Avira findet "BOO/Whistler.A" in Masterbootsektor HD0 Bootsektor 'C:\', lässt sich nicht entfernen

08:47:35.0203 3464	TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
08:47:35.0671 3464	============================================================
08:47:35.0671 3464	Current date / time: 2012/07/31 08:47:35.0671
08:47:35.0671 3464	SystemInfo:
08:47:35.0671 3464	
08:47:35.0671 3464	OS Version: 5.1.2600 ServicePack: 3.0
08:47:35.0671 3464	Product type: Workstation
08:47:35.0687 3464	ComputerName: ANDREAS-IE3OGLJ
08:47:35.0703 3464	UserName: Andreas
08:47:35.0703 3464	Windows directory: C:\WINDOWS
08:47:35.0703 3464	System windows directory: C:\WINDOWS
08:47:35.0703 3464	Processor architecture: Intel x86
08:47:35.0703 3464	Number of processors: 1
08:47:35.0703 3464	Page size: 0x1000
08:47:35.0703 3464	Boot type: Normal boot
08:47:35.0703 3464	============================================================
08:47:38.0078 3464	Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
08:47:38.0078 3464	Drive \Device\Harddisk1\DR2 - Size: 0xE8E0B00000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB00, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
08:47:38.0093 3464	============================================================
08:47:38.0093 3464	\Device\Harddisk0\DR0:
08:47:38.0093 3464	MBR partitions:
08:47:38.0093 3464	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xFFFAC05
08:47:38.0093 3464	\Device\Harddisk1\DR2:
08:47:38.0093 3464	MBR partitions:
08:47:38.0093 3464	\Device\Harddisk1\DR2\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705000
08:47:38.0093 3464	============================================================
08:47:38.0187 3464	C: <-> \Device\Harddisk0\DR0\Partition0
08:47:38.0234 3464	E: <-> \Device\Harddisk1\DR2\Partition0
08:47:38.0265 3464	============================================================
08:47:38.0265 3464	Initialize success
08:47:38.0265 3464	============================================================
08:50:01.0406 2852	============================================================
08:50:01.0406 2852	Scan started
08:50:01.0406 2852	Mode: Manual; SigCheck; TDLFS; 
08:50:01.0406 2852	============================================================
08:50:01.0703 2852	Abiosdsk - ok
08:50:01.0718 2852	abp480n5 - ok
08:50:01.0765 2852	ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
08:50:03.0953 2852	ACPI - ok
08:50:04.0015 2852	ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
08:50:04.0203 2852	ACPIEC - ok
08:50:04.0218 2852	adpu160m - ok
08:50:04.0250 2852	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
08:50:04.0375 2852	aec - ok
08:50:04.0421 2852	AFD             (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
08:50:04.0484 2852	AFD - ok
08:50:04.0484 2852	Aha154x - ok
08:50:04.0500 2852	aic78u2 - ok
08:50:04.0515 2852	aic78xx - ok
08:50:04.0640 2852	ALCXWDM         (8eaa98894a004a47964dcd84f57493c1) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
08:50:04.0906 2852	ALCXWDM - ok
08:50:04.0984 2852	Alerter         (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
08:50:05.0125 2852	Alerter - ok
08:50:05.0140 2852	ALG             (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
08:50:05.0281 2852	ALG - ok
08:50:05.0281 2852	AliIde - ok
08:50:05.0296 2852	amsint - ok
08:50:05.0406 2852	AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Programme\Avira\AntiVir Desktop\sched.exe
08:50:05.0437 2852	AntiVirSchedulerService - ok
08:50:05.0484 2852	AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Programme\Avira\AntiVir Desktop\avguard.exe
08:50:05.0500 2852	AntiVirService - ok
08:50:05.0546 2852	AppMgmt         (d45960be52c3c610d361977057f98c54) C:\WINDOWS\System32\appmgmts.dll
08:50:05.0703 2852	AppMgmt - ok
08:50:05.0703 2852	asc - ok
08:50:05.0718 2852	asc3350p - ok
08:50:05.0734 2852	asc3550 - ok
08:50:05.0781 2852	ASPI            (54ab078660e536da72b21a27f56b035b) C:\WINDOWS\System32\DRIVERS\ASPI32.sys
08:50:05.0781 2852	ASPI ( UnsignedFile.Multi.Generic ) - warning
08:50:05.0781 2852	ASPI - detected UnsignedFile.Multi.Generic (1)
08:50:05.0859 2852	aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
08:50:05.0921 2852	aspnet_state - ok
08:50:05.0953 2852	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
08:50:06.0078 2852	AsyncMac - ok
08:50:06.0109 2852	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
08:50:06.0250 2852	atapi - ok
08:50:06.0250 2852	Atdisk - ok
08:50:06.0281 2852	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
08:50:06.0406 2852	Atmarpc - ok
08:50:06.0453 2852	AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
08:50:06.0593 2852	AudioSrv - ok
08:50:06.0609 2852	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
08:50:06.0765 2852	audstub - ok
08:50:06.0796 2852	avgntflt        (d5541f0afb767e85fc412fc609d96a74) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
08:50:07.0781 2852	avgntflt - ok
08:50:07.0843 2852	avipbb          (7d967a682d4694df7fa57d63a2db01fe) C:\WINDOWS\system32\DRIVERS\avipbb.sys
08:50:07.0859 2852	avipbb - ok
08:50:07.0875 2852	avkmgr          (53e56450da16a1a7f0d002f511113f67) C:\WINDOWS\system32\DRIVERS\avkmgr.sys
08:50:07.0890 2852	avkmgr - ok
08:50:07.0921 2852	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
08:50:08.0093 2852	Beep - ok
08:50:08.0125 2852	BIOS            (be5d50529799b9bab6be879ec768b6cf) C:\WINDOWS\System32\drivers\BIOS.sys
08:50:08.0140 2852	BIOS ( UnsignedFile.Multi.Generic ) - warning
08:50:08.0140 2852	BIOS - detected UnsignedFile.Multi.Generic (1)
08:50:08.0187 2852	BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\System32\qmgr.dll
08:50:08.0421 2852	BITS - ok
08:50:08.0453 2852	Browser         (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
08:50:08.0578 2852	Browser - ok
08:50:08.0609 2852	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
08:50:08.0812 2852	cbidf2k - ok
08:50:08.0828 2852	cd20xrnt - ok
08:50:08.0859 2852	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
08:50:09.0031 2852	Cdaudio - ok
08:50:09.0078 2852	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
08:50:09.0218 2852	Cdfs - ok
08:50:09.0250 2852	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
08:50:09.0359 2852	Cdrom - ok
08:50:09.0375 2852	Changer - ok
08:50:09.0406 2852	cisvc           (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\System32\cisvc.exe
08:50:09.0531 2852	cisvc - ok
08:50:09.0578 2852	ClipSrv         (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
08:50:09.0734 2852	ClipSrv - ok
08:50:09.0781 2852	clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
08:50:09.0937 2852	clr_optimization_v2.0.50727_32 - ok
08:50:09.0953 2852	CmdIde - ok
08:50:09.0953 2852	COMSysApp - ok
08:50:09.0984 2852	Cpqarray - ok
08:50:10.0031 2852	CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
08:50:10.0140 2852	CryptSvc - ok
08:50:10.0156 2852	dac2w2k - ok
08:50:10.0156 2852	dac960nt - ok
08:50:10.0250 2852	dbustrcm - ok
08:50:10.0296 2852	DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
08:50:10.0421 2852	DcomLaunch - ok
08:50:10.0453 2852	Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
08:50:10.0578 2852	Dhcp - ok
08:50:10.0609 2852	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
08:50:10.0734 2852	Disk - ok
08:50:10.0750 2852	dmadmin - ok
08:50:10.0812 2852	dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
08:50:10.0968 2852	dmboot - ok
08:50:10.0968 2852	dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
08:50:11.0109 2852	dmio - ok
08:50:11.0156 2852	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
08:50:11.0328 2852	dmload - ok
08:50:11.0359 2852	dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
08:50:11.0484 2852	dmserver - ok
08:50:11.0515 2852	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
08:50:11.0656 2852	DMusic - ok
08:50:11.0687 2852	Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
08:50:11.0765 2852	Dnscache - ok
08:50:11.0796 2852	Dot3svc         (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
08:50:11.0921 2852	Dot3svc - ok
08:50:11.0921 2852	dpti2o - ok
08:50:11.0984 2852	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
08:50:12.0109 2852	drmkaud - ok
08:50:12.0156 2852	dtsoftbus01     (16c5891c6d1fa0b5d9014f85a482eb20) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
08:50:12.0171 2852	dtsoftbus01 - ok
08:50:12.0234 2852	EapHost         (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
08:50:12.0359 2852	EapHost - ok
08:50:12.0406 2852	ERSvc           (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
08:50:12.0531 2852	ERSvc - ok
08:50:12.0578 2852	Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
08:50:12.0593 2852	Eventlog - ok
08:50:12.0625 2852	EventSystem     (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\System32\es.dll
08:50:12.0656 2852	EventSystem - ok
08:50:12.0687 2852	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
08:50:12.0812 2852	Fastfat - ok
08:50:12.0843 2852	FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
08:50:12.0890 2852	FastUserSwitchingCompatibility - ok
08:50:12.0906 2852	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
08:50:13.0031 2852	Fdc - ok
08:50:13.0062 2852	Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
08:50:13.0171 2852	Fips - ok
08:50:13.0187 2852	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
08:50:13.0312 2852	Flpydisk - ok
08:50:13.0343 2852	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
08:50:13.0484 2852	FltMgr - ok
08:50:13.0562 2852	FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
08:50:13.0578 2852	FontCache3.0.0.0 - ok
08:50:13.0625 2852	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
08:50:13.0796 2852	Fs_Rec - ok
08:50:13.0828 2852	Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
08:50:14.0000 2852	Ftdisk - ok
08:50:14.0000 2852	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
08:50:14.0140 2852	Gpc - ok
08:50:14.0265 2852	gupdate         (f02a533f517eb38333cb12a9e8963773) C:\Programme\Google\Update\GoogleUpdate.exe
08:50:14.0281 2852	gupdate - ok
08:50:14.0281 2852	gupdatem        (f02a533f517eb38333cb12a9e8963773) C:\Programme\Google\Update\GoogleUpdate.exe
08:50:14.0296 2852	gupdatem - ok
08:50:14.0375 2852	helpsvc         (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
08:50:14.0500 2852	helpsvc - ok
08:50:14.0515 2852	HidServ - ok
08:50:14.0531 2852	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
08:50:14.0640 2852	HidUsb - ok
08:50:14.0671 2852	hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
08:50:14.0796 2852	hkmsvc - ok
08:50:14.0796 2852	hpn - ok
08:50:14.0812 2852	hpt3xx - ok
08:50:14.0843 2852	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
08:50:14.0906 2852	HTTP - ok
08:50:14.0953 2852	HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
08:50:15.0078 2852	HTTPFilter - ok
08:50:15.0078 2852	i2omgmt - ok
08:50:15.0093 2852	i2omp - ok
08:50:15.0125 2852	i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
08:50:15.0250 2852	i8042prt - ok
08:50:15.0312 2852	idsvc           (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
08:50:15.0375 2852	idsvc - ok
08:50:15.0390 2852	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
08:50:15.0515 2852	Imapi - ok
08:50:15.0546 2852	ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\System32\imapi.exe
08:50:15.0671 2852	ImapiService - ok
08:50:15.0687 2852	ini910u - ok
08:50:15.0718 2852	IntelIde - ok
08:50:15.0765 2852	ip6fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
08:50:15.0875 2852	ip6fw - ok
08:50:15.0906 2852	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
08:50:16.0093 2852	IpFilterDriver - ok
08:50:16.0109 2852	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
08:50:16.0234 2852	IpInIp - ok
08:50:16.0250 2852	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
08:50:16.0375 2852	IpNat - ok
08:50:16.0390 2852	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
08:50:16.0531 2852	IPSec - ok
08:50:16.0578 2852	irda            (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
08:50:16.0687 2852	irda - ok
08:50:16.0703 2852	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
08:50:16.0828 2852	IRENUM - ok
08:50:16.0843 2852	Irmon           (2efe1db1ec58a26b0c14bfda122e246f) C:\WINDOWS\System32\irmon.dll
08:50:16.0953 2852	Irmon - ok
08:50:17.0000 2852	IrUSB           (198f123f95f7fd86d8d5c8ca90e79d8a) C:\WINDOWS\system32\DRIVERS\IrUSB.sys
08:50:17.0015 2852	IrUSB ( UnsignedFile.Multi.Generic ) - warning
08:50:17.0015 2852	IrUSB - detected UnsignedFile.Multi.Generic (1)
08:50:17.0046 2852	isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
08:50:17.0171 2852	isapnp - ok
08:50:17.0265 2852	JavaQuickStarterService (5e06a9d23727daf96faa796f1135fdcd) C:\Programme\Java\jre6\bin\jqs.exe
08:50:17.0296 2852	JavaQuickStarterService - ok
08:50:17.0312 2852	Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
08:50:17.0437 2852	Kbdclass - ok
08:50:17.0453 2852	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
08:50:17.0578 2852	kmixer - ok
08:50:17.0625 2852	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
08:50:17.0687 2852	KSecDD - ok
08:50:17.0718 2852	lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
08:50:17.0765 2852	lanmanserver - ok
08:50:17.0796 2852	lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
08:50:17.0843 2852	lanmanworkstation - ok
08:50:17.0859 2852	lbrtfdc - ok
08:50:17.0906 2852	LmHosts         (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
08:50:18.0015 2852	LmHosts - ok
08:50:18.0062 2852	MBAMProtector - ok
08:50:18.0125 2852	MBAMService     (43683e970f008c93c9429ef428147a54) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
08:50:18.0171 2852	MBAMService - ok
08:50:18.0218 2852	Messenger       (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
08:50:18.0343 2852	Messenger - ok
08:50:18.0359 2852	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
08:50:18.0531 2852	mnmdd - ok
08:50:18.0562 2852	mnmsrvc         (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\System32\mnmsrvc.exe
08:50:18.0671 2852	mnmsrvc - ok
08:50:18.0718 2852	Modem           (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
08:50:18.0828 2852	Modem - ok
08:50:18.0859 2852	Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
08:50:18.0968 2852	Mouclass - ok
08:50:19.0015 2852	mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
08:50:19.0171 2852	mouhid - ok
08:50:19.0187 2852	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
08:50:19.0328 2852	MountMgr - ok
08:50:19.0375 2852	MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
08:50:19.0390 2852	MozillaMaintenance - ok
08:50:19.0406 2852	mraid35x - ok
08:50:19.0453 2852	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
08:50:19.0578 2852	MRxDAV - ok
08:50:19.0625 2852	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
08:50:19.0718 2852	MRxSmb - ok
08:50:19.0750 2852	MSDTC           (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\System32\msdtc.exe
08:50:19.0890 2852	MSDTC - ok
08:50:19.0906 2852	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
08:50:20.0078 2852	Msfs - ok
08:50:20.0109 2852	MSIRCOMM        (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys
08:50:20.0218 2852	MSIRCOMM - ok
08:50:20.0234 2852	MSIServer - ok
08:50:20.0265 2852	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
08:50:20.0375 2852	MSKSSRV - ok
08:50:20.0390 2852	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
08:50:20.0500 2852	MSPCLOCK - ok
08:50:20.0515 2852	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
08:50:20.0640 2852	MSPQM - ok
08:50:20.0671 2852	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
08:50:20.0781 2852	mssmbios - ok
08:50:20.0796 2852	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
08:50:20.0843 2852	Mup - ok
08:50:20.0890 2852	MxlW2k          (a1520761f42dbb06db7929d6fa9753ea) C:\WINDOWS\system32\drivers\MxlW2k.sys
08:50:20.0890 2852	MxlW2k ( UnsignedFile.Multi.Generic ) - warning
08:50:20.0890 2852	MxlW2k - detected UnsignedFile.Multi.Generic (1)
08:50:20.0937 2852	napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
08:50:21.0078 2852	napagent - ok
08:50:21.0093 2852	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
08:50:21.0203 2852	NDIS - ok
08:50:21.0250 2852	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
08:50:21.0281 2852	NdisTapi - ok
08:50:21.0312 2852	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
08:50:21.0421 2852	Ndisuio - ok
08:50:21.0453 2852	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
08:50:21.0593 2852	NdisWan - ok
08:50:21.0640 2852	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
08:50:21.0687 2852	NDProxy - ok
08:50:21.0687 2852	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
08:50:21.0812 2852	NetBIOS - ok
08:50:21.0828 2852	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
08:50:21.0953 2852	NetBT - ok
08:50:22.0000 2852	NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
08:50:22.0140 2852	NetDDE - ok
08:50:22.0140 2852	NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
08:50:22.0250 2852	NetDDEdsdm - ok
08:50:22.0281 2852	Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\System32\lsass.exe
08:50:22.0406 2852	Netlogon - ok
08:50:22.0421 2852	Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
08:50:22.0546 2852	Netman - ok
08:50:22.0656 2852	NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
08:50:22.0671 2852	NetTcpPortSharing - ok
08:50:22.0703 2852	Nla             (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
08:50:22.0734 2852	Nla - ok
08:50:22.0750 2852	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
08:50:22.0875 2852	Npfs - ok
08:50:22.0906 2852	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
08:50:23.0078 2852	Ntfs - ok
08:50:23.0093 2852	NtLmSsp         (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\System32\lsass.exe
08:50:23.0203 2852	NtLmSsp - ok
08:50:23.0234 2852	NtmsSvc         (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
08:50:23.0406 2852	NtmsSvc - ok
08:50:23.0437 2852	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
08:50:23.0609 2852	Null - ok
08:50:23.0734 2852	nv              (cd2acd06129c4107df4483b298a05290) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
08:50:23.0953 2852	nv - ok
08:50:24.0031 2852	nvata           (c03e15101f6d9e82cd9b0e7d715f5de3) C:\WINDOWS\system32\DRIVERS\nvata.sys
08:50:24.0062 2852	nvata - ok
08:50:24.0140 2852	NVENETFD        (b9333604527e02cd2223f200c0bae7e0) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
08:50:24.0171 2852	NVENETFD - ok
08:50:24.0187 2852	nvnetbus        (5e9e55f7ee644c7c5fd78a206fbe37ab) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
08:50:24.0234 2852	nvnetbus - ok
08:50:24.0250 2852	NVSvc           (4a6124c70c9e46565d31ff799750dc64) C:\WINDOWS\System32\nvsvc32.exe
08:50:24.0265 2852	NVSvc - ok
08:50:24.0312 2852	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
08:50:24.0484 2852	NwlnkFlt - ok
08:50:24.0500 2852	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
08:50:24.0656 2852	NwlnkFwd - ok
08:50:24.0687 2852	Parport         (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys
08:50:24.0812 2852	Parport - ok
08:50:24.0812 2852	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
08:50:24.0953 2852	PartMgr - ok
08:50:24.0968 2852	ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
08:50:25.0109 2852	ParVdm - ok
08:50:25.0140 2852	PCI             (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
08:50:25.0250 2852	PCI - ok
08:50:25.0265 2852	PCIDump - ok
08:50:25.0312 2852	PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
08:50:25.0484 2852	PCIIde - ok
08:50:25.0500 2852	Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
08:50:25.0640 2852	Pcmcia - ok
08:50:25.0640 2852	PDCOMP - ok
08:50:25.0656 2852	PDFRAME - ok
08:50:25.0671 2852	PDRELI - ok
08:50:25.0687 2852	PDRFRAME - ok
08:50:25.0687 2852	perc2 - ok
08:50:25.0703 2852	perc2hib - ok
08:50:25.0765 2852	PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
08:50:25.0781 2852	PlugPlay - ok
08:50:25.0828 2852	PolicyAgent     (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\System32\lsass.exe
08:50:25.0953 2852	PolicyAgent - ok
08:50:26.0000 2852	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
08:50:26.0109 2852	PptpMiniport - ok
08:50:26.0125 2852	Processor       (2cb55427c58679f49ad600fccba76360) C:\WINDOWS\system32\DRIVERS\processr.sys
08:50:26.0234 2852	Processor - ok
08:50:26.0265 2852	ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
08:50:26.0375 2852	ProtectedStorage - ok
08:50:26.0390 2852	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
08:50:26.0515 2852	PSched - ok
08:50:26.0562 2852	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
08:50:26.0718 2852	Ptilink - ok
08:50:26.0718 2852	ql1080 - ok
08:50:26.0734 2852	Ql10wnt - ok
08:50:26.0750 2852	ql12160 - ok
08:50:26.0750 2852	ql1240 - ok
08:50:26.0765 2852	ql1280 - ok
08:50:26.0781 2852	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
08:50:26.0937 2852	RasAcd - ok
08:50:26.0968 2852	RasAuto         (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
08:50:27.0093 2852	RasAuto - ok
08:50:27.0109 2852	Rasirda         (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
08:50:27.0171 2852	Rasirda - ok
08:50:27.0203 2852	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
08:50:27.0312 2852	Rasl2tp - ok
08:50:27.0359 2852	RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
08:50:27.0484 2852	RasMan - ok
08:50:27.0500 2852	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
08:50:27.0609 2852	RasPppoe - ok
08:50:27.0625 2852	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
08:50:27.0781 2852	Raspti - ok
08:50:27.0812 2852	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
08:50:27.0937 2852	Rdbss - ok
08:50:27.0984 2852	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
08:50:28.0125 2852	RDPCDD - ok
08:50:28.0171 2852	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
08:50:28.0281 2852	rdpdr - ok
08:50:28.0328 2852	RDPWD           (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
08:50:28.0390 2852	RDPWD - ok
08:50:28.0421 2852	RDSessMgr       (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
08:50:28.0546 2852	RDSessMgr - ok
08:50:28.0562 2852	redbook         (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
08:50:28.0687 2852	redbook - ok
08:50:28.0703 2852	RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
08:50:28.0828 2852	RemoteAccess - ok
08:50:28.0875 2852	RemoteRegistry  (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS\system32\regsvc.dll
08:50:29.0000 2852	RemoteRegistry - ok
08:50:29.0015 2852	RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\System32\locator.exe
08:50:29.0140 2852	RpcLocator - ok
08:50:29.0187 2852	RpcSs           (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
08:50:29.0203 2852	RpcSs - ok
08:50:29.0250 2852	RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\System32\rsvp.exe
08:50:29.0406 2852	RSVP - ok
08:50:29.0437 2852	SamSs           (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
08:50:29.0546 2852	SamSs - ok
08:50:29.0562 2852	SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
08:50:29.0687 2852	SCardSvr - ok
08:50:29.0734 2852	Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
08:50:29.0843 2852	Schedule - ok
08:50:29.0937 2852	SearchAnonymizer (f4bd8926afb3b2067f2bd210032ec3be) C:\Dokumente und Einstellungen\Andreas\Anwendungsdaten\OCS\SM\SearchAnonymizerHelper.exe
08:50:29.0953 2852	SearchAnonymizer ( UnsignedFile.Multi.Generic ) - warning
08:50:29.0953 2852	SearchAnonymizer - detected UnsignedFile.Multi.Generic (1)
08:50:30.0000 2852	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
08:50:30.0109 2852	Secdrv - ok
08:50:30.0140 2852	seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
08:50:30.0265 2852	seclogon - ok
08:50:30.0312 2852	SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
08:50:30.0421 2852	SENS - ok
08:50:30.0453 2852	serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
08:50:30.0578 2852	serenum - ok
08:50:30.0609 2852	Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
08:50:30.0718 2852	Serial - ok
08:50:30.0750 2852	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
08:50:30.0859 2852	Sfloppy - ok
08:50:30.0890 2852	SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
08:50:31.0031 2852	SharedAccess - ok
08:50:31.0078 2852	ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
08:50:31.0093 2852	ShellHWDetection - ok
08:50:31.0093 2852	Simbad - ok
08:50:31.0109 2852	Sparrow - ok
08:50:31.0140 2852	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
08:50:31.0265 2852	splitter - ok
08:50:31.0328 2852	Spooler         (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
08:50:31.0343 2852	Spooler - ok
08:50:31.0343 2852	sptd - ok
08:50:31.0375 2852	sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
08:50:31.0500 2852	sr - ok
08:50:31.0531 2852	srservice       (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\System32\srsvc.dll
08:50:31.0656 2852	srservice - ok
08:50:31.0687 2852	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
08:50:31.0765 2852	Srv - ok
08:50:31.0796 2852	SSDPSRV         (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
08:50:31.0921 2852	SSDPSRV - ok
08:50:31.0984 2852	SSHDRV61        (90dcc161d96689e770519c76accea8b1) C:\WINDOWS\System32\drivers\SSHDRV61.sys
08:50:32.0000 2852	SSHDRV61 ( UnsignedFile.Multi.Generic ) - warning
08:50:32.0000 2852	SSHDRV61 - detected UnsignedFile.Multi.Generic (1)
08:50:32.0015 2852	ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
08:50:32.0031 2852	ssmdrv - ok
08:50:32.0031 2852	StarOpen - ok
08:50:32.0078 2852	stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
08:50:32.0234 2852	stisvc - ok
08:50:32.0296 2852	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
08:50:32.0406 2852	swenum - ok
08:50:32.0437 2852	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
08:50:32.0562 2852	swmidi - ok
08:50:32.0578 2852	SwPrv - ok
08:50:32.0593 2852	symc810 - ok
08:50:32.0593 2852	symc8xx - ok
08:50:32.0609 2852	sym_hi - ok
08:50:32.0625 2852	sym_u3 - ok
08:50:32.0656 2852	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
08:50:32.0765 2852	sysaudio - ok
08:50:32.0796 2852	SysmonLog       (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
08:50:32.0937 2852	SysmonLog - ok
08:50:32.0968 2852	TapiSrv         (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
08:50:33.0093 2852	TapiSrv - ok
08:50:33.0140 2852	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
08:50:33.0171 2852	Tcpip - ok
08:50:33.0218 2852	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
08:50:33.0328 2852	TDPIPE - ok
08:50:33.0343 2852	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
08:50:33.0453 2852	TDTCP - ok
08:50:33.0484 2852	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
08:50:33.0609 2852	TermDD - ok
08:50:33.0640 2852	TermService     (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
08:50:33.0765 2852	TermService - ok
08:50:33.0796 2852	Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
08:50:33.0812 2852	Themes - ok
08:50:33.0843 2852	TlntSvr         (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS\System32\tlntsvr.exe
08:50:33.0968 2852	TlntSvr - ok
08:50:33.0984 2852	TosIde - ok
08:50:34.0015 2852	TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
08:50:34.0125 2852	TrkWks - ok
08:50:34.0156 2852	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
08:50:34.0265 2852	Udfs - ok
08:50:34.0265 2852	ultra - ok
08:50:34.0312 2852	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
08:50:34.0453 2852	Update - ok
08:50:34.0500 2852	upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
08:50:34.0625 2852	upnphost - ok
08:50:34.0640 2852	UPS             (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
08:50:34.0781 2852	UPS - ok
08:50:34.0796 2852	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
08:50:34.0906 2852	usbccgp - ok
08:50:34.0953 2852	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
08:50:35.0062 2852	usbhub - ok
08:50:35.0093 2852	usbohci         (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
08:50:35.0203 2852	usbohci - ok
08:50:35.0218 2852	usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
08:50:35.0343 2852	usbprint - ok
08:50:35.0359 2852	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
08:50:35.0468 2852	usbscan - ok
08:50:35.0500 2852	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
08:50:35.0609 2852	USBSTOR - ok
08:50:35.0640 2852	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
08:50:35.0750 2852	VgaSave - ok
08:50:35.0765 2852	ViaIde - ok
08:50:35.0796 2852	VolSnap         (4dc8a879a7f7c136e5fa10c6295d6d31) C:\WINDOWS\system32\drivers\VolSnap.sys
08:50:35.0796 2852	Suspicious file (Forged): C:\WINDOWS\system32\drivers\VolSnap.sys. Real md5: 4dc8a879a7f7c136e5fa10c6295d6d31, Fake md5: a5a712f4e880874a477af790b5186e1d
08:50:35.0796 2852	VolSnap ( Rootkit.Win32.TDSS.tdl3 ) - infected
08:50:35.0796 2852	VolSnap - detected Rootkit.Win32.TDSS.tdl3 (0)
08:50:35.0812 2852	VSS             (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
08:50:35.0937 2852	VSS - ok
08:50:35.0968 2852	W32Time         (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\System32\w32time.dll
08:50:36.0093 2852	W32Time - ok
08:50:36.0125 2852	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
08:50:36.0234 2852	Wanarp - ok
08:50:36.0250 2852	WDICA - ok
08:50:36.0281 2852	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
08:50:36.0390 2852	wdmaud - ok
08:50:36.0421 2852	WebClient       (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
08:50:36.0562 2852	WebClient - ok
08:50:36.0609 2852	winmgmt         (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
08:50:36.0718 2852	winmgmt - ok
08:50:36.0781 2852	WmdmPmSN        (6e18978b749f0696a774de3f2cb142dd) C:\WINDOWS\system32\MsPMSNSv.dll
08:50:36.0890 2852	WmdmPmSN - ok
08:50:36.0953 2852	Wmi             (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS\System32\advapi32.dll
08:50:37.0078 2852	Wmi - ok
08:50:37.0109 2852	WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\System32\wbem\wmiapsrv.exe
08:50:37.0234 2852	WmiApSrv - ok
08:50:37.0265 2852	wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
08:50:37.0390 2852	wscsvc - ok
08:50:37.0421 2852	wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
08:50:37.0546 2852	wuauserv - ok
08:50:37.0578 2852	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
08:50:37.0640 2852	WudfPf - ok
08:50:37.0671 2852	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
08:50:37.0703 2852	WudfRd - ok
08:50:37.0718 2852	WudfSvc         (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
08:50:37.0750 2852	WudfSvc - ok
08:50:37.0812 2852	WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
08:50:37.0984 2852	WZCSVC - ok
08:50:38.0000 2852	xmlprov         (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
08:50:38.0140 2852	xmlprov - ok
08:50:38.0171 2852	MBR (0x1B8)     (e24810ee950b6f5f27cb02111df934e3) \Device\Harddisk0\DR0
08:50:38.0187 2852	\Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - infected
08:50:38.0187 2852	\Device\Harddisk0\DR0 - detected Rootkit.Boot.Wistler.a (0)
08:50:38.0281 2852	MBR (0x1B8)     (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR2
08:50:38.0875 2852	\Device\Harddisk1\DR2 - ok
08:50:38.0875 2852	Boot (0x1200)   (3c104e373481fcbd06de79f1d8059706) \Device\Harddisk0\DR0\Partition0
08:50:38.0875 2852	\Device\Harddisk0\DR0\Partition0 - ok
08:50:38.0906 2852	Boot (0x1200)   (b8edbc127af70cf160cb0b62c107b092) \Device\Harddisk1\DR2\Partition0
08:50:38.0906 2852	\Device\Harddisk1\DR2\Partition0 - ok
08:50:38.0921 2852	============================================================
08:50:38.0921 2852	Scan finished
08:50:38.0921 2852	============================================================
08:50:39.0046 2764	Detected object count: 8
08:50:39.0046 2764	Actual detected object count: 8
08:51:21.0906 2764	ASPI ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0906 2764	ASPI ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0906 2764	BIOS ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0906 2764	BIOS ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0906 2764	IrUSB ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0906 2764	IrUSB ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0921 2764	MxlW2k ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0921 2764	MxlW2k ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0921 2764	SearchAnonymizer ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0921 2764	SearchAnonymizer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0921 2764	SSHDRV61 ( UnsignedFile.Multi.Generic ) - skipped by user
08:51:21.0921 2764	SSHDRV61 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
08:51:21.0921 2764	VolSnap ( Rootkit.Win32.TDSS.tdl3 ) - skipped by user
08:51:21.0921 2764	VolSnap ( Rootkit.Win32.TDSS.tdl3 ) - User select action: Skip 
08:51:21.0921 2764	\Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - skipped by user
08:51:21.0921 2764	\Device\Harddisk0\DR0 ( Rootkit.Boot.Wistler.a ) - User select action: Skip