Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: PUM.Hijack.StartMenu die Zweite

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 08.08.2012, 18:22   #18
Sylvester
 
PUM.Hijack.StartMenu die Zweite - Standard

PUM.Hijack.StartMenu die Zweite



So da isser

Code:
ATTFilter
19:12:01.0671 3308	TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
19:12:01.0812 3308	============================================================
19:12:01.0812 3308	Current date / time: 2012/08/08 19:12:01.0812
19:12:01.0812 3308	SystemInfo:
19:12:01.0812 3308	
19:12:01.0812 3308	OS Version: 5.1.2600 ServicePack: 3.0
19:12:01.0812 3308	Product type: Workstation
19:12:01.0812 3308	ComputerName: HP625
19:12:01.0812 3308	UserName: UserA
19:12:01.0812 3308	Windows directory: C:\WINDOWS
19:12:01.0812 3308	System windows directory: C:\WINDOWS
19:12:01.0812 3308	Processor architecture: Intel x86
19:12:01.0812 3308	Number of processors: 2
19:12:01.0812 3308	Page size: 0x1000
19:12:01.0812 3308	Boot type: Normal boot
19:12:01.0812 3308	============================================================
19:12:03.0265 3308	Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:12:03.0265 3308	============================================================
19:12:03.0265 3308	\Device\Harddisk0\DR0:
19:12:03.0265 3308	MBR partitions:
19:12:03.0265 3308	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A962B1
19:12:03.0281 3308	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3A9632F, BlocksNum 0x10C8ECFA
19:12:03.0312 3308	\Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x14725068, BlocksNum 0x10D04798
19:12:03.0312 3308	============================================================
19:12:03.0343 3308	C: <-> \Device\Harddisk0\DR0\Partition0
19:12:03.0375 3308	D: <-> \Device\Harddisk0\DR0\Partition1
19:12:03.0406 3308	E: <-> \Device\Harddisk0\DR0\Partition2
19:12:03.0406 3308	============================================================
19:12:03.0406 3308	Initialize success
19:12:03.0406 3308	============================================================
19:13:29.0125 0728	============================================================
19:13:29.0125 0728	Scan started
19:13:29.0125 0728	Mode: Manual; SigCheck; TDLFS; 
19:13:29.0125 0728	============================================================
19:13:29.0500 0728	Abiosdsk - ok
19:13:29.0515 0728	abp480n5 - ok
19:13:29.0546 0728	ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:13:30.0281 0728	ACPI - ok
19:13:30.0312 0728	ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
19:13:30.0437 0728	ACPIEC - ok
19:13:30.0531 0728	AcrSch2Svc      (97e4f91b996420b253fbec98b817e29f) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
19:13:30.0562 0728	AcrSch2Svc - ok
19:13:30.0562 0728	adpu160m - ok
19:13:30.0609 0728	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
19:13:30.0750 0728	aec - ok
19:13:30.0781 0728	AESTAud         (822d53766d57c90c437536232ece9023) C:\WINDOWS\system32\drivers\AESTAud.sys
19:13:30.0828 0728	AESTAud - ok
19:13:30.0859 0728	afcdp           (53696ad8ffc5fac51949a525ff65a689) C:\WINDOWS\system32\DRIVERS\afcdp.sys
19:13:30.0890 0728	afcdp - ok
19:13:31.0093 0728	afcdpsrv        (af44f7e027037628f1fac3c13cde73e6) C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe
19:13:31.0250 0728	afcdpsrv - ok
19:13:31.0406 0728	AFD             (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
19:13:31.0437 0728	AFD - ok
19:13:31.0437 0728	Aha154x - ok
19:13:31.0453 0728	aic78u2 - ok
19:13:31.0453 0728	aic78xx - ok
19:13:31.0484 0728	Alerter         (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
19:13:31.0578 0728	Alerter - ok
19:13:31.0609 0728	ALG             (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
19:13:31.0656 0728	ALG - ok
19:13:31.0656 0728	AliIde - ok
19:13:31.0671 0728	amsint - ok
19:13:31.0890 0728	AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Programme\Avira\AntiVir Desktop\sched.exe
19:13:31.0906 0728	AntiVirSchedulerService - ok
19:13:31.0937 0728	AntiVirService  (a489be6bb0aa1ff406b488b60542314b) C:\Programme\Avira\AntiVir Desktop\avguard.exe
19:13:31.0953 0728	AntiVirService - ok
19:13:31.0984 0728	AppMgmt         (d45960be52c3c610d361977057f98c54) C:\WINDOWS\System32\appmgmts.dll
19:13:32.0062 0728	AppMgmt - ok
19:13:32.0062 0728	asc - ok
19:13:32.0062 0728	asc3350p - ok
19:13:32.0078 0728	asc3550 - ok
19:13:32.0171 0728	aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
19:13:32.0218 0728	aspnet_state - ok
19:13:32.0234 0728	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:13:32.0343 0728	AsyncMac - ok
19:13:32.0375 0728	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
19:13:32.0468 0728	atapi - ok
19:13:32.0468 0728	Atdisk - ok
19:13:32.0546 0728	Ati HotKey Poller (e7d80b6b1fcae400c9eba9d103b43a04) C:\WINDOWS\system32\Ati2evxx.exe
19:13:32.0562 0728	Ati HotKey Poller - ok
19:13:32.0828 0728	ati2mtag        (991f30c921a8244421aed43af6900ce4) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
19:13:32.0984 0728	ati2mtag - ok
19:13:33.0140 0728	AtiHdmiService  (e3b9fe6d478dc12ee9fb5169ee98d1ba) C:\WINDOWS\system32\drivers\AtiHdmi.sys
19:13:33.0171 0728	AtiHdmiService - ok
19:13:33.0187 0728	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:13:33.0296 0728	Atmarpc - ok
19:13:33.0328 0728	AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
19:13:33.0468 0728	AudioSrv - ok
19:13:33.0500 0728	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
19:13:33.0609 0728	audstub - ok
19:13:33.0656 0728	avgntflt        (d5541f0afb767e85fc412fc609d96a74) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
19:13:33.0656 0728	avgntflt - ok
19:13:33.0703 0728	avipbb          (7d967a682d4694df7fa57d63a2db01fe) C:\WINDOWS\system32\DRIVERS\avipbb.sys
19:13:33.0718 0728	avipbb - ok
19:13:33.0765 0728	avkmgr          (53e56450da16a1a7f0d002f511113f67) C:\WINDOWS\system32\DRIVERS\avkmgr.sys
19:13:33.0781 0728	avkmgr - ok
19:13:33.0953 0728	BCM43XX         (5d4893633b7161fa25500eb7aeabec94) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
19:13:34.0093 0728	BCM43XX - ok
19:13:34.0250 0728	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
19:13:34.0359 0728	Beep - ok
19:13:34.0421 0728	BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
19:13:34.0515 0728	BITS - ok
19:13:34.0546 0728	Browser         (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
19:13:34.0671 0728	Browser - ok
19:13:34.0734 0728	btaudio         (4c1e8749d280f9b8e41c4eff6a6bbc04) C:\WINDOWS\system32\drivers\btaudio.sys
19:13:34.0765 0728	btaudio - ok
19:13:34.0796 0728	BTDriver        (a47b37b97f9348e81a60c44b99011416) C:\WINDOWS\system32\DRIVERS\btport.sys
19:13:34.0812 0728	BTDriver - ok
19:13:34.0890 0728	BTKRNL          (8f3952b72cc7349d628b36d3b62e86fc) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
19:13:34.0937 0728	BTKRNL - ok
19:13:35.0031 0728	btwdins         (b9dbbbb70ebbcd7880af03c33b2312bb) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
19:13:35.0046 0728	btwdins - ok
19:13:35.0078 0728	BTWDNDIS        (eb80e51cb4045571066d8ad1871e284e) C:\WINDOWS\system32\DRIVERS\btwdndis.sys
19:13:35.0093 0728	BTWDNDIS - ok
19:13:35.0125 0728	BTWUSB          (68420305b621fa6d96b05525a627041a) C:\WINDOWS\system32\Drivers\btwusb.sys
19:13:35.0140 0728	BTWUSB - ok
19:13:35.0171 0728	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
19:13:35.0281 0728	cbidf2k - ok
19:13:35.0296 0728	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
19:13:35.0406 0728	CCDECODE - ok
19:13:35.0406 0728	cd20xrnt - ok
19:13:35.0437 0728	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
19:13:35.0546 0728	Cdaudio - ok
19:13:35.0562 0728	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
19:13:35.0656 0728	Cdfs - ok
19:13:35.0703 0728	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:13:35.0812 0728	Cdrom - ok
19:13:35.0812 0728	Changer - ok
19:13:35.0859 0728	CiSvc           (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
19:13:35.0953 0728	CiSvc - ok
19:13:35.0968 0728	ClipSrv         (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
19:13:36.0078 0728	ClipSrv - ok
19:13:36.0140 0728	clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:13:36.0187 0728	clr_optimization_v2.0.50727_32 - ok
19:13:36.0203 0728	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
19:13:36.0328 0728	CmBatt - ok
19:13:36.0328 0728	CmdIde - ok
19:13:36.0343 0728	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
19:13:36.0453 0728	Compbatt - ok
19:13:36.0453 0728	COMSysApp - ok
19:13:36.0468 0728	Cpqarray - ok
19:13:36.0500 0728	CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
19:13:36.0593 0728	CryptSvc - ok
19:13:36.0609 0728	dac2w2k - ok
19:13:36.0609 0728	dac960nt - ok
19:13:36.0687 0728	DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
19:13:36.0718 0728	DcomLaunch - ok
19:13:36.0750 0728	Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
19:13:36.0843 0728	Dhcp - ok
19:13:36.0875 0728	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
19:13:36.0984 0728	Disk - ok
19:13:36.0984 0728	dmadmin - ok
19:13:37.0062 0728	dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
19:13:37.0187 0728	dmboot - ok
19:13:37.0203 0728	dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
19:13:37.0296 0728	dmio - ok
19:13:37.0312 0728	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
19:13:37.0406 0728	dmload - ok
19:13:37.0421 0728	dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
19:13:37.0531 0728	dmserver - ok
19:13:37.0546 0728	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
19:13:37.0671 0728	DMusic - ok
19:13:37.0703 0728	Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
19:13:37.0703 0728	Dnscache - ok
19:13:37.0734 0728	Dot3svc         (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
19:13:37.0843 0728	Dot3svc - ok
19:13:37.0843 0728	dpti2o - ok
19:13:37.0890 0728	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
19:13:37.0984 0728	drmkaud - ok
19:13:38.0000 0728	EapHost         (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
19:13:38.0109 0728	EapHost - ok
19:13:38.0125 0728	ElbyCDFL        (ce37e3d51912e59c80c6d84337c0b4cd) C:\WINDOWS\system32\Drivers\ElbyCDFL.sys
19:13:38.0156 0728	ElbyCDFL - ok
19:13:38.0156 0728	ElbyCDIO        (178cc9403816c082d22a1d47fa1f9c85) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
19:13:38.0171 0728	ElbyCDIO - ok
19:13:38.0187 0728	ERSvc           (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
19:13:38.0296 0728	ERSvc - ok
19:13:38.0328 0728	Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
19:13:38.0343 0728	Eventlog - ok
19:13:38.0390 0728	EventSystem     (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
19:13:38.0421 0728	EventSystem - ok
19:13:38.0453 0728	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
19:13:38.0562 0728	Fastfat - ok
19:13:38.0593 0728	FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
19:13:38.0609 0728	FastUserSwitchingCompatibility - ok
19:13:38.0640 0728	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
19:13:38.0734 0728	Fdc - ok
19:13:38.0734 0728	Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
19:13:38.0828 0728	Fips - ok
19:13:38.0843 0728	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
19:13:38.0937 0728	Flpydisk - ok
19:13:38.0984 0728	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
19:13:39.0078 0728	FltMgr - ok
19:13:39.0187 0728	FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:13:39.0203 0728	FontCache3.0.0.0 - ok
19:13:39.0218 0728	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:13:39.0328 0728	Fs_Rec - ok
19:13:39.0375 0728	FTDIBUS         (b7aa8283ec551d3a3b924e520e0621a7) C:\WINDOWS\system32\drivers\ftdibus.sys
19:13:39.0390 0728	FTDIBUS - ok
19:13:39.0406 0728	Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:13:39.0515 0728	Ftdisk - ok
19:13:39.0531 0728	FTSER2K         (596d31583ce332b5514520d74837f434) C:\WINDOWS\system32\drivers\ftser2k.sys
19:13:39.0546 0728	FTSER2K - ok
19:13:39.0578 0728	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:13:39.0671 0728	Gpc - ok
19:13:39.0703 0728	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:13:39.0796 0728	HDAudBus - ok
19:13:39.0843 0728	helpsvc         (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:13:39.0937 0728	helpsvc - ok
19:13:39.0937 0728	HidServ         (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
19:13:40.0046 0728	HidServ - ok
19:13:40.0093 0728	hidusb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:13:40.0187 0728	hidusb - ok
19:13:40.0218 0728	hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
19:13:40.0312 0728	hkmsvc - ok
19:13:40.0312 0728	hpn - ok
19:13:40.0375 0728	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
19:13:40.0390 0728	HTTP - ok
19:13:40.0421 0728	HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
19:13:40.0531 0728	HTTPFilter - ok
19:13:40.0531 0728	i2omgmt - ok
19:13:40.0546 0728	i2omp - ok
19:13:40.0578 0728	i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:13:40.0671 0728	i8042prt - ok
19:13:40.0765 0728	idsvc           (c01ac32dc5c03076cfb852cb5da5229c) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:13:40.0843 0728	idsvc - ok
19:13:40.0890 0728	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
19:13:40.0984 0728	Imapi - ok
19:13:41.0015 0728	ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
19:13:41.0109 0728	ImapiService - ok
19:13:41.0109 0728	ini910u - ok
19:13:41.0125 0728	IntelIde - ok
19:13:41.0140 0728	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
19:13:41.0250 0728	Ip6Fw - ok
19:13:41.0281 0728	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:13:41.0375 0728	IpFilterDriver - ok
19:13:41.0390 0728	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:13:41.0484 0728	IpInIp - ok
19:13:41.0515 0728	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:13:41.0609 0728	IpNat - ok
19:13:41.0625 0728	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:13:41.0734 0728	IPSec - ok
19:13:41.0765 0728	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
19:13:41.0828 0728	IRENUM - ok
19:13:41.0843 0728	isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:13:41.0953 0728	isapnp - ok
19:13:42.0000 0728	ISODrive        (bf71a06ff065e3fd7e32ea67dca34885) C:\Programme\UltraISO\drivers\ISODrive.sys
19:13:42.0015 0728	ISODrive ( UnsignedFile.Multi.Generic ) - warning
19:13:42.0015 0728	ISODrive - detected UnsignedFile.Multi.Generic (1)
19:13:42.0109 0728	JavaQuickStarterService (a456937acc87bb40d7e2331f1e3a2ac5) C:\Programme\Java\jre7\bin\jqs.exe
19:13:42.0125 0728	JavaQuickStarterService - ok
19:13:42.0156 0728	Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:13:42.0250 0728	Kbdclass - ok
19:13:42.0281 0728	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
19:13:42.0375 0728	kmixer - ok
19:13:42.0406 0728	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
19:13:42.0421 0728	KSecDD - ok
19:13:42.0453 0728	LanmanServer    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
19:13:42.0468 0728	LanmanServer - ok
19:13:42.0515 0728	lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
19:13:42.0531 0728	lanmanworkstation - ok
19:13:42.0531 0728	lbrtfdc - ok
19:13:42.0562 0728	LmHosts         (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
19:13:42.0671 0728	LmHosts - ok
19:13:42.0703 0728	MBAMProtector   (6dfe7f2e8e8a337263aa5c92a215f161) C:\WINDOWS\system32\drivers\mbam.sys
19:13:42.0718 0728	MBAMProtector - ok
19:13:42.0796 0728	MBAMService     (43683e970f008c93c9429ef428147a54) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
19:13:42.0828 0728	MBAMService - ok
19:13:42.0921 0728	MDM             (11f714f85530a2bd134074dc30e99fca) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
19:13:42.0937 0728	MDM - ok
19:13:42.0968 0728	Messenger       (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
19:13:43.0078 0728	Messenger - ok
19:13:43.0093 0728	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
19:13:43.0187 0728	mnmdd - ok
19:13:43.0203 0728	mnmsrvc         (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
19:13:43.0296 0728	mnmsrvc - ok
19:13:43.0312 0728	Modem           (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
19:13:43.0421 0728	Modem - ok
19:13:43.0437 0728	Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:13:43.0531 0728	Mouclass - ok
19:13:43.0546 0728	mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:13:43.0640 0728	mouhid - ok
19:13:43.0671 0728	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
19:13:43.0765 0728	MountMgr - ok
19:13:43.0765 0728	mraid35x - ok
19:13:43.0796 0728	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:13:43.0890 0728	MRxDAV - ok
19:13:43.0937 0728	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:13:43.0953 0728	MRxSmb - ok
19:13:43.0984 0728	MSDTC           (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
19:13:44.0078 0728	MSDTC - ok
19:13:44.0109 0728	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
19:13:44.0218 0728	Msfs - ok
19:13:44.0218 0728	MSIServer - ok
19:13:44.0250 0728	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:13:44.0343 0728	MSKSSRV - ok
19:13:44.0359 0728	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:13:44.0437 0728	MSPCLOCK - ok
19:13:44.0453 0728	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
19:13:44.0562 0728	MSPQM - ok
19:13:44.0578 0728	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:13:44.0671 0728	mssmbios - ok
19:13:44.0687 0728	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
19:13:44.0781 0728	MSTEE - ok
19:13:44.0812 0728	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
19:13:44.0843 0728	Mup - ok
19:13:44.0875 0728	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
19:13:44.0968 0728	NABTSFEC - ok
19:13:45.0031 0728	napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
19:13:45.0140 0728	napagent - ok
19:13:45.0187 0728	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
19:13:45.0281 0728	NDIS - ok
19:13:45.0296 0728	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
19:13:45.0390 0728	NdisIP - ok
19:13:45.0421 0728	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:13:45.0437 0728	NdisTapi - ok
19:13:45.0468 0728	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:13:45.0562 0728	Ndisuio - ok
19:13:45.0609 0728	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:13:45.0703 0728	NdisWan - ok
19:13:45.0718 0728	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
19:13:45.0734 0728	NDProxy - ok
19:13:45.0859 0728	Nero BackItUp Scheduler 3 (78073f606ae3b24f6c1f555759aa8511) C:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe
19:13:45.0890 0728	Nero BackItUp Scheduler 3 - ok
19:13:45.0937 0728	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
19:13:46.0031 0728	NetBIOS - ok
19:13:46.0078 0728	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
19:13:46.0171 0728	NetBT - ok
19:13:46.0203 0728	NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
19:13:46.0312 0728	NetDDE - ok
19:13:46.0312 0728	NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
19:13:46.0406 0728	NetDDEdsdm - ok
19:13:46.0437 0728	Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
19:13:46.0531 0728	Netlogon - ok
19:13:46.0546 0728	Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
19:13:46.0640 0728	Netman - ok
19:13:46.0750 0728	NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:13:46.0781 0728	NetTcpPortSharing - ok
19:13:46.0828 0728	Nla             (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
19:13:46.0859 0728	Nla - ok
19:13:46.0937 0728	NMIndexingService (62f68443d244024845b875b44d76a92f) C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe
19:13:46.0968 0728	NMIndexingService - ok
19:13:47.0000 0728	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
19:13:47.0093 0728	Npfs - ok
19:13:47.0140 0728	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
19:13:47.0265 0728	Ntfs - ok
19:13:47.0265 0728	NtLmSsp         (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
19:13:47.0359 0728	NtLmSsp - ok
19:13:47.0406 0728	NtmsSvc         (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
19:13:47.0515 0728	NtmsSvc - ok
19:13:47.0546 0728	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
19:13:47.0640 0728	Null - ok
19:13:47.0687 0728	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:13:47.0796 0728	NwlnkFlt - ok
19:13:47.0796 0728	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:13:47.0906 0728	NwlnkFwd - ok
19:13:47.0968 0728	ose             (7a56cf3e3f12e8af599963b16f50fb6a) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
19:13:47.0984 0728	ose - ok
19:13:48.0031 0728	Parport         (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
19:13:48.0125 0728	Parport - ok
19:13:48.0156 0728	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
19:13:48.0234 0728	PartMgr - ok
19:13:48.0265 0728	ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
19:13:48.0359 0728	ParVdm - ok
19:13:48.0359 0728	PCI             (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
19:13:48.0453 0728	PCI - ok
19:13:48.0468 0728	PCIDump - ok
19:13:48.0484 0728	PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
19:13:48.0562 0728	PCIIde - ok
19:13:48.0593 0728	Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
19:13:48.0687 0728	Pcmcia - ok
19:13:48.0703 0728	PDCOMP - ok
19:13:48.0703 0728	PDFRAME - ok
19:13:48.0718 0728	PDRELI - ok
19:13:48.0718 0728	PDRFRAME - ok
19:13:48.0734 0728	perc2 - ok
19:13:48.0734 0728	perc2hib - ok
19:13:48.0781 0728	PLFlash DeviceIoControl Service (875e4e0661f3a5994df9e5e3a0a4f96b) C:\WINDOWS\system32\IoctlSvc.exe
19:13:48.0796 0728	PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - warning
19:13:48.0796 0728	PLFlash DeviceIoControl Service - detected UnsignedFile.Multi.Generic (1)
19:13:48.0828 0728	PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
19:13:48.0843 0728	PlugPlay - ok
19:13:48.0843 0728	PolicyAgent     (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
19:13:48.0937 0728	PolicyAgent - ok
19:13:48.0953 0728	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:13:49.0062 0728	PptpMiniport - ok
19:13:49.0093 0728	PrecSim         (c3127bfdab6200769b5a0184fab48573) C:\WINDOWS\system32\DRIVERS\precsim.sys
19:13:49.0109 0728	PrecSim ( UnsignedFile.Multi.Generic ) - warning
19:13:49.0109 0728	PrecSim - detected UnsignedFile.Multi.Generic (1)
19:13:49.0125 0728	Processor       (2cb55427c58679f49ad600fccba76360) C:\WINDOWS\system32\DRIVERS\processr.sys
19:13:49.0218 0728	Processor - ok
19:13:49.0218 0728	ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
19:13:49.0312 0728	ProtectedStorage - ok
19:13:49.0328 0728	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
19:13:49.0421 0728	PSched - ok
19:13:49.0421 0728	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:13:49.0531 0728	Ptilink - ok
19:13:49.0531 0728	ql1080 - ok
19:13:49.0546 0728	Ql10wnt - ok
19:13:49.0546 0728	ql12160 - ok
19:13:49.0562 0728	ql1240 - ok
19:13:49.0562 0728	ql1280 - ok
19:13:49.0578 0728	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:13:49.0671 0728	RasAcd - ok
19:13:49.0703 0728	RasAuto         (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
19:13:49.0812 0728	RasAuto - ok
19:13:49.0843 0728	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:13:49.0937 0728	Rasl2tp - ok
19:13:49.0968 0728	RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
19:13:50.0078 0728	RasMan - ok
19:13:50.0093 0728	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:13:50.0187 0728	RasPppoe - ok
19:13:50.0187 0728	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
19:13:50.0281 0728	Raspti - ok
19:13:50.0343 0728	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:13:50.0437 0728	Rdbss - ok
19:13:50.0453 0728	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:13:50.0546 0728	RDPCDD - ok
19:13:50.0609 0728	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
19:13:50.0703 0728	rdpdr - ok
19:13:50.0765 0728	RDPWD           (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
19:13:50.0781 0728	RDPWD - ok
19:13:50.0828 0728	RDSessMgr       (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
19:13:50.0921 0728	RDSessMgr - ok
19:13:50.0953 0728	redbook         (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
19:13:51.0062 0728	redbook - ok
19:13:51.0109 0728	RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
19:13:51.0203 0728	RemoteAccess - ok
19:13:51.0250 0728	RemoteRegistry  (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS\system32\regsvc.dll
19:13:51.0343 0728	RemoteRegistry - ok
19:13:51.0375 0728	RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
19:13:51.0484 0728	RpcLocator - ok
19:13:51.0531 0728	RpcSs           (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\System32\rpcss.dll
19:13:51.0562 0728	RpcSs - ok
19:13:51.0593 0728	RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
19:13:51.0703 0728	RSVP - ok
19:13:51.0734 0728	RTLE8023xp      (e47c52f0380f0950e2bc9f1bcdc0de9b) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
19:13:51.0765 0728	RTLE8023xp - ok
19:13:51.0796 0728	SamSs           (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
19:13:51.0890 0728	SamSs - ok
19:13:51.0906 0728	SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
19:13:52.0015 0728	SCardSvr - ok
19:13:52.0046 0728	Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
19:13:52.0156 0728	Schedule - ok
19:13:52.0187 0728	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:13:52.0234 0728	Secdrv - ok
19:13:52.0250 0728	seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
19:13:52.0343 0728	seclogon - ok
19:13:52.0359 0728	SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
19:13:52.0453 0728	SENS - ok
19:13:52.0484 0728	Ser2pl          (de0a165d9f8ea295e62ea702ef2f8125) C:\WINDOWS\system32\DRIVERS\ser2pl.sys
19:13:52.0500 0728	Ser2pl - ok
19:13:52.0531 0728	Serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
19:13:52.0625 0728	Serenum - ok
19:13:52.0671 0728	Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\drivers\Serial.sys
19:13:52.0765 0728	Serial - ok
19:13:52.0796 0728	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
19:13:52.0890 0728	Sfloppy - ok
19:13:52.0937 0728	SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
19:13:53.0031 0728	SharedAccess - ok
19:13:53.0062 0728	ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
19:13:53.0078 0728	ShellHWDetection - ok
19:13:53.0078 0728	Simbad - ok
19:13:53.0109 0728	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
19:13:53.0203 0728	SLIP - ok
19:13:53.0234 0728	snapman         (eb49860e776ce860dc3cfb9edb1ba517) C:\WINDOWS\system32\DRIVERS\snapman.sys
19:13:53.0265 0728	snapman - ok
19:13:53.0296 0728	SONYPVU1        (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
19:13:53.0390 0728	SONYPVU1 - ok
19:13:53.0390 0728	Sparrow - ok
19:13:53.0421 0728	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
19:13:53.0515 0728	splitter - ok
19:13:53.0531 0728	Spooler         (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
19:13:53.0562 0728	Spooler - ok
19:13:53.0593 0728	sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
19:13:53.0671 0728	sr - ok
19:13:53.0703 0728	srservice       (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
19:13:53.0750 0728	srservice - ok
19:13:53.0796 0728	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
19:13:53.0812 0728	Srv - ok
19:13:53.0859 0728	SSDPSRV         (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
19:13:53.0921 0728	SSDPSRV - ok
19:13:53.0953 0728	ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
19:13:53.0953 0728	ssmdrv - ok
19:13:54.0015 0728	STacSV          (43dc7ada838f6a24b93b7c7ff2fcd08d) c:\programme\idt\wdm\STacSV.exe
19:13:54.0046 0728	STacSV - ok
19:13:54.0156 0728	STHDA           (517746e78da290700d82976a5b7e99a7) C:\WINDOWS\system32\drivers\sthda.sys
19:13:54.0218 0728	STHDA - ok
19:13:54.0359 0728	stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
19:13:54.0453 0728	stisvc - ok
19:13:54.0500 0728	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
19:13:54.0609 0728	streamip - ok
19:13:54.0625 0728	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
19:13:54.0718 0728	swenum - ok
19:13:54.0750 0728	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
19:13:54.0843 0728	swmidi - ok
19:13:54.0843 0728	SwPrv - ok
19:13:54.0859 0728	symc810 - ok
19:13:54.0859 0728	symc8xx - ok
19:13:54.0875 0728	sym_hi - ok
19:13:54.0875 0728	sym_u3 - ok
19:13:54.0921 0728	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
19:13:55.0015 0728	sysaudio - ok
19:13:55.0062 0728	SysmonLog       (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
19:13:55.0156 0728	SysmonLog - ok
19:13:55.0203 0728	TapiSrv         (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
19:13:55.0296 0728	TapiSrv - ok
19:13:55.0343 0728	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:13:55.0359 0728	Tcpip - ok
19:13:55.0390 0728	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
19:13:55.0484 0728	TDPIPE - ok
19:13:55.0562 0728	tdrpman273      (431801fcc97034e04a6eff81136578d7) C:\WINDOWS\system32\DRIVERS\tdrpm273.sys
19:13:55.0609 0728	tdrpman273 - ok
19:13:55.0640 0728	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
19:13:55.0734 0728	TDTCP - ok
19:13:55.0765 0728	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
19:13:55.0859 0728	TermDD - ok
19:13:55.0906 0728	TermService     (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
19:13:56.0000 0728	TermService - ok
19:13:56.0031 0728	Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
19:13:56.0046 0728	Themes - ok
19:13:56.0109 0728	timounter       (a34d7024bb7140ec785c86bc065d4f60) C:\WINDOWS\system32\DRIVERS\timntr.sys
19:13:56.0156 0728	timounter - ok
19:13:56.0187 0728	TlntSvr         (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS\system32\tlntsvr.exe
19:13:56.0250 0728	TlntSvr - ok
19:13:56.0265 0728	TosIde - ok
19:13:56.0281 0728	TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
19:13:56.0359 0728	TrkWks - ok
19:13:56.0390 0728	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
19:13:56.0484 0728	Udfs - ok
19:13:56.0500 0728	ultra - ok
19:13:56.0531 0728	UMWdf           (c81b8635dee0d3ef5f64b3dd643023a5) C:\WINDOWS\system32\wdfmgr.exe
19:13:56.0531 0728	UMWdf - ok
19:13:56.0593 0728	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
19:13:56.0718 0728	Update - ok
19:13:56.0750 0728	upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
19:13:56.0812 0728	upnphost - ok
19:13:56.0828 0728	UPS             (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
19:13:56.0921 0728	UPS - ok
19:13:56.0937 0728	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:13:57.0046 0728	usbccgp - ok
19:13:57.0062 0728	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:13:57.0156 0728	usbehci - ok
19:13:57.0171 0728	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:13:57.0281 0728	usbhub - ok
19:13:57.0281 0728	usbohci         (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
19:13:57.0390 0728	usbohci - ok
19:13:57.0421 0728	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:13:57.0515 0728	USBSTOR - ok
19:13:57.0531 0728	usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
19:13:57.0625 0728	usbvideo - ok
19:13:57.0656 0728	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
19:13:57.0765 0728	VgaSave - ok
19:13:57.0765 0728	ViaIde - ok
19:13:57.0812 0728	VolSnap         (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
19:13:57.0906 0728	VolSnap - ok
19:13:57.0968 0728	VSS             (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
19:13:58.0031 0728	VSS - ok
19:13:58.0062 0728	W32Time         (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
19:13:58.0156 0728	W32Time - ok
19:13:58.0187 0728	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:13:58.0281 0728	Wanarp - ok
19:13:58.0312 0728	wceusbsh        (46a247f6617526afe38b6f12f5512120) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
19:13:58.0328 0728	wceusbsh - ok
19:13:58.0343 0728	WDICA - ok
19:13:58.0359 0728	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
19:13:58.0453 0728	wdmaud - ok
19:13:58.0484 0728	WebClient       (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
19:13:58.0562 0728	WebClient - ok
19:13:58.0640 0728	winmgmt         (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
19:13:58.0734 0728	winmgmt - ok
19:13:58.0781 0728	WmdmPmSN        (a477391b7a8b0a0daabadb17cf533a4b) C:\WINDOWS\system32\MsPMSNSv.dll
19:13:58.0812 0728	WmdmPmSN - ok
19:13:58.0875 0728	Wmi             (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS\System32\advapi32.dll
19:13:58.0937 0728	Wmi - ok
19:13:58.0953 0728	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
19:13:59.0031 0728	WmiAcpi - ok
19:13:59.0062 0728	WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:13:59.0156 0728	WmiApSrv - ok
19:13:59.0171 0728	WS2IFSL         (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
19:13:59.0250 0728	WS2IFSL - ok
19:13:59.0281 0728	wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
19:13:59.0375 0728	wscsvc - ok
19:13:59.0390 0728	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
19:13:59.0484 0728	WSTCODEC - ok
19:13:59.0515 0728	wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
19:13:59.0593 0728	wuauserv - ok
19:13:59.0640 0728	WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
19:13:59.0750 0728	WZCSVC - ok
19:13:59.0781 0728	xmlprov         (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
19:13:59.0890 0728	xmlprov - ok
19:13:59.0921 0728	MBR (0x1B8)     (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
19:14:00.0468 0728	\Device\Harddisk0\DR0 - ok
19:14:00.0468 0728	Boot (0x1200)   (3289e42ebcd3045435f3c3a01fb314e4) \Device\Harddisk0\DR0\Partition0
19:14:00.0468 0728	\Device\Harddisk0\DR0\Partition0 - ok
19:14:00.0484 0728	Boot (0x1200)   (a25251ca17618ebaf41cd2de48aa984e) \Device\Harddisk0\DR0\Partition1
19:14:00.0484 0728	\Device\Harddisk0\DR0\Partition1 - ok
19:14:00.0500 0728	Boot (0x1200)   (148a43f3096f6347374060452da853f9) \Device\Harddisk0\DR0\Partition2
19:14:00.0515 0728	\Device\Harddisk0\DR0\Partition2 - ok
19:14:00.0515 0728	============================================================
19:14:00.0515 0728	Scan finished
19:14:00.0515 0728	============================================================
19:14:00.0640 0956	Detected object count: 3
19:14:00.0640 0956	Actual detected object count: 3
19:14:19.0968 0956	ISODrive ( UnsignedFile.Multi.Generic ) - skipped by user
19:14:19.0968 0956	ISODrive ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:14:19.0968 0956	PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - skipped by user
19:14:19.0968 0956	PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:14:19.0968 0956	PrecSim ( UnsignedFile.Multi.Generic ) - skipped by user
19:14:19.0968 0956	PrecSim ( UnsignedFile.Multi.Generic ) - User select action: Skip
         
VG
__________________

 

Themen zu PUM.Hijack.StartMenu die Zweite
gesamte, pum.hijack.startmenu, rechner, scan, zweit




Ähnliche Themen: PUM.Hijack.StartMenu die Zweite


  1. MWB hat PUM.Hijack.StartMenu gefunden und in Quarantäne verschoben
    Log-Analyse und Auswertung - 08.01.2015 (13)
  2. PUM.Hijack.StartMenu bei RoutineScan gefunden
    Log-Analyse und Auswertung - 26.04.2014 (11)
  3. Problem -> PUM.Hijack.StartMenu
    Plagegeister aller Art und deren Bekämpfung - 02.02.2014 (14)
  4. Win XP - AntiMalware findet PUM.hijack.startmenu in der Registry
    Log-Analyse und Auswertung - 25.08.2013 (8)
  5. Pum Hijack im Startmenu
    Plagegeister aller Art und deren Bekämpfung - 18.02.2013 (19)
  6. PUM.Hijack.StartMenu und Trojan.FakeAlert - das erste Mal ein Problem.
    Plagegeister aller Art und deren Bekämpfung - 14.11.2012 (3)
  7. PUM.Hijack.StartMenu
    Log-Analyse und Auswertung - 19.07.2012 (43)
  8. PUM.Hijack.StartMenu; schon wieder!
    Log-Analyse und Auswertung - 19.06.2012 (4)
  9. MBAM findet PUM.Hijack.StartMenu
    Log-Analyse und Auswertung - 25.05.2012 (3)
  10. PUM.Hijack.StartMenu & Trojan.FakeAlert in der registry
    Log-Analyse und Auswertung - 10.03.2012 (26)
  11. MBAM hat 3x PUM.Hijack.Startmenu/Help bei XP mit SP3 gefunden!
    Log-Analyse und Auswertung - 17.11.2011 (6)
  12. Trojaner Trojan.Spyeyes, PUM.Hijack.Startmenu, Rogue.FakeAlert etc.
    Log-Analyse und Auswertung - 14.11.2011 (16)
  13. Malwarebytes' Anti-Malware findet PUM.Hijack.StartMenu in Registry
    Log-Analyse und Auswertung - 27.09.2011 (10)
  14. pum.hijack.startmenu auf XP SP3 eingefangen, wie lösbar?
    Log-Analyse und Auswertung - 02.09.2011 (33)
  15. Heuristics.Shuriken & PUM.Hijack.StartMenu
    Plagegeister aller Art und deren Bekämpfung - 05.04.2011 (2)
  16. PUM.Hijack.Startmenu was das?
    Log-Analyse und Auswertung - 24.01.2011 (14)
  17. LogProt Frage - PUM.Hijack.StartMenu
    Log-Analyse und Auswertung - 24.01.2011 (10)

Zum Thema PUM.Hijack.StartMenu die Zweite - So da isser Code: Alles auswählen Aufklappen ATTFilter 19:12:01.0671 3308 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32 19:12:01.0812 3308 ============================================================ 19:12:01.0812 3308 Current date / time: 2012/08/08 19:12:01.0812 - PUM.Hijack.StartMenu die Zweite...
Archiv
Du betrachtest: PUM.Hijack.StartMenu die Zweite auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.