![]() |
|
Plagegeister aller Art und deren Bekämpfung: Mögliche Rootkit infektion (TDSS Filesystem found)Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
| ![]() Mögliche Rootkit infektion (TDSS Filesystem found) Hallo! Es sieht so aus, als hätte ich mir möglicherweise ein Rootkit eingefangen, allerdings bin ich mir nicht 100% sicher. Ich habe TDSSKILLER drüberlaufen lassen, normal findet er nichts, aber wenn man die zusätzlichen optionen vor dem Suchlauf aktiviert, findet er auf laufwerk D ein TDSS Dateisystem. Malwarebytes Anti Rootkit hat nichts gefunden und auch AVAST Anti virus scheint nicht anzuschlagen. Ich habe hier einmal die logfile von TDSSKILLER, vielleicht kann mir ja jemand helfen ob ich hier ein Problem habe, oder nicht. Teil1: Code:
ATTFilter 09:22:59.0876 0x1718 TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01 09:23:03.0562 0x1718 ============================================================ 09:23:03.0562 0x1718 Current date / time: 2017/01/06 09:23:03.0562 09:23:03.0562 0x1718 SystemInfo: 09:23:03.0562 0x1718 09:23:03.0562 0x1718 OS Version: 10.0.10586 ServicePack: 0.0 09:23:03.0562 0x1718 Product type: Workstation 09:23:03.0562 0x1718 ComputerName: JAKXX-PC 09:23:03.0562 0x1718 UserName: Jakxx 09:23:03.0562 0x1718 Windows directory: C:\WINDOWS 09:23:03.0562 0x1718 System windows directory: C:\WINDOWS 09:23:03.0562 0x1718 Running under WOW64 09:23:03.0562 0x1718 Processor architecture: Intel x64 09:23:03.0562 0x1718 Number of processors: 12 09:23:03.0562 0x1718 Page size: 0x1000 09:23:03.0562 0x1718 Boot type: Normal boot 09:23:03.0562 0x1718 CodeIntegrityOptions = 0x00000001 09:23:03.0562 0x1718 ============================================================ 09:23:03.0647 0x1718 KLMD registered as C:\WINDOWS\system32\drivers\09936151.sys 09:23:03.0647 0x1718 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 10586.672, osProperties = 0x19 09:23:03.0705 0x1718 System UUID: {3EB7F3DD-86BD-19EF-3BFF-46668D305A86} 09:23:03.0960 0x1718 Drive \Device\Harddisk0\DR0 - Size: 0x3B9E656000 ( 238.47 Gb ), SectorSize: 0x200, Cylinders: 0x799A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:03.0960 0x1718 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0CADE00 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:03.0961 0x1718 Drive \Device\Harddisk2\DR2 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:03.0961 0x1718 Drive \Device\Harddisk3\DR3 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:03.0962 0x1718 Drive \Device\Harddisk4\DR4 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:04.0288 0x1718 Drive \Device\Harddisk5\DR5 - Size: 0x25433D6000 ( 149.05 Gb ), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:23:04.0297 0x1718 Drive \Device\Harddisk6\DR6 - Size: 0x2BAA1476000 ( 2794.52 Gb ), SectorSize: 0x1000, Cylinders: 0xB220, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 09:23:07.0224 0x1718 ============================================================ 09:23:07.0225 0x1718 \Device\Harddisk0\DR0: 09:23:07.0225 0x1718 MBR partitions: 09:23:07.0225 0x1718 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1DC11000 09:23:07.0225 0x1718 \Device\Harddisk1\DR1: 09:23:07.0225 0x1718 MBR partitions: 09:23:07.0226 0x1718 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x619000 09:23:07.0226 0x1718 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xC350800, BlocksNum 0x683B5000 09:23:07.0226 0x1718 \Device\Harddisk2\DR2: 09:23:07.0229 0x1718 GPT partitions: 09:23:07.0230 0x1718 \Device\Harddisk2\DR2\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {5BB9F6DA-5900-430B-9495-470A35958106}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000 09:23:07.0230 0x1718 \Device\Harddisk2\DR2\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {8E60BAD3-FB2D-4E65-B448-D0BACDD6AAC7}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000 09:23:07.0230 0x1718 MBR partitions: 09:23:07.0230 0x1718 \Device\Harddisk3\DR3: 09:23:07.0234 0x1718 GPT partitions: 09:23:07.0234 0x1718 \Device\Harddisk3\DR3\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {41C54113-D3A8-4D08-A7F0-7585D2F0767F}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000 09:23:07.0234 0x1718 \Device\Harddisk3\DR3\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {6BA637E9-3CD2-4A70-900E-024033FB649F}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0x746C6000 09:23:07.0234 0x1718 MBR partitions: 09:23:07.0234 0x1718 \Device\Harddisk4\DR4: 09:23:07.0264 0x1718 MBR partitions: 09:23:07.0264 0x1718 \Device\Harddisk4\DR4\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x74705800 09:23:07.0264 0x1718 \Device\Harddisk5\DR5: 09:23:07.0265 0x1718 MBR partitions: 09:23:07.0265 0x1718 \Device\Harddisk5\DR5\Partition1: MBR, Type 0x7, StartLBA 0x1770800, BlocksNum 0xB869800 09:23:07.0265 0x1718 \Device\Harddisk5\DR5\Partition2: MBR, Type 0x7, StartLBA 0xCFDA000, BlocksNum 0x5A3F000 09:23:07.0265 0x1718 \Device\Harddisk6\DR6: 09:23:07.0265 0x1718 MBR partitions: 09:23:07.0265 0x1718 \Device\Harddisk6\DR6\Partition1: MBR, Type 0x7, StartLBA 0x100, BlocksNum 0x2BAA1200 09:23:07.0265 0x1718 ============================================================ 09:23:07.0269 0x1718 C: <-> \Device\Harddisk0\DR0\Partition1 09:23:07.0345 0x1718 D: <-> \Device\Harddisk1\DR1\Partition2 09:23:07.0360 0x1718 E: <-> \Device\Harddisk3\DR3\Partition2 09:23:07.0440 0x1718 G: <-> \Device\Harddisk5\DR5\Partition1 09:23:07.0517 0x1718 H: <-> \Device\Harddisk5\DR5\Partition2 09:23:07.0544 0x1718 I: <-> \Device\Harddisk1\DR1\Partition1 09:23:07.0580 0x1718 K: <-> \Device\Harddisk6\DR6\Partition1 09:23:07.0582 0x1718 M: <-> \Device\Harddisk2\DR2\Partition2 09:23:07.0590 0x1718 F: <-> \Device\Harddisk4\DR4\Partition1 09:23:07.0590 0x1718 ============================================================ 09:23:07.0590 0x1718 Initialize success 09:23:07.0590 0x1718 ============================================================ 09:23:13.0895 0x01b8 ============================================================ 09:23:13.0895 0x01b8 Scan started 09:23:13.0895 0x01b8 Mode: Manual; 09:23:13.0895 0x01b8 ============================================================ 09:23:13.0895 0x01b8 KSN ping started 09:23:14.0019 0x01b8 KSN ping finished: true 09:23:15.0364 0x01b8 ================ Scan system memory ======================== 09:23:15.0364 0x01b8 System memory - ok 09:23:15.0364 0x01b8 ================ Scan services ============================= 09:23:15.0375 0x01b8 [ 970C70F6B2953ED43822D3797855D84C, CB22723678B514277BC6E6DDDD206F3B2377CD889C9D473A47A7056BE597BC6B ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE 09:23:15.0377 0x01b8 !SASCORE - ok 09:23:15.0420 0x01b8 [ DF1C3D7E6C7929AD83BE22852B5B08CB, 9ECF6211CCD30273A23247E87C31B3A2ACDA623133CEF6E9B3243463C0609C5F ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys 09:23:15.0423 0x01b8 1394ohci - ok 09:23:15.0428 0x01b8 [ 2C5B3035B86770ADD2FE9BFBAF5B35A4, 19E16F9144FE3E33B5FF248CF0040AB079ACAE22290B1369CC72AE4CB5FE3A90 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys 09:23:15.0429 0x01b8 3ware - ok 09:23:15.0436 0x01b8 [ C515FAFDE87046D2EF465CDA999DB38F, B5AE0FBFF8EEE3C6E6086CCE6F8A2FA5CDD24C38A57D4DA2AB267EB32581DB87 ] a2djusb_x64 C:\WINDOWS\system32\Drivers\a2djusb_x64.sys 09:23:15.0440 0x01b8 a2djusb_x64 - ok 09:23:15.0451 0x01b8 [ 469441BAE3FF8A16826FC62C51EF5E18, E1204677B87F47222D05F670F8DF3DB65EA0881782A8DCFBE0103478ED71187C ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys 09:23:15.0458 0x01b8 ACPI - ok 09:23:15.0463 0x01b8 [ 7EADED8087C392876521F7EBCE846EF4, 99BF1BD948F97C1ECBC049C7F949B71D73D0B41FB505B2F75B208E655F7DC8A3 ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys 09:23:15.0464 0x01b8 acpiex - ok 09:23:15.0467 0x01b8 [ C498887123327CDFD73A05E7A2780920, B45392C46254FCB8D79B6C3A82C8D894063199E6167D8E5F7EA7D60C75CD16EA ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys 09:23:15.0468 0x01b8 acpipagr - ok 09:23:15.0470 0x01b8 [ C8DBE6EFFCF014CAA010B9BDDAC833EC, 96FC29340C62A6B0910DCCBF8945F32089FC300F45B451A540B8854D53734298 ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys 09:23:15.0471 0x01b8 AcpiPmi - ok 09:23:15.0473 0x01b8 [ 17039DBEB3B7B9ADCDB4B4533AA9771F, A4D38B144639A20B8B31E4F35FB776A028DB502FAC849FC73EECEB3CCD91830B ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys 09:23:15.0474 0x01b8 acpitime - ok 09:23:15.0477 0x01b8 [ 2F0683FD2DF1D92E891CACA14B45A8C1, B4A8D6A183FA0B7D642FAD6B51C19FEC998481E1C49480D2B391E5D8B55F5BBD ] adfs C:\WINDOWS\system32\drivers\adfs.sys 09:23:15.0480 0x01b8 adfs - ok 09:23:15.0489 0x01b8 [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 09:23:15.0490 0x01b8 AdobeARMservice - ok 09:23:15.0511 0x01b8 [ F7D0CD345D2DA42E7042ABCD73662403, 03183F90A994D69066F15C3DFC1D7D7514AEAF46A5AAC059B1FB327F8C30A35C ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS 09:23:15.0524 0x01b8 ADP80XX - ok 09:23:15.0537 0x01b8 [ 70148EFA9A562E7185B75BBE7D376BF7, 8200E3349A1AFA1040B3D956A17BAF3CDC784A1A3CA396125E7872B36C03D84A ] AFD C:\WINDOWS\system32\drivers\afd.sys 09:23:15.0544 0x01b8 AFD - ok 09:23:15.0548 0x01b8 [ 870F1A2C936F92B5D053DF7EC75B352F, D617524FD5886D6D3BC2EFBBB5EA310E906454CD7CA7257C3D7BDEA8C4F2DA71 ] agp440 C:\WINDOWS\system32\drivers\agp440.sys 09:23:15.0549 0x01b8 agp440 - ok 09:23:15.0555 0x01b8 [ 655491B1173E0F6322F6972A596B93F7, 9AF06B8B9881D535C47582F456A1BF448397B3A28CA33D3E14B4F0E077C7FE53 ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys 09:23:15.0558 0x01b8 ahcache - ok 09:23:15.0561 0x01b8 [ 19707ECBCEA71080A85DB2336580DB39, A09AE69C9DE2F3765417F212453B6927C317A94801AE68FBA6A8E8A7CB16CED7 ] AJRouter C:\WINDOWS\System32\AJRouter.dll 09:23:15.0561 0x01b8 AJRouter - ok 09:23:15.0565 0x01b8 [ AA91A5E156D0364ABA7B01658C2EB014, F61055D581745023939C741CAB3370074D1416BB5A0BE0BD47642D5A75669E12 ] ALG C:\WINDOWS\System32\alg.exe 09:23:15.0567 0x01b8 ALG - ok 09:23:15.0577 0x01b8 ALSysIO - ok 09:23:15.0581 0x01b8 [ B70F0F2F54B4A4DB6E9C830454752F5A, C882DEAC30812E5FA4479A8CB688603C6AF269EF08236688F4C5E7EBED1D4572 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys 09:23:15.0583 0x01b8 AmdK8 - ok 09:23:15.0587 0x01b8 [ 35E890482C9728DD5C552B85DA8A5AB2, 1E0EB7D902AB4C38E23CAFC0BEA250E7F6E180E8814385B4F29730BFC373A191 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys 09:23:15.0589 0x01b8 AmdPPM - ok 09:23:15.0592 0x01b8 [ 5B30BCFE6E02E45D3EE268FF001BC5E0, 9901DB728885CE36911F79998629B2DD42D56AF9633B5277834F498CC59B0346 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys 09:23:15.0593 0x01b8 amdsata - ok 09:23:15.0600 0x01b8 [ F20B30F35A5C7888441B4DCA001ECF8E, 695A5BC1F18B65992EB06A202AD3CBFA17228E76DDFD1AE6977FD315724F75C2 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys 09:23:15.0603 0x01b8 amdsbs - ok 09:23:15.0606 0x01b8 [ AFE838D7576C581D6483529621AB10CC, 14476A04CC64E7A0F1BBFDACCBD7A87F384BE1877C27656DBB973AF3975D4AE2 ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys 09:23:15.0606 0x01b8 amdxata - ok 09:23:15.0610 0x01b8 [ ADFFD587A8CBDCEB0566521ACEF707DB, 17CF539B17FAAF4CC4306B6D2BBD36D80C93FB49A614293D7351A92445C6C1D0 ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll 09:23:15.0611 0x01b8 AppHostSvc - ok 09:23:15.0616 0x01b8 [ EDDB0D726DBECDFC1DBCC6DB464E5A13, 98D128D1E6FA270ED9ADBFE50078F68A794C00D4CBB86E28EC6161FFAD0CA8FF ] AppID C:\WINDOWS\system32\drivers\appid.sys 09:23:15.0618 0x01b8 AppID - ok 09:23:15.0621 0x01b8 [ 86C97B5E6B5ACCF3C984D4B3EDBB3D0A, 29FCC4125489C43D838CE1F9736F0443D6CFEF74562D8CB39E88773B8B219745 ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll 09:23:15.0622 0x01b8 AppIDSvc - ok 09:23:15.0626 0x01b8 [ 56E219DF92BE16F62308F884739BE022, FE189EE8A52BC5A0E6B76C632021F84F60307A182F2A67C0C0C7CAA72DEFC723 ] Appinfo C:\WINDOWS\System32\appinfo.dll 09:23:15.0627 0x01b8 Appinfo - ok 09:23:15.0632 0x01b8 [ 7D811EA7A2AAA49B0446D42CBC1CD338, AFECE5E44E48F756C7EB81D95C9237552AF8A9C02CBE756E0F3D3C6524DE49AD ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 09:23:15.0634 0x01b8 Apple Mobile Device Service - ok 09:23:15.0639 0x01b8 [ B4AE5296C9597F45E1CFE0B1DBE7739E, C9DCA8EF32720D68119CC23DF4BCD783FFB5F999D14EDCC7937D17C590323B4B ] AppMgmt C:\WINDOWS\System32\appmgmts.dll 09:23:15.0642 0x01b8 AppMgmt - ok 09:23:15.0652 0x01b8 [ BA8F02FBDACAB89E7F2210703193794C, CF46C024066AC139572F718E9B0063F1405C809B0CB779C8983C2D5EED685521 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll 09:23:15.0658 0x01b8 AppReadiness - ok 09:23:15.0694 0x01b8 [ 2AFB974A3F25F9D67B82C77242C8DD27, 428AB8373DEB29AD1739D2C583E1477D70AD23FE91EFCBEF0B5CFDCC4C7B7DD3 ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll 09:23:15.0719 0x01b8 AppXSvc - ok 09:23:15.0724 0x01b8 [ E3FE8F610B1CC12BC3B2E6BC43DC97E2, 0E18542CF2095A9ADA1759AB8F986E78B0A50A3C6B2AD4EACD80A23D832A2C6D ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys 09:23:15.0726 0x01b8 arcsas - ok 09:23:15.0741 0x01b8 [ E536856E96A7605EBF580D62A868E5FE, 70D0F6ECB05E923C1B274605CB3320091D35D7622003FF7E4806645519C70F01 ] ASGT C:\Windows\SysWOW64\ASGT.exe 09:23:15.0742 0x01b8 ASGT - ok 09:23:15.0753 0x01b8 [ 00B0FDD484914F388B5441285FDE24CB, 90AA8A12BB235BFC3A924F0E23BCEE8742817E3BC5A85E49D8AF8B52E8158ECB ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 09:23:15.0754 0x01b8 aspnet_state - ok 09:23:15.0758 0x01b8 [ 9B480B472D6826E7257C90E2D0EE2954, C52C198602D180011A9345AE6F108EC4B1FD91234AF2E6296B2E39C1888B0D4D ] aswHwid C:\WINDOWS\system32\drivers\aswHwid.sys 09:23:15.0759 0x01b8 aswHwid - ok 09:23:15.0763 0x01b8 [ 1BB00571CC2C78463ABD7E9C32970758, BF523468754CB1628D66F28B06FAF7C545C5724801B04888517A2FB4BF9582BF ] aswMonFlt C:\WINDOWS\system32\drivers\aswMonFlt.sys 09:23:15.0764 0x01b8 aswMonFlt - ok 09:23:15.0769 0x01b8 [ 7010B57D708DA5C9686A5923EE621776, 5A554B8941C156EC341C602F34679A7475802B19EE6A99AA29AE2628A123ECB1 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr2.sys 09:23:15.0770 0x01b8 aswRdr - ok 09:23:15.0773 0x01b8 [ 937885085BFE5BD08EC1BC0245DD203B, 6DDD89245EEA3B8106C5F2EB6FA8CF525F3B42AA7032276DE78953E06FE7F4B4 ] aswRvrt C:\WINDOWS\system32\drivers\aswRvrt.sys 09:23:15.0774 0x01b8 aswRvrt - ok 09:23:15.0791 0x01b8 [ 0B6352251C5D84130DF4252D33D266C2, C6A2E0074A7FCFB5799949431F5660B9AF6441001EA9B609F7B3900F4007EBD0 ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys 09:23:15.0803 0x01b8 aswSnx - ok 09:23:15.0814 0x01b8 [ 28213B34725B18387CC1B8C3D73858A1, D86113D89C62F090B393B68B522581248AEF3568F8FD0FF86B3625F2E6DD4DB8 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys 09:23:15.0820 0x01b8 aswSP - ok 09:23:15.0827 0x01b8 [ 9C58B6E9663D0A76D00D83E43C765BDF, 3F474932E77318CD450A3A9C89667D2B26A7E3FAB9AA95D97FF3B1979623A7F2 ] aswStm C:\WINDOWS\system32\drivers\aswStm.sys 09:23:15.0829 0x01b8 aswStm - ok 09:23:15.0836 0x01b8 [ D60D9201739400F0FBDB9E36A3212D91, 01A17516AB7F4D2C72E2DC51F7B49D1C4F50F564992F78A71E73821D7F8220E7 ] aswVmm C:\WINDOWS\system32\drivers\aswVmm.sys 09:23:15.0840 0x01b8 aswVmm - ok 09:23:15.0843 0x01b8 [ 5E00748A1AD246CAECBBB7553BED36CC, DAD2C93F0894E7BB5E5D8D767D8286A909086B49172C504A01097C3A180998C6 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys 09:23:15.0844 0x01b8 AsyncMac - ok 09:23:15.0846 0x01b8 [ 492B99D2E3D5D7BFD5F0AE1BE7BD37DD, A3F6BFC4FDC1933FBF3145019B118689A414108B04F43E2563946B2673C89324 ] atapi C:\WINDOWS\system32\drivers\atapi.sys 09:23:15.0847 0x01b8 atapi - ok 09:23:15.0854 0x01b8 [ 42BF7FA295F453618104B5A50BEE105B, AB44BA2AD2FC5AF3B6BE4489C444C03FD1AB02C22109BF5F39BE459294C4CB18 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll 09:23:15.0858 0x01b8 AudioEndpointBuilder - ok 09:23:15.0877 0x01b8 [ E172ACC75A73EDB416E641B9958DE6AA, A7920D48F010FF467540237AAFDEFA5A50A77DE1BAAA9731E83E50B5D0D2D29D ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll 09:23:15.0890 0x01b8 Audiosrv - ok 09:23:15.0900 0x01b8 [ F4E0580B5789474385E7ACB189C4AF2C, DB5BE2C852AC102AB8EB186362E582E250B843BA52B3B71AF08A5FDA8A6F91AF ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe 09:23:15.0903 0x01b8 avast! Antivirus - ok 09:23:15.0907 0x01b8 [ 7062CE507814D5306DCA5D6A15B7B6B6, 9D60506003A66C2E516B1FCB70CC5B26FB3A9948B95D97C828DD0328E76F2C91 ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll 09:23:15.0909 0x01b8 AxInstSV - ok 09:23:15.0920 0x01b8 [ 6447BA6FA709514B6C803D159B4C7D1E, 549DDCEAD93DF333F6BBD56A9258A867E4DA219741C00D48C68F8F230A87B11A ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys 09:23:15.0926 0x01b8 b06bdrv - ok 09:23:15.0930 0x01b8 [ B4AC08B1D04D0CE085435E5CD0E663C5, 61E641388E5692B2EB351E44BA1DB86B5305DD105EE56865D59072CA9407C8AC ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys 09:23:15.0931 0x01b8 BasicDisplay - ok 09:23:15.0934 0x01b8 [ 25B5BB369DEE2BAE4BF459C978FF9035, DBC2157B2AC0BC92B4011CE5E01F2DCDAAE71E37D9D21102503C6455FAAC4DCA ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys 09:23:15.0935 0x01b8 BasicRender - ok 09:23:15.0938 0x01b8 [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\WINDOWS\System32\drivers\bcmfn.sys 09:23:15.0939 0x01b8 bcmfn - ok 09:23:15.0941 0x01b8 [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys 09:23:15.0941 0x01b8 bcmfn2 - ok 09:23:15.0950 0x01b8 [ F374C27099807E99A156953F8416D34A, D267B8CD837290F9FC6B4FFD2DB8F54867D808FB155698FC7713BCAB3AE475B5 ] BDESVC C:\WINDOWS\System32\bdesvc.dll 09:23:15.0954 0x01b8 BDESVC - ok 09:23:15.0957 0x01b8 [ 5A88834AEE15D97695FAE0837B73B3E4, 03035FB51DE218B8EDB15129A0376DDED0C7E7B6DA58DD95B12E4E5C8D852ED8 ] Beep C:\WINDOWS\system32\drivers\Beep.sys 09:23:15.0957 0x01b8 Beep - ok 09:23:15.0972 0x01b8 [ 37F5E2385CB4D10AB42186974B9C241A, D38FA2B8CE19AC32056060F04B04D031F1621C07528DEDCCD5A8C01AB0A35995 ] BFE C:\WINDOWS\System32\bfe.dll 09:23:15.0982 0x01b8 BFE - ok 09:23:16.0002 0x01b8 [ B79DB21084178D67B323005C0449F89A, EB5B1C3BC480905386057A1A7568DA2F791F0C8DB063D79D836894C789F05FF4 ] BITS C:\WINDOWS\System32\qmgr.dll 09:23:16.0017 0x01b8 BITS - ok 09:23:16.0028 0x01b8 [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 09:23:16.0034 0x01b8 Bonjour Service - ok 09:23:16.0038 0x01b8 [ 00B634714E8B9F6AF9A7A6BCACA87305, DE9714A8E782D7EE8167FC69021E0880D82E3D17E568B23805D317587AAAF07B ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys 09:23:16.0040 0x01b8 bowser - ok 09:23:16.0052 0x01b8 [ C59B5FC1E0575C5910C4585A2503FFFA, F336325D1519C9B5B2526EF8A88411C7678CC69AAAE95E129D21C7B06E11F777 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll 09:23:16.0059 0x01b8 BrokerInfrastructure - ok 09:23:16.0064 0x01b8 [ A617BE5E429A035A1CA8217C1B16F0BB, 197EE6C6EB22FF8A626540886F5A2163CC4CB177504C5423856F54BF01EB0FF1 ] Browser C:\WINDOWS\System32\browser.dll 09:23:16.0067 0x01b8 Browser - ok 09:23:16.0070 0x01b8 [ CAE0272391FE4DBEC2901237FB412EFD, BC0D76C288CB28B1A9C43FFE56410890AE4DECD08E2F4CC11DEEBC096CD6CDD9 ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 09:23:16.0070 0x01b8 BthAvrcpTg - ok 09:23:16.0074 0x01b8 [ 5F2B4B32E986C058525D3BA2A475A16C, CEC5BB0B025DD9525CFBBEDF6EB6F63336534798495A4F95763CE112DF915088 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys 09:23:16.0075 0x01b8 BthHFEnum - ok 09:23:16.0078 0x01b8 [ 5406289E8AE2CB52FC408154E0A64BA7, 0A3795F2E6E2B51198452CF69A99159D8E11650E95F41DF0B575CB72F9C6C6B5 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys 09:23:16.0079 0x01b8 bthhfhid - ok 09:23:16.0087 0x01b8 [ BAB101E7826BE287F79C4BA721621989, E6DD25C89267FE87253B8226292F2894F5E702075D3B23B09339D3B28744C060 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll 09:23:16.0091 0x01b8 BthHFSrv - ok 09:23:16.0095 0x01b8 [ A76F20CCCA31895A1DA78A875E50F946, ECD4B3670DA5984AA24F4354457B4E45983938A89FF6DB03B556A633B4B37E3C ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys 09:23:16.0096 0x01b8 BTHMODEM - ok 09:23:16.0100 0x01b8 [ CEEC73833A4C6B31E2F376A3FD4DA73E, F09FC6EAB8D9769DBAD0931CC7C7F5DFE1562D3EE09CE0EF086AA73D4B62E076 ] bthserv C:\WINDOWS\system32\bthserv.dll 09:23:16.0102 0x01b8 bthserv - ok 09:23:16.0105 0x01b8 [ BF89BDBA5D3A0B4256D3F6FC8D31880D, 940F3BF55B88261C9E9A951A092331559FC5B24FE3BA0F1E1AB3450D2CA364C1 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys 09:23:16.0106 0x01b8 buttonconverter - ok 09:23:16.0110 0x01b8 [ C24C27FDF93B85A4EFCF25F830253AA2, 35C87518BB59663B57C2361A13AD4E57E37392598F1EB9F07F86CA5A6321AF5A ] CapImg C:\WINDOWS\System32\drivers\capimg.sys 09:23:16.0111 0x01b8 CapImg - ok 09:23:16.0115 0x01b8 [ 7F9C7226D743B232907ED2537B8A574F, 2211AFC30E8F8FA03020DB48EE14914CD31E50BB6A63FF20AC7C6FA481E72C18 ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys 09:23:16.0116 0x01b8 cdfs - ok 09:23:16.0123 0x01b8 [ 88E3BA684A7B1247762E1D401076D4C2, 88375BD1970848A71B9CF8C7C73ECA2E4A65E57D80D0C36F41547D381441A552 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll 09:23:16.0126 0x01b8 CDPSvc - ok 09:23:16.0132 0x01b8 [ 82D97776BF982AA143BDC7DFB5054EA8, 954F56728371E6B3514586DCEAF15C4727BAED6CAFBF788654C4E03BD702942C ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys 09:23:16.0134 0x01b8 cdrom - ok 09:23:16.0140 0x01b8 [ 1B41261BF9CD5AFD4722A1DB7D6755C7, FBE088BE6ADC9DEE4DD8F93E8E6391A9A8AE19E393AD851A40E117BAB02682DE ] CertPropSvc C:\WINDOWS\System32\certprop.dll 09:23:16.0142 0x01b8 CertPropSvc - ok 09:23:16.0146 0x01b8 [ 0505C1D991D0F9D47F3353BB98597C7E, 3B801CCF4980256327A4A9FBD98007DA1E3ACE9C94E5A4C23AB21303B46E8B5A ] circlass C:\WINDOWS\System32\drivers\circlass.sys 09:23:16.0146 0x01b8 circlass - ok 09:23:16.0154 0x01b8 [ B65F379EA5987BCFEACEB56C02F07425, 63D944528BC39B7FE039862593BF00DDDFE6674B2A3B990FF59DD40FE3D47FD4 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys 09:23:16.0159 0x01b8 CLFS - ok 09:23:16.0171 0x01b8 [ A3DF8BC0A3A59125CB675B1CCDCFC9FB, 7DC2C9707713507CE1B7F1901B16D924BF799C357EE93675474C86E62F8DC60A ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll 09:23:16.0179 0x01b8 ClipSVC - ok 09:23:16.0186 0x01b8 [ 95832B049E2833B9F5189823CDF946C7, 72773A42A89220B4A6AC72D1633B16F11191A44D876A44FAB5CEFB717CE3223D ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys 09:23:16.0187 0x01b8 CmBatt - ok 09:23:16.0199 0x01b8 [ F46A89204F657FA068ED763368526549, D1ABAEE40B760C67F5BA097FEEBABEC2586B817A3B625F6BEA484B340438485E ] CNG C:\WINDOWS\system32\Drivers\cng.sys 09:23:16.0206 0x01b8 CNG - ok 09:23:16.0209 0x01b8 [ 58D640BC2294C71BDE0953F12D4B432F, 0B3B7659FCB97791A2A1F895C8E6F9078F855C94C13EB47464492588C4B02B85 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys 09:23:16.0210 0x01b8 cnghwassist - ok 09:23:16.0221 0x01b8 [ 14F9883588398A1BDE49C75098C75DE6, D9D82DE89FAFE60BC902683BC44C7555533A030150FD5E5A35A24542FACC5CAD ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_912dfdedc3d2f520\CompositeBus.sys 09:23:16.0222 0x01b8 CompositeBus - ok 09:23:16.0224 0x01b8 COMSysApp - ok 09:23:16.0228 0x01b8 [ 02B8E49148DE5E0A2F6FDF28CE94A6AC, EEA405823F441CA604BEAA44EB71A1D20BC80E124FF7B27380D0201AAF2E0849 ] condrv C:\WINDOWS\system32\drivers\condrv.sys 09:23:16.0229 0x01b8 condrv - ok 09:23:16.0243 0x01b8 [ B2B3EAE325C093F8F9B0A358053DA37C, A99CD901F0A46A2B5D2B921A870F7D9945F1D50CF342CE01F3EB214F21ADED42 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll 09:23:16.0253 0x01b8 CoreMessagingRegistrar - ok 09:23:16.0259 0x01b8 [ 3CA734CE373E5675FBC15CA2C45228E5, A6C6E9FABDE5EA18D266DB71C0CC6B51D682116D1898CCB4E9BA730F15C44B32 ] cpudrv64 C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys 09:23:16.0260 0x01b8 cpudrv64 - ok 09:23:16.0263 0x01b8 [ 17719A7F571D4CD08223F0B30F71B8B8, 1F4D4DB4ABE26E765A33AFB2501AC134D14CADEAA74AE8A0FAE420E4ECF58E0C ] cpuz134 C:\Windows\system32\drivers\cpuz134_x64.sys 09:23:16.0264 0x01b8 cpuz134 - ok 09:23:16.0270 0x01b8 [ 29872C7376C42E2A64FA838DAD98AA11, A072197177AAD26C31960694E38E2CAE85AFBAB070929E67E331B99D3A418CF4 ] cpuz140 C:\WINDOWS\TEMP\cpuz140\cpuz140_x64.sys 09:23:16.0270 0x01b8 cpuz140 - ok 09:23:16.0275 0x01b8 [ C8BD651E13895B93ED9EC5B4F1DF42BC, D86D6BF0BA3C09B49B3A52C86A7F3B3856A27F79EDD86A8FFA469D9A5F196E8D ] Creative ALchemy AL6 Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe 09:23:16.0276 0x01b8 Creative ALchemy AL6 Licensing Service - ok 09:23:16.0279 0x01b8 [ C0EAD9F8AB83D41FF07303C75589C2B8, C89CAC39BCD2FA2DCC56D7EE84FF66127BCECCAE400E119FE41BF4C4D769504B ] Creative Audio Engine Licensing Service C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe 09:23:16.0280 0x01b8 Creative Audio Engine Licensing Service - ok 09:23:16.0285 0x01b8 [ 9E79A2208A9ED205A7383CBC92C28053, 2E6599DF30DF19BD7BE6FEF1B21FED7F349A3F2306CC5CFDB767ABA7283E8A55 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll 09:23:16.0286 0x01b8 CryptSvc - ok 09:23:16.0297 0x01b8 [ 5D578EAAFB6FD4F59523E5878B541296, 73573124787B79179880AFAF9CB8427237A1605A9F13D7783228DE24D18963C0 ] CSC C:\WINDOWS\system32\drivers\csc.sys 09:23:16.0303 0x01b8 CSC - ok 09:23:16.0317 0x01b8 [ 5F07CCEE514894C9474AEDCA50B6C2C7, 38F54897C91A2E7D80D00852CEB173B26E822D7C68F35D31228245F811E028A8 ] CscService C:\WINDOWS\System32\cscsvc.dll 09:23:16.0327 0x01b8 CscService - ok 09:23:16.0335 0x01b8 [ 5CE3D0E1D1B3832EE052CFC442EEE0FA, 6B9DB2C350140ED547C7A96DB0EAD812E8987176B312C79AF52FC9B23EEEB8C4 ] CTAudSvcService C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe 09:23:16.0339 0x01b8 CTAudSvcService - ok 09:23:16.0343 0x01b8 [ B3F50101E2609CDBF3825018B68C903E, F97CE176FDFC4EF62A17C660B22DAED3AA22FABF0E71B8701ECE3A3ACA24C96B ] Cymon C:\Windows\system32\drivers\CYMON.SYS 09:23:16.0345 0x01b8 Cymon - ok 09:23:16.0349 0x01b8 [ C9325D1B5FD80DB9C2C6223475DFAD58, 5C544CC860FDDA443C464E94BE301E1F27DB59FA1C2EBB92E3FFB370DA19C863 ] CypherGuard cguard Service 32bit Edition C:\Program Files (x86)\Common Files\CypherTec\cgrdsrv32.exe 09:23:16.0350 0x01b8 CypherGuard cguard Service 32bit Edition - ok 09:23:16.0355 0x01b8 [ 6BBB688C550C552A0F64CBC3C6EBA75E, 161C6515AE7A74E7683732F2658A794F833F8FEBFCDF415BBEED8E5E8CB9102F ] CypherGuard cguard Service 64bit Edition C:\Program Files\Common Files\CypherTec\cgrdsrv64.exe 09:23:16.0357 0x01b8 CypherGuard cguard Service 64bit Edition - ok 09:23:16.0360 0x01b8 [ C73BAB46E838E54AB3E85C2918E73E1C, 3AC2211479B9D6696240DA961AD393B648F9714D5CCA0BA5B0E2980E4590DCAA ] CypherGuard Info Service C:\Program Files\Common Files\CypherTec\cthwsrv64.exe 09:23:16.0362 0x01b8 CypherGuard Info Service - ok 09:23:16.0366 0x01b8 [ 2619DC483579DB9FE804044C1ADFFD1A, 23A5420288735A980917091532BE7BB36EB51660AA4555C615AF736357EB02EC ] dam C:\WINDOWS\system32\drivers\dam.sys 09:23:16.0367 0x01b8 dam - ok 09:23:16.0370 0x01b8 [ 958EF96991ABCCFDAC0953C4A24081DC, 9BFBB21592FB47B500660F9EF878CFCAE5289421D166B3E147759A1B7D552003 ] DAZContentManagementService C:\Program Files\DAZ 3D\Content Management Service\ContentManagementServer.exe 09:23:16.0370 0x01b8 DAZContentManagementService - ok 09:23:16.0389 0x01b8 [ 68E07DF3E6D1DFED440B82D3D33542B1, A80C25C2B884F0A725B8256E985D670FCFBE9C870A0380C22B51BB140820B4A8 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 09:23:16.0401 0x01b8 DcomLaunch - ok 09:23:16.0407 0x01b8 [ 620921E77351FB651632322AD2C195C4, 5A98971995D7A2B5AE6BEA69344FCC6687B582FEF74BDA206D32FB2E6CEB0478 ] DcpSvc C:\WINDOWS\system32\dcpsvc.dll 09:23:16.0410 0x01b8 DcpSvc - ok 09:23:16.0421 0x01b8 [ AEADFE9C3D3FBB3BE619AB369AE069B6, E7911628446C170375C70538192165F7DD9DF39B9098B4B2404E6521DBD191AE ] defragsvc C:\WINDOWS\System32\defragsvc.dll 09:23:16.0427 0x01b8 defragsvc - ok 09:23:16.0438 0x01b8 [ 0CADF20D9CBB7EEB26ACA0B5FDF01FB1, 2556861FB94F9942B2CA29A7E33F28883CECED56A2A5973F29A94C5D85219579 ] DeviceAssociationService C:\WINDOWS\system32\das.dll 09:23:16.0443 0x01b8 DeviceAssociationService - ok 09:23:16.0449 0x01b8 [ 15BA68662CED4B0618010A54478E18E5, 1B913BFA7AA11F3A82D80E95FC4857B810D341F9E68545710F90EBE44DAC1DF8 ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll 09:23:16.0452 0x01b8 DeviceInstall - ok 09:23:16.0455 0x01b8 [ 5BF8BD9B19D665452494C8D56DF4B28D, E5FC649207EF42C04B6737D442FECD3383E82F8998B140319FF400773F1D0978 ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll 09:23:16.0457 0x01b8 DevQueryBroker - ok 09:23:16.0461 0x01b8 [ A4FC5B8A300394F7E219B173E2BF3A46, 8D4691E992BBC4A94EC13ED7B79C016C527CDE3AE13F21CB8E4897C863567684 ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys 09:23:16.0464 0x01b8 Dfsc - ok 09:23:16.0473 0x01b8 [ D461D2BECEFA661291EB1B748A8D2CCB, 7275859FCDE58DE6C0C683AFDAD910EB4602336CC724EEE42495A8839213469D ] Dhcp C:\WINDOWS\system32\dhcpcore.dll 09:23:16.0477 0x01b8 Dhcp - ok 09:23:16.0481 0x01b8 [ 9F5AC03F5A0000DD96FA29CD68A6605B, 6964E077635E65DA902CA6C69E704A9DCD5856D22BA75E1CF823E63E62266AF7 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 09:23:16.0482 0x01b8 diagnosticshub.standardcollector.service - ok 09:23:16.0509 0x01b8 [ 4EB7EE8A830E6602EBDDB03FC5B6F672, 903D8878BC3B79EBB6FB7204D4D7C5B776BF5E755CE4EA15F4088413BECE4D54 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll 09:23:16.0529 0x01b8 DiagTrack - ok 09:23:16.0534 0x01b8 [ 4904B152E4942BF700F2D73228B4D477, 0E5646DCA05A24C71F057C9F9F64AE992D338DA72DF3126175C2FA178854C30F ] disk C:\WINDOWS\system32\drivers\disk.sys 09:23:16.0535 0x01b8 disk - ok 09:23:16.0542 0x01b8 [ 126FCA1567A012BAEA80FC4F8068A48F, 74907F56CC88AA0DD345E271DBB1F8B6EB1618F798B895CDF441123E582E9A16 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll 09:23:16.0548 0x01b8 DmEnrollmentSvc - ok 09:23:16.0552 0x01b8 [ 0197AE4B9790A4E73751CACFAA480126, 86BBB398F1A93754B2C329271F13A88FD2F285F30225C38F068F565CCA14EB9F ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys 09:23:16.0552 0x01b8 dmvsc - ok 09:23:16.0555 0x01b8 [ 5EF8EC71A7A91F3DF7798BEFE6786B0E, A3A56B43C72926881C66B7A17C9EAA35C2D9603C8D3849438838536BCD3F4633 ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll 09:23:16.0557 0x01b8 dmwappushservice - ok 09:23:16.0564 0x01b8 [ 5839A317C25F70979433E0905DFABB1B, 7F1CD50C77A33A10259D8A208A355BE7ECAFEA69F810AD908EF8878A792741AF ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 09:23:16.0568 0x01b8 Dnscache - ok 09:23:16.0576 0x01b8 [ 1B15297A3A2CAB6BD586676154F389D8, 623D5F5FC8622B7D9AEEEB1787E6846C1570F0EEF94341239440B616D09D672A ] dot3svc C:\WINDOWS\System32\dot3svc.dll 09:23:16.0580 0x01b8 dot3svc - ok 09:23:16.0585 0x01b8 [ 316C2D8B8E3C0727969F1C3790EF7193, 631F8578FDB26578C8436E4B9C4DF21E1F58FCFE6DA66E5769AAC3739005D465 ] DPS C:\WINDOWS\system32\dps.dll 09:23:16.0588 0x01b8 DPS - ok 09:23:16.0591 0x01b8 [ 25FA06D3B49D6ADF8E874FFCDCD76B50, 9AF09B96ED79D94EA36581ABE6CC73313A72891779774B15860D018BEA2BBA0F ] drmkaud C:\WINDOWS\System32\drivers\drmkaud.sys 09:23:16.0591 0x01b8 drmkaud - ok 09:23:16.0607 0x01b8 [ FE71C99A5830F94D77A8792741D6E6C7, 4DB1E0FDC9E6CEFEB1D588668EA6161A977C372D841E7B87098CF90AA679ABFB ] DrvAgent64 C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS 09:23:16.0608 0x01b8 DrvAgent64 - ok 09:23:16.0614 0x01b8 [ 16EE6701115BECF8C657D9D6E123F6A1, 16E115B5245C3C988F8B58B90D30F183021C7C7792D3D1C74BEC606E49672B2A ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll 09:23:16.0617 0x01b8 DsmSvc - ok 09:23:16.0622 0x01b8 [ FBC8C56814642A7CA88ACBCA8DD1121F, 108690704A359991C3D6577477E232F5F2F46B36DF6B4B0738A893EF05D7D4EB ] DsSvc C:\WINDOWS\System32\DsSvc.dll 09:23:16.0624 0x01b8 DsSvc - ok 09:23:16.0656 0x01b8 [ B599B817F00A9EC43FFD624AC484A3F9, 664195A23C4BB0C7203AFF8ADFB7CB048BD0B4CBD340A84A26A900BAE9656D4A ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys 09:23:16.0679 0x01b8 DXGKrnl - ok 09:23:16.0682 0x01b8 [ AB173501AB6BE92B1C2558CB2A60EB9F, 6C4C46B816E79F27E7007655FF2E9B113C308C1A6979F58885291631E2F23F59 ] DynDNS Updater C:\Program Files (x86)\DynDNS Updater\DynUpSvc.exe 09:23:16.0688 0x01b8 DynDNS Updater - ok 09:23:16.0697 0x01b8 [ E716140ACA798A5EC48531F0739A0290, C585F1D9B08A406FE0ED35E07C2F20E793E67F8E153314A449701125C8EA7A4B ] e1iexpress C:\WINDOWS\System32\drivers\e1i63x64.sys 09:23:16.0703 0x01b8 e1iexpress - ok 09:23:16.0708 0x01b8 [ 1FBC5FF75CE1B6DCC61DA0352E7C91AA, 4705B8DB74E73945066363F72B20B0942F1AB7EB56AA523817F5F9D477D84D99 ] Eaphost C:\WINDOWS\System32\eapsvc.dll 09:23:16.0710 0x01b8 Eaphost - ok 09:23:16.0762 0x01b8 [ 491275B864B704B54EC08168344E0F38, B4849400C3F819CF7809A2001EA2ECB527022483F7DFE31C3930F951EAFE50CE ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys 09:23:16.0801 0x01b8 ebdrv - ok 09:23:16.0806 0x01b8 [ 28F844500ADA77447835BC586F15AAAE, A0368E0928E7AB459F7DF3E9C0ECAFDD33F5DAC6A7122689FA6CF4B55AFB4D15 ] EFS C:\WINDOWS\System32\lsass.exe 09:23:16.0809 0x01b8 EFS - ok 09:23:16.0812 0x01b8 [ CEF108FCE06892CFA5F1B49527D4BF49, FA337584024B6E6EE4AF519F57FFA4C0FCA19EDC148FF309336C4CCA8F9C9CE8 ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys 09:23:16.0814 0x01b8 EhStorClass - ok 09:23:16.0818 0x01b8 [ 5B1EAAE3001A7A320C106FC3859F4111, 700BA2C7D4DFAFFEB78D3804B310A4EE5B4295C84600442665693FF661673951 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys 09:23:16.0819 0x01b8 EhStorTcgDrv - ok 09:23:16.0823 0x01b8 [ E34DEFC09F2843C2C24C2248F1ABE6D8, 1FD67EB5820A1D2F4402DE9D95DE288DB69D421A8473074FF23491D7CA8B5ACE ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll 09:23:16.0826 0x01b8 embeddedmode - ok 09:23:16.0832 0x01b8 [ B8B197787331426271457525DA7FC04D, 27EE1DA1211B506E06077656FDE55A140041CF91095EFF95F7A10120E60004D2 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 09:23:16.0837 0x01b8 EntAppSvc - ok 09:23:16.0840 0x01b8 [ 12C061D9F9621BE916D58191872EC281, 5285C5AF9ECDAF9CBB7A5D0FC97D882EC06778CF5688E86890A617E2670C413B ] ENTECH64 C:\Windows\system32\DRIVERS\ENTECH64.sys 09:23:16.0841 0x01b8 ENTECH64 - ok 09:23:16.0843 0x01b8 [ 7A2705148A4BB3CA255F81624338B461, 68AC8F8D2DD8AA4E8F2224A0054DE2AF67EA199217E87CD3C7299B021048F14F ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys 09:23:16.0843 0x01b8 ErrDev - ok 09:23:16.0847 0x01b8 [ 84486624268E078255BC7AA47F0960BC, EC2540698B974572F0AC4A93D57C63295BAF66BF50F7416B9DFF5DE790EBDBE7 ] etdrv C:\Windows\etdrv.sys 09:23:16.0847 0x01b8 etdrv - ok 09:23:16.0858 0x01b8 [ 17BE4A35829B37C742084DC02D48E5F0, 7FDA62B56DF585C3F2C6FFB10AC7C0D8F70FA921C4DEA47B2789745CFE2618CE ] EventSystem C:\WINDOWS\system32\es.dll 09:23:16.0864 0x01b8 EventSystem - ok 09:23:16.0872 0x01b8 [ DFE8A33FBCF6F38182631A4D6097B92D, F9D06780830E74FD5309E6DC5C3EEDB9334A8AE284F381FA91EF2729297F8632 ] exfat C:\WINDOWS\system32\drivers\exfat.sys 09:23:16.0876 0x01b8 exfat - ok 09:23:16.0884 0x01b8 [ C330883C06E2D4CE4F6982F048265D37, 26044DE176056B7F5BF2A50A659243CFD7F25CFEE035B3A3C3165B3699872926 ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys 09:23:16.0888 0x01b8 fastfat - ok 09:23:16.0901 0x01b8 [ 952F10D2116B91BA433842D07879AE7A, 9E1EC0C719877EF198AA4DDBE896E9DDEAD360AAC1FC6DF305E7C5C73C7A761D ] Fax C:\WINDOWS\system32\fxssvc.exe 09:23:16.0909 0x01b8 Fax - ok 09:23:16.0913 0x01b8 [ 9D299AE86D671488926126A84DF77BFD, C076EEDD0524B7D88BC56C97089E0A836CC1AD725E1A544CC4F8DDBB6670C366 ] fdc C:\WINDOWS\System32\drivers\fdc.sys 09:23:16.0913 0x01b8 fdc - ok 09:23:16.0916 0x01b8 [ 47D09B8C312658ACE433E46DDF51C3A5, E76948DA0F51C7DC6D69B7E36D63CE6E98FDE619FA30E91637F75B5084107D22 ] fdPHost C:\WINDOWS\system32\fdPHost.dll 09:23:16.0918 0x01b8 fdPHost - ok 09:23:16.0921 0x01b8 [ 177AC945B20C81400A1525ED7B49A425, FD215A2E718EA38A95D985F53AB3DD44B50C2549AA67F44BA98C4709E492051F ] FDResPub C:\WINDOWS\system32\fdrespub.dll 09:23:16.0922 0x01b8 FDResPub - ok 09:23:16.0926 0x01b8 [ 7B4F6B1006E43FCC768D348AA0E81B67, E63C407158CE9DBCE1264602879A702F83F6D28B59FB60E7A7064354936149CF ] fhsvc C:\WINDOWS\system32\fhsvc.dll 09:23:16.0928 0x01b8 fhsvc - ok 09:23:16.0932 0x01b8 [ 8F2523C9D8F1448FF2156452AF60FA00, 1D39CA54F5F1E62385D9EC041F9445BDDCB63740859B9418AE904FDF3D8388ED ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys 09:23:16.0933 0x01b8 FileCrypt - ok 09:23:16.0937 0x01b8 [ 92ECCFA58C8195B8EA33ED942469D4E6, 8DB12E8CF80ECA22182F9A1F4CA922336A430297F1F596F204ECF4D9D19F30D9 ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys 09:23:16.0938 0x01b8 FileInfo - ok 09:23:16.0941 0x01b8 [ 87C51FDD50C17882BA93E28BBABB9847, 8987D80FB77D1D3F9E89B491B1287B027DA26FFC4E4BA7B01E07D4D4FC69E236 ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys 09:23:16.0942 0x01b8 Filetrace - ok 09:23:16.0954 0x01b8 [ 1F63900E2EB00101B9ACA2B7A870704E, 5AFE1FC852937FECE6B33147BD0110436FE97F33BFDA3F69B1F5EDAD6FFC09C6 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 09:23:16.0962 0x01b8 FLEXnet Licensing Service - ok 09:23:16.0966 0x01b8 [ E99261DD76D1C9E05AF575939CAE5AC5, A789724FD2E22AFB2F921836F5C19A21D17F4BBD604771E2908C2651BD31989C ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys 09:23:16.0966 0x01b8 flpydisk - ok 09:23:16.0975 0x01b8 [ 25D7A58625E1453E40D36825DE74E4F1, 74119803D35E3C3CC349B44C6CD9EDF6B797F88584B847F0BF9EED542719B86B ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 09:23:16.0980 0x01b8 FltMgr - ok 09:23:17.0007 0x01b8 [ FFF49D397DC82F804BD36A13B974A174, 5D29152A0A4A74036C13A52905335AFAD7E7F46B8EBB350415793D9B10164634 ] FontCache C:\WINDOWS\system32\FntCache.dll 09:23:17.0027 0x01b8 FontCache - ok 09:23:17.0034 0x01b8 [ E79DAC43A5E191FC4DDB04197A704BFA, 2FA6C8B5B2DFE66C05828E3F55DFD6268A8210E9BD083F2D09367AD59AF1C6C1 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 09:23:17.0035 0x01b8 FontCache3.0.0.0 - ok 09:23:17.0038 0x01b8 [ B4175E8BE60B099686FF55CA7D692316, 3158FC5B4D1A2F1FC1346754392AE24AE58999B9061B1CE78A65E785BFFADD52 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys 09:23:17.0039 0x01b8 FsDepends - ok 09:23:17.0042 0x01b8 [ CC71372CEB811A72F1DC99089C5CBF53, BB9DDE74D60E534A6F8A51B63DDBB441245F06A00A0AFD37DBBE86255690946D ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 09:23:17.0043 0x01b8 Fs_Rec - ok 09:23:17.0050 0x01b8 [ 7F1CA4D562EB7BBFEBAFE740F2618365, 4545D3CE95275D90A5D0B2CDFEF0052B1A59A9E229A1275A348C485ADD19D5A8 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe 09:23:17.0054 0x01b8 Futuremark SystemInfo Service - ok 09:23:17.0067 0x01b8 [ 50DFE05C698E9B0A63D95E3D669A105C, 3A7D5AE4A01B90C2ECF22AD2783A84C2329EAB9BACFA5237A7DCC3DC5995A864 ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys 09:23:17.0075 0x01b8 fvevol - ok 09:23:17.0079 0x01b8 [ B9981A4CB9F728B3312A3885BFAA7204, 12FB2EB2E5D2A912769823DD9C1B33DB358CD0B7FBFC788529EF83DD584334F8 ] gagp30kx C:\WINDOWS\system32\drivers\gagp30kx.sys 09:23:17.0080 0x01b8 gagp30kx - ok 09:23:17.0083 0x01b8 [ 7907E14F9BCF3A4689C9A74A1A873CB6, 17927B93B2D6AB4271C158F039CAE2D60591D6A14458F5A5690AEC86F5D54229 ] gdrv C:\Windows\gdrv.sys 09:23:17.0083 0x01b8 gdrv - ok 09:23:17.0086 0x01b8 [ A122514EF65B06521EFF6ED97EA0EE3E, F77DB8C0E92A7A667436F4B693C393AF1858A37FEE44829B49220946A850A268 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 09:23:17.0087 0x01b8 GEARAspiWDM - ok 09:23:17.0089 0x01b8 [ 77555B11B264991DDC26872FFCF1AB97, D5F230EEF74EB869F771F8A4AB19C1E6C845BB0EF4A1234882EBDA4FDC431E44 ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys 09:23:17.0090 0x01b8 gencounter - ok 09:23:17.0093 0x01b8 [ 3DEAA29F7DE0B6436E75277A6FE3E95F, 84A34FC404C427432D7B61F5DA425BE68114C06F3DBD98CD7B5BD0C4941DC442 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys 09:23:17.0093 0x01b8 genericusbfn - ok 09:23:17.0097 0x01b8 [ 604937407A431016577DDDB4E1DD2A85, C4A8837BFA0C230E2DEAA55F9DDE9319CB3BBE16ADF505EC91760E4BA1710B8B ] GEST Service C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe 09:23:17.0098 0x01b8 GEST Service - ok 09:23:17.0103 0x01b8 [ F802FBABF0C4DF1BAA733187B2E476F5, E2533284CEBBB872196B013DD1FBBCA794DB1CAAA37D64849BD9264ECDD2CEE6 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys 09:23:17.0105 0x01b8 GPIOClx0101 - ok 09:23:17.0128 0x01b8 [ B89C353AFC8F56D961D07FF1FE7B4BCD, C4491A1E33E0151AF3D7589769D4DCFABC68518A22393A7584FB573B47643B2F ] gpsvc C:\WINDOWS\System32\gpsvc.dll 09:23:17.0144 0x01b8 gpsvc - ok 09:23:17.0148 0x01b8 [ D011B0ADB15F4815310CE1BF4780B33E, 3860630917F83A89FE7A6407CC544505FA4BD754619CF273DD630ABFBAAE42EE ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys 09:23:17.0148 0x01b8 GpuEnergyDrv - ok 09:23:17.0153 0x01b8 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 09:23:17.0155 0x01b8 gupdate - ok 09:23:17.0159 0x01b8 [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 09:23:17.0161 0x01b8 gupdatem - ok 09:23:17.0163 0x01b8 [ 8126331FBD4ED29EB3B356F9C905064D, A58BCE904591DD762410E99960FD956FB579C2CE78FA7BF1406075D29537EF82 ] GVTDrv64 C:\Windows\GVTDrv64.sys 09:23:17.0164 0x01b8 GVTDrv64 - ok 09:23:17.0167 0x01b8 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys 09:23:17.0168 0x01b8 hamachi - ok 09:23:17.0171 0x01b8 [ DB1409A2774DB8AD3611EA28C48CEB66, AB712A38E985AE1F9910AB91C2BA0D69C324F2743551FA92A3AA0396782DB04F ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys 09:23:17.0173 0x01b8 HDAudBus - ok |
Themen zu Mögliche Rootkit infektion (TDSS Filesystem found) |
100%, antivirus, avast, bonjour, boot, browser, cdrom, computer, converter, google, harddisk, infektion, laufwerk, logfile, microsoft, problem, rootkit, scan, software, superantispyware, system32, tdss, temp, virus, windows |