Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Rogueware und Rootkit und und und...

Rogueware und Rootkit und und und...


Plagegeister aller Art und deren Bekämpfung: Rogueware und Rootkit und und und...

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 19.01.2013, 13:25   #1
b6d
 
Rogueware und Rootkit und und und... - Standard

Rogueware und Rootkit und und und...


Hallo, liebes Forum.

Ich muss einen älteren Laptop reparieren, nachdem dieser sich was eingefangen hat.
Es fing mit einem drive-by-Exploit an: Plötzlich kam eine Rogueware zum Vorschein, die sagte, der PC wär unsicher etc. Man konnte nicht mehr ins Internet.

Avira Antivir hat nebenbei folgende Sachen gefunden:
TR/ATRAPS.GEN2 und noch was anderes (kann den Bericht leider nicht öffnen, da der wohl garnicht existiert)
und dann noch:
EXP/Pdfjsca.adf

Aus Zeitgründen habe ich dann nur kurz eine Systemwiederherstellung gemacht. Die Rogueware war zumindest schonmal weg.

Danach konnte man fast keine Programme mehr starten, da immer eine "Öffnen mit..."-Meldung kam. Das habe ich aber wieder gefixt.
Danach habe ich erstmal alle möglichen Sachen geupdatet (Browser, Adobe Flash und Reader, Java).

Dann habe ich im abgesicherten Modus gestartet und Avira und MBAM nochmal durchlaufen lassen.

Jetzt bin ich die Anleitung hier durchgegangen und lade alle logs in einem Archiv mit hoch.

Hier nochmal zusammenfassend, was Avira und MBAM gefunden haben:
TR/ATRAPS.GEN2
EXP/Pdfjsca.adf
BDS/ZAccess.bblw
TR/PSW.Fareit.313
EXP/2013-0422.D
JAVA/Lamar.RX
JAVA/Lamar.RY
TR/Rootkit.Gen2
Trojan.0Access
Trojan.Lameshield.124
Rootkit.Necurs

Scheint alles recht hochwertige Malware zu sein mit Exploits und Rootkits etc. Deswegen wäre das super gut, wenn nochmal ein Profi rüberschauen könnte :-)

Danke

Hier noch der TDSS-Killer Report:

Code:
ATTFilter
14:20:24.0218 2836  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
14:20:24.0437 2836  ============================================================
14:20:24.0437 2836  Current date / time: 2013/01/19 14:20:24.0437
14:20:24.0437 2836  SystemInfo:
14:20:24.0437 2836  
14:20:24.0437 2836  OS Version: 5.1.2600 ServicePack: 3.0
14:20:24.0437 2836  Product type: Workstation
14:20:24.0437 2836  ComputerName: CHRISTASLAPTOP
14:20:24.0437 2836  UserName: Christa
14:20:24.0437 2836  Windows directory: C:\WINDOWS
14:20:24.0437 2836  System windows directory: C:\WINDOWS
14:20:24.0437 2836  Processor architecture: Intel x86
14:20:24.0437 2836  Number of processors: 1
14:20:24.0437 2836  Page size: 0x1000
14:20:24.0437 2836  Boot type: Normal boot
14:20:24.0437 2836  ============================================================
14:20:26.0312 2836  Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
14:20:26.0312 2836  ============================================================
14:20:26.0312 2836  \Device\Harddisk0\DR0:
14:20:26.0312 2836  MBR partitions:
14:20:26.0312 2836  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
14:20:26.0312 2836  ============================================================
14:20:26.0328 2836  C: <-> \Device\Harddisk0\DR0\Partition1
14:20:26.0359 2836  ============================================================
14:20:26.0359 2836  Initialize success
14:20:26.0359 2836  ============================================================
14:20:50.0687 2896  ============================================================
14:20:50.0687 2896  Scan started
14:20:50.0687 2896  Mode: Manual; SigCheck; TDLFS; 
14:20:50.0687 2896  ============================================================
14:20:51.0000 2896  ================ Scan system memory ========================
14:20:51.0000 2896  System memory - ok
14:20:51.0000 2896  ================ Scan services =============================
14:20:51.0171 2896  Abiosdsk - ok
14:20:51.0203 2896  abp480n5 - ok
14:20:51.0296 2896  [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon        C:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
14:20:51.0609 2896  ACDaemon - ok
14:20:51.0687 2896  [ 27F954120BABB8A00F8745D8F5BC9B82 ] acedrv11        C:\WINDOWS\system32\drivers\acedrv11.sys
14:20:51.0828 2896  acedrv11 - ok
14:20:51.0921 2896  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:20:54.0109 2896  ACPI - ok
14:20:54.0171 2896  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
14:20:54.0515 2896  ACPIEC - ok
14:20:54.0609 2896  [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
14:20:54.0640 2896  AdobeFlashPlayerUpdateSvc - ok
14:20:54.0656 2896  adpu160m - ok
14:20:54.0718 2896  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
14:20:54.0890 2896  aec - ok
14:20:54.0953 2896  [ FE3EA6E9AFC1A78E6EDCA121E006AFB7 ] Afc             C:\WINDOWS\system32\drivers\Afc.sys
14:20:54.0984 2896  Afc - ok
14:20:55.0046 2896  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
14:20:55.0140 2896  AFD - ok
14:20:55.0156 2896  Aha154x - ok
14:20:55.0171 2896  aic78u2 - ok
14:20:55.0203 2896  aic78xx - ok
14:20:55.0250 2896  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
14:20:55.0406 2896  Alerter - ok
14:20:55.0421 2896  [ 190CD73D4984F94D823F9444980513E5 ] ALG             C:\WINDOWS\System32\alg.exe
14:20:55.0531 2896  ALG - ok
14:20:55.0546 2896  AliIde - ok
14:20:55.0562 2896  amsint - ok
14:20:55.0671 2896  [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
14:20:55.0718 2896  AntiVirSchedulerService - ok
14:20:55.0781 2896  [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService  C:\Programme\Avira\AntiVir Desktop\avguard.exe
14:20:55.0812 2896  AntiVirService - ok
14:20:55.0859 2896  AppMgmt - ok
14:20:55.0984 2896  [ C3A2FF99C7469B8D06A102DCF8C4CFF6 ] AR5523          C:\WINDOWS\system32\DRIVERS\ar5523.sys
14:20:56.0140 2896  AR5523 ( UnsignedFile.Multi.Generic ) - warning
14:20:56.0140 2896  AR5523 - detected UnsignedFile.Multi.Generic (1)
14:20:56.0156 2896  asc - ok
14:20:56.0187 2896  asc3350p - ok
14:20:56.0218 2896  asc3550 - ok
14:20:56.0312 2896  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
14:20:56.0375 2896  aspnet_state - ok
14:20:56.0406 2896  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:20:56.0578 2896  AsyncMac - ok
14:20:56.0609 2896  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
14:20:56.0781 2896  atapi - ok
14:20:56.0796 2896  Atdisk - ok
14:20:56.0843 2896  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:20:57.0000 2896  Atmarpc - ok
14:20:57.0109 2896  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
14:20:57.0296 2896  AudioSrv - ok
14:20:57.0343 2896  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
14:20:57.0515 2896  audstub - ok
14:20:57.0546 2896  [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt        C:\WINDOWS\system32\DRIVERS\avgntflt.sys
14:20:57.0578 2896  avgntflt - ok
14:20:57.0640 2896  [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb          C:\WINDOWS\system32\DRIVERS\avipbb.sys
14:20:57.0671 2896  avipbb - ok
14:20:57.0734 2896  [ 53E56450DA16A1A7F0D002F511113F67 ] avkmgr          C:\WINDOWS\system32\DRIVERS\avkmgr.sys
14:20:57.0781 2896  avkmgr - ok
14:20:57.0875 2896  [ 9BD46C1D2F33A890B7226EDF543F18AA ] AVM WLAN Connection Service C:\Programme\avmwlanstick\WlanNetService.exe
14:20:57.0953 2896  AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - warning
14:20:57.0953 2896  AVM WLAN Connection Service - detected UnsignedFile.Multi.Generic (1)
14:20:57.0968 2896  [ 263CF9D248FD5E020A1333ED4F7EAA88 ] avmeject        C:\WINDOWS\system32\drivers\avmeject.sys
14:20:58.0000 2896  avmeject ( UnsignedFile.Multi.Generic ) - warning
14:20:58.0000 2896  avmeject - detected UnsignedFile.Multi.Generic (1)
14:20:58.0062 2896  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
14:20:58.0203 2896  Beep - ok
14:20:58.0250 2896  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
14:20:58.0453 2896  BITS - ok
14:20:58.0500 2896  [ B71549F23736ADF83A571061C47777FD ] Browser         C:\WINDOWS\System32\browser.dll
14:20:58.0593 2896  Browser - ok
14:20:58.0625 2896  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
14:20:58.0796 2896  cbidf2k - ok
14:20:58.0843 2896  [ 181B4A19965024A2AFA01FA2102B2A2D ] CBTNDIS5        C:\WINDOWS\system32\CBTNDIS5.SYS
14:20:58.0859 2896  CBTNDIS5 ( UnsignedFile.Multi.Generic ) - warning
14:20:58.0859 2896  CBTNDIS5 - detected UnsignedFile.Multi.Generic (1)
14:20:58.0906 2896  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
14:20:59.0078 2896  CCDECODE - ok
14:20:59.0093 2896  cd20xrnt - ok
14:20:59.0187 2896  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
14:20:59.0343 2896  Cdaudio - ok
14:20:59.0390 2896  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
14:20:59.0546 2896  Cdfs - ok
14:20:59.0593 2896  [ 4B0A100EAF5C49EF3CCA8C641431EACC ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:20:59.0687 2896  Cdrom - ok
14:20:59.0718 2896  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc           C:\WINDOWS\system32\cisvc.exe
14:20:59.0859 2896  CiSvc - ok
14:20:59.0953 2896  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
14:21:00.0125 2896  ClipSrv - ok
14:21:00.0218 2896  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:21:00.0406 2896  clr_optimization_v2.0.50727_32 - ok
14:21:00.0437 2896  [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt          C:\WINDOWS\system32\DRIVERS\CmBatt.sys
14:21:00.0593 2896  CmBatt - ok
14:21:00.0609 2896  CmdIde - ok
14:21:00.0734 2896  [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt        C:\WINDOWS\system32\DRIVERS\compbatt.sys
14:21:00.0890 2896  Compbatt - ok
14:21:00.0921 2896  COMSysApp - ok
14:21:00.0968 2896  Cpqarray - ok
14:21:01.0078 2896  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
14:21:01.0234 2896  CryptSvc - ok
14:21:01.0250 2896  dac2w2k - ok
14:21:01.0281 2896  dac960nt - ok
14:21:01.0406 2896  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
14:21:01.0468 2896  DcomLaunch - ok
14:21:01.0546 2896  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
14:21:01.0703 2896  Dhcp - ok
14:21:01.0750 2896  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
14:21:01.0937 2896  Disk - ok
14:21:01.0968 2896  dmadmin - ok
14:21:02.0078 2896  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
14:21:02.0312 2896  dmboot - ok
14:21:02.0375 2896  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
14:21:02.0531 2896  dmio - ok
14:21:02.0593 2896  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
14:21:02.0734 2896  dmload - ok
14:21:02.0781 2896  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
14:21:02.0937 2896  dmserver - ok
14:21:02.0984 2896  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
14:21:03.0156 2896  DMusic - ok
14:21:03.0265 2896  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
14:21:03.0375 2896  Dnscache - ok
14:21:03.0406 2896  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
14:21:03.0562 2896  Dot3svc - ok
14:21:03.0593 2896  dpti2o - ok
14:21:03.0703 2896  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
14:21:03.0828 2896  drmkaud - ok
14:21:03.0890 2896  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost         C:\WINDOWS\System32\eapsvc.dll
14:21:04.0062 2896  EapHost - ok
14:21:04.0109 2896  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc           C:\WINDOWS\System32\ersvc.dll
14:21:04.0265 2896  ERSvc - ok
14:21:04.0375 2896  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
14:21:04.0437 2896  Eventlog - ok
14:21:04.0515 2896  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem     C:\WINDOWS\system32\es.dll
14:21:04.0562 2896  EventSystem - ok
14:21:04.0593 2896  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
14:21:04.0765 2896  Fastfat - ok
14:21:04.0828 2896  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
14:21:04.0937 2896  FastUserSwitchingCompatibility - ok
14:21:04.0968 2896  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
14:21:05.0140 2896  Fdc - ok
14:21:05.0234 2896  [ 47D9EE42AE1659B220DF7B1BB2720DF1 ] FETND5BV        C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
14:21:05.0296 2896  FETND5BV - ok
14:21:05.0328 2896  [ E9648254056BCE81A85380C0C3647DC4 ] FETNDIS         C:\WINDOWS\system32\DRIVERS\fetnd5.sys
14:21:05.0484 2896  FETNDIS - ok
14:21:05.0531 2896  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
14:21:05.0703 2896  Fips - ok
14:21:05.0750 2896  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
14:21:05.0921 2896  Flpydisk - ok
14:21:06.0031 2896  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
14:21:06.0187 2896  FltMgr - ok
14:21:06.0265 2896  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
14:21:06.0296 2896  FontCache3.0.0.0 - ok
14:21:06.0343 2896  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:21:06.0515 2896  Fs_Rec - ok
14:21:06.0546 2896  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:21:06.0734 2896  Ftdisk - ok
14:21:06.0765 2896  [ FF12FA487265DA2AC7DE4BE53F72FF1A ] FWLANUSB        C:\WINDOWS\system32\DRIVERS\fwlanusb.sys
14:21:06.0843 2896  FWLANUSB - ok
14:21:06.0906 2896  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:21:07.0062 2896  Gpc - ok
14:21:07.0171 2896  [ 2A013E7530BEAB6E569FAA83F517E836 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys
14:21:07.0281 2896  HdAudAddService - ok
14:21:07.0343 2896  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
14:21:07.0500 2896  HDAudBus - ok
14:21:07.0609 2896  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:21:07.0781 2896  helpsvc - ok
14:21:07.0843 2896  [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ         C:\WINDOWS\System32\hidserv.dll
14:21:08.0000 2896  HidServ - ok
14:21:08.0109 2896  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:21:08.0281 2896  HidUsb - ok
14:21:08.0343 2896  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
14:21:08.0484 2896  hkmsvc - ok
14:21:08.0500 2896  hpn - ok
14:21:08.0562 2896  [ 915D74AA6E52F34301FC74C0D95F19D8 ] HRService       C:\Programme\Haufe\iDesk\iDeskService\iDeskService.exe
14:21:08.0578 2896  HRService - ok
14:21:08.0640 2896  [ D8D9DED6DCC4E3AEE633E6BA462B75C4 ] HSFHWAZL        C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
14:21:08.0703 2896  HSFHWAZL - ok
14:21:08.0796 2896  [ 2DF42CF7300B14B15953218A2B32217C ] HSF_DPV         C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
14:21:08.0953 2896  HSF_DPV - ok
14:21:09.0015 2896  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
14:21:09.0046 2896  HTTP - ok
14:21:09.0109 2896  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
14:21:09.0265 2896  HTTPFilter - ok
14:21:09.0296 2896  i2omp - ok
14:21:09.0375 2896  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:21:09.0546 2896  i8042prt - ok
14:21:09.0640 2896  [ 6F95324909B502E2651442C1548AB12F ] IDriverT        C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
14:21:09.0671 2896  IDriverT ( UnsignedFile.Multi.Generic ) - warning
14:21:09.0671 2896  IDriverT - detected UnsignedFile.Multi.Generic (1)
14:21:09.0796 2896  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:21:09.0953 2896  idsvc - ok
14:21:09.0984 2896  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
14:21:10.0187 2896  Imapi - ok
14:21:10.0234 2896  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\system32\imapi.exe
14:21:10.0421 2896  ImapiService - ok
14:21:10.0453 2896  ini910u - ok
14:21:10.0703 2896  [ 60D7460B07012D364CED11DD9FD83E1F ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
14:21:11.0171 2896  IntcAzAudAddService - ok
14:21:11.0203 2896  IntelIde - ok
14:21:11.0281 2896  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
14:21:11.0437 2896  intelppm - ok
14:21:11.0468 2896  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\drivers\ip6fw.sys
14:21:11.0640 2896  Ip6Fw - ok
14:21:11.0671 2896  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:21:11.0843 2896  IpFilterDriver - ok
14:21:11.0921 2896  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:21:12.0093 2896  IpInIp - ok
14:21:12.0187 2896  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:21:12.0359 2896  IpNat - ok
14:21:12.0390 2896  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:21:12.0562 2896  IPSec - ok
14:21:12.0593 2896  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
14:21:12.0687 2896  IRENUM - ok
14:21:12.0750 2896  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:21:12.0906 2896  isapnp - ok
14:21:13.0125 2896  [ 7FBFEEE245821925129C9F86470BF33C ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe
14:21:13.0171 2896  JavaQuickStarterService - ok
14:21:13.0234 2896  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:21:13.0406 2896  Kbdclass - ok
14:21:13.0484 2896  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
14:21:13.0687 2896  kmixer - ok
14:21:13.0750 2896  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
14:21:13.0843 2896  KSecDD - ok
14:21:13.0890 2896  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
14:21:13.0984 2896  lanmanserver - ok
14:21:14.0031 2896  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
14:21:14.0093 2896  lanmanworkstation - ok
14:21:14.0171 2896  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
14:21:14.0328 2896  LmHosts - ok
14:21:14.0359 2896  [ E246A32C445056996074A397DA56E815 ] mdmxsdk         C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
14:21:14.0406 2896  mdmxsdk - ok
14:21:14.0453 2896  [ B7550A7107281D170CE85524B1488C98 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
14:21:14.0609 2896  Messenger - ok
14:21:14.0734 2896  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
14:21:14.0890 2896  mnmdd - ok
14:21:14.0921 2896  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
14:21:15.0093 2896  mnmsrvc - ok
14:21:15.0203 2896  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
14:21:15.0375 2896  Modem - ok
14:21:15.0437 2896  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:21:15.0609 2896  Mouclass - ok
14:21:15.0656 2896  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:21:15.0812 2896  mouhid - ok
14:21:15.0859 2896  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
14:21:16.0031 2896  MountMgr - ok
14:21:16.0093 2896  [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
14:21:16.0140 2896  MozillaMaintenance - ok
14:21:16.0156 2896  mraid35x - ok
14:21:16.0203 2896  [ FEAAFFC78F6AF4CC3820644B0688D845 ] MRVW225         C:\WINDOWS\system32\DRIVERS\MRVW225.sys
14:21:16.0250 2896  MRVW225 ( UnsignedFile.Multi.Generic ) - warning
14:21:16.0250 2896  MRVW225 - detected UnsignedFile.Multi.Generic (1)
14:21:16.0281 2896  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:21:16.0453 2896  MRxDAV - ok
14:21:16.0500 2896  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:21:16.0578 2896  MRxSmb - ok
14:21:16.0640 2896  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
14:21:16.0796 2896  MSDTC - ok
14:21:16.0828 2896  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
14:21:17.0000 2896  Msfs - ok
14:21:17.0015 2896  MSIServer - ok
14:21:17.0109 2896  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:21:17.0265 2896  MSKSSRV - ok
14:21:17.0312 2896  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:21:17.0468 2896  MSPCLOCK - ok
14:21:17.0500 2896  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
14:21:17.0640 2896  MSPQM - ok
14:21:17.0734 2896  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:21:17.0921 2896  mssmbios - ok
14:21:17.0968 2896  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
14:21:18.0109 2896  MSTEE - ok
14:21:18.0171 2896  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
14:21:18.0218 2896  Mup - ok
14:21:18.0265 2896  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
14:21:18.0453 2896  NABTSFEC - ok
14:21:18.0531 2896  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
14:21:18.0734 2896  napagent - ok
14:21:18.0796 2896  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
14:21:18.0984 2896  NDIS - ok
14:21:19.0015 2896  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
14:21:19.0203 2896  NdisIP - ok
14:21:19.0312 2896  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:21:19.0359 2896  NdisTapi - ok
14:21:19.0390 2896  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:21:19.0546 2896  Ndisuio - ok
14:21:19.0593 2896  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:21:19.0765 2896  NdisWan - ok
14:21:19.0812 2896  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
14:21:19.0875 2896  NDProxy - ok
14:21:19.0921 2896  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
14:21:20.0093 2896  NetBIOS - ok
14:21:20.0187 2896  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
14:21:20.0390 2896  NetBT - ok
14:21:20.0437 2896  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
14:21:20.0593 2896  NetDDE - ok
14:21:20.0656 2896  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
14:21:20.0796 2896  NetDDEdsdm - ok
14:21:20.0843 2896  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\system32\lsass.exe
14:21:21.0031 2896  Netlogon - ok
14:21:21.0140 2896  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
14:21:21.0312 2896  Netman - ok
14:21:21.0375 2896  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:21:21.0406 2896  NetTcpPortSharing - ok
14:21:21.0484 2896  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla             C:\WINDOWS\System32\mswsock.dll
14:21:21.0515 2896  Nla - ok
14:21:21.0578 2896  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
14:21:21.0765 2896  Npfs - ok
14:21:21.0812 2896  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
14:21:22.0046 2896  Ntfs - ok
14:21:22.0093 2896  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
14:21:22.0234 2896  NtLmSsp - ok
14:21:22.0312 2896  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
14:21:22.0531 2896  NtmsSvc - ok
14:21:22.0578 2896  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
14:21:22.0750 2896  Null - ok
14:21:22.0796 2896  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:21:22.0968 2896  NwlnkFlt - ok
14:21:23.0000 2896  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:21:23.0203 2896  NwlnkFwd - ok
14:21:23.0312 2896  [ 7AF6EC0EA4261ECF7DA084103BE31EA8 ] odysseyIM4      C:\WINDOWS\system32\DRIVERS\odysseyIM4.sys
14:21:23.0390 2896  odysseyIM4 - ok
14:21:23.0484 2896  [ F84785660305B9B903FB3BCA8BA29837 ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
14:21:23.0656 2896  Parport - ok
14:21:23.0687 2896  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
14:21:23.0843 2896  PartMgr - ok
14:21:23.0875 2896  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
14:21:24.0046 2896  ParVdm - ok
14:21:24.0140 2896  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
14:21:24.0296 2896  PCI - ok
14:21:24.0328 2896  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
14:21:24.0531 2896  PCIIde - ok
14:21:24.0578 2896  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
14:21:24.0750 2896  Pcmcia - ok
14:21:24.0781 2896  perc2 - ok
14:21:24.0796 2896  perc2hib - ok
14:21:24.0937 2896  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
14:21:24.0984 2896  PlugPlay - ok
14:21:25.0015 2896  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
14:21:25.0140 2896  PolicyAgent - ok
14:21:25.0203 2896  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:21:25.0390 2896  PptpMiniport - ok
14:21:25.0468 2896  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
14:21:25.0609 2896  ProtectedStorage - ok
14:21:25.0625 2896  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
14:21:25.0812 2896  PSched - ok
14:21:25.0843 2896  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:21:26.0078 2896  Ptilink - ok
14:21:26.0109 2896  ql1080 - ok
14:21:26.0125 2896  Ql10wnt - ok
14:21:26.0156 2896  ql12160 - ok
14:21:26.0187 2896  ql1240 - ok
14:21:26.0218 2896  ql1280 - ok
14:21:26.0328 2896  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:21:26.0500 2896  RasAcd - ok
14:21:26.0562 2896  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
14:21:26.0718 2896  RasAuto - ok
14:21:26.0750 2896  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:21:26.0921 2896  Rasl2tp - ok
14:21:26.0968 2896  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
14:21:27.0140 2896  RasMan - ok
14:21:27.0171 2896  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:21:27.0328 2896  RasPppoe - ok
14:21:27.0359 2896  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
14:21:27.0531 2896  Raspti - ok
14:21:27.0593 2896  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:21:27.0796 2896  Rdbss - ok
14:21:27.0843 2896  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:21:28.0000 2896  RDPCDD - ok
14:21:28.0125 2896  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
14:21:28.0187 2896  RDPWD - ok
14:21:28.0250 2896  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
14:21:28.0500 2896  RDSessMgr - ok
14:21:28.0546 2896  [ ED761D453856F795A7FE056E42C36365 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
14:21:28.0750 2896  redbook - ok
14:21:28.0812 2896  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
14:21:28.0984 2896  RemoteAccess - ok
14:21:29.0062 2896  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\system32\locator.exe
14:21:29.0234 2896  RpcLocator - ok
14:21:29.0281 2896  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs           C:\WINDOWS\system32\rpcss.dll
14:21:29.0343 2896  RpcSs - ok
14:21:29.0390 2896  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
14:21:29.0546 2896  RSVP - ok
14:21:29.0640 2896  [ 0C963B81C842B49CC87123F165224E5A ] S3GIGP          C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys
14:21:29.0734 2896  S3GIGP - ok
14:21:29.0812 2896  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs           C:\WINDOWS\system32\lsass.exe
14:21:29.0968 2896  SamSs - ok
14:21:30.0000 2896  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
14:21:30.0156 2896  SCardSvr - ok
14:21:30.0218 2896  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
14:21:30.0390 2896  Schedule - ok
14:21:30.0453 2896  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:21:30.0515 2896  Secdrv - ok
14:21:30.0578 2896  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
14:21:30.0765 2896  seclogon - ok
14:21:30.0781 2896  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
14:21:30.0984 2896  SENS - ok
14:21:31.0109 2896  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
14:21:31.0296 2896  Serial - ok
14:21:31.0390 2896  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
14:21:31.0578 2896  Sfloppy - ok
14:21:31.0656 2896  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
14:21:31.0859 2896  SharedAccess - ok
14:21:31.0906 2896  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:21:31.0921 2896  ShellHWDetection - ok
14:21:31.0953 2896  Simbad - ok
14:21:32.0218 2896  [ 0F97E7A47A52F4A36969F0FC319654C2 ] Skype C2C Service C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype\Toolbars\Skype C2C Service\c2c_service.exe
14:21:32.0500 2896  Skype C2C Service - ok
14:21:32.0546 2896  [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate     C:\Programme\Skype\Updater\Updater.exe
14:21:32.0656 2896  SkypeUpdate - ok
14:21:32.0718 2896  [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
14:21:32.0875 2896  SLIP - ok
14:21:32.0906 2896  Sparrow - ok
14:21:33.0000 2896  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
14:21:33.0156 2896  splitter - ok
14:21:33.0218 2896  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
14:21:33.0265 2896  Spooler - ok
14:21:33.0312 2896  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
14:21:33.0406 2896  sr - ok
14:21:33.0484 2896  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice       C:\WINDOWS\system32\srsvc.dll
14:21:33.0593 2896  srservice - ok
14:21:33.0656 2896  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
14:21:33.0703 2896  Srv - ok
14:21:33.0750 2896  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
14:21:33.0859 2896  SSDPSRV - ok
14:21:33.0921 2896  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
14:21:33.0937 2896  ssmdrv - ok
14:21:34.0000 2896  [ 306521935042FC0A6988D528643619B3 ] StarOpen        C:\WINDOWS\system32\drivers\StarOpen.sys
14:21:34.0015 2896  StarOpen ( UnsignedFile.Multi.Generic ) - warning
14:21:34.0015 2896  StarOpen - detected UnsignedFile.Multi.Generic (1)
14:21:34.0078 2896  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
14:21:34.0296 2896  stisvc - ok
14:21:34.0406 2896  [ 77813007BA6265C4B6098187E6ED79D2 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
14:21:34.0578 2896  streamip - ok
14:21:34.0609 2896  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
14:21:34.0765 2896  swenum - ok
14:21:34.0812 2896  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
14:21:34.0968 2896  swmidi - ok
14:21:35.0015 2896  SwPrv - ok
14:21:35.0046 2896  symc810 - ok
14:21:35.0078 2896  symc8xx - ok
14:21:35.0109 2896  sym_hi - ok
14:21:35.0125 2896  sym_u3 - ok
14:21:35.0250 2896  [ 21A8ABC15F829BAEA7145C6F2CB108F5 ] SynTP           C:\WINDOWS\system32\DRIVERS\SynTP.sys
14:21:35.0328 2896  SynTP - ok
14:21:35.0359 2896  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
14:21:35.0531 2896  sysaudio - ok
14:21:35.0578 2896  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
14:21:35.0734 2896  SysmonLog - ok
14:21:35.0781 2896  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
14:21:35.0968 2896  TapiSrv - ok
14:21:36.0093 2896  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:21:36.0140 2896  Tcpip - ok
14:21:36.0203 2896  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
14:21:36.0359 2896  TDPIPE - ok
14:21:36.0437 2896  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
14:21:36.0609 2896  TDTCP - ok
14:21:36.0656 2896  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
14:21:36.0828 2896  TermDD - ok
14:21:36.0890 2896  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService     C:\WINDOWS\System32\termsrv.dll
14:21:37.0093 2896  TermService - ok
14:21:37.0140 2896  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
14:21:37.0156 2896  Themes - ok
14:21:37.0171 2896  TosIde - ok
14:21:37.0250 2896  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
14:21:37.0406 2896  TrkWks - ok
14:21:37.0453 2896  [ D85938F272D1BCF3DB3A31FC0A048928 ] uagp35          C:\WINDOWS\system32\DRIVERS\uagp35.sys
14:21:37.0640 2896  uagp35 - ok
14:21:37.0734 2896  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
14:21:37.0921 2896  Udfs - ok
14:21:37.0937 2896  ultra - ok
14:21:38.0046 2896  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
14:21:38.0234 2896  Update - ok
14:21:38.0281 2896  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
14:21:38.0375 2896  upnphost - ok
14:21:38.0484 2896  [ 7CE0FE34FD8FB7F52D1E503B0C1E4FA9 ] UPnPService     C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe
14:21:38.0593 2896  UPnPService ( UnsignedFile.Multi.Generic ) - warning
14:21:38.0593 2896  UPnPService - detected UnsignedFile.Multi.Generic (1)
14:21:38.0640 2896  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS             C:\WINDOWS\System32\ups.exe
14:21:38.0796 2896  UPS - ok
14:21:38.0921 2896  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:21:39.0078 2896  usbccgp - ok
14:21:39.0140 2896  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:21:39.0296 2896  usbehci - ok
14:21:39.0359 2896  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:21:39.0515 2896  usbhub - ok
14:21:39.0562 2896  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
14:21:39.0750 2896  usbprint - ok
14:21:39.0781 2896  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:21:39.0953 2896  usbscan - ok
14:21:40.0000 2896  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:21:40.0171 2896  USBSTOR - ok
14:21:40.0265 2896  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
14:21:40.0437 2896  usbuhci - ok
14:21:40.0468 2896  [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo        C:\WINDOWS\system32\Drivers\usbvideo.sys
14:21:40.0671 2896  usbvideo - ok
14:21:40.0718 2896  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
14:21:40.0890 2896  VgaSave - ok
14:21:40.0953 2896  [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde          C:\WINDOWS\system32\DRIVERS\viaide.sys
14:21:41.0093 2896  ViaIde - ok
14:21:41.0171 2896  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
14:21:41.0359 2896  VolSnap - ok
14:21:41.0437 2896  [ 68F106273BE29E7B7EF8266977268E78 ] VSS             C:\WINDOWS\System32\vssvc.exe
14:21:41.0515 2896  VSS - ok
14:21:41.0546 2896  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time         C:\WINDOWS\system32\w32time.dll
14:21:41.0718 2896  W32Time - ok
14:21:41.0765 2896  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:21:41.0906 2896  Wanarp - ok
14:21:42.0015 2896  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
14:21:42.0187 2896  wdmaud - ok
14:21:42.0328 2896  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient       C:\WINDOWS\System32\webclnt.dll
14:21:42.0468 2896  WebClient - ok
14:21:42.0546 2896  [ 86723EA860346FBE5490835344CAD939 ] winachsf        C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
14:21:42.0671 2896  winachsf - ok
14:21:42.0781 2896  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
14:21:42.0984 2896  winmgmt - ok
14:21:43.0093 2896  [ 6E18978B749F0696A774DE3F2CB142DD ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
14:21:43.0265 2896  WmdmPmSN - ok
14:21:43.0375 2896  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:21:43.0562 2896  WmiApSrv - ok
14:21:43.0609 2896  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
14:21:43.0812 2896  wscsvc - ok
14:21:43.0906 2896  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
14:21:44.0078 2896  WSTCODEC - ok
14:21:44.0125 2896  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
14:21:44.0296 2896  wuauserv - ok
14:21:44.0421 2896  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
14:21:44.0656 2896  WZCSVC - ok
14:21:44.0687 2896  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
14:21:44.0859 2896  xmlprov - ok
14:21:45.0000 2896  ================ Scan global ===============================
14:21:45.0062 2896  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
14:21:45.0109 2896  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
14:21:45.0156 2896  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
14:21:45.0187 2896  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
14:21:45.0203 2896  [Global] - ok
14:21:45.0203 2896  ================ Scan MBR ==================================
14:21:45.0234 2896  [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
14:21:45.0406 2896  \Device\Harddisk0\DR0 - ok
14:21:45.0421 2896  ================ Scan VBR ==================================
14:21:45.0437 2896  [ 6E0521202680D47BD72CDF2A1B3DCD11 ] \Device\Harddisk0\DR0\Partition1
14:21:45.0437 2896  \Device\Harddisk0\DR0\Partition1 - ok
14:21:45.0437 2896  ============================================================
14:21:45.0437 2896  Scan finished
14:21:45.0437 2896  ============================================================
14:21:45.0625 2888  Detected object count: 8
14:21:45.0625 2888  Actual detected object count: 8
14:21:56.0375 2888  AR5523 ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0375 2888  AR5523 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0375 2888  AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0375 2888  AVM WLAN Connection Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0390 2888  avmeject ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0390 2888  avmeject ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0390 2888  CBTNDIS5 ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0390 2888  CBTNDIS5 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0406 2888  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0406 2888  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0406 2888  MRVW225 ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0406 2888  MRVW225 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0406 2888  StarOpen ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0406 2888  StarOpen ( UnsignedFile.Multi.Generic ) - User select action: Skip 
14:21:56.0406 2888  UPnPService ( UnsignedFile.Multi.Generic ) - skipped by user
14:21:56.0406 2888  UPnPService ( UnsignedFile.Multi.Generic ) - User select action: Skip
PS: Bin ich im falschen Unterforum?

 

Themen zu Rogueware und Rootkit und und und...
abgesicherten, anderes, bds/zaccess.bblw, browser, eingefangen, exp/2013-0422.d, exp/pdfjsca.adf, fontcache, java/lamar.rx, java/lamar.ry, lanmanworkstation, laptop, malware, modus, nicht mehr, nicht öffnen, policyagent, programme, reparieren, rootkit, rootkit.necurs, rootkits, sigcheck, starten, super, systemwiederherstellung, tr/atraps.gen2, tr/psw.fareit.313, tr/rootkit.gen2, trojan.0access, trojan.lameshield.124


« SweetIM & Websearch.mocaflix ... | Nach Google Suche Umleitung auf Seiten wie z.B. Monstermarketplace. Anfänger! »


Ähnliche Themen: Rogueware und Rootkit und und und...


  1. - Rootkit entdeckt ! Win7 - Anti-Rootkit o. Neuinstallation ?
    Plagegeister aller Art und deren Bekämpfung - 15.02.2014 (13)
  2. GMER - Rootkit Scanner - VMAUTHSERVICE Rootkit
    Log-Analyse und Auswertung - 27.10.2013 (5)
  3. Rootkit, Bootkit, Rootkit.win32.tdss.ld4 - ich weiss nicht weiter..
    Log-Analyse und Auswertung - 18.03.2013 (1)
  4. Rootkit Infektion, danach Windows-Neuinstallation, GMER zeigt erneut Rootkit Aktivitäten an (Avast! false positive?)
    Log-Analyse und Auswertung - 05.03.2013 (2)
  5. Rootkit.0Access / Rootkit.Agent
    Plagegeister aller Art und deren Bekämpfung - 11.07.2012 (1)
  6. Rootkit.gen gefunden/Rootkit-Befall - Bin ich im dran? Brauche dringend Beratung !!!
    Plagegeister aller Art und deren Bekämpfung - 25.05.2012 (3)
  7. Starforce? Rootkit Rootkit.TDSS! Bluescreens und Mbr laufend beschädigt!
    Plagegeister aller Art und deren Bekämpfung - 02.03.2011 (9)
  8. Absturz durch Rootkit beim GMER Rootkit Scan
    Plagegeister aller Art und deren Bekämpfung - 16.12.2010 (4)
  9. Pc Absturz durch Rootkit bei GMER Rootkit Scan
    Plagegeister aller Art und deren Bekämpfung - 12.08.2010 (20)
  10. Tr/rootkit.gen windows/system32/Drivers.lnuuf.sys (rootkit Agent)
    Plagegeister aller Art und deren Bekämpfung - 29.05.2010 (1)
  11. TR/Rootkit.Gen
    Plagegeister aller Art und deren Bekämpfung - 05.04.2010 (12)
  12. Ist 'TR/Rootkit.Gen' ein Rootkit, oder nicht?
    Log-Analyse und Auswertung - 06.03.2010 (41)
  13. TR/Crypt.XDR.gen, Rootkit.Kobcka.B, Trojan/Win32.Agent, Rootkit-Agent.CW atd.
    Plagegeister aller Art und deren Bekämpfung - 11.04.2009 (1)
  14. TR/Rootkit.Gen
    Antiviren-, Firewall- und andere Schutzprogramme - 31.03.2009 (1)
  15. TR/Rootkit.Gen
    Plagegeister aller Art und deren Bekämpfung - 11.03.2007 (13)
  16. TR/Rootkit.Gen
    Plagegeister aller Art und deren Bekämpfung - 14.09.2006 (1)
  17. Rootkit?!
    Log-Analyse und Auswertung - 12.08.2006 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Rogueware und Rootkit und und und... - Hallo, liebes Forum. Ich muss einen älteren Laptop reparieren, nachdem dieser sich was eingefangen hat. Es fing mit einem drive-by-Exploit an: Plötzlich kam eine Rogueware zum Vorschein, die sagte, der - Rogueware und Rootkit und und und......
Archiv
Du betrachtest: Rogueware und Rootkit und und und... auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131