService - ok
18:38:28.0437 4324 InCDfs (d8a77fc386f9297ce4b692fc83b4ba02) C:\windows\system32\drivers\InCDfs.sys
18:38:28.0468 4324 InCDfs ( UnsignedFile.Multi.Generic ) - warning
18:38:28.0468 4324 InCDfs - detected UnsignedFile.Multi.Generic (1)
18:38:28.0484 4324 InCDPass (433bb499bcea1c88b55aa67d1b3ef1dc) C:\windows\system32\DRIVERS\InCDPass.sys
18:38:28.0515 4324 InCDPass ( UnsignedFile.Multi.Generic ) - warning
18:38:28.0515 4324 InCDPass - detected UnsignedFile.Multi.Generic (1)
18:38:28.0531 4324 InCDrec (12dbb035cd2ed0313fab864470f31c23) C:\windows\system32\drivers\InCDrec.sys
18:38:28.0562 4324 InCDrec ( UnsignedFile.Multi.Generic ) - warning
18:38:28.0562 4324 InCDrec - detected UnsignedFile.Multi.Generic (1)
18:38:28.0609 4324 incdrm (195a22bc8674090ccce5c3e2b7d96aca) C:\windows\system32\drivers\incdrm.sys
18:38:28.0625 4324 incdrm ( UnsignedFile.Multi.Generic ) - warning
18:38:28.0625 4324 incdrm - detected UnsignedFile.Multi.Generic (1)
18:38:28.0812 4324 InCDsrv (394bf2329ac168f253c74e1eead15fac) C:\Programme\Ahead\InCD\InCDsrv.exe
18:38:28.0875 4324 Suspicious file (NoAccess): C:\Programme\Ahead\InCD\InCDsrv.exe. md5: 394bf2329ac168f253c74e1eead15fac
18:38:28.0875 4324 InCDsrv ( LockedFile.Multi.Generic ) - warning
18:38:28.0875 4324 InCDsrv - detected LockedFile.Multi.Generic (1)
18:38:28.0890 4324 ini910u - ok
18:38:28.0906 4324 IntelIde - ok
18:38:28.0953 4324 intelppm (4c7d2750158ed6e7ad642d97bffae351) C:\windows\system32\DRIVERS\intelppm.sys
18:38:29.0156 4324 intelppm - ok
18:38:29.0171 4324 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\windows\system32\drivers\ip6fw.sys
18:38:29.0375 4324 Ip6Fw - ok
18:38:29.0421 4324 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\windows\system32\DRIVERS\ipfltdrv.sys
18:38:29.0640 4324 IpFilterDriver - ok
18:38:29.0687 4324 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\windows\system32\DRIVERS\ipinip.sys
18:38:29.0875 4324 IpInIp - ok
18:38:29.0890 4324 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\windows\system32\DRIVERS\ipnat.sys
18:38:30.0078 4324 IpNat - ok
18:38:30.0203 4324 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Programme\iPod\bin\iPodService.exe
18:38:30.0265 4324 iPod Service - ok
18:38:30.0296 4324 IPSec (23c74d75e36e7158768dd63d92789a91) C:\windows\system32\DRIVERS\ipsec.sys
18:38:30.0625 4324 IPSec - ok
18:38:30.0671 4324 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\windows\system32\DRIVERS\irenum.sys
18:38:30.0843 4324 IRENUM - ok
18:38:30.0859 4324 isapnp (6dfb88f64135c525433e87648bda30de) C:\windows\system32\DRIVERS\isapnp.sys
18:38:31.0031 4324 isapnp - ok
18:38:31.0109 4324 ISWKL (08a811bfd207dfdec588881c18bacbaa) C:\Programme\CheckPoint\ZAForceField\ISWKL.sys
18:38:31.0156 4324 ISWKL - ok
18:38:31.0203 4324 IswSvc (5b2ccef06f96dfb22893ab8f0b3f891d) C:\Programme\CheckPoint\ZAForceField\IswSvc.exe
18:38:31.0281 4324 IswSvc - ok
18:38:31.0390 4324 JavaQuickStarterService (9aa67569d5257462e230767510b0c815) C:\Programme\Java\jre6\bin\jqs.exe
18:38:31.0406 4324 JavaQuickStarterService - ok
18:38:31.0437 4324 Kbdclass (1704d8c4c8807b889e43c649b478a452) C:\windows\system32\DRIVERS\kbdclass.sys
18:38:31.0703 4324 Kbdclass - ok
18:38:31.0750 4324 kbdhid (b6d6c117d771c98130497265f26d1882) C:\windows\system32\DRIVERS\kbdhid.sys
18:38:31.0921 4324 kbdhid - ok
18:38:32.0046 4324 kbeepm - ok
18:38:32.0062 4324 kmixer (692bcf44383d056aed41b045a323d378) C:\windows\system32\drivers\kmixer.sys
18:38:32.0265 4324 kmixer - ok
18:38:32.0312 4324 KSecDD (b467646c54cc746128904e1654c750c1) C:\windows\system32\drivers\KSecDD.sys
18:38:32.0421 4324 KSecDD - ok
18:38:32.0453 4324 lanmanserver (2bbdcb79900990f0716dfcb714e72de7) C:\windows\System32\srvsvc.dll
18:38:32.0515 4324 lanmanserver - ok
18:38:32.0562 4324 lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\windows\System32\wkssvc.dll
18:38:32.0625 4324 lanmanworkstation - ok
18:38:32.0625 4324 lbrtfdc - ok
18:38:32.0859 4324 LiveUpdate (63ed50a6ed61829c2def5b733d258a05) C:\Programme\Symantec\LiveUpdate\LuComServer_3_4.EXE
18:38:33.0000 4324 LiveUpdate - ok
18:38:33.0109 4324 LmHosts (636714b7d43c8d0c80449123fd266920) C:\windows\System32\lmhsvc.dll
18:38:33.0296 4324 LmHosts - ok
18:38:33.0390 4324 MACNDIS5 (e949d673842858d458f7e6bcd46a2a5d) C:\PROGRA~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS
18:38:33.0421 4324 MACNDIS5 ( UnsignedFile.Multi.Generic ) - warning
18:38:33.0421 4324 MACNDIS5 - detected UnsignedFile.Multi.Generic (1)
18:38:33.0468 4324 Messenger (b7550a7107281d170ce85524b1488c98) C:\windows\System32\msgsvc.dll
18:38:33.0656 4324 Messenger - ok
18:38:33.0703 4324 MIINPazX (5e5024d9e2351db2563b30912b4c4146) C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS
18:38:33.0750 4324 MIINPazX ( UnsignedFile.Multi.Generic ) - warning
18:38:33.0750 4324 MIINPazX - detected UnsignedFile.Multi.Generic (1)
18:38:33.0828 4324 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\windows\system32\drivers\mnmdd.sys
18:38:34.0015 4324 mnmdd - ok
18:38:34.0062 4324 mnmsrvc (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\System32\mnmsrvc.exe
18:38:34.0250 4324 mnmsrvc - ok
18:38:34.0281 4324 Modem (6fb74ebd4ec57a6f1781de3852cc3362) C:\windows\system32\drivers\Modem.sys
18:38:34.0468 4324 Modem - ok
18:38:34.0515 4324 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\windows\system32\drivers\MODEMCSA.sys
18:38:34.0718 4324 MODEMCSA - ok
18:38:34.0750 4324 Mouclass (b24ce8005deab254c0251e15cb71d802) C:\windows\system32\DRIVERS\mouclass.sys
18:38:34.0921 4324 Mouclass - ok
18:38:34.0968 4324 mouhid (66a6f73c74e1791464160a7065ce711a) C:\windows\system32\DRIVERS\mouhid.sys
18:38:35.0156 4324 mouhid - ok
18:38:35.0187 4324 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\windows\system32\drivers\MountMgr.sys
18:38:35.0421 4324 MountMgr - ok
18:38:35.0421 4324 mraid35x - ok
18:38:35.0453 4324 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\windows\system32\DRIVERS\mrxdav.sys
18:38:35.0671 4324 MRxDAV - ok
18:38:35.0734 4324 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\windows\system32\DRIVERS\mrxsmb.sys
18:38:35.0859 4324 MRxSmb - ok
18:38:35.0906 4324 MSDTC (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\System32\msdtc.exe
18:38:36.0078 4324 MSDTC - ok
18:38:36.0125 4324 Msfs (c941ea2454ba8350021d774daf0f1027) C:\windows\system32\drivers\Msfs.sys
18:38:36.0437 4324 Msfs - ok
18:38:36.0437 4324 MSIServer - ok
18:38:36.0468 4324 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\windows\system32\drivers\MSKSSRV.sys
18:38:36.0765 4324 MSKSSRV - ok
18:38:36.0781 4324 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\windows\system32\drivers\MSPCLOCK.sys
18:38:37.0078 4324 MSPCLOCK - ok
18:38:37.0093 4324 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\windows\system32\drivers\MSPQM.sys
18:38:37.0296 4324 MSPQM - ok
18:38:37.0328 4324 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\windows\system32\DRIVERS\mssmbios.sys
18:38:37.0562 4324 mssmbios - ok
18:38:37.0593 4324 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\windows\system32\drivers\MSTEE.sys
18:38:37.0859 4324 MSTEE - ok
18:38:37.0953 4324 MTOnlPktAlyX (493138c4f4119e938427da02486f09cb) C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS
18:38:37.0984 4324 MTOnlPktAlyX ( UnsignedFile.Multi.Generic ) - warning
18:38:37.0984 4324 MTOnlPktAlyX - detected UnsignedFile.Multi.Generic (1)
18:38:38.0031 4324 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\windows\system32\drivers\Mup.sys
18:38:38.0093 4324 Mup - ok
18:38:38.0156 4324 MZCCntrl (5f9ba398f88fc8928ea6dbd5d144cfca) C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
18:38:38.0171 4324 MZCCntrl ( UnsignedFile.Multi.Generic ) - warning
18:38:38.0171 4324 MZCCntrl - detected UnsignedFile.Multi.Generic (1)
18:38:38.0218 4324 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\windows\system32\DRIVERS\NABTSFEC.sys
18:38:38.0421 4324 NABTSFEC - ok
18:38:38.0468 4324 napagent (46bb15ae2ac7d025d6d2567b876817bd) C:\windows\System32\qagentrt.dll
18:38:38.0671 4324 napagent - ok
18:38:38.0703 4324 NDIS (1df7f42665c94b825322fae71721130d) C:\windows\system32\drivers\NDIS.sys
18:38:38.0890 4324 NDIS - ok
18:38:38.0921 4324 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\windows\system32\DRIVERS\NdisIP.sys
18:38:39.0078 4324 NdisIP - ok
18:38:39.0125 4324 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\windows\system32\DRIVERS\ndistapi.sys
18:38:39.0171 4324 NdisTapi - ok
18:38:39.0203 4324 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\windows\system32\DRIVERS\ndisuio.sys
18:38:39.0375 4324 Ndisuio - ok
18:38:39.0406 4324 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\windows\system32\DRIVERS\ndiswan.sys
18:38:39.0593 4324 NdisWan - ok
18:38:39.0625 4324 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\windows\system32\drivers\NDProxy.sys
18:38:39.0671 4324 NDProxy - ok
18:38:39.0703 4324 Net Driver HPZ12 (51c6d8bfbd4ea5b62a1ba7f4469250d3) C:\WINDOWS\system32\HPZinw12.dll
18:38:39.0734 4324 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
18:38:39.0734 4324 Net Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
18:38:39.0796 4324 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\windows\system32\DRIVERS\netbios.sys
18:38:39.0984 4324 NetBIOS - ok
18:38:40.0015 4324 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\windows\system32\DRIVERS\netbt.sys
18:38:40.0218 4324 NetBT - ok
18:38:40.0265 4324 NetDDE (8ace4251bffd09ce75679fe940e996cc) C:\windows\system32\netdde.exe
18:38:40.0484 4324 NetDDE - ok
18:38:40.0500 4324 NetDDEdsdm (8ace4251bffd09ce75679fe940e996cc) C:\windows\system32\netdde.exe
18:38:40.0656 4324 NetDDEdsdm - ok
18:38:40.0671 4324 Netlogon (afb8261b56cba0d86aeb6df682af9785) C:\windows\system32\lsass.exe
18:38:40.0843 4324 Netlogon - ok
18:38:40.0890 4324 Netman (e6d88f1f6745bf00b57e7855a2ab696c) C:\windows\System32\netman.dll
18:38:41.0093 4324 Netman - ok
18:38:41.0187 4324 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:38:41.0234 4324 NetTcpPortSharing - ok
18:38:41.0328 4324 Netzmanager Service (450d0d2062c54dda23583a78c0eb63d9) C:\Programme\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
18:38:41.0343 4324 Netzmanager Service ( UnsignedFile.Multi.Generic ) - warning
18:38:41.0343 4324 Netzmanager Service - detected UnsignedFile.Multi.Generic (1)
18:38:41.0375 4324 nicadsl (9a85745b470606d4a3e16b8fd831535b) C:\windows\system32\DRIVERS\dslpci.sys
18:38:41.0421 4324 nicadsl ( UnsignedFile.Multi.Generic ) - warning
18:38:41.0421 4324 nicadsl - detected UnsignedFile.Multi.Generic (1)
18:38:41.0468 4324 Nla (f1b67b6b0751ae0e6e964b02821206a3) C:\windows\System32\mswsock.dll
18:38:42.0046 4324 Nla - ok
18:38:42.0093 4324 nm (1e421a6bcf2203cc61b821ada9de878b) C:\windows\system32\DRIVERS\NMnt.sys
18:38:42.0343 4324 nm - ok
18:38:42.0421 4324 NMSAccess (7aea4df1ca68fd45dd4bbe1f0243ce7f) C:\Programme\CDBurnerXP\NMSAccessU.exe
18:38:42.0453 4324 NMSAccess - ok
18:38:42.0468 4324 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\windows\system32\drivers\Npfs.sys
18:38:42.0640 4324 Npfs - ok
18:38:42.0687 4324 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\windows\system32\drivers\Ntfs.sys
18:38:42.0953 4324 Ntfs - ok
18:38:42.0984 4324 NtLmSsp (afb8261b56cba0d86aeb6df682af9785) C:\windows\System32\lsass.exe
18:38:43.0156 4324 NtLmSsp - ok
18:38:43.0218 4324 NtmsSvc (56af4064996fa5bac9c449b1514b4770) C:\windows\system32\ntmssvc.dll
18:38:43.0578 4324 NtmsSvc - ok
18:38:43.0609 4324 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\windows\system32\drivers\Null.sys
18:38:43.0812 4324 Null - ok
18:38:43.0828 4324 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\windows\system32\DRIVERS\nwlnkflt.sys
18:38:44.0015 4324 NwlnkFlt - ok
18:38:44.0046 4324 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\windows\system32\DRIVERS\nwlnkfwd.sys
18:38:44.0218 4324 NwlnkFwd - ok
18:38:44.0390 4324 ose (7a56cf3e3f12e8af599963b16f50fb6a) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
18:38:44.0468 4324 ose - ok
18:38:44.0531 4324 PAC7302 (aff9a1986555e4592de8092f9a5fa2d2) C:\windows\system32\DRIVERS\PAC7302.SYS
18:38:44.0640 4324 PAC7302 - ok
18:38:44.0687 4324 Parport (f84785660305b9b903fb3bca8ba29837) C:\windows\system32\DRIVERS\parport.sys
18:38:44.0875 4324 Parport - ok
18:38:44.0890 4324 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\windows\system32\drivers\PartMgr.sys
18:38:45.0062 4324 PartMgr - ok
18:38:45.0093 4324 ParVdm (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\windows\system32\drivers\ParVdm.sys
18:38:45.0265 4324 ParVdm - ok
18:38:45.0359 4324 PCANDIS5 (d0084a9ade989fe703e4f22171f4e4dc) C:\PROGRA~1\T-DSLS~1\PCANDIS5.SYS
18:38:45.0390 4324 PCANDIS5 ( UnsignedFile.Multi.Generic ) - warning
18:38:45.0390 4324 PCANDIS5 - detected UnsignedFile.Multi.Generic (1)
18:38:45.0406 4324 PCI (387e8dedc343aa2d1efbc30580273acd) C:\windows\system32\DRIVERS\pci.sys
18:38:45.0656 4324 PCI - ok
18:38:45.0656 4324 PCIDump - ok
18:38:45.0703 4324 PCIIde (59ba86d9a61cbcf4df8e598c331f5b82) C:\windows\system32\DRIVERS\pciide.sys
18:38:45.0875 4324 PCIIde - ok
18:38:45.0937 4324 Pcmcia (a2a966b77d61847d61a3051df87c8c97) C:\windows\system32\drivers\Pcmcia.sys
18:38:46.0156 4324 Pcmcia - ok
18:38:46.0156 4324 PDCOMP - ok
18:38:46.0171 4324 PDFRAME - ok
18:38:46.0171 4324 PDRELI - ok
18:38:46.0187 4324 PDRFRAME - ok
18:38:46.0203 4324 perc2 - ok
18:38:46.0203 4324 perc2hib - ok
18:38:46.0265 4324 PlugPlay (a3edbe9053889fb24ab22492472b39dc) C:\windows\system32\services.exe
18:38:46.0296 4324 PlugPlay - ok
18:38:46.0375 4324 Pml Driver HPZ12 (79834aa2fbf9fe81eebb229024f6f7fc) C:\WINDOWS\system32\HPZipm12.dll
18:38:46.0421 4324 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - warning
18:38:46.0421 4324 Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic (1)
18:38:46.0453 4324 PolicyAgent (afb8261b56cba0d86aeb6df682af9785) C:\windows\system32\lsass.exe
18:38:46.0609 4324 PolicyAgent - ok
18:38:46.0656 4324 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\windows\system32\DRIVERS\raspptp.sys
18:38:46.0843 4324 PptpMiniport - ok
18:38:46.0875 4324 Processor (2cb55427c58679f49ad600fccba76360) C:\windows\system32\DRIVERS\processr.sys
18:38:47.0046 4324 Processor - ok
18:38:47.0046 4324 ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\windows\system32\lsass.exe
18:38:47.0218 4324 ProtectedStorage - ok
18:38:47.0234 4324 PSched (09298ec810b07e5d582cb3a3f9255424) C:\windows\system32\DRIVERS\psched.sys
18:38:47.0421 4324 PSched - ok
18:38:47.0453 4324 PsShutdownSvc (1118e2eabd7fa428d75b636079f22771) C:\windows\System32\PSSDNSVC.EXE
18:38:47.0500 4324 PsShutdownSvc ( UnsignedFile.Multi.Generic ) - warning
18:38:47.0500 4324 PsShutdownSvc - detected UnsignedFile.Multi.Generic (1)
18:38:47.0546 4324 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\windows\system32\DRIVERS\ptilink.sys
18:38:47.0734 4324 Ptilink - ok
18:38:47.0750 4324 ql1080 - ok
18:38:47.0750 4324 Ql10wnt - ok
18:38:47.0765 4324 ql12160 - ok
18:38:47.0781 4324 ql1240 - ok
18:38:47.0796 4324 ql1280 - ok
18:38:47.0812 4324 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\windows\system32\DRIVERS\rasacd.sys
18:38:48.0000 4324 RasAcd - ok
18:38:48.0031 4324 RasAuto (f5ba6caccdb66c8f048e867563203246) C:\windows\System32\rasauto.dll
18:38:48.0359 4324 RasAuto - ok
18:38:48.0390 4324 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\windows\system32\DRIVERS\rasl2tp.sys
18:38:48.0718 4324 Rasl2tp - ok
18:38:48.0765 4324 RasMan (f9a7b66ea345726edb5862a46b1eccd5) C:\windows\System32\rasmans.dll
18:38:49.0031 4324 RasMan - ok
18:38:49.0078 4324 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\windows\system32\DRIVERS\raspppoe.sys
18:38:49.0296 4324 RasPppoe - ok
18:38:49.0328 4324 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\windows\system32\DRIVERS\raspti.sys
18:38:49.0593 4324 Raspti - ok
18:38:49.0781 4324 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\windows\system32\DRIVERS\rdbss.sys
18:38:50.0125 4324 Rdbss - ok
18:38:50.0140 4324 RDPCDD (4912d5b403614ce99c28420f75353332) C:\windows\system32\DRIVERS\RDPCDD.sys
18:38:50.0359 4324 RDPCDD - ok
18:38:50.0500 4324 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\windows\system32\drivers\RDPWD.sys
18:38:50.0921 4324 RDPWD - ok
18:38:51.0015 4324 RDSessMgr (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
18:38:51.0234 4324 RDSessMgr - ok
18:38:51.0250 4324 redbook (ed761d453856f795a7fe056e42c36365) C:\windows\system32\DRIVERS\redbook.sys
18:38:51.0453 4324 redbook - ok
18:38:51.0484 4324 RemoteAccess (0e97ec96d6942ceec2d188cc2eb69a01) C:\windows\System32\mprdim.dll
18:38:51.0687 4324 RemoteAccess - ok
18:38:51.0734 4324 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\windows\system32\DRIVERS\rfcomm.sys
18:38:51.0921 4324 RFCOMM - ok
18:38:51.0953 4324 RMSPPPOE (522f0981212fd42196fa182e934fdee7) C:\windows\system32\DRIVERS\RMSPPPOE.SYS
18:38:51.0968 4324 RMSPPPOE ( UnsignedFile.Multi.Generic ) - warning
18:38:51.0968 4324 RMSPPPOE - detected UnsignedFile.Multi.Generic (1)
18:38:52.0000 4324 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\windows\system32\Drivers\RootMdm.sys
18:38:52.0218 4324 ROOTMODEM - ok
18:38:52.0250 4324 RpcLocator (2a02e21867497df20b8fc95631395169) C:\windows\System32\locator.exe
18:38:52.0531 4324 RpcLocator - ok
18:38:52.0578 4324 RpcSs (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\windows\System32\rpcss.dll
18:38:52.0609 4324 RpcSs - ok
18:38:52.0656 4324 RSVP (4bdd71b4b521521499dfd14735c4f398) C:\windows\System32\rsvp.exe
18:38:52.0859 4324 RSVP - ok
18:38:52.0906 4324 rtl8139 (d507c1400284176573224903819ffda3) C:\windows\system32\DRIVERS\RTL8139.SYS
18:38:53.0062 4324 rtl8139 - ok
18:38:53.0093 4324 S6U12AScanner (a0b8cf9deb1184fbdd20784a58fa75d4) C:\windows\system32\drivers\usbscan.sys
18:38:53.0265 4324 S6U12AScanner - ok
18:38:53.0312 4324 SamSs (afb8261b56cba0d86aeb6df682af9785) C:\windows\system32\lsass.exe
18:38:53.0468 4324 SamSs - ok
18:38:53.0515 4324 SCardSvr (dcec079fad95d36c8dd5cb6d779dfe32) C:\windows\System32\SCardSvr.exe
18:38:53.0687 4324 SCardSvr - ok
18:38:53.0750 4324 Schedule (a050194a44d7fa8d7186ed2f4e8367ae) C:\windows\system32\schedsvc.dll
18:38:53.0937 4324 Schedule - ok
18:38:53.0968 4324 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\DRIVERS\secdrv.sys
18:38:54.0156 4324 Secdrv - ok
18:38:54.0187 4324 seclogon (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\windows\System32\seclogon.dll
18:38:54.0359 4324 seclogon - ok
18:38:54.0375 4324 SENS (2aac9b6ed9eddffb721d6452e34d67e3) C:\windows\system32\sens.dll
18:38:54.0562 4324 SENS - ok
18:38:54.0593 4324 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\windows\system32\DRIVERS\serenum.sys
18:38:54.0781 4324 serenum - ok
18:38:54.0812 4324 Serial (cf24eb4f0412c82bcd1f4f35a025e31d) C:\windows\system32\DRIVERS\serial.sys
18:38:54.0984 4324 Serial - ok
18:38:55.0015 4324 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\windows\system32\drivers\Sfloppy.sys
18:38:55.0187 4324 Sfloppy - ok
18:38:55.0234 4324 SharedAccess (cad058d5f8b889a87ca3eb3cf624dcef) C:\windows\System32\ipnathlp.dll
18:38:55.0484 4324 SharedAccess - ok
18:38:55.0515 4324 ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\windows\System32\shsvcs.dll
18:38:55.0546 4324 ShellHWDetection - ok
18:38:55.0562 4324 Simbad - ok
18:38:55.0593 4324 SipIMNDI (7f84321c3642d38da073beb4ca3fe88e) C:\windows\system32\DRIVERS\SipIMNDI.sys
18:38:55.0640 4324 SipIMNDI - ok
18:38:55.0750 4324 SkypeUpdate (579ba0a911ff5ea70cb604cd3b744b0a) C:\Programme\Skype\Updater\Updater.exe
18:38:55.0875 4324 SkypeUpdate - ok
18:38:55.0906 4324 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\windows\system32\DRIVERS\SLIP.sys
18:38:56.0062 4324 SLIP - ok
18:38:56.0078 4324 Sparrow - ok
18:38:56.0125 4324 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\windows\system32\drivers\splitter.sys
18:38:56.0312 4324 splitter - ok
18:38:56.0343 4324 Spooler (60784f891563fb1b767f70117fc2428f) C:\windows\system32\spoolsv.exe
18:38:56.0390 4324 Spooler - ok
18:38:56.0421 4324 sr (50fa898f8c032796d3b1b9951bb5a90f) C:\windows\system32\DRIVERS\sr.sys
18:38:56.0593 4324 sr - ok
18:38:56.0640 4324 srservice (fe77a85495065f3ad59c5c65b6c54182) C:\windows\system32\srsvc.dll
18:38:56.0843 4324 srservice - ok
18:38:56.0890 4324 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\windows\system32\DRIVERS\srv.sys
18:38:56.0984 4324 Srv - ok
18:38:57.0031 4324 SSDPSRV (4df5b05dfaec29e13e1ed6f6ee12c500) C:\windows\System32\ssdpsrv.dll
18:38:57.0218 4324 SSDPSRV - ok
18:38:57.0250 4324 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\windows\system32\DRIVERS\ssmdrv.sys
18:38:57.0265 4324 ssmdrv - ok
18:38:57.0312 4324 ssm_bus (df5c19f053eff7f8ba25d73aea899656) C:\windows\system32\DRIVERS\ssm_bus.sys
18:38:57.0406 4324 ssm_bus - ok
18:38:57.0437 4324 ssm_mdfl (5347169fa449eabc4d0728ae39fab926) C:\windows\system32\DRIVERS\ssm_mdfl.sys
18:38:57.0515 4324 ssm_mdfl - ok
18:38:57.0546 4324 ssm_mdm (7aae23dd105eed15c4f45fc269fa42a9) C:\windows\system32\DRIVERS\ssm_mdm.sys
18:38:57.0625 4324 ssm_mdm - ok
18:38:57.0656 4324 ss_bus (bd15182e9d2d3fabc1d1313badbd2415) C:\windows\system32\DRIVERS\ss_bus.sys
18:38:57.0734 4324 ss_bus - ok
18:38:57.0781 4324 ss_mdfl (67d1144f249a3c5e03ebd7a2304dee11) C:\windows\system32\DRIVERS\ss_mdfl.sys
18:38:57.0843 4324 ss_mdfl - ok
18:38:57.0875 4324 ss_mdm (954b7ce2d54c703d6a8471d6b05a5e13) C:\windows\system32\DRIVERS\ss_mdm.sys
18:38:57.0953 4324 ss_mdm - ok
18:38:57.0984 4324 StarOpen (e57b778208c783d8debab320c16a1b82) C:\windows\system32\drivers\StarOpen.sys
18:38:58.0000 4324 StarOpen ( UnsignedFile.Multi.Generic ) - warning
18:38:58.0000 4324 StarOpen - detected UnsignedFile.Multi.Generic (1)
18:38:58.0062 4324 stisvc (bc2c5985611c5356b24aeb370953ded9) C:\windows\system32\wiaservc.dll
18:38:58.0312 4324 stisvc - ok
18:38:58.0359 4324 streamip (77813007ba6265c4b6098187e6ed79d2) C:\windows\system32\DRIVERS\StreamIP.sys
18:38:58.0531 4324 streamip - ok
18:38:58.0546 4324 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\windows\system32\DRIVERS\swenum.sys
18:38:58.0718 4324 swenum - ok
18:38:58.0750 4324 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\windows\system32\drivers\swmidi.sys
18:38:58.0921 4324 swmidi - ok
18:38:58.0937 4324 SwPrv - ok
18:38:58.0953 4324 symc810 - ok
18:38:58.0953 4324 symc8xx - ok
18:38:58.0968 4324 SymIM - ok
18:38:58.0984 4324 SymIMMP - ok
18:38:59.0000 4324 sym_hi - ok
18:38:59.0000 4324 sym_u3 - ok
18:38:59.0015 4324 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\windows\system32\drivers\sysaudio.sys
18:38:59.0203 4324 sysaudio - ok
18:38:59.0250 4324 SysmonLog (2903fffa2523926d6219428040dce6b9) C:\windows\system32\smlogsvc.exe
18:38:59.0437 4324 SysmonLog - ok
18:38:59.0484 4324 TapiSrv (05903cac4b98908d55ea5774775b382e) C:\windows\System32\tapisrv.dll
18:38:59.0687 4324 TapiSrv - ok
18:38:59.0734 4324 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\windows\system32\DRIVERS\tcpip.sys
18:38:59.0812 4324 Tcpip - ok
18:38:59.0875 4324 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\windows\system32\drivers\TDPIPE.sys
18:39:00.0031 4324 TDPIPE - ok
18:39:00.0062 4324 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\windows\system32\drivers\TDTCP.sys
18:39:00.0359 4324 TDTCP - ok
18:39:00.0375 4324 TermDD (88155247177638048422893737429d9e) C:\windows\system32\DRIVERS\termdd.sys
18:39:00.0703 4324 TermDD - ok
18:39:00.0765 4324 TermService (b7de02c863d8f5a005a7bf375375a6a4) C:\windows\System32\termsrv.dll
18:39:01.0078 4324 TermService - ok
18:39:01.0125 4324 Themes (2db7d303c36ddd055215052f118e8e75) C:\windows\System32\shsvcs.dll
18:39:01.0156 4324 Themes - ok
18:39:01.0265 4324 TNPacket (52ab2f2b0d2fd7cc2fdb489c449feb8e) C:\Programme\T-DSL SpeedManager\TNPACKET.SYS
18:39:01.0312 4324 TNPacket ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0312 4324 TNPacket - detected UnsignedFile.Multi.Generic (1)
18:39:01.0359 4324 TomTomHOMEService (efef22b9577e5051057fde1ae381b50c) C:\Programme\TomTom HOME 4\TomTomHOMEService.exe
18:39:01.0406 4324 TomTomHOMEService - ok
18:39:01.0437 4324 toshidpt (62c57e7411b5f20980e70530ca69d5a7) C:\windows\system32\drivers\Toshidpt.sys
18:39:01.0468 4324 toshidpt ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0468 4324 toshidpt - detected UnsignedFile.Multi.Generic (1)
18:39:01.0468 4324 TosIde - ok
18:39:01.0500 4324 tosporte (150cfd8e7ed945f71600b41ff29f16fa) C:\windows\system32\DRIVERS\tosporte.sys
18:39:01.0531 4324 tosporte ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0531 4324 tosporte - detected UnsignedFile.Multi.Generic (1)
18:39:01.0546 4324 Tosrfbd (cbc4f88c50b6e7ceba8af5aaa48dcdf8) C:\windows\system32\Drivers\tosrfbd.sys
18:39:01.0609 4324 Tosrfbd ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0609 4324 Tosrfbd - detected UnsignedFile.Multi.Generic (1)
18:39:01.0640 4324 Tosrfbnp (fe200eece7521061cdad658c6ee4f341) C:\windows\system32\Drivers\tosrfbnp.sys
18:39:01.0671 4324 Tosrfbnp ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0671 4324 Tosrfbnp - detected UnsignedFile.Multi.Generic (1)
18:39:01.0687 4324 Tosrfcom (d185be751021bcf1e5d58566d408314a) C:\windows\system32\Drivers\tosrfcom.sys
18:39:01.0734 4324 Tosrfcom ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0734 4324 Tosrfcom - detected UnsignedFile.Multi.Generic (1)
18:39:01.0796 4324 Tosrfhid (341612b9758054e5965bcd6ae111b8f9) C:\windows\system32\DRIVERS\Tosrfhid.sys
18:39:01.0875 4324 Tosrfhid ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0875 4324 Tosrfhid - detected UnsignedFile.Multi.Generic (1)
18:39:01.0906 4324 tosrfnds (c52fd27b9adf3a1f22cb90e6bcf9b0cb) C:\windows\system32\DRIVERS\tosrfnds.sys
18:39:01.0953 4324 tosrfnds ( UnsignedFile.Multi.Generic ) - warning
18:39:01.0953 4324 tosrfnds - detected UnsignedFile.Multi.Generic (1)
18:39:02.0000 4324 TosRfSnd (350814a87f8ba3b0e28278feddf36f82) C:\windows\system32\drivers\TosRfSnd.sys
18:39:02.0031 4324 TosRfSnd ( UnsignedFile.Multi.Generic ) - warning
18:39:02.0031 4324 TosRfSnd - detected UnsignedFile.Multi.Generic (1)
18:39:02.0078 4324 Tosrfusb (ddb8a339e57d514768f45d33b11bdb50) C:\windows\system32\Drivers\tosrfusb.sys
18:39:02.0125 4324 Tosrfusb ( UnsignedFile.Multi.Generic ) - warning
18:39:02.0125 4324 Tosrfusb - detected UnsignedFile.Multi.Generic (1)
18:39:02.0187 4324 TrkWks (626504572b175867f30f3215c04b3e2f) C:\windows\system32\trkwks.dll
18:39:02.0390 4324 TrkWks - ok
18:39:02.0437 4324 TSMService (7f7c635f03a0b3fa4c5e9071e2c5008d) C:\Programme\T-DSL SpeedManager\tsmsvc.exe
18:39:02.0531 4324 TSMService ( UnsignedFile.Multi.Generic ) - warning
18:39:02.0531 4324 TSMService - detected UnsignedFile.Multi.Generic (1)
18:39:02.0578 4324 TVicHW32 (48c2694e2bffe4610b7fecaa167389ae) C:\windows\system32\drivers\TVicHW32.sys
18:39:02.0609 4324 TVicHW32 ( UnsignedFile.Multi.Generic ) - warning
18:39:02.0609 4324 TVicHW32 - detected UnsignedFile.Multi.Generic (1)
18:39:02.0656 4324 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\windows\system32\drivers\Udfs.sys
18:39:02.0828 4324 Udfs - ok
18:39:02.0843 4324 ultra - ok
18:39:02.0890 4324 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\windows\system32\DRIVERS\update.sys
18:39:03.0171 4324 Update - ok
18:39:03.0218 4324 upnphost (1dfd8975d8c89214b98d9387c1125b49) C:\windows\System32\upnphost.dll
18:39:03.0500 4324 upnphost - ok
18:39:03.0531 4324 UPS (9b11e6118958e63e1fef129466e2bda7) C:\windows\System32\ups.exe
18:39:03.0734 4324 UPS - ok
18:39:03.0781 4324 usbaudio (e919708db44ed8543a7c017953148330) C:\windows\system32\drivers\usbaudio.sys
18:39:03.0984 4324 usbaudio - ok
18:39:04.0000 4324 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\windows\system32\DRIVERS\usbccgp.sys
18:39:04.0171 4324 usbccgp - ok
18:39:04.0218 4324 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\windows\system32\DRIVERS\usbehci.sys
18:39:04.0421 4324 usbehci - ok
18:39:04.0468 4324 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\windows\system32\DRIVERS\usbhub.sys
18:39:04.0656 4324 usbhub - ok
18:39:04.0687 4324 usbprint (a717c8721046828520c9edf31288fc00) C:\windows\system32\DRIVERS\usbprint.sys
18:39:04.0859 4324 usbprint - ok
18:39:04.0890 4324 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\windows\system32\DRIVERS\usbscan.sys
18:39:05.0046 4324 usbscan - ok
18:39:05.0078 4324 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\windows\system32\DRIVERS\USBSTOR.SYS
18:39:05.0250 4324 USBSTOR - ok
18:39:05.0359 4324 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\windows\system32\DRIVERS\usbuhci.sys
18:39:05.0562 4324 usbuhci - ok
18:39:05.0593 4324 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\windows\system32\Drivers\usbvideo.sys
18:39:05.0828 4324 usbvideo - ok
18:39:05.0859 4324 UxTuneUp (4b5a7d16159ef18583152017c9655494) C:\windows\System32\uxtuneup.dll
18:39:05.0890 4324 UxTuneUp - ok
18:39:05.0890 4324 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\windows\System32\drivers\vga.sys
18:39:06.0062 4324 VgaSave - ok
18:39:06.0078 4324 ViaIde - ok
18:39:06.0093 4324 VolSnap (a5a712f4e880874a477af790b5186e1d) C:\windows\system32\drivers\VolSnap.sys
18:39:06.0281 4324 VolSnap - ok
18:39:06.0343 4324 Vsdatant (558cee3d9c470651f1843d51b42d761b) C:\windows\system32\vsdatant.sys
18:39:06.0437 4324 Vsdatant - ok
18:39:06.0515 4324 vsmon - ok
18:39:06.0578 4324 VSS (68f106273be29e7b7ef8266977268e78) C:\windows\System32\vssvc.exe
18:39:06.0781 4324 VSS - ok
18:39:06.0812 4324 W32Time (7b353059e665f8b7ad2bbeaef597cf45) C:\windows\system32\w32time.dll
18:39:06.0984 4324 W32Time - ok
18:39:07.0046 4324 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\windows\system32\DRIVERS\wanarp.sys
18:39:07.0218 4324 Wanarp - ok
18:39:07.0250 4324 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\windows\system32\DRIVERS\wanatw4.sys
18:39:07.0343 4324 wanatw - ok
18:39:07.0359 4324 WANMiniportService (eb9a99ab5d17b1727034ff191e6448d7) C:\WINDOWS\wanmpsvc.exe
18:39:11.0453 4324 WANMiniportService ( UnsignedFile.Multi.Generic ) - warning
18:39:11.0453 4324 WANMiniportService - detected UnsignedFile.Multi.Generic (1)
18:39:11.0531 4324 wceusbsh (46a247f6617526afe38b6f12f5512120) C:\windows\system32\DRIVERS\wceusbsh.sys
18:39:11.0625 4324 wceusbsh - ok
18:39:11.0640 4324 WDICA - ok
18:39:11.0656 4324 wdmaud (6768acf64b18196494413695f0c3a00f) C:\windows\system32\drivers\wdmaud.sys
18:39:11.0843 4324 wdmaud - ok
18:39:11.0890 4324 WebClient (81727c9873e3905a2ffc1ebd07265002) C:\windows\System32\webclnt.dll
18:39:12.0125 4324 WebClient - ok
18:39:12.0203 4324 winmgmt (6f3f3973d97714cc5f906a19fe883729) C:\windows\system32\wbem\WMIsvc.dll
18:39:12.0546 4324 winmgmt - ok
18:39:12.0625 4324 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\windows\system32\MsPMSNSv.dll
18:39:12.0859 4324 WmdmPmSN - ok
18:39:12.0937 4324 WmiApSrv (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\System32\wbem\wmiapsrv.exe
18:39:13.0140 4324 WmiApSrv - ok
18:39:13.0296 4324 WMPNetworkSvc (bf05650bb7df5e9ebdd25974e22403bb) C:\Programme\Windows Media Player\WMPNetwk.exe
18:39:13.0500 4324 WMPNetworkSvc - ok
18:39:13.0562 4324 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\windows\system32\DRIVERS\wpdusb.sys
18:39:13.0625 4324 WpdUsb - ok
18:39:13.0671 4324 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\windows\System32\drivers\ws2ifsl.sys
18:39:13.0921 4324 WS2IFSL - ok
18:39:13.0968 4324 wscsvc (300b3e84faf1a5c1f791c159ba28035d) C:\windows\system32\wscsvc.dll
18:39:14.0156 4324 wscsvc - ok
18:39:14.0203 4324 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\windows\system32\DRIVERS\WSTCODEC.SYS
18:39:14.0359 4324 WSTCODEC - ok
18:39:14.0406 4324 wuauserv (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
18:39:14.0656 4324 wuauserv - ok
18:39:14.0703 4324 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\windows\system32\DRIVERS\WudfPf.sys
18:39:14.0750 4324 WudfPf - ok
18:39:14.0781 4324 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\windows\system32\DRIVERS\wudfrd.sys
18:39:14.0859 4324 WudfRd - ok
18:39:14.0890 4324 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\windows\System32\WUDFSvc.dll
18:39:14.0937 4324 WudfSvc - ok
18:39:15.0000 4324 WZCSVC (c4f109c005f6725162d2d12ca751e4a7) C:\windows\System32\wzcsvc.dll
18:39:15.0203 4324 WZCSVC - ok
18:39:15.0250 4324 xmlprov (0ada34871a2e1cd2caafed1237a47750) C:\windows\System32\xmlprov.dll
18:39:15.0500 4324 xmlprov - ok
18:39:15.0546 4324 MBR (0x1B8) (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
18:39:16.0203 4324 \Device\Harddisk0\DR0 - ok
18:39:16.0218 4324 MBR (0x1B8) (550fa6d777e7f47a924bf3a9e05c8dd0) \Device\Harddisk1\DR1
18:39:16.0484 4324 \Device\Harddisk1\DR1 - ok
18:39:16.0500 4324 Boot (0x1200) (c66861fda8736c8c2a67f3d390cffd4c) \Device\Harddisk0\DR0\Partition0
18:39:16.0500 4324 \Device\Harddisk0\DR0\Partition0 - ok
18:39:16.0515 4324 Boot (0x1200) (7614b458a140514c92ead54db0c02b7e) \Device\Harddisk1\DR1\Partition0
18:39:16.0515 4324 \Device\Harddisk1\DR1\Partition0 - ok
18:39:16.0515 4324 ============================================================
18:39:16.0515 4324 Scan finished
18:39:16.0515 4324 ============================================================
18:39:16.0640 4252 Detected object count: 40
18:39:16.0640 4252 Actual detected object count: 40
18:40:18.0109 4252 Afc ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0109 4252 Afc ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0109 4252 ATI Smart ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0109 4252 ATI Smart ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0109 4252 bizVSerial ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0109 4252 bizVSerial ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0125 4252 cdrbsdrv ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0125 4252 cdrbsdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0125 4252 CommAgnt ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0125 4252 CommAgnt ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0125 4252 cwcspud ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0125 4252 cwcspud ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0125 4252 cwcwdm ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0125 4252 cwcwdm ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0125 4252 hpqcxs08 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0125 4252 hpqcxs08 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0140 4252 hpqddsvc ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0140 4252 hpqddsvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0140 4252 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0140 4252 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0140 4252 InCDfs ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0140 4252 InCDfs ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0140 4252 InCDPass ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0140 4252 InCDPass ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0140 4252 InCDrec ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0140 4252 InCDrec ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 incdrm ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 incdrm ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 InCDsrv ( LockedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 InCDsrv ( LockedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 MACNDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 MACNDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 MIINPazX ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 MIINPazX ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 MTOnlPktAlyX ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 MTOnlPktAlyX ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0156 4252 MZCCntrl ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0156 4252 MZCCntrl ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0171 4252 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0171 4252 Net Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0171 4252 Netzmanager Service ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0171 4252 Netzmanager Service ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0171 4252 nicadsl ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0171 4252 nicadsl ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0171 4252 PCANDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0171 4252 PCANDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0187 4252 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0187 4252 Pml Driver HPZ12 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0187 4252 PsShutdownSvc ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0187 4252 PsShutdownSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0187 4252 RMSPPPOE ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0187 4252 RMSPPPOE ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0187 4252 StarOpen ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0187 4252 StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0187 4252 TNPacket ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0187 4252 TNPacket ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0203 4252 toshidpt ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0203 4252 toshidpt ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0203 4252 tosporte ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0203 4252 tosporte ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0203 4252 Tosrfbd ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0203 4252 Tosrfbd ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0203 4252 Tosrfbnp ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0203 4252 Tosrfbnp ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0203 4252 Tosrfcom ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0203 4252 Tosrfcom ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0218 4252 Tosrfhid ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0218 4252 Tosrfhid ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0218 4252 tosrfnds ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0218 4252 tosrfnds ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0218 4252 TosRfSnd ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0218 4252 TosRfSnd ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0218 4252 Tosrfusb ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0218 4252 Tosrfusb ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0234 4252 TSMService ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0234 4252 TSMService ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0234 4252 TVicHW32 ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0234 4252 TVicHW32 ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:40:18.0234 4252 WANMiniportService ( UnsignedFile.Multi.Generic ) - skipped by user
18:40:18.0234 4252 WANMiniportService ( UnsignedFile.Multi.Generic ) - User select action: Skip


MfG Theodoro

malwarebytes:
Downloade Dir bitte Malwarebytes

• Installiere
  das Programm in den vorgegebenen Pfad.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Starte Malwarebytes, klicke auf Aktualisierung --> Suche
  nach Aktualisierung
• Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
• Wenn der Scan beendet
  ist, klicke auf Ergebnisse anzeigen.
• Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
• Poste
  das Logfile, welches sich in Notepad öffnet, hier in den Thread.
• Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Hallo,
es hat alles geklappt wie vorgegeben, hier schicke ich die entstandene Datei:

Malwarebytes Anti-Malware (Test) 1.61.0.1400
www.malwarebytes.org

Datenbank Version: v2012.07.07.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.11
Besitzer :: COMPUTER [Administrator]

Schutz: Aktiviert

07.07.2012 13:43:38
mbam-log-2012-07-07 (13-43-38).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 452072
Laufzeit: 6 Stunde(n), 8 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 3
HKCR\vnbptxlf.bseq (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\affri (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\affri (Malware.Trace) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\WINDOWS\FONTS\GTH18_CI.TTF (Spyware.OnlineGames) -> Daten: 1 -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 8
C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\SoftonicDownloader_fuer_cdcovercreator.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Downloads\Grubalicious_Setup_30m_DE-dm[1].exe (Adware.TryMedia) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Qoobox\Quarantine\C\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\AD ON Multimedia\eBay Shortcuts\eBayShortcuts.exe.vir (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\System Volume Information\_restore{E6D5E5D8-D50E-4AF4-8D34-D7FBE633D26C}\RP2022\A0511866.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\07012012_222048\C_Dokumente und Einstellungen\Besitzer\Anwendungsdaten\w6j6rt45jtuhdre5.exe (Packer.ModifiedUPX) -> Erfolgreich gelöscht und in Quarantäne gestellt.
F:\Programme\Elaborate Bytes\Keygen CloneCD 4.0.0.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
F:\wincmd\cx_wincmd451.exe (Trojan.Bancos) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\WINDOWS\Fonts\Gth18_ci.ttf (Spyware.OnlineGames) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

MfG Theodoro

verzichte in zukunft auf Softonic, lade lieber beim hersteller
F:\Programme\Elaborate Bytes\Keygen CloneCD 4.0.0.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
die verwendung von keygens ist illegal, deswegen helfen wir hier ausschließlich beim daten sichern, formatieren und pc absichern.

Hallo,
danke für die Hilfe, habe benanntes Programm sofort gelöscht. Werde in Zukunft vorsichtiger sein.
Ich interpretiere Deine Nachricht so, dass mein Problem nun behoben ist. PC funktioniert auch ohne erkennbare Mängel.

Nochmals herzlichen Dank.
MfG Theodoro

hi wie gesagt, auskunft gebe ich nur zum neu aufsetzen

Hallo,
leider verstehe ich nicht mehr um was es noch geht. Mir ist nicht bewusst, was ich neu aufsetzen müsste. Bitte hilf mir auf die Sprünge.
MfG Theodoro

F:\Programme\Elaborate Bytes\Keygen CloneCD 4.0.0.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
du hast keygens instaliert, deswegen kann ich keine abschließene analyse machen, dir nicht beim absichern des pcs etc helfen bis er neu aufgesetzt ist