Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen)

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 01.01.2017, 10:12   #1
Computernixv
 
win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen) - Standard

win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen)



eset


Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e6cb9a35ff987f4f8ec880c59c2c6b22
# end=init
# utc_time=2016-12-30 08:08:05
# local_time=2016-12-30 09:08:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 31900
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=e6cb9a35ff987f4f8ec880c59c2c6b22
# end=updated
# utc_time=2016-12-30 08:15:09
# local_time=2016-12-30 09:15:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e6cb9a35ff987f4f8ec880c59c2c6b22
# engine=31900
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-30 09:55:56
# local_time=2016-12-30 10:55:56 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1313 16777213 100 100 11927 16025889 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7410062 14422371 0 0
# scanned=91166
# found=2
# cleaned=0
# scan_time=6046
sh=928A536FBFF196495B90E4BD51B932485B84A099 ft=1 fh=748b6a41a833329e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\$Recycle.Bin\S-1-5-21-3079022530-1184665091-3877108978-1001\$RC6XK9D\dmr_72.exe"
sh=A759B7BF3B4C46136B36B1882B1E69208F4D68D0 ft=1 fh=4b1b3471fb6c0f16 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe"
         

Code:
ATTFilter
10:02:16.0822 0x2300  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
10:02:16.0822 0x2300  UEFI system
10:02:22.0008 0x2300  ============================================================
10:02:22.0008 0x2300  Current date / time: 2017/01/01 10:02:22.0008
10:02:22.0008 0x2300  SystemInfo:
10:02:22.0008 0x2300  
10:02:22.0008 0x2300  OS Version: 10.0.14393 ServicePack: 0.0
10:02:22.0008 0x2300  Product type: Workstation
10:02:22.0008 0x2300  ComputerName: BÜRO-PC
10:02:22.0009 0x2300  UserName: Michael
10:02:22.0009 0x2300  Windows directory: C:\WINDOWS
10:02:22.0009 0x2300  System windows directory: C:\WINDOWS
10:02:22.0009 0x2300  Running under WOW64
10:02:22.0009 0x2300  Processor architecture: Intel x64
10:02:22.0009 0x2300  Number of processors: 4
10:02:22.0009 0x2300  Page size: 0x1000
10:02:22.0009 0x2300  Boot type: Normal boot
10:02:22.0009 0x2300  CodeIntegrityOptions = 0x00000001
10:02:22.0009 0x2300  ============================================================
10:02:22.0651 0x2300  KLMD registered as C:\WINDOWS\system32\drivers\56605955.sys
10:02:22.0651 0x2300  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.576, osProperties = 0x19
10:02:22.0939 0x2300  System UUID: {DBB9EEE9-BD9E-126F-6569-E96BC2D268B8}
10:02:23.0654 0x2300  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
10:02:23.0679 0x2300  ============================================================
10:02:23.0679 0x2300  \Device\Harddisk0\DR0:
10:02:23.0679 0x2300  GPT partitions:
10:02:23.0679 0x2300  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {6C492D71-1A31-4E8F-9656-F831768BEBF8}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x96000
10:02:23.0680 0x2300  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {CF71B53D-6B1C-4C0C-8CA9-99528CFB3A84}, Name: EFI system partition, StartLBA 0x96800, BlocksNum 0x82000
10:02:23.0680 0x2300  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {88729A5F-6B01-48F6-8FD2-FF81C2669D0B}, Name: Microsoft reserved partition, StartLBA 0x118800, BlocksNum 0x40000
10:02:23.0680 0x2300  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {691C0A2D-F07E-4236-85C4-958E390DA549}, Name: Basic data partition, StartLBA 0x158800, BlocksNum 0x38BD0000
10:02:23.0680 0x2300  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {FDC94643-DD41-4F42-B33A-CC628DFD3722}, Name: , StartLBA 0x38D28800, BlocksNum 0xE1000
10:02:23.0680 0x2300  \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {A6156BA3-AA32-4C69-B044-DED7B1A6A6A8}, Name: Basic data partition, StartLBA 0x38E0A000, BlocksNum 0x157C000
10:02:23.0680 0x2300  MBR partitions:
10:02:23.0680 0x2300  ============================================================
10:02:23.0709 0x2300  C: <-> \Device\Harddisk0\DR0\Partition4
10:02:23.0709 0x2300  ============================================================
10:02:23.0709 0x2300  Initialize success
10:02:23.0709 0x2300  ============================================================
10:03:13.0462 0x0ccc  ============================================================
10:03:13.0462 0x0ccc  Scan started
10:03:13.0462 0x0ccc  Mode: Manual; SigCheck; TDLFS; 
10:03:13.0462 0x0ccc  ============================================================
10:03:13.0462 0x0ccc  KSN ping started
10:03:13.0678 0x0ccc  KSN ping finished: true
10:03:17.0920 0x0ccc  ================ Scan system memory ========================
10:03:17.0920 0x0ccc  System memory - ok
10:03:17.0921 0x0ccc  ================ Scan services =============================
10:03:18.0046 0x0ccc  1394ohci - ok
10:03:18.0052 0x0ccc  3ware - ok
10:03:18.0079 0x0ccc  ACPI - ok
10:03:18.0085 0x0ccc  AcpiDev - ok
10:03:18.0093 0x0ccc  acpiex - ok
10:03:18.0101 0x0ccc  acpipagr - ok
10:03:18.0129 0x0ccc  AcpiPmi - ok
10:03:18.0133 0x0ccc  acpitime - ok
10:03:18.0237 0x0ccc  [ B79750091FC0842182FE49D263791294, 32FC260A74C9C45CD1E8998523642C285866378FCD9478FEFD15A0CC42EC0E0B ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
10:03:18.0300 0x0ccc  AdobeFlashPlayerUpdateSvc - ok
10:03:18.0337 0x0ccc  ADP80XX - ok
10:03:18.0358 0x0ccc  AFD - ok
10:03:18.0371 0x0ccc  ahcache - ok
10:03:18.0389 0x0ccc  AJRouter - ok
10:03:18.0403 0x0ccc  ALG - ok
10:03:18.0431 0x0ccc  [ BBADD85854BFB5D43C60B7AC8EEA3DBA, 968C043ABEA46F5C79525863B3FE2681AC0FA4202036C9EFD20B408DECF407E2 ] AMD External Events Utility C:\WINDOWS\system32\atiesrxx.exe
10:03:18.0489 0x0ccc  AMD External Events Utility - ok
10:03:18.0552 0x0ccc  [ DE51F5BB5C05D4C831ECB6E1A70E1B5E, 465834210ACE469481F75EDBB8532386029BD5277C41D084134E9E71B9BD8371 ] AMD FUEL Service C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
10:03:18.0587 0x0ccc  AMD FUEL Service - ok
10:03:18.0613 0x0ccc  AmdK8 - ok
10:03:18.0617 0x0ccc  amdkmdag - ok
10:03:18.0658 0x0ccc  [ 17BA5C907E14947574CBB788F4CEB85F, EAA3DBF436637C58666A91905E388287FC54334EBB2589A00727EB09AC4870E3 ] amdkmdap        C:\WINDOWS\system32\DRIVERS\atikmpag.sys
10:03:18.0689 0x0ccc  amdkmdap - ok
10:03:18.0695 0x0ccc  AmdPPM - ok
10:03:18.0700 0x0ccc  amdsata - ok
10:03:18.0704 0x0ccc  amdsbs - ok
10:03:18.0710 0x0ccc  amdxata - ok
10:03:18.0718 0x0ccc  [ C3D487827E48CC5EC17994FEC5BDFF87, 5FCEA3EEA583755D0C9F6005ED3032E9DFECB57F504DC67701AE7D2D2631C30E ] AODDriver4.2.0  C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
10:03:18.0728 0x0ccc  AODDriver4.2.0 - ok
10:03:18.0733 0x0ccc  [ C3D487827E48CC5EC17994FEC5BDFF87, 5FCEA3EEA583755D0C9F6005ED3032E9DFECB57F504DC67701AE7D2D2631C30E ] AODDriver4.3    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys
10:03:18.0742 0x0ccc  AODDriver4.3 - ok
10:03:18.0763 0x0ccc  AppID - ok
10:03:18.0790 0x0ccc  AppIDSvc - ok
10:03:18.0806 0x0ccc  Appinfo - ok
10:03:18.0820 0x0ccc  applockerfltr - ok
10:03:18.0846 0x0ccc  AppReadiness - ok
10:03:18.0866 0x0ccc  AppXSvc - ok
10:03:18.0895 0x0ccc  arcsas - ok
10:03:18.0901 0x0ccc  AsyncMac - ok
10:03:18.0930 0x0ccc  atapi - ok
10:03:18.0960 0x0ccc  [ 5903F7756DE3D71DF5094262B4FAAB3C, 78832A7438BCC910FC571CCC62EC03F5F54A6238544F3305CCB1295006F35859 ] AtiHDAudioService C:\WINDOWS\system32\drivers\AtihdWT6.sys
10:03:18.0987 0x0ccc  AtiHDAudioService - ok
10:03:19.0014 0x0ccc  AudioEndpointBuilder - ok
10:03:19.0248 0x0ccc  Audiosrv - ok
10:03:19.0300 0x0ccc  [ 03B45C52179E8DAE51A0F685C30D06D6, E06F066B4BFE5344BBF5749B9B8B8CFBA0C02920FD2B9C73BDDA7E34F1785DA7 ] AVP17.0.0       C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
10:03:19.0321 0x0ccc  AVP17.0.0 - ok
10:03:19.0342 0x0ccc  AxInstSV - ok
10:03:19.0354 0x0ccc  b06bdrv - ok
10:03:19.0363 0x0ccc  BasicDisplay - ok
10:03:19.0367 0x0ccc  BasicRender - ok
10:03:19.0374 0x0ccc  bcmfn - ok
10:03:19.0380 0x0ccc  bcmfn2 - ok
10:03:19.0386 0x0ccc  BDESVC - ok
10:03:19.0396 0x0ccc  Beep - ok
10:03:19.0410 0x0ccc  BFE - ok
10:03:19.0430 0x0ccc  BITS - ok
10:03:19.0443 0x0ccc  bowser - ok
10:03:19.0462 0x0ccc  BrokerInfrastructure - ok
10:03:19.0468 0x0ccc  Browser - ok
10:03:19.0487 0x0ccc  BthAvrcpTg - ok
10:03:19.0493 0x0ccc  BthHFEnum - ok
10:03:19.0498 0x0ccc  bthhfhid - ok
10:03:19.0511 0x0ccc  BthHFSrv - ok
10:03:19.0516 0x0ccc  BTHMODEM - ok
10:03:19.0537 0x0ccc  bthserv - ok
10:03:19.0563 0x0ccc  buttonconverter - ok
10:03:19.0580 0x0ccc  CapImg - ok
10:03:19.0595 0x0ccc  cdfs - ok
10:03:19.0609 0x0ccc  CDPSvc - ok
10:03:19.0630 0x0ccc  CDPUserSvc - ok
10:03:19.0653 0x0ccc  cdrom - ok
10:03:19.0669 0x0ccc  CertPropSvc - ok
10:03:19.0673 0x0ccc  cht4iscsi - ok
10:03:19.0679 0x0ccc  cht4vbd - ok
10:03:19.0689 0x0ccc  circlass - ok
10:03:19.0709 0x0ccc  CLFS - ok
10:03:19.0713 0x0ccc  ClipSVC - ok
10:03:19.0718 0x0ccc  clreg - ok
10:03:19.0731 0x0ccc  CmBatt - ok
10:03:19.0756 0x0ccc  [ B29A764A1E76473CD9D64C9438705C19, CD0497EB84DE60E1E491CA495AF981A8DFC4949BB373C1978CAF1BCF4321D30E ] cm_km           C:\WINDOWS\system32\DRIVERS\cm_km.sys
10:03:19.0783 0x0ccc  cm_km - ok
10:03:19.0803 0x0ccc  CNG - ok
10:03:19.0807 0x0ccc  cnghwassist - ok
10:03:19.0842 0x0ccc  CompositeBus - ok
10:03:19.0847 0x0ccc  COMSysApp - ok
10:03:19.0852 0x0ccc  condrv - ok
10:03:19.0876 0x0ccc  CoreMessagingRegistrar - ok
10:03:19.0903 0x0ccc  CryptSvc - ok
10:03:19.0920 0x0ccc  dam - ok
10:03:19.0946 0x0ccc  DcomLaunch - ok
10:03:20.0007 0x0ccc  DcpSvc - ok
10:03:20.0014 0x0ccc  defragsvc - ok
10:03:20.0046 0x0ccc  DeviceAssociationService - ok
10:03:20.0052 0x0ccc  DeviceInstall - ok
10:03:20.0067 0x0ccc  DevQueryBroker - ok
10:03:20.0087 0x0ccc  Dfsc - ok
10:03:20.0097 0x0ccc  Dhcp - ok
10:03:20.0139 0x0ccc  diagnosticshub.standardcollector.service - ok
10:03:20.0164 0x0ccc  DiagTrack - ok
10:03:20.0188 0x0ccc  disk - ok
10:03:20.0215 0x0ccc  DmEnrollmentSvc - ok
10:03:20.0223 0x0ccc  dmvsc - ok
10:03:20.0231 0x0ccc  dmwappushservice - ok
10:03:20.0262 0x0ccc  Dnscache - ok
10:03:20.0271 0x0ccc  dot3svc - ok
10:03:20.0277 0x0ccc  DPS - ok
10:03:20.0295 0x0ccc  drmkaud - ok
10:03:20.0307 0x0ccc  DsmSvc - ok
10:03:20.0316 0x0ccc  DsSvc - ok
10:03:20.0333 0x0ccc  DXGKrnl - ok
10:03:20.0347 0x0ccc  EapHost - ok
10:03:20.0353 0x0ccc  ebdrv - ok
10:03:20.0377 0x0ccc  EFS - ok
10:03:20.0384 0x0ccc  EhStorClass - ok
10:03:20.0396 0x0ccc  EhStorTcgDrv - ok
10:03:20.0412 0x0ccc  embeddedmode - ok
10:03:20.0438 0x0ccc  EntAppSvc - ok
10:03:20.0443 0x0ccc  ErrDev - ok
10:03:20.0462 0x0ccc  EventSystem - ok
10:03:20.0470 0x0ccc  exfat - ok
10:03:20.0488 0x0ccc  fastfat - ok
10:03:20.0498 0x0ccc  Fax - ok
10:03:20.0503 0x0ccc  fdc - ok
10:03:20.0508 0x0ccc  fdPHost - ok
10:03:20.0514 0x0ccc  FDResPub - ok
10:03:20.0534 0x0ccc  fhsvc - ok
10:03:20.0554 0x0ccc  FileCrypt - ok
10:03:20.0558 0x0ccc  FileInfo - ok
10:03:20.0573 0x0ccc  Filetrace - ok
10:03:20.0577 0x0ccc  flpydisk - ok
10:03:20.0585 0x0ccc  FltMgr - ok
10:03:20.0613 0x0ccc  FontCache - ok
10:03:20.0698 0x0ccc  FontCache3.0.0.0 - ok
10:03:20.0788 0x0ccc  [ 59F5C34DFBDB3DE37F321258FAD21BA2, 54C0A1BCAC3C10FBB3259EB0A4830ED9C8BA3C079F237D4CE5B34AA2C5F68411 ] FoxitReaderService C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
10:03:20.0854 0x0ccc  FoxitReaderService - ok
10:03:20.0878 0x0ccc  FrameServer - ok
10:03:20.0883 0x0ccc  FsDepends - ok
10:03:20.0887 0x0ccc  Fs_Rec - ok
10:03:20.0903 0x0ccc  fvevol - ok
10:03:20.0922 0x0ccc  gencounter - ok
10:03:20.0931 0x0ccc  genericusbfn - ok
10:03:20.0938 0x0ccc  GPIOClx0101 - ok
10:03:20.0946 0x0ccc  gpsvc - ok
10:03:20.0955 0x0ccc  GpuEnergyDrv - ok
10:03:20.0969 0x0ccc  HdAudAddService - ok
10:03:20.0973 0x0ccc  HDAudBus - ok
10:03:20.0978 0x0ccc  HidBatt - ok
10:03:20.0983 0x0ccc  HidBth - ok
10:03:20.0988 0x0ccc  hidi2c - ok
10:03:20.0994 0x0ccc  hidinterrupt - ok
10:03:20.0999 0x0ccc  HidIr - ok
10:03:21.0013 0x0ccc  hidserv - ok
10:03:21.0045 0x0ccc  HidUsb - ok
10:03:21.0065 0x0ccc  HomeGroupListener - ok
10:03:21.0093 0x0ccc  HomeGroupProvider - ok
10:03:21.0100 0x0ccc  HpSAMD - ok
10:03:21.0125 0x0ccc  HTTP - ok
10:03:21.0156 0x0ccc  HvHost - ok
10:03:21.0179 0x0ccc  hvservice - ok
10:03:21.0185 0x0ccc  hwpolicy - ok
10:03:21.0193 0x0ccc  hyperkbd - ok
10:03:21.0217 0x0ccc  i8042prt - ok
10:03:21.0221 0x0ccc  iagpio - ok
10:03:21.0225 0x0ccc  iai2c - ok
10:03:21.0232 0x0ccc  iaLPSS2i_GPIO2 - ok
10:03:21.0236 0x0ccc  iaLPSS2i_I2C - ok
10:03:21.0242 0x0ccc  iaLPSSi_GPIO - ok
10:03:21.0248 0x0ccc  iaLPSSi_I2C - ok
10:03:21.0252 0x0ccc  iaStorAV - ok
10:03:21.0257 0x0ccc  iaStorV - ok
10:03:21.0263 0x0ccc  ibbus - ok
10:03:21.0282 0x0ccc  icssvc - ok
10:03:21.0286 0x0ccc  IKEEXT - ok
10:03:21.0296 0x0ccc  IndirectKmd - ok
10:03:21.0318 0x0ccc  intelide - ok
10:03:21.0322 0x0ccc  intelpep - ok
10:03:21.0340 0x0ccc  intelppm - ok
10:03:21.0358 0x0ccc  iorate - ok
10:03:21.0371 0x0ccc  IpFilterDriver - ok
10:03:21.0388 0x0ccc  iphlpsvc - ok
10:03:21.0392 0x0ccc  IPMIDRV - ok
10:03:21.0397 0x0ccc  IPNAT - ok
10:03:21.0401 0x0ccc  irda - ok
10:03:21.0406 0x0ccc  IRENUM - ok
10:03:21.0425 0x0ccc  irmon - ok
10:03:21.0430 0x0ccc  isapnp - ok
10:03:21.0435 0x0ccc  iScsiPrt - ok
10:03:21.0451 0x0ccc  kbdclass - ok
10:03:21.0471 0x0ccc  kbdhid - ok
10:03:21.0484 0x0ccc  kdnic - ok
10:03:21.0488 0x0ccc  KeyIso - ok
10:03:21.0528 0x0ccc  [ 97E3E8F35632EECD0ABD2DE6519A9666, ABE96FDEB1076E380D7FB4975C020B43ED4E821097EFC6AFE8C75D764167D6E8 ] kl1             C:\WINDOWS\system32\DRIVERS\kl1.sys
10:03:21.0566 0x0ccc  kl1 - ok
10:03:21.0579 0x0ccc  [ B01AD8DA034EE42D4C2282F77FDB03AE, 3FF55F3CEE4A0E5D559F04F5A639297EA0F36580720E94CF9DD56DEBF2E98F39 ] klbackupdisk    C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys
10:03:21.0591 0x0ccc  klbackupdisk - ok
10:03:21.0604 0x0ccc  [ 10549B5BFD9A3DCF4FFA6287236FA959, 6BDFA335A8E3A69425CB23230660D3168CB82911ACB3AAAF85C19263511EAF51 ] klbackupflt     C:\WINDOWS\system32\DRIVERS\klbackupflt.sys
10:03:21.0616 0x0ccc  klbackupflt - ok
10:03:21.0626 0x0ccc  [ 7DAA9047F50BF5A3F8C147719FC520AF, 0740387075AF46DB1E9AEE3B12C65A06EDFE58EADB8B562C36CB1FEFF9905C26 ] kldisk          C:\WINDOWS\system32\DRIVERS\kldisk.sys
10:03:21.0638 0x0ccc  kldisk - ok
10:03:21.0659 0x0ccc  [ 5766A27C85EE813029831D125D2EFB45, BB5BAFD5A58E80C7F0B8D24121352E0386B3422FFC16B56F1D1B1C6A482AC9F0 ] klelam          C:\WINDOWS\system32\DRIVERS\klelam.sys
10:03:21.0685 0x0ccc  klelam - ok
10:03:21.0712 0x0ccc  [ 63FD545876EF4248BE3C8788D8270758, 5FF6529F8D7F94848E68142D8B2CAA446342AF95644C9223E689E303E8AB7336 ] klflt           C:\WINDOWS\system32\DRIVERS\klflt.sys
10:03:21.0726 0x0ccc  klflt - ok
10:03:21.0766 0x0ccc  [ 3524D3B8F5BEF8C01EAF7EEFFA5EAB3F, 0908A6E3E62017F7099900850D58A1B775D808F7DC0951B09781689DF3994DA2 ] klhk            C:\WINDOWS\System32\drivers\klhk.sys
10:03:21.0787 0x0ccc  klhk - ok
10:03:21.0865 0x0ccc  [ 7796EAD58D8C1A42AAB6B6CA9A3F106C, 7DA8A05A0210F63C7D120DCF0101AD895D53368C0DED23E275F2BA79239FCE28 ] klids           C:\ProgramData\Kaspersky Lab\AVP17.0.0\Bases\klids.sys
10:03:21.0893 0x0ccc  klids - ok
10:03:21.0942 0x0ccc  [ 2CE22F21119A089277B067A1B1BDC592, 7CDE229899B6344967098FB03C7C1C360CC3DC2DCC096F8AAC6CC96536FF1AE9 ] KLIF            C:\WINDOWS\system32\DRIVERS\klif.sys
10:03:21.0978 0x0ccc  KLIF - ok
10:03:21.0992 0x0ccc  [ 6357C533C30650361110DBAF59A25DF8, FA8CF6292CCBC7E23527D968E54CD773706CF091E35563B0CF9F8A1DF0B724B9 ] KLIM6           C:\WINDOWS\system32\DRIVERS\klim6.sys
10:03:22.0004 0x0ccc  KLIM6 - ok
10:03:22.0024 0x0ccc  [ 5480CC93737F48282552C84FA7EBA59B, B7D92424399B647132F6B9409FE75EAA310C984F796FC0B65BBE2EA180110968 ] klkbdflt        C:\WINDOWS\system32\DRIVERS\klkbdflt.sys
10:03:22.0036 0x0ccc  klkbdflt - ok
10:03:22.0041 0x0ccc  [ FD47C92A63B6EADEA830BFA96C06EAEE, C15C39B6FA53CBD01A2F95243845C4B706B4229F8FFB75C7128819B9CEE5B2CB ] klmouflt        C:\WINDOWS\system32\DRIVERS\klmouflt.sys
10:03:22.0053 0x0ccc  klmouflt - ok
10:03:22.0076 0x0ccc  [ 6B0C605591C892CBB683F63EA47822DC, E74C0A0501A1B4B56B417402108521F34DA6A23FCD1C05E4E524E41EBA0906FF ] klpd            C:\WINDOWS\system32\DRIVERS\klpd.sys
10:03:22.0088 0x0ccc  klpd - ok
10:03:22.0126 0x0ccc  [ 828B042A95F055648DA190DF6C7AB1B6, 0457B0EF03BCB4CC1297EB25A25C162937F456BF406EC7B1A5E9A0AA13A9BCD7 ] kltap           C:\WINDOWS\System32\drivers\kltap.sys
10:03:22.0137 0x0ccc  kltap - ok
10:03:22.0168 0x0ccc  [ 66516A704F1D378E58B85D79633C103D, 54E3EB342D2FD17CF742A8ACADCA81A553216AA289955DD176A54D6414727DA5 ] klupd_klif_arkmon C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
10:03:22.0183 0x0ccc  klupd_klif_arkmon - ok
10:03:22.0213 0x0ccc  [ 941727CDC11A0E1A407B602D88CD58CB, 8E290245A42E75FC532A72A850BAF5516BA7488BEF015F46CA9D215BCA0D7CE0 ] klupd_klif_kimul C:\WINDOWS\system32\Drivers\klupd_klif_kimul.sys
10:03:22.0225 0x0ccc  klupd_klif_kimul - ok
10:03:22.0248 0x0ccc  [ 55FC7F42A5AA55A265CE466227ABD0DE, AB72152F39460327D74DB693BFB36A93BC2D752653D3633BB7F439DC4B9AB081 ] klupd_klif_klark C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
10:03:22.0263 0x0ccc  klupd_klif_klark - ok
10:03:22.0277 0x0ccc  [ D7709E365C10F99DE58BB688C45358B7, C028FB885B7A4AFB98FD2B8EABF99E913F480891A9ED859FE5B4E077BDE8ACB5 ] klupd_klif_klbg C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
10:03:22.0290 0x0ccc  klupd_klif_klbg - ok
10:03:22.0302 0x0ccc  [ 8D7E0B5D4F843D39AA1F644B2578B0EE, C4A8E569A253738AA7B7CDE8D0E987954D1DA6BE6F32D962BD458CA5275A5D76 ] klupd_klif_mark C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
10:03:22.0315 0x0ccc  klupd_klif_mark - ok
10:03:22.0390 0x0ccc  [ D7F0B46844565E2ED68AC99AF0F4263F, AB419CBC29F96703237127AC4178A5365D4CCA010BAB1BD66D100D635E6E89B8 ] klvssbrigde64   C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe
10:03:22.0411 0x0ccc  klvssbrigde64 - ok
10:03:22.0429 0x0ccc  [ 4C5305295B51BA72FC9C8CDAB32F95C3, 0E5850AC4CA14D971E7B04FED23CB2F6CEEE2796E905AADA0104677982ECD58A ] klwfp           C:\WINDOWS\system32\DRIVERS\klwfp.sys
10:03:22.0442 0x0ccc  klwfp - ok
10:03:22.0462 0x0ccc  [ EF1AFCADCA485B3846D7A8B71F87509B, C27B579742389ACD8804EC372CBA3C4FDFFB1A8AA6280AE1353BC089E8E34C76 ] Klwtp           C:\WINDOWS\system32\DRIVERS\klwtp.sys
10:03:22.0476 0x0ccc  Klwtp - ok
10:03:22.0493 0x0ccc  [ 67EFD862ACEFCB9687523832C62FA584, B3C9A36C535B706EB19E5C5437705E8C5EC71F45115A2C97E1348462EC2A3922 ] kneps           C:\WINDOWS\system32\DRIVERS\kneps.sys
10:03:22.0507 0x0ccc  kneps - ok
10:03:22.0535 0x0ccc  [ EFF5EA6088DB81C6EF6EDCDA5EE79909, 4D364B0BF012C335FA3B25BDF042D4AF672D961B9B48CB7C5BE34FCFD1D64979 ] KSDE1.0.0       C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
10:03:22.0549 0x0ccc  KSDE1.0.0 - ok
10:03:22.0563 0x0ccc  KSecDD - ok
10:03:22.0570 0x0ccc  KSecPkg - ok
10:03:22.0580 0x0ccc  ksthunk - ok
10:03:22.0606 0x0ccc  KtmRm - ok
10:03:22.0613 0x0ccc  LanmanServer - ok
10:03:22.0624 0x0ccc  LanmanWorkstation - ok
10:03:22.0636 0x0ccc  lfsvc - ok
10:03:22.0648 0x0ccc  LicenseManager - ok
10:03:22.0655 0x0ccc  lltdio - ok
10:03:22.0659 0x0ccc  lltdsvc - ok
10:03:22.0677 0x0ccc  lmhosts - ok
10:03:22.0690 0x0ccc  LSI_SAS - ok
10:03:22.0694 0x0ccc  LSI_SAS2i - ok
10:03:22.0700 0x0ccc  LSI_SAS3i - ok
10:03:22.0704 0x0ccc  LSI_SSS - ok
10:03:22.0709 0x0ccc  LSM - ok
10:03:22.0715 0x0ccc  luafv - ok
10:03:22.0728 0x0ccc  MapsBroker - ok
10:03:22.0752 0x0ccc  [ 78BFF5425E044086E74E78650A359FBB, 294738C10F3ED933D4EC40EA0659372FCF19A3C6D45D356917438CA495F2CB45 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
10:03:22.0762 0x0ccc  MBAMProtector - ok
10:03:22.0818 0x0ccc  [ F1A89A34388B5626F1548D393B23ECB1, EA00AC76C4C8C9340753B58A3313C9177A9B98F9F1BDE08F184CD0F53D0C186F ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
10:03:22.0854 0x0ccc  MBAMService - ok
10:03:22.0903 0x0ccc  [ 78488AF2AB2111D67B3C4044707A519B, 7AA71B9C4C7949A1A21F60EF7CCEDE0079794990696B60557B5DC86F4D47223A ] MBAMSwissArmy   C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
10:03:22.0916 0x0ccc  MBAMSwissArmy - ok
10:03:22.0939 0x0ccc  [ 898415AC0B5F1D2A9A48ABCB68A6DC4B, E1FD9AE5E22E3E5A18288E66A6184E92A4B63A1274DCE147A7728BB09C6A225E ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
10:03:22.0951 0x0ccc  MBAMWebAccessControl - ok
10:03:22.0981 0x0ccc  megasas - ok
10:03:23.0006 0x0ccc  megasas2i - ok
10:03:23.0014 0x0ccc  megasr - ok
10:03:23.0051 0x0ccc  MessagingService - ok
10:03:23.0077 0x0ccc  mlx4_bus - ok
10:03:23.0097 0x0ccc  MMCSS - ok
10:03:23.0108 0x0ccc  Modem - ok
10:03:23.0121 0x0ccc  monitor - ok
10:03:23.0126 0x0ccc  mouclass - ok
10:03:23.0132 0x0ccc  mouhid - ok
10:03:23.0138 0x0ccc  mountmgr - ok
10:03:23.0175 0x0ccc  [ E464A0A92E2E354D07DDA713D3E10DE4, D5CF213F03DF54EF9933027A7A7D4413371C1ECBFF61E4DE818D50FA72C8C5FC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
10:03:23.0198 0x0ccc  MozillaMaintenance - ok
10:03:23.0205 0x0ccc  mpsdrv - ok
10:03:23.0228 0x0ccc  MpsSvc - ok
10:03:23.0245 0x0ccc  MRxDAV - ok
10:03:23.0263 0x0ccc  mrxsmb - ok
10:03:23.0273 0x0ccc  mrxsmb10 - ok
10:03:23.0279 0x0ccc  mrxsmb20 - ok
10:03:23.0284 0x0ccc  MsBridge - ok
10:03:23.0299 0x0ccc  MSDTC - ok
10:03:23.0313 0x0ccc  Msfs - ok
10:03:23.0317 0x0ccc  msgpiowin32 - ok
10:03:23.0323 0x0ccc  mshidkmdf - ok
10:03:23.0331 0x0ccc  mshidumdf - ok
10:03:23.0336 0x0ccc  msisadrv - ok
10:03:23.0364 0x0ccc  MSiSCSI - ok
10:03:23.0368 0x0ccc  msiserver - ok
10:03:23.0372 0x0ccc  MSKSSRV - ok
10:03:23.0377 0x0ccc  MsLldp - ok
10:03:23.0382 0x0ccc  MSPCLOCK - ok
10:03:23.0388 0x0ccc  MSPQM - ok
10:03:23.0392 0x0ccc  MsRPC - ok
10:03:23.0400 0x0ccc  mssmbios - ok
10:03:23.0404 0x0ccc  MSTEE - ok
10:03:23.0410 0x0ccc  MTConfig - ok
10:03:23.0415 0x0ccc  Mup - ok
10:03:23.0420 0x0ccc  mvumis - ok
10:03:23.0436 0x0ccc  NativeWifiP - ok
10:03:23.0443 0x0ccc  NcaSvc - ok
10:03:23.0457 0x0ccc  NcbService - ok
10:03:23.0461 0x0ccc  NcdAutoSetup - ok
10:03:23.0467 0x0ccc  ndfltr - ok
10:03:23.0486 0x0ccc  NDIS - ok
10:03:23.0490 0x0ccc  NdisCap - ok
10:03:23.0504 0x0ccc  NdisImPlatform - ok
10:03:23.0508 0x0ccc  NdisTapi - ok
10:03:23.0514 0x0ccc  Ndisuio - ok
10:03:23.0519 0x0ccc  NdisVirtualBus - ok
10:03:23.0524 0x0ccc  NdisWan - ok
10:03:23.0529 0x0ccc  ndiswanlegacy - ok
10:03:23.0534 0x0ccc  ndproxy - ok
10:03:23.0539 0x0ccc  Ndu - ok
10:03:23.0544 0x0ccc  NetAdapterCx - ok
10:03:23.0550 0x0ccc  NetBIOS - ok
10:03:23.0558 0x0ccc  NetBT - ok
10:03:23.0564 0x0ccc  Netlogon - ok
10:03:23.0579 0x0ccc  Netman - ok
10:03:23.0584 0x0ccc  netprofm - ok
10:03:23.0610 0x0ccc  NetSetupSvc - ok
10:03:23.0684 0x0ccc  NetTcpPortSharing - ok
10:03:23.0694 0x0ccc  NgcCtnrSvc - ok
10:03:23.0711 0x0ccc  NgcSvc - ok
10:03:23.0718 0x0ccc  NlaSvc - ok
10:03:23.0724 0x0ccc  Npfs - ok
10:03:23.0729 0x0ccc  npsvctrig - ok
10:03:23.0745 0x0ccc  nsi - ok
10:03:23.0749 0x0ccc  nsiproxy - ok
10:03:23.0772 0x0ccc  NTFS - ok
10:03:23.0789 0x0ccc  Null - ok
10:03:23.0799 0x0ccc  nvraid - ok
10:03:23.0803 0x0ccc  nvstor - ok
10:03:23.0816 0x0ccc  OneSyncSvc - ok
10:03:23.0884 0x0ccc  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
10:03:23.0905 0x0ccc  ose - ok
10:03:24.0075 0x0ccc  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
10:03:24.0204 0x0ccc  osppsvc - ok
10:03:24.0233 0x0ccc  p2pimsvc - ok
10:03:24.0239 0x0ccc  p2psvc - ok
10:03:24.0248 0x0ccc  Parport - ok
10:03:24.0262 0x0ccc  partmgr - ok
10:03:24.0289 0x0ccc  PcaSvc - ok
10:03:24.0307 0x0ccc  pci - ok
10:03:24.0331 0x0ccc  pciide - ok
10:03:24.0335 0x0ccc  pcmcia - ok
10:03:24.0339 0x0ccc  pcw - ok
10:03:24.0354 0x0ccc  pdc - ok
10:03:24.0365 0x0ccc  PEAUTH - ok
10:03:24.0369 0x0ccc  percsas2i - ok
10:03:24.0374 0x0ccc  percsas3i - ok
10:03:24.0432 0x0ccc  PerfHost - ok
10:03:24.0473 0x0ccc  PhoneSvc - ok
10:03:24.0494 0x0ccc  PimIndexMaintenanceSvc - ok
10:03:24.0533 0x0ccc  pla - ok
10:03:24.0547 0x0ccc  PlugPlay - ok
10:03:24.0554 0x0ccc  PNRPAutoReg - ok
10:03:24.0563 0x0ccc  PNRPsvc - ok
10:03:24.0580 0x0ccc  PolicyAgent - ok
10:03:24.0590 0x0ccc  Power - ok
10:03:24.0597 0x0ccc  PptpMiniport - ok
10:03:24.0743 0x0ccc  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
10:03:24.0898 0x0ccc  PrintNotify - ok
10:03:24.0923 0x0ccc  Processor - ok
10:03:24.0933 0x0ccc  ProfSvc - ok
10:03:24.0948 0x0ccc  Psched - ok
10:03:24.0977 0x0ccc  QWAVE - ok
10:03:24.0982 0x0ccc  QWAVEdrv - ok
10:03:24.0988 0x0ccc  RasAcd - ok
10:03:25.0027 0x0ccc  RasAgileVpn - ok
10:03:25.0046 0x0ccc  RasAuto - ok
10:03:25.0050 0x0ccc  Rasl2tp - ok
10:03:25.0087 0x0ccc  RasMan - ok
10:03:25.0093 0x0ccc  RasPppoe - ok
10:03:25.0101 0x0ccc  RasSstp - ok
10:03:25.0108 0x0ccc  rdbss - ok
10:03:25.0129 0x0ccc  rdpbus - ok
10:03:25.0138 0x0ccc  RDPDR - ok
10:03:25.0177 0x0ccc  RdpVideoMiniport - ok
10:03:25.0184 0x0ccc  rdyboost - ok
10:03:25.0191 0x0ccc  ReFSv1 - ok
10:03:25.0199 0x0ccc  RemoteAccess - ok
10:03:25.0207 0x0ccc  RemoteRegistry - ok
10:03:25.0235 0x0ccc  RetailDemo - ok
10:03:25.0251 0x0ccc  RmSvc - ok
10:03:25.0256 0x0ccc  RpcEptMapper - ok
10:03:25.0265 0x0ccc  RpcLocator - ok
10:03:25.0269 0x0ccc  RpcSs - ok
10:03:25.0281 0x0ccc  rspndr - ok
10:03:25.0292 0x0ccc  rt640x64 - ok
10:03:25.0304 0x0ccc  RTL8192su - ok
10:03:25.0308 0x0ccc  s3cap - ok
10:03:25.0326 0x0ccc  SamSs - ok
10:03:25.0341 0x0ccc  sbp2port - ok
10:03:25.0353 0x0ccc  SCardSvr - ok
10:03:25.0361 0x0ccc  ScDeviceEnum - ok
10:03:25.0365 0x0ccc  scfilter - ok
10:03:25.0370 0x0ccc  Schedule - ok
10:03:25.0374 0x0ccc  scmbus - ok
10:03:25.0381 0x0ccc  scmdisk0101 - ok
10:03:25.0393 0x0ccc  SCPolicySvc - ok
10:03:25.0409 0x0ccc  sdbus - ok
10:03:25.0420 0x0ccc  SDRSVC - ok
10:03:25.0425 0x0ccc  sdstor - ok
10:03:25.0431 0x0ccc  seclogon - ok
10:03:25.0436 0x0ccc  SENS - ok
10:03:25.0456 0x0ccc  SensorDataService - ok
10:03:25.0460 0x0ccc  SensorService - ok
10:03:25.0465 0x0ccc  SensrSvc - ok
10:03:25.0470 0x0ccc  SerCx - ok
10:03:25.0474 0x0ccc  SerCx2 - ok
10:03:25.0480 0x0ccc  Serenum - ok
10:03:25.0484 0x0ccc  Serial - ok
10:03:25.0489 0x0ccc  sermouse - ok
10:03:25.0501 0x0ccc  SessionEnv - ok
10:03:25.0505 0x0ccc  sfloppy - ok
10:03:25.0537 0x0ccc  SharedAccess - ok
10:03:25.0556 0x0ccc  ShellHWDetection - ok
10:03:25.0570 0x0ccc  shpamsvc - ok
10:03:25.0574 0x0ccc  SiSRaid2 - ok
10:03:25.0579 0x0ccc  SiSRaid4 - ok
10:03:25.0628 0x0ccc  smphost - ok
10:03:25.0633 0x0ccc  SmsRouter - ok
10:03:25.0641 0x0ccc  SNMPTRAP - ok
10:03:25.0662 0x0ccc  spaceport - ok
10:03:25.0666 0x0ccc  SpbCx - ok
10:03:25.0679 0x0ccc  Spooler - ok
10:03:25.0695 0x0ccc  sppsvc - ok
10:03:25.0699 0x0ccc  srv - ok
10:03:25.0715 0x0ccc  srv2 - ok
10:03:25.0719 0x0ccc  srvnet - ok
10:03:25.0723 0x0ccc  SSDPSRV - ok
10:03:25.0738 0x0ccc  SstpSvc - ok
10:03:25.0757 0x0ccc  StateRepository - ok
10:03:25.0774 0x0ccc  stexstor - ok
10:03:25.0781 0x0ccc  stisvc - ok
10:03:25.0785 0x0ccc  storahci - ok
10:03:25.0790 0x0ccc  storflt - ok
10:03:25.0795 0x0ccc  stornvme - ok
10:03:25.0800 0x0ccc  storqosflt - ok
10:03:25.0804 0x0ccc  StorSvc - ok
10:03:25.0809 0x0ccc  storufs - ok
10:03:25.0815 0x0ccc  storvsc - ok
10:03:25.0820 0x0ccc  svsvc - ok
10:03:25.0824 0x0ccc  swenum - ok
10:03:25.0830 0x0ccc  swprv - ok
10:03:25.0846 0x0ccc  Synth3dVsc - ok
10:03:25.0875 0x0ccc  SysMain - ok
10:03:25.0908 0x0ccc  SystemEventsBroker - ok
10:03:25.0942 0x0ccc  TabletInputService - ok
10:03:25.0949 0x0ccc  TapiSrv - ok
10:03:25.0969 0x0ccc  Tcpip - ok
10:03:25.0974 0x0ccc  Tcpip6 - ok
10:03:25.0982 0x0ccc  tcpipreg - ok
10:03:25.0989 0x0ccc  tdx - ok
10:03:25.0993 0x0ccc  terminpt - ok
10:03:25.0999 0x0ccc  TermService - ok
10:03:26.0014 0x0ccc  Themes - ok
10:03:26.0035 0x0ccc  TieringEngineService - ok
10:03:26.0039 0x0ccc  tiledatamodelsvc - ok
10:03:26.0059 0x0ccc  TimeBrokerSvc - ok
10:03:26.0076 0x0ccc  TPM - ok
10:03:26.0081 0x0ccc  TrkWks - ok
10:03:26.0112 0x0ccc  TrustedInstaller - ok
10:03:26.0118 0x0ccc  tsusbflt - ok
10:03:26.0123 0x0ccc  TsUsbGD - ok
10:03:26.0127 0x0ccc  tunnel - ok
10:03:26.0156 0x0ccc  tzautoupdate - ok
10:03:26.0160 0x0ccc  UASPStor - ok
10:03:26.0166 0x0ccc  UcmCx0101 - ok
10:03:26.0171 0x0ccc  UcmTcpciCx0101 - ok
10:03:26.0176 0x0ccc  UcmUcsi - ok
10:03:26.0181 0x0ccc  Ucx01000 - ok
10:03:26.0187 0x0ccc  UdeCx - ok
10:03:26.0192 0x0ccc  udfs - ok
10:03:26.0197 0x0ccc  UEFI - ok
10:03:26.0202 0x0ccc  Ufx01000 - ok
10:03:26.0207 0x0ccc  UfxChipidea - ok
10:03:26.0211 0x0ccc  ufxsynopsys - ok
10:03:26.0221 0x0ccc  UI0Detect - ok
10:03:26.0226 0x0ccc  umbus - ok
10:03:26.0231 0x0ccc  UmPass - ok
10:03:26.0236 0x0ccc  UmRdpService - ok
10:03:26.0241 0x0ccc  UnistoreSvc - ok
10:03:26.0249 0x0ccc  upnphost - ok
10:03:26.0254 0x0ccc  UrsChipidea - ok
10:03:26.0258 0x0ccc  UrsCx01000 - ok
10:03:26.0264 0x0ccc  UrsSynopsys - ok
10:03:26.0269 0x0ccc  usbccgp - ok
10:03:26.0274 0x0ccc  usbcir - ok
10:03:26.0279 0x0ccc  usbehci - ok
10:03:26.0284 0x0ccc  usbhub - ok
10:03:26.0289 0x0ccc  USBHUB3 - ok
10:03:26.0295 0x0ccc  usbohci - ok
10:03:26.0300 0x0ccc  usbprint - ok
10:03:26.0305 0x0ccc  usbser - ok
10:03:26.0310 0x0ccc  USBSTOR - ok
10:03:26.0315 0x0ccc  usbuhci - ok
10:03:26.0320 0x0ccc  USBXHCI - ok
10:03:26.0329 0x0ccc  UserDataSvc - ok
10:03:26.0369 0x0ccc  UserManager - ok
10:03:26.0390 0x0ccc  UsoSvc - ok
10:03:26.0394 0x0ccc  VaultSvc - ok
10:03:26.0419 0x0ccc  vdrvroot - ok
10:03:26.0427 0x0ccc  vds - ok
10:03:26.0432 0x0ccc  VerifierExt - ok
10:03:26.0447 0x0ccc  vhdmp - ok
10:03:26.0451 0x0ccc  vhf - ok
10:03:26.0455 0x0ccc  vmbus - ok
10:03:26.0460 0x0ccc  VMBusHID - ok
10:03:26.0481 0x0ccc  vmgid - ok
10:03:26.0501 0x0ccc  vmicguestinterface - ok
10:03:26.0506 0x0ccc  vmicheartbeat - ok
10:03:26.0512 0x0ccc  vmickvpexchange - ok
10:03:26.0530 0x0ccc  vmicrdv - ok
10:03:26.0535 0x0ccc  vmicshutdown - ok
10:03:26.0540 0x0ccc  vmictimesync - ok
10:03:26.0546 0x0ccc  vmicvmsession - ok
10:03:26.0551 0x0ccc  vmicvss - ok
10:03:26.0557 0x0ccc  volmgr - ok
10:03:26.0562 0x0ccc  volmgrx - ok
10:03:26.0568 0x0ccc  volsnap - ok
10:03:26.0572 0x0ccc  volume - ok
10:03:26.0584 0x0ccc  vpci - ok
10:03:26.0588 0x0ccc  vsmraid - ok
10:03:26.0593 0x0ccc  VSS - ok
10:03:26.0598 0x0ccc  VSTXRAID - ok
10:03:26.0603 0x0ccc  vwifibus - ok
10:03:26.0608 0x0ccc  vwififlt - ok
10:03:26.0613 0x0ccc  vwifimp - ok
10:03:26.0618 0x0ccc  W32Time - ok
10:03:26.0623 0x0ccc  WacomPen - ok
10:03:26.0634 0x0ccc  WalletService - ok
10:03:26.0638 0x0ccc  wanarp - ok
10:03:26.0642 0x0ccc  wanarpv6 - ok
10:03:26.0648 0x0ccc  wbengine - ok
10:03:26.0669 0x0ccc  WbioSrvc - ok
10:03:26.0684 0x0ccc  wcifs - ok
10:03:26.0688 0x0ccc  Wcmsvc - ok
10:03:26.0704 0x0ccc  wcncsvc - ok
10:03:26.0708 0x0ccc  wcnfs - ok
10:03:26.0714 0x0ccc  WdBoot - ok
10:03:26.0718 0x0ccc  Wdf01000 - ok
10:03:26.0723 0x0ccc  WdFilter - ok
10:03:26.0729 0x0ccc  WdiServiceHost - ok
10:03:26.0734 0x0ccc  WdiSystemHost - ok
10:03:26.0749 0x0ccc  wdiwifi - ok
10:03:26.0753 0x0ccc  WdNisDrv - ok
10:03:26.0784 0x0ccc  WdNisSvc - ok
10:03:26.0790 0x0ccc  WebClient - ok
10:03:26.0795 0x0ccc  Wecsvc - ok
10:03:26.0800 0x0ccc  WEPHOSTSVC - ok
10:03:26.0805 0x0ccc  wercplsupport - ok
10:03:26.0810 0x0ccc  WerSvc - ok
10:03:26.0816 0x0ccc  WFPLWFS - ok
10:03:26.0820 0x0ccc  WiaRpc - ok
10:03:26.0825 0x0ccc  WIMMount - ok
10:03:26.0830 0x0ccc  WinDefend - ok
10:03:26.0855 0x0ccc  WindowsTrustedRT - ok
10:03:26.0859 0x0ccc  WindowsTrustedRTProxy - ok
10:03:26.0876 0x0ccc  WinHttpAutoProxySvc - ok
10:03:26.0881 0x0ccc  WinMad - ok
10:03:26.0916 0x0ccc  Winmgmt - ok
10:03:26.0946 0x0ccc  WinRM - ok
10:03:26.0956 0x0ccc  WINUSB - ok
10:03:26.0971 0x0ccc  WinVerbs - ok
10:03:26.0997 0x0ccc  wisvc - ok
10:03:27.0018 0x0ccc  WlanSvc - ok
10:03:27.0041 0x0ccc  wlidsvc - ok
10:03:27.0046 0x0ccc  WmiAcpi - ok
10:03:27.0053 0x0ccc  wmiApSrv - ok
10:03:27.0065 0x0ccc  WMPNetworkSvc - ok
10:03:27.0079 0x0ccc  Wof - ok
10:03:27.0123 0x0ccc  workfolderssvc - ok
10:03:27.0127 0x0ccc  WPDBusEnum - ok
10:03:27.0141 0x0ccc  WpdUpFltr - ok
10:03:27.0146 0x0ccc  WpnService - ok
10:03:27.0151 0x0ccc  WpnUserService - ok
10:03:27.0191 0x0ccc  ws2ifsl - ok
10:03:27.0196 0x0ccc  wscsvc - ok
10:03:27.0201 0x0ccc  WSearch - ok
10:03:27.0208 0x0ccc  wuauserv - ok
10:03:27.0214 0x0ccc  WudfPf - ok
10:03:27.0218 0x0ccc  WUDFRd - ok
10:03:27.0232 0x0ccc  wudfsvc - ok
10:03:27.0236 0x0ccc  WUDFWpdFs - ok
10:03:27.0255 0x0ccc  WwanSvc - ok
10:03:27.0275 0x0ccc  XblAuthManager - ok
10:03:27.0295 0x0ccc  XblGameSave - ok
10:03:27.0300 0x0ccc  xboxgip - ok
10:03:27.0305 0x0ccc  XboxNetApiSvc - ok
10:03:27.0328 0x0ccc  xinputhid - ok
10:03:27.0331 0x0ccc  ================ Scan global ===============================
10:03:27.0408 0x0ccc  [ Global ] - ok
10:03:27.0409 0x0ccc  ================ Scan MBR ==================================
10:03:27.0417 0x0ccc  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
10:03:27.0494 0x0ccc  \Device\Harddisk0\DR0 - ok
10:03:27.0495 0x0ccc  ================ Scan VBR ==================================
10:03:27.0530 0x0ccc  [ D545FDFC6FA3C1EA0A19553A0A116B83 ] \Device\Harddisk0\DR0\Partition1
10:03:27.0532 0x0ccc  \Device\Harddisk0\DR0\Partition1 - ok
10:03:27.0543 0x0ccc  [ 819F9AAD2A99FA29B91FDCC268036B52 ] \Device\Harddisk0\DR0\Partition2
10:03:27.0545 0x0ccc  \Device\Harddisk0\DR0\Partition2 - ok
10:03:27.0554 0x0ccc  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
10:03:27.0554 0x0ccc  \Device\Harddisk0\DR0\Partition3 - ok
10:03:27.0563 0x0ccc  [ 85D3D3C3287C1776EDD7E0E319620A5F ] \Device\Harddisk0\DR0\Partition4
10:03:27.0563 0x0ccc  \Device\Harddisk0\DR0\Partition4 - ok
10:03:27.0598 0x0ccc  [ 2C1079B25328462261E1C6098363D2F0 ] \Device\Harddisk0\DR0\Partition5
10:03:27.0600 0x0ccc  \Device\Harddisk0\DR0\Partition5 - ok
10:03:27.0616 0x0ccc  [ 9FA6006FFB3B0176B9BE3583EE76CFCA ] \Device\Harddisk0\DR0\Partition6
10:03:27.0618 0x0ccc  \Device\Harddisk0\DR0\Partition6 - ok
10:03:27.0618 0x0ccc  ================ Scan generic autorun ======================
10:03:27.0729 0x0ccc  [ 4C6AAABB264526A9C845A39AEBB79B69, B27F869E8B44CC5F1F9ADCA53AA848C16D706587ED9C7F995AE59BF9B0426523 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
10:03:27.0762 0x0ccc  StartCCC - ok
10:03:27.0816 0x0ccc  [ F8A8125BF28F03D79CDEA5B0B69FF60B, 13E5DE36EB61384B0726447442F0CE4838C20E4F3F730B9B9BB84A2020A68A82 ] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
10:03:27.0843 0x0ccc  IJNetworkScannerSelectorEX - ok
10:03:27.0904 0x0ccc  [ CD0362AEE36CFE1EF5DF973230742E67, 9F1D8AD4E09D16C39CD6A35CB298456468C1808226FFA8AD65BF9562A6ECC07D ] C:\Program Files (x86)\PDF24\pdf24.exe
10:03:27.0929 0x0ccc  PDFPrint - ok
10:03:27.0999 0x0ccc  OneDriveSetup - ok
10:03:28.0002 0x0ccc  OneDriveSetup - ok
10:03:28.0075 0x0ccc  [ 06F6DB72ADABC5E858F38EF69014CE52, B4AEABF3EA6FCABBED879D642BA070DF9C244E28DB5BDC3211205C7B8DB97BFB ] C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
10:03:28.0103 0x0ccc  OfficeSyncProcess - ok
10:03:28.0109 0x0ccc  Waiting for KSN requests completion. In queue: 18
10:03:29.0144 0x0ccc  AV detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.611 ), 0x41000 ( enabled : updated )
10:03:29.0197 0x0ccc  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
10:03:29.0200 0x0ccc  FW detected via SS2: Kaspersky Internet Security, C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\wmiav.exe ( 17.0.0.611 ), 0x41010 ( enabled )
10:03:29.0337 0x0ccc  ============================================================
10:03:29.0337 0x0ccc  Scan finished
10:03:29.0337 0x0ccc  ============================================================
10:03:29.0354 0x2b04  Detected object count: 0
10:03:29.0354 0x2b04  Actual detected object count: 0
         

 

Themen zu win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen)
autorun, avp, browser, canon, cdrom, computer, converter, defender, detected, downloader, escan, harddisk, internet, kaspersky, log, malwarebytes, microsoft, monitor, object, pdf, rootkit, secure, security, sigcheck, software, tunnel, windows, wmp




Ähnliche Themen: win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen)


  1. Avast meldet mehrere Funde
    Plagegeister aller Art und deren Bekämpfung - 24.02.2016 (42)
  2. Antivir meldet unter Windows 10: Funde von PUA/OpenCandy.Gen
    Log-Analyse und Auswertung - 15.02.2016 (20)
  3. Avira meldet funde, u.a. TR/Miuref.D.18
    Log-Analyse und Auswertung - 18.01.2016 (13)
  4. WIN 7 Firewall nicht aktivierbar/Avira meldet Funde
    Log-Analyse und Auswertung - 09.12.2015 (46)
  5. Avira meldet Zugriff auf Registry wurde blockiert, Windows Log File zeigt asiatische Zeichen an
    Plagegeister aller Art und deren Bekämpfung - 11.04.2015 (3)
  6. Windows 7: Avira meldet am 09.03.15 zwei Funde: pua/downloadsponsor.gen
    Log-Analyse und Auswertung - 11.03.2015 (3)
  7. Windows 8.1: Qihoo meldet Funde nach Scan
    Plagegeister aller Art und deren Bekämpfung - 28.02.2015 (8)
  8. Avira meldet Funde (TR/Crypt.ZPACK.104691)
    Plagegeister aller Art und deren Bekämpfung - 28.11.2014 (11)
  9. Avira meldet bei Vollscan 33 Funde
    Plagegeister aller Art und deren Bekämpfung - 14.09.2014 (5)
  10. Windows 7: System kompromittiert? (Avira meldet 25 Funde)
    Log-Analyse und Auswertung - 22.01.2014 (1)
  11. Malwarebytes meldet 8 PUP Funde
    Plagegeister aller Art und deren Bekämpfung - 27.01.2013 (27)
  12. GUV Virus weiterhin auf dem Rechner? Malewarebytes = keine Funde/ Antivir = 2 Funde
    Plagegeister aller Art und deren Bekämpfung - 24.09.2012 (3)
  13. Avira meldet 4 Funde, was nun?
    Plagegeister aller Art und deren Bekämpfung - 07.05.2012 (44)
  14. Anti Vir meldet HTML/Rce.Gen funde
    Log-Analyse und Auswertung - 08.04.2012 (10)
  15. verursacht Trojaner auf meinem Rechner kryptische Zeichen auf Server?
    Log-Analyse und Auswertung - 09.01.2012 (0)
  16. TR/Dldr.Swizzor.Gen - Trojan - Antivir meldet 140 Funde
    Log-Analyse und Auswertung - 21.10.2009 (4)
  17. Avira meldet Funde (Swizzor,Malware,...)
    Mülltonne - 11.08.2008 (4)

Zum Thema win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen) - eset Code: Alles auswählen Aufklappen ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=e6cb9a35ff987f4f8ec880c59c2c6b22 # end=init # utc_time=2016-12-30 08:08:05 # local_time=2016-12-30 09:08:05 (+0100, Mitteleuropäische - win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen)...
Archiv
Du betrachtest: win 10 Rechner: esset meldet 2 Funde (2 Nachrichten, da zuviele Zeichen) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.