Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Verdacht auf Hacking laut Brief von der Telekom

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 25.08.2013, 19:52   #1
NinaK
 
Verdacht auf Hacking laut Brief von der Telekom - Standard

Verdacht auf Hacking laut Brief von der Telekom



Hey,

Sorry, da war ich wohl einfach ein bisschen zu schnell. Hier kommt der vollständige Log

Code:
ATTFilter
19:47:47.0015 2336  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:47:49.0015 2336  ============================================================
19:47:49.0015 2336  Current date / time: 2013/08/25 19:47:49.0015
19:47:49.0015 2336  SystemInfo:
19:47:49.0015 2336  
19:47:49.0015 2336  OS Version: 5.1.2600 ServicePack: 3.0
19:47:49.0015 2336  Product type: Workstation
19:47:49.0015 2336  ComputerName: BUERO
19:47:49.0015 2336  UserName: HP_Administrator
19:47:49.0015 2336  Windows directory: C:\WINDOWS
19:47:49.0015 2336  System windows directory: C:\WINDOWS
19:47:49.0015 2336  Processor architecture: Intel x86
19:47:49.0015 2336  Number of processors: 2
19:47:49.0015 2336  Page size: 0x1000
19:47:49.0015 2336  Boot type: Normal boot
19:47:49.0015 2336  ============================================================
19:47:51.0546 2336  Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:47:51.0578 2336  ============================================================
19:47:51.0578 2336  \Device\Harddisk0\DR0:
19:47:51.0578 2336  MBR partitions:
19:47:51.0578 2336  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x6, StartLBA 0x800, BlocksNum 0x11683B43
19:47:51.0578 2336  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x11688000, BlocksNum 0x1391000
19:47:51.0578 2336  ============================================================
19:47:51.0625 2336  C: <-> \Device\Harddisk0\DR0\Partition1
19:47:51.0656 2336  D: <-> \Device\Harddisk0\DR0\Partition2
19:47:51.0656 2336  ============================================================
19:47:51.0656 2336  Initialize success
19:47:51.0656 2336  ============================================================
19:48:01.0343 2960  ============================================================
19:48:01.0343 2960  Scan started
19:48:01.0343 2960  Mode: Manual; SigCheck; TDLFS; 
19:48:01.0343 2960  ============================================================
19:48:01.0859 2960  ================ Scan system memory ========================
19:48:01.0890 2960  System memory - ok
19:48:01.0890 2960  ================ Scan services =============================
19:48:02.0000 2960  Abiosdsk - ok
19:48:02.0000 2960  abp480n5 - ok
19:48:02.0015 2960  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:48:03.0234 2960  ACPI - ok
19:48:03.0265 2960  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
19:48:03.0515 2960  ACPIEC - ok
19:48:03.0531 2960  adpu160m - ok
19:48:03.0562 2960  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
19:48:03.0843 2960  aec - ok
19:48:03.0875 2960  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
19:48:03.0937 2960  AFD - ok
19:48:03.0953 2960  Aha154x - ok
19:48:03.0968 2960  aic78u2 - ok
19:48:03.0968 2960  aic78xx - ok
19:48:04.0015 2960  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
19:48:04.0312 2960  Alerter - ok
19:48:04.0343 2960  [ 190CD73D4984F94D823F9444980513E5 ] ALG             C:\WINDOWS\System32\alg.exe
19:48:04.0468 2960  ALG - ok
19:48:04.0484 2960  AliIde - ok
19:48:04.0562 2960  [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt         C:\WINDOWS\system32\drivers\Ambfilt.sys
19:48:04.0765 2960  Ambfilt - ok
19:48:04.0781 2960  amsint - ok
19:48:04.0812 2960  [ AAD9D857BFA24A75EB083E480BF3543F ] AmUStor         C:\WINDOWS\system32\drivers\AmUStor.SYS
19:48:04.0875 2960  AmUStor - ok
19:48:04.0890 2960  AppMgmt - ok
19:48:04.0906 2960  asc - ok
19:48:04.0906 2960  asc3350p - ok
19:48:04.0921 2960  asc3550 - ok
19:48:04.0984 2960  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
19:48:05.0015 2960  aspnet_state - ok
19:48:05.0046 2960  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:48:05.0296 2960  AsyncMac - ok
19:48:05.0343 2960  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
19:48:05.0593 2960  atapi - ok
19:48:05.0593 2960  Atdisk - ok
19:48:05.0640 2960  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:48:05.0859 2960  Atmarpc - ok
19:48:05.0890 2960  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
19:48:06.0140 2960  AudioSrv - ok
19:48:06.0187 2960  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
19:48:06.0437 2960  audstub - ok
19:48:06.0484 2960  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
19:48:06.0718 2960  Beep - ok
19:48:06.0843 2960  [ 6C6AC7CA8A034C15C52B35189BAD58EE ] BHDrvx86        C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.0.36\Definitions\BASHDefs\20130715.001\BHDrvx86.sys
19:48:06.0937 2960  BHDrvx86 - ok
19:48:07.0000 2960  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
19:48:07.0265 2960  BITS - ok
19:48:07.0296 2960  [ B71549F23736ADF83A571061C47777FD ] Browser         C:\WINDOWS\System32\browser.dll
19:48:07.0359 2960  Browser - ok
19:48:07.0406 2960  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
19:48:07.0656 2960  cbidf2k - ok
19:48:07.0718 2960  [ 3BEE52611F22C9C0023A98A4425E084F ] ccSet_N360      C:\WINDOWS\system32\drivers\N360\1404000.028\ccSetx86.sys
19:48:07.0750 2960  ccSet_N360 - ok
19:48:07.0765 2960  cd20xrnt - ok
19:48:07.0796 2960  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
19:48:08.0031 2960  Cdaudio - ok
19:48:08.0078 2960  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
19:48:08.0328 2960  Cdfs - ok
19:48:08.0359 2960  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:48:08.0593 2960  Cdrom - ok
19:48:08.0609 2960  Changer - ok
19:48:08.0640 2960  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc           C:\WINDOWS\system32\cisvc.exe
19:48:08.0875 2960  CiSvc - ok
19:48:08.0906 2960  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
19:48:09.0156 2960  ClipSrv - ok
19:48:09.0203 2960  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:48:09.0250 2960  clr_optimization_v2.0.50727_32 - ok
19:48:09.0265 2960  CmdIde - ok
19:48:09.0281 2960  COMSysApp - ok
19:48:09.0296 2960  Cpqarray - ok
19:48:09.0328 2960  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
19:48:09.0562 2960  CryptSvc - ok
19:48:09.0578 2960  dac2w2k - ok
19:48:09.0578 2960  dac960nt - ok
19:48:09.0625 2960  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
19:48:09.0718 2960  DcomLaunch - ok
19:48:09.0750 2960  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
19:48:10.0062 2960  Dhcp - ok
19:48:10.0093 2960  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
19:48:10.0343 2960  Disk - ok
19:48:10.0359 2960  dmadmin - ok
19:48:10.0421 2960  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
19:48:10.0734 2960  dmboot - ok
19:48:10.0750 2960  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
19:48:11.0062 2960  dmio - ok
19:48:11.0109 2960  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
19:48:11.0500 2960  dmload - ok
19:48:11.0531 2960  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
19:48:11.0765 2960  dmserver - ok
19:48:11.0859 2960  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
19:48:12.0156 2960  DMusic - ok
19:48:12.0203 2960  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
19:48:12.0296 2960  Dnscache - ok
19:48:12.0328 2960  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
19:48:12.0593 2960  Dot3svc - ok
19:48:12.0593 2960  dpti2o - ok
19:48:12.0625 2960  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
19:48:12.0875 2960  drmkaud - ok
19:48:12.0890 2960  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost         C:\WINDOWS\System32\eapsvc.dll
19:48:13.0140 2960  EapHost - ok
19:48:13.0203 2960  [ 85B8B4032A895A746D46A288A9B30DED ] eeCtrl          C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys
19:48:13.0250 2960  eeCtrl - ok
19:48:13.0265 2960  [ B5A8A04A6E5B4E86B95B1553AA918F5F ] EraserUtilRebootDrv C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
19:48:13.0296 2960  EraserUtilRebootDrv - ok
19:48:13.0328 2960  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc           C:\WINDOWS\System32\ersvc.dll
19:48:13.0562 2960  ERSvc - ok
19:48:13.0593 2960  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
19:48:13.0671 2960  Eventlog - ok
19:48:13.0687 2960  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem     C:\WINDOWS\system32\es.dll
19:48:13.0750 2960  EventSystem - ok
19:48:13.0781 2960  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
19:48:14.0031 2960  Fastfat - ok
19:48:14.0078 2960  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
19:48:14.0140 2960  FastUserSwitchingCompatibility - ok
19:48:14.0171 2960  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
19:48:14.0421 2960  Fdc - ok
19:48:14.0453 2960  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
19:48:14.0687 2960  Fips - ok
19:48:14.0703 2960  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
19:48:14.0921 2960  Flpydisk - ok
19:48:14.0968 2960  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
19:48:15.0218 2960  FltMgr - ok
19:48:15.0265 2960  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:48:15.0296 2960  FontCache3.0.0.0 - ok
19:48:15.0328 2960  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:48:15.0562 2960  Fs_Rec - ok
19:48:15.0593 2960  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:48:15.0875 2960  Ftdisk - ok
19:48:15.0953 2960  [ E53EE18A21C025DEABCFE0F72FC481BB ] GameConsoleService C:\Programme\HP Games\HP Game Console\GameConsoleService.exe
19:48:15.0984 2960  GameConsoleService - ok
19:48:16.0015 2960  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:48:16.0265 2960  Gpc - ok
19:48:16.0296 2960  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:48:16.0546 2960  HDAudBus - ok
19:48:16.0593 2960  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:48:16.0843 2960  helpsvc - ok
19:48:16.0890 2960  [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ         C:\WINDOWS\System32\hidserv.dll
19:48:17.0140 2960  HidServ - ok
19:48:17.0171 2960  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:48:17.0406 2960  hidusb - ok
19:48:17.0437 2960  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
19:48:17.0671 2960  hkmsvc - ok
19:48:17.0687 2960  hpn - ok
19:48:17.0734 2960  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
19:48:17.0796 2960  HTTP - ok
19:48:17.0828 2960  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
19:48:18.0062 2960  HTTPFilter - ok
19:48:18.0062 2960  i2omgmt - ok
19:48:18.0078 2960  i2omp - ok
19:48:18.0125 2960  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\drivers\i8042prt.sys
19:48:18.0359 2960  i8042prt - ok
19:48:18.0421 2960  [ 0E501525F2B67AA17FE143D7C5E6A649 ] ialm            C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
19:48:18.0593 2960  ialm - ok
19:48:18.0640 2960  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:48:18.0734 2960  idsvc - ok
19:48:18.0812 2960  [ E66112BA8090C121681A0D6A067ED73D ] IDSxpx86        C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.0.36\Definitions\IPSDefs\20130823.001\IDSxpx86.sys
19:48:18.0859 2960  IDSxpx86 - ok
19:48:18.0890 2960  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
19:48:19.0140 2960  Imapi - ok
19:48:19.0156 2960  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\system32\imapi.exe
19:48:19.0390 2960  ImapiService - ok
19:48:19.0406 2960  ini910u - ok
19:48:19.0578 2960  [ DBD5D0FE7F50B1218D8CED753572F8DB ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
19:48:19.0937 2960  IntcAzAudAddService - ok
19:48:19.0953 2960  IntelIde - ok
19:48:20.0000 2960  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:48:20.0234 2960  intelppm - ok
19:48:20.0265 2960  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
19:48:20.0500 2960  Ip6Fw - ok
19:48:20.0531 2960  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:48:20.0750 2960  IpFilterDriver - ok
19:48:20.0781 2960  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:48:21.0000 2960  IpInIp - ok
19:48:21.0031 2960  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:48:21.0250 2960  IpNat - ok
19:48:21.0296 2960  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:48:21.0531 2960  IPSec - ok
19:48:21.0562 2960  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
19:48:21.0687 2960  IRENUM - ok
19:48:21.0718 2960  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:48:21.0968 2960  isapnp - ok
19:48:22.0046 2960  [ 77AC10DB097DFD0CD3071465B644D0AB ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
19:48:22.0093 2960  JavaQuickStarterService - ok
19:48:22.0156 2960  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:48:22.0390 2960  Kbdclass - ok
19:48:22.0406 2960  [ B6D6C117D771C98130497265F26D1882 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:48:22.0640 2960  kbdhid - ok
19:48:22.0656 2960  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
19:48:22.0875 2960  kmixer - ok
19:48:22.0921 2960  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
19:48:23.0015 2960  KSecDD - ok
19:48:23.0046 2960  [ 2BBDCB79900990F0716DFCB714E72DE7 ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
19:48:23.0125 2960  LanmanServer - ok
19:48:23.0156 2960  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
19:48:23.0218 2960  lanmanworkstation - ok
19:48:23.0234 2960  lbrtfdc - ok
19:48:23.0328 2960  [ 3503F257B3203F824B1567238EBE17E2 ] LightScribeService C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
19:48:23.0328 2960  LightScribeService ( UnsignedFile.Multi.Generic ) - warning
19:48:23.0328 2960  LightScribeService - detected UnsignedFile.Multi.Generic (1)
19:48:23.0375 2960  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
19:48:23.0593 2960  LmHosts - ok
19:48:23.0640 2960  [ B7550A7107281D170CE85524B1488C98 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
19:48:23.0875 2960  Messenger - ok
19:48:23.0890 2960  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
19:48:24.0125 2960  mnmdd - ok
19:48:24.0156 2960  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
19:48:24.0390 2960  mnmsrvc - ok
19:48:24.0421 2960  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
19:48:24.0640 2960  Modem - ok
19:48:24.0703 2960  [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt         C:\WINDOWS\system32\drivers\Monfilt.sys
19:48:24.0796 2960  Monfilt - ok
19:48:24.0828 2960  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:48:25.0062 2960  Mouclass - ok
19:48:25.0093 2960  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:48:25.0312 2960  mouhid - ok
19:48:25.0328 2960  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
19:48:25.0562 2960  MountMgr - ok
19:48:25.0578 2960  mraid35x - ok
19:48:25.0609 2960  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:48:25.0828 2960  MRxDAV - ok
19:48:25.0875 2960  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:48:25.0968 2960  MRxSmb - ok
19:48:26.0000 2960  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
19:48:26.0234 2960  MSDTC - ok
19:48:26.0281 2960  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
19:48:26.0515 2960  Msfs - ok
19:48:26.0531 2960  MSIServer - ok
19:48:26.0562 2960  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:48:26.0796 2960  MSKSSRV - ok
19:48:26.0812 2960  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:48:27.0078 2960  MSPCLOCK - ok
19:48:27.0109 2960  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
19:48:27.0359 2960  MSPQM - ok
19:48:27.0390 2960  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:48:27.0625 2960  mssmbios - ok
19:48:27.0671 2960  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
19:48:27.0750 2960  Mup - ok
19:48:27.0812 2960  [ 1BF9D6476061B31CD7FC2BF848529A56 ] N360            C:\Programme\Norton 360 Premier Edition\Engine\20.4.0.40\ccSvcHst.exe
19:48:27.0859 2960  N360 - ok
19:48:27.0890 2960  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
19:48:28.0140 2960  napagent - ok
19:48:28.0218 2960  [ CE2156DF796D41614AB60E68D107D573 ] NAVENG          C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.0.36\Definitions\VirusDefs\20130824.007\NAVENG.SYS
19:48:28.0250 2960  NAVENG - ok
19:48:28.0312 2960  [ 19CEB8F4EC8C800A53D0B67E658E0367 ] NAVEX15         C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.0.36\Definitions\VirusDefs\20130824.007\NAVEX15.SYS
19:48:28.0421 2960  NAVEX15 - ok
19:48:28.0468 2960  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
19:48:28.0718 2960  NDIS - ok
19:48:28.0750 2960  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:48:28.0796 2960  NdisTapi - ok
19:48:28.0843 2960  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:48:29.0078 2960  Ndisuio - ok
19:48:29.0125 2960  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:48:29.0359 2960  NdisWan - ok
19:48:29.0375 2960  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
19:48:29.0437 2960  NDProxy - ok
19:48:29.0453 2960  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
19:48:29.0687 2960  NetBIOS - ok
19:48:29.0718 2960  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
19:48:29.0937 2960  NetBT - ok
19:48:29.0968 2960  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
19:48:30.0203 2960  NetDDE - ok
19:48:30.0218 2960  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
19:48:30.0437 2960  NetDDEdsdm - ok
19:48:30.0484 2960  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\system32\lsass.exe
19:48:30.0718 2960  Netlogon - ok
19:48:30.0750 2960  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
19:48:30.0984 2960  Netman - ok
19:48:31.0015 2960  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:48:31.0046 2960  NetTcpPortSharing - ok
19:48:31.0078 2960  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla             C:\WINDOWS\System32\mswsock.dll
19:48:31.0125 2960  Nla - ok
19:48:31.0171 2960  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
19:48:31.0390 2960  Npfs - ok
19:48:31.0437 2960  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
19:48:31.0687 2960  Ntfs - ok
19:48:31.0718 2960  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
19:48:31.0953 2960  NtLmSsp - ok
19:48:32.0000 2960  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
19:48:32.0250 2960  NtmsSvc - ok
19:48:32.0281 2960  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
19:48:32.0500 2960  Null - ok
19:48:32.0515 2960  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:48:32.0750 2960  NwlnkFlt - ok
19:48:32.0765 2960  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:48:32.0984 2960  NwlnkFwd - ok
19:48:33.0250 2960  [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv          C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
19:48:33.0390 2960  odserv - ok
19:48:33.0437 2960  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
19:48:33.0468 2960  ose - ok
19:48:33.0500 2960  [ F84785660305B9B903FB3BCA8BA29837 ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
19:48:33.0750 2960  Parport - ok
19:48:33.0812 2960  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
19:48:34.0078 2960  PartMgr - ok
19:48:34.0109 2960  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
19:48:34.0375 2960  ParVdm - ok
19:48:34.0421 2960  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
19:48:34.0687 2960  PCI - ok
19:48:34.0718 2960  PCIDump - ok
19:48:34.0750 2960  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
19:48:35.0000 2960  PCIIde - ok
19:48:35.0046 2960  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
19:48:35.0312 2960  Pcmcia - ok
19:48:35.0343 2960  PDCOMP - ok
19:48:35.0359 2960  PDFRAME - ok
19:48:35.0359 2960  PDRELI - ok
19:48:35.0375 2960  PDRFRAME - ok
19:48:35.0390 2960  perc2 - ok
19:48:35.0390 2960  perc2hib - ok
19:48:35.0796 2960  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
19:48:35.0875 2960  PlugPlay - ok
19:48:35.0890 2960  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
19:48:36.0125 2960  PolicyAgent - ok
19:48:36.0171 2960  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:48:36.0406 2960  PptpMiniport - ok
19:48:36.0453 2960  [ 6D3B2FC5DEC2F59B28FE5FA17250A7B0 ] prodrv06        C:\WINDOWS\System32\drivers\prodrv06.sys
19:48:36.0484 2960  prodrv06 ( UnsignedFile.Multi.Generic ) - warning
19:48:36.0484 2960  prodrv06 - detected UnsignedFile.Multi.Generic (1)
19:48:36.0500 2960  [ C5F47B7EC2EC906847D5F80BA779A5BD ] prohlp02        C:\WINDOWS\system32\drivers\prohlp02.sys
19:48:36.0515 2960  prohlp02 ( UnsignedFile.Multi.Generic ) - warning
19:48:36.0515 2960  prohlp02 - detected UnsignedFile.Multi.Generic (1)
19:48:36.0546 2960  [ F3471E7971EE62420451D958DA635064 ] prosync1        C:\WINDOWS\system32\drivers\prosync1.sys
19:48:36.0546 2960  prosync1 ( UnsignedFile.Multi.Generic ) - warning
19:48:36.0546 2960  prosync1 - detected UnsignedFile.Multi.Generic (1)
19:48:36.0593 2960  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
19:48:36.0812 2960  ProtectedStorage - ok
19:48:36.0828 2960  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
19:48:37.0046 2960  PSched - ok
19:48:37.0062 2960  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:48:37.0296 2960  Ptilink - ok
19:48:37.0312 2960  ql1080 - ok
19:48:37.0312 2960  Ql10wnt - ok
19:48:37.0328 2960  ql12160 - ok
19:48:37.0343 2960  ql1240 - ok
19:48:37.0343 2960  ql1280 - ok
19:48:37.0375 2960  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:48:37.0609 2960  RasAcd - ok
19:48:37.0625 2960  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
19:48:37.0859 2960  RasAuto - ok
19:48:37.0890 2960  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:48:38.0125 2960  Rasl2tp - ok
19:48:38.0156 2960  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
19:48:38.0390 2960  RasMan - ok
19:48:38.0406 2960  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:48:38.0625 2960  RasPppoe - ok
19:48:38.0656 2960  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
19:48:38.0859 2960  Raspti - ok
19:48:38.0875 2960  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:48:39.0109 2960  Rdbss - ok
19:48:39.0140 2960  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:48:39.0359 2960  RDPCDD - ok
19:48:39.0406 2960  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
19:48:39.0468 2960  RDPWD - ok
19:48:39.0515 2960  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
19:48:39.0750 2960  RDSessMgr - ok
19:48:39.0765 2960  [ ED761D453856F795A7FE056E42C36365 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
19:48:39.0984 2960  redbook - ok
19:48:40.0031 2960  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
19:48:40.0250 2960  RemoteAccess - ok
19:48:40.0281 2960  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\system32\locator.exe
19:48:40.0515 2960  RpcLocator - ok
19:48:40.0546 2960  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs           C:\WINDOWS\system32\rpcss.dll
19:48:40.0609 2960  RpcSs - ok
19:48:40.0640 2960  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
19:48:40.0875 2960  RSVP - ok
19:48:40.0921 2960  [ C48E7BBC6A17A0676079E11A13E82549 ] RTLE8023xp      C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
19:48:40.0953 2960  RTLE8023xp - ok
19:48:40.0968 2960  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs           C:\WINDOWS\system32\lsass.exe
19:48:41.0203 2960  SamSs - ok
19:48:41.0234 2960  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
19:48:41.0453 2960  SCardSvr - ok
19:48:41.0500 2960  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
19:48:41.0734 2960  Schedule - ok
19:48:41.0796 2960  [ B85BBDBB3B429C5DF976EA9D710C2E12 ] SeaPort         C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
19:48:41.0828 2960  SeaPort - ok
19:48:41.0859 2960  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:48:41.0953 2960  Secdrv - ok
19:48:41.0984 2960  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
19:48:42.0218 2960  seclogon - ok
19:48:42.0265 2960  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
19:48:42.0484 2960  SENS - ok
19:48:42.0515 2960  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
19:48:42.0734 2960  Serial - ok
19:48:42.0781 2960  [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01         C:\WINDOWS\system32\drivers\sfhlp01.sys
19:48:42.0796 2960  sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
19:48:42.0812 2960  sfhlp01 - detected UnsignedFile.Multi.Generic (1)
19:48:42.0828 2960  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
19:48:43.0046 2960  Sfloppy - ok
19:48:43.0078 2960  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
19:48:43.0312 2960  SharedAccess - ok
19:48:43.0328 2960  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
19:48:43.0375 2960  ShellHWDetection - ok
19:48:43.0375 2960  Simbad - ok
19:48:43.0390 2960  Sparrow - ok
19:48:43.0437 2960  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
19:48:43.0656 2960  splitter - ok
19:48:43.0703 2960  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
19:48:43.0765 2960  Spooler - ok
19:48:43.0796 2960  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
19:48:43.0906 2960  sr - ok
19:48:43.0937 2960  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice       C:\WINDOWS\system32\srsvc.dll
19:48:44.0031 2960  srservice - ok
19:48:44.0062 2960  [ C743E384E9EFCA10B41C60D406DE39C0 ] SRTSP           C:\WINDOWS\System32\Drivers\N360\1404000.028\SRTSP.SYS
19:48:44.0140 2960  SRTSP - ok
19:48:44.0156 2960  [ FE9BD381778A344F0E39AE2D5E607D7F ] SRTSPX          C:\WINDOWS\system32\drivers\N360\1404000.028\SRTSPX.SYS
19:48:44.0187 2960  SRTSPX - ok
19:48:44.0265 2960  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
19:48:44.0343 2960  Srv - ok
19:48:44.0359 2960  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
19:48:44.0468 2960  SSDPSRV - ok
19:48:44.0515 2960  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
19:48:44.0781 2960  stisvc - ok
19:48:44.0828 2960  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
19:48:45.0062 2960  swenum - ok
19:48:45.0078 2960  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
19:48:45.0312 2960  swmidi - ok
19:48:45.0312 2960  SwPrv - ok
19:48:45.0328 2960  symc810 - ok
19:48:45.0343 2960  symc8xx - ok
19:48:45.0390 2960  [ 5A193E5E0F0A776430E5D62A051C1E16 ] SymDS           C:\WINDOWS\system32\drivers\N360\1404000.028\SYMDS.SYS
19:48:45.0437 2960  SymDS - ok
19:48:45.0484 2960  [ 1773FB2920EBB3A8BAD0360618091470 ] SymEFA          C:\WINDOWS\system32\drivers\N360\1404000.028\SYMEFA.SYS
19:48:45.0562 2960  SymEFA - ok
19:48:45.0625 2960  [ F50D81D3E0C7A353F205562B89CD06D6 ] SymEvent        C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
19:48:45.0656 2960  SymEvent - ok
19:48:45.0687 2960  [ 8C9B9036E301A9965CF15BEC91C58A12 ] SymIRON         C:\WINDOWS\system32\drivers\N360\1404000.028\Ironx86.SYS
19:48:45.0734 2960  SymIRON - ok
19:48:45.0765 2960  [ E9C316262C48BF299E02FC8B1CE2B925 ] SYMTDI          C:\WINDOWS\System32\Drivers\N360\1404000.028\SYMTDI.SYS
19:48:45.0812 2960  SYMTDI - ok
19:48:45.0828 2960  sym_hi - ok
19:48:45.0828 2960  sym_u3 - ok
19:48:45.0843 2960  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
19:48:46.0078 2960  sysaudio - ok
19:48:46.0109 2960  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
19:48:46.0343 2960  SysmonLog - ok
19:48:46.0375 2960  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
19:48:46.0625 2960  TapiSrv - ok
19:48:46.0656 2960  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:48:46.0718 2960  Tcpip - ok
19:48:46.0750 2960  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
19:48:46.0984 2960  TDPIPE - ok
19:48:47.0015 2960  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
19:48:47.0234 2960  TDTCP - ok
19:48:47.0265 2960  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
19:48:47.0515 2960  TermDD - ok
19:48:47.0609 2960  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService     C:\WINDOWS\System32\termsrv.dll
19:48:47.0843 2960  TermService - ok
19:48:47.0859 2960  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
19:48:47.0890 2960  Themes - ok
19:48:47.0906 2960  TosIde - ok
19:48:47.0937 2960  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
19:48:48.0171 2960  TrkWks - ok
19:48:48.0203 2960  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
19:48:48.0421 2960  Udfs - ok
19:48:48.0437 2960  ultra - ok
19:48:48.0468 2960  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
19:48:48.0703 2960  Update - ok
19:48:48.0734 2960  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
19:48:48.0843 2960  upnphost - ok
19:48:48.0875 2960  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS             C:\WINDOWS\System32\ups.exe
19:48:49.0109 2960  UPS - ok
19:48:49.0156 2960  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:48:49.0421 2960  usbccgp - ok
19:48:49.0468 2960  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:48:49.0687 2960  usbehci - ok
19:48:49.0718 2960  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:48:49.0953 2960  usbhub - ok
19:48:49.0984 2960  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
19:48:50.0203 2960  usbprint - ok
19:48:50.0234 2960  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:48:50.0468 2960  usbscan - ok
19:48:50.0484 2960  [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:48:50.0718 2960  usbstor - ok
19:48:50.0750 2960  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
19:48:50.0984 2960  usbuhci - ok
19:48:51.0015 2960  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
19:48:51.0250 2960  VgaSave - ok
19:48:51.0250 2960  ViaIde - ok
19:48:51.0296 2960  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
19:48:51.0500 2960  VolSnap - ok
19:48:51.0546 2960  [ 68F106273BE29E7B7EF8266977268E78 ] VSS             C:\WINDOWS\System32\vssvc.exe
19:48:51.0656 2960  VSS - ok
19:48:51.0687 2960  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time         C:\WINDOWS\system32\w32time.dll
19:48:51.0953 2960  W32Time - ok
19:48:51.0968 2960  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:48:52.0218 2960  Wanarp - ok
19:48:52.0234 2960  WDICA - ok
19:48:52.0250 2960  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
19:48:52.0484 2960  wdmaud - ok
19:48:52.0515 2960  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient       C:\WINDOWS\System32\webclnt.dll
19:48:52.0796 2960  WebClient - ok
19:48:52.0875 2960  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
19:48:53.0109 2960  winmgmt - ok
19:48:53.0203 2960  [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc         C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:48:53.0312 2960  wlidsvc - ok
19:48:53.0359 2960  [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN        C:\WINDOWS\system32\MsPMSNSv.dll
19:48:53.0421 2960  WmdmPmSN - ok
19:48:53.0468 2960  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:48:53.0703 2960  WmiApSrv - ok
19:48:53.0781 2960  [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc   C:\Programme\Windows Media Player\WMPNetwk.exe
19:48:53.0875 2960  WMPNetworkSvc - ok
19:48:53.0906 2960  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
19:48:54.0140 2960  wscsvc - ok
19:48:54.0171 2960  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
19:48:54.0406 2960  wuauserv - ok
19:48:54.0437 2960  [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
19:48:54.0515 2960  WudfPf - ok
19:48:54.0531 2960  [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd          C:\WINDOWS\system32\DRIVERS\wudfrd.sys
19:48:54.0578 2960  WudfRd - ok
19:48:54.0593 2960  [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc         C:\WINDOWS\System32\WUDFSvc.dll
19:48:54.0640 2960  WudfSvc - ok
19:48:54.0687 2960  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
19:48:54.0953 2960  WZCSVC - ok
19:48:55.0000 2960  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
19:48:55.0250 2960  xmlprov - ok
19:48:55.0265 2960  ================ Scan global ===============================
19:48:55.0296 2960  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
19:48:55.0328 2960  [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
19:48:55.0343 2960  [ E62178BC21EAC63A3B9A2DBD46C1B505 ] C:\WINDOWS\system32\winsrv.dll
19:48:55.0359 2960  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
19:48:55.0375 2960  [Global] - ok
19:48:55.0375 2960  ================ Scan MBR ==================================
19:48:55.0390 2960  [ 2947C7A174342A9DFF3C607CC5E4CAF4 ] \Device\Harddisk0\DR0
19:48:55.0656 2960  \Device\Harddisk0\DR0 - ok
19:48:55.0656 2960  ================ Scan VBR ==================================
19:48:55.0656 2960  [ E2E834F645AD4EACC19D68FF337FE0F7 ] \Device\Harddisk0\DR0\Partition1
19:48:55.0656 2960  \Device\Harddisk0\DR0\Partition1 - ok
19:48:55.0687 2960  [ 7307612F1B30D3AA6B539176CA613F34 ] \Device\Harddisk0\DR0\Partition2
19:48:55.0687 2960  \Device\Harddisk0\DR0\Partition2 - ok
19:48:55.0703 2960  ============================================================
19:48:55.0703 2960  Scan finished
19:48:55.0703 2960  ============================================================
19:48:55.0828 3936  Detected object count: 5
19:48:55.0828 3936  Actual detected object count: 5
19:50:14.0609 3936  LightScribeService ( UnsignedFile.Multi.Generic ) - skipped by user
19:50:14.0609 3936  LightScribeService ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:50:14.0609 3936  prodrv06 ( UnsignedFile.Multi.Generic ) - skipped by user
19:50:14.0609 3936  prodrv06 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:50:14.0609 3936  prohlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
19:50:14.0609 3936  prohlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:50:14.0609 3936  prosync1 ( UnsignedFile.Multi.Generic ) - skipped by user
19:50:14.0609 3936  prosync1 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:50:14.0625 3936  sfhlp01 ( UnsignedFile.Multi.Generic ) - skipped by user
19:50:14.0625 3936  sfhlp01 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
19:50:24.0000 2796  Deinitialize success
         
Gruß
Janina

Antwort

Themen zu Verdacht auf Hacking laut Brief von der Telekom
absoluter, betrifft, bezüglich, brief, datei, desktop, erhalte, erhalten, erklären, erstell, erstellt, files, folge, folgende, hallo zusammen, heute, hoffe, interne, internetzugang, telekom, unerwünschte, verdacht, vorgehensweise, zugang, zugriffe, zusammen




Ähnliche Themen: Verdacht auf Hacking laut Brief von der Telekom


  1. Mac befallen laut Telekom Abuse-Team: Wie APT und xcodeghost erkennen & entfernen?
    Alles rund um Mac OSX & Linux - 13.11.2015 (21)
  2. Win 7 - Verdacht auf Zeus / ZBot laut Telekom Abuse Team
    Log-Analyse und Auswertung - 17.05.2015 (31)
  3. Wichtige Sicherheitswarnung von der Telekom - Hacking - Skinhole
    Plagegeister aller Art und deren Bekämpfung - 09.10.2013 (11)
  4. Brief von der Telekom: Warnung vor Hacking von unserem Account (Schadsoftware?)
    Plagegeister aller Art und deren Bekämpfung - 08.10.2013 (29)
  5. Windows 7: Viren im System gefunden > Hinweis durch Brief der Dt. Telekom auf "Hacking"
    Log-Analyse und Auswertung - 14.09.2013 (9)
  6. Zeus/ZBot laut Telekom Abuse-Brief, der dritte Rechner XP
    Log-Analyse und Auswertung - 10.09.2013 (11)
  7. TR/Mediyes.adr und laut Telekom Zeus/ZBot
    Log-Analyse und Auswertung - 03.09.2013 (51)
  8. ZeuS/ZBot Trojaner laut Telekom
    Log-Analyse und Auswertung - 28.08.2013 (10)
  9. Routerüberlastung laut Telekom durch Schadsoftware
    Log-Analyse und Auswertung - 06.08.2013 (6)
  10. TR/Crypt.XPACK.Gen3 und Telekom-abuse Nachricht auf "Hacking"
    Log-Analyse und Auswertung - 01.08.2013 (23)
  11. Brief von Telekom Abuse Team wegen Verdachts auf Hacking
    Log-Analyse und Auswertung - 14.07.2013 (24)
  12. Trojaner/ Telekom schreibt Brief mit verdacht auf Hacking
    Log-Analyse und Auswertung - 16.06.2013 (19)
  13. Telekom Hacking Verdacht
    Log-Analyse und Auswertung - 10.03.2013 (11)
  14. Sicherheitswarnung der Telekom wegen Hacking
    Log-Analyse und Auswertung - 05.02.2013 (53)
  15. ZeuS/Zbot-Befall laut Telekom
    Plagegeister aller Art und deren Bekämpfung - 18.12.2012 (11)
  16. Laut Telekom: Torpig/Mebroot - aber keine Funde
    Log-Analyse und Auswertung - 31.10.2012 (5)

Zum Thema Verdacht auf Hacking laut Brief von der Telekom - Hey, Sorry, da war ich wohl einfach ein bisschen zu schnell. Hier kommt der vollständige Log Code: Alles auswählen Aufklappen ATTFilter 19:47:47.0015 2336 TDSS rootkit removing tool 2.8.16.0 Feb 11 - Verdacht auf Hacking laut Brief von der Telekom...
Archiv
Du betrachtest: Verdacht auf Hacking laut Brief von der Telekom auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.