Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Claro-Search von Firefox entfernen (https://www.trojaner-board.de/127604-claro-search-firefox-entfernen.html)

bigbossburg 05.12.2012 10:19
Code:
10:02:32.0250 1724  TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
10:02:32.0484 1724  ============================================================
10:02:32.0484 1724  Current date / time: 2012/12/05 10:02:32.0484
10:02:32.0484 1724  SystemInfo:
10:02:32.0484 1724 
10:02:32.0484 1724  OS Version: 5.1.2600 ServicePack: 3.0
10:02:32.0484 1724  Product type: Workstation
10:02:32.0484 1724  ComputerName: RAINER
10:02:32.0484 1724  UserName: R a i n e r
10:02:32.0484 1724  Windows directory: C:\WINDOWS
10:02:32.0484 1724  System windows directory: C:\WINDOWS
10:02:32.0484 1724  Processor architecture: Intel x86
10:02:32.0484 1724  Number of processors: 2
10:02:32.0484 1724  Page size: 0x1000
10:02:32.0484 1724  Boot type: Normal boot
10:02:32.0484 1724  ============================================================
10:03:08.0421 1724  !crdlk
10:03:08.0421 1724  Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'A'
10:03:08.0421 1724  Drive \Device\Harddisk1\DR1 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'A'
10:03:08.0453 1724  ============================================================
10:03:08.0453 1724  \Device\Harddisk0\DR0:
10:03:08.0453 1724  MBR partitions:
10:03:08.0453 1724  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
10:03:08.0453 1724  \Device\Harddisk1\DR1:
10:03:08.0453 1724  MBR partitions:
10:03:08.0453 1724  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A18A82
10:03:08.0453 1724  ============================================================
10:03:08.0500 1724  C: <-> \Device\Harddisk0\DR0\Partition1
10:03:08.0562 1724  D: <-> \Device\Harddisk1\DR1\Partition1
10:03:08.0593 1724  ============================================================
10:03:08.0593 1724  Initialize success
10:03:08.0593 1724  ============================================================
10:04:10.0312 2964  ============================================================
10:04:10.0312 2964  Scan started
10:04:10.0312 2964  Mode: Manual; SigCheck; TDLFS;
10:04:10.0312 2964  ============================================================
10:04:10.0546 2964  ================ Scan system memory ========================
10:04:10.0546 2964  System memory - ok
10:04:10.0546 2964  ================ Scan services =============================
10:04:10.0578 2964  Suspicious service (NoAccess): 6b7ac38611882a1
10:04:10.0687 2964  [ 0907292986E05A8752BC1863556D229E ] 6b7ac38611882a1 C:\WINDOWS\System32\Drivers\6b7ac38611882a1.sys
10:04:10.0687 2964  Suspicious file (NoAccess): C:\WINDOWS\System32\Drivers\6b7ac38611882a1.sys. md5: 0907292986E05A8752BC1863556D229E
10:04:10.0812 2964  6b7ac38611882a1 ( Rootkit.Win32.Necurs.gen ) - infected
10:04:10.0812 2964  6b7ac38611882a1 - detected Rootkit.Win32.Necurs.gen (0)
10:04:10.0828 2964  Abiosdsk - ok
10:04:10.0843 2964  abp480n5 - ok
10:04:10.0875 2964  [ 20C0E1E7B7C0164E0ECAE11D5DB7B80A ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:04:11.0062 2964  ACPI - ok
10:04:11.0093 2964  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
10:04:11.0187 2964  ACPIEC - ok
10:04:11.0265 2964  [ 0CB0AA071C7B86A64F361DCFDF357329 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
10:04:11.0281 2964  AdobeFlashPlayerUpdateSvc - ok
10:04:11.0296 2964  adpu160m - ok
10:04:11.0312 2964  [ 8BED39E3C35D6A489438B8141717A557 ] aec            C:\WINDOWS\system32\drivers\aec.sys
10:04:11.0437 2964  aec - ok
10:04:11.0468 2964  [ 355556D9E580915118CD7EF736653A89 ] AFD            C:\WINDOWS\System32\drivers\afd.sys
10:04:11.0515 2964  AFD - ok
10:04:11.0531 2964  Aha154x - ok
10:04:11.0531 2964  aic78u2 - ok
10:04:11.0546 2964  aic78xx - ok
10:04:11.0593 2964  [ 017D1DC4469D65CAAE6643A50CF41B81 ] Alerter        C:\WINDOWS\system32\alrsvc.dll
10:04:11.0734 2964  Alerter - ok
10:04:11.0750 2964  [ 646559A4903798457A2EEE07FE7B72B9 ] ALG            C:\WINDOWS\System32\alg.exe
10:04:11.0828 2964  ALG - ok
10:04:11.0828 2964  AliIde - ok
10:04:11.0843 2964  amsint - ok
10:04:11.0921 2964  [ C27D46B06D340293670450FCE9DFB166 ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe
10:04:11.0937 2964  AntiVirSchedulerService - ok
10:04:11.0968 2964  [ 72D90E56563165984224493069C69ED4 ] AntiVirService  C:\Programme\Avira\AntiVir Desktop\avguard.exe
10:04:11.0984 2964  AntiVirService - ok
10:04:12.0031 2964  [ 44CD59211EB6DA497B48D6B21F0C4820 ] AnyDVD          C:\WINDOWS\system32\Drivers\AnyDVD.sys
10:04:12.0062 2964  AnyDVD - ok
10:04:12.0171 2964  [ D8E18021F91AD79CA8491CB5A5DA22D4 ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
10:04:12.0171 2964  Apple Mobile Device - ok
10:04:12.0218 2964  [ B0CFDAA116789A66C7102CB1DDCF66A6 ] AppMgmt        C:\WINDOWS\System32\appmgmts.dll
10:04:12.0296 2964  AppMgmt - ok
10:04:12.0312 2964  asc - ok
10:04:12.0328 2964  asc3350p - ok
10:04:12.0328 2964  asc3550 - ok
10:04:12.0421 2964  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
10:04:12.0484 2964  aspnet_state - ok
10:04:12.0500 2964  asusgsb - ok
10:04:12.0515 2964  [ 0D4681F78A20B50D691A4F3C9F75EB41 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:04:12.0625 2964  AsyncMac - ok
10:04:12.0656 2964  [ 335BB30ED68CF3DC0EE2BDDB438B6A9B ] atapi          C:\WINDOWS\system32\DRIVERS\atapi.sys
10:04:12.0796 2964  atapi - ok
10:04:12.0812 2964  Atdisk - ok
10:04:12.0843 2964  [ ECF89E5BD58E3A3CC2E7DB0F0D9F6C6C ] Atmarpc        C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:04:12.0968 2964  Atmarpc - ok
10:04:12.0984 2964  [ 7F2388A299C85FCC70B2F7F07638895E ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
10:04:13.0109 2964  AudioSrv - ok
10:04:13.0140 2964  [ D9F724AA26C010A217C97606B160ED68 ] audstub        C:\WINDOWS\system32\DRIVERS\audstub.sys
10:04:13.0250 2964  audstub - ok
10:04:13.0281 2964  [ 0B497C79824F8E1BF22FA6AACD3DE3A0 ] avgio          C:\Programme\Avira\AntiVir Desktop\avgio.sys
10:04:13.0281 2964  avgio - ok
10:04:13.0328 2964  [ 1E4114685DE1FFA9675E09C6A1FB3F4B ] avgntflt        C:\WINDOWS\system32\DRIVERS\avgntflt.sys
10:04:13.0343 2964  avgntflt - ok
10:04:13.0375 2964  [ 0F78D3DAE6DEDD99AE54C9491C62ADF2 ] avipbb          C:\WINDOWS\system32\DRIVERS\avipbb.sys
10:04:13.0390 2964  avipbb - ok
10:04:13.0437 2964  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
10:04:13.0625 2964  Beep - ok
10:04:13.0687 2964  [ 101307CCD9EB393149019A6E153D3FF4 ] BITS            C:\WINDOWS\system32\qmgr.dll
10:04:13.0843 2964  BITS - ok
10:04:13.0937 2964  [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe
10:04:13.0953 2964  Bonjour Service - ok
10:04:14.0000 2964  [ 37BA0051DB9E4AC65C5826F63CEC3060 ] Browser        C:\WINDOWS\System32\browser.dll
10:04:14.0109 2964  Browser - ok
10:04:14.0281 2964  [ 52BE156F6C23B2995AFACE7091D18493 ] Browser Manager C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
10:04:14.0390 2964  Browser Manager - ok
10:04:14.0500 2964  catchme - ok
10:04:14.0531 2964  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k        C:\WINDOWS\system32\drivers\cbidf2k.sys
10:04:14.0640 2964  cbidf2k - ok
10:04:14.0687 2964  [ 6BD9CEFA0AAC17EE93F277E5B9BEF716 ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:04:14.0796 2964  CCDECODE - ok
10:04:14.0812 2964  cd20xrnt - ok
10:04:14.0828 2964  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio        C:\WINDOWS\system32\drivers\Cdaudio.sys
10:04:14.0937 2964  Cdaudio - ok
10:04:14.0968 2964  [ B7B2EFD695BB6E937EB3E5B5465B6F47 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
10:04:15.0078 2964  Cdfs - ok
10:04:15.0109 2964  [ 1F29616B1FC4D66A988CF97531BCF729 ] Cdrom          C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:04:15.0218 2964  Cdrom - ok
10:04:15.0250 2964  CFcatchme - ok
10:04:15.0265 2964  Changer - ok
10:04:15.0296 2964  [ 1CBA95C4DD757B471E8FC2A26FC7A81E ] CiSvc          C:\WINDOWS\system32\cisvc.exe
10:04:15.0406 2964  CiSvc - ok
10:04:15.0453 2964  [ F5B29E6C0DD5803968BC9DCB6D6EA29C ] ClipSrv        C:\WINDOWS\system32\clipsrv.exe
10:04:15.0562 2964  ClipSrv - ok
10:04:15.0593 2964  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
10:04:15.0687 2964  clr_optimization_v2.0.50727_32 - ok
10:04:15.0703 2964  CmdIde - ok
10:04:15.0718 2964  COMSysApp - ok
10:04:15.0750 2964  Cpqarray - ok
10:04:15.0781 2964  [ 4959C30BF9A3C51E2DC8D5CB5E6ED303 ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
10:04:15.0875 2964  CryptSvc - ok
10:04:15.0921 2964  [ 5776322F93CDB91086111F5FFBFDA2A0 ] d347bus        C:\WINDOWS\system32\DRIVERS\d347bus.sys
10:04:15.0937 2964  d347bus ( UnsignedFile.Multi.Generic ) - warning
10:04:15.0937 2964  d347bus - detected UnsignedFile.Multi.Generic (1)
10:04:15.0937 2964  [ B49F79ACE459763F4E0380071BE9CB45 ] d347prt        C:\WINDOWS\system32\Drivers\d347prt.sys
10:04:15.0953 2964  d347prt ( UnsignedFile.Multi.Generic ) - warning
10:04:15.0953 2964  d347prt - detected UnsignedFile.Multi.Generic (1)
10:04:15.0953 2964  dac2w2k - ok
10:04:15.0968 2964  dac960nt - ok
10:04:16.0015 2964  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
10:04:16.0109 2964  DcomLaunch - ok
10:04:16.0156 2964  [ 64D99CE99C617EBB4DAD04C7EB4ACC09 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
10:04:16.0265 2964  Dhcp - ok
10:04:16.0296 2964  [ 023712144C69E60FCB662CDA2715BF16 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
10:04:16.0406 2964  Disk - ok
10:04:16.0421 2964  dmadmin - ok
10:04:16.0468 2964  [ 08D632EF9F65D83F0B7C8CC237B0DF7B ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
10:04:16.0640 2964  dmboot - ok
10:04:16.0656 2964  [ 2F6B95E6934F868128F450F349F5CF4F ] dmio            C:\WINDOWS\system32\DRIVERS\dmio.sys
10:04:16.0750 2964  dmio - ok
10:04:16.0765 2964  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
10:04:16.0875 2964  dmload - ok
10:04:16.0890 2964  [ C6E0657C07FEC7F619BF9F2EF1CE9B40 ] dmserver        C:\WINDOWS\System32\dmserver.dll
10:04:17.0000 2964  dmserver - ok
10:04:17.0031 2964  [ C561840C22148F5AFFB659D547EFDBB0 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
10:04:17.0140 2964  DMusic - ok
10:04:17.0171 2964  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
10:04:17.0250 2964  Dnscache - ok
10:04:17.0296 2964  [ 9C4437E788D5BDA106BBD5318CCA7685 ] Dot3svc        C:\WINDOWS\System32\dot3svc.dll
10:04:17.0406 2964  Dot3svc - ok
10:04:17.0421 2964  dpti2o - ok
10:04:17.0437 2964  [ C13EE685AA1A8950146F7F968EB090BD ] drmkaud        C:\WINDOWS\system32\drivers\drmkaud.sys
10:04:17.0531 2964  drmkaud - ok
10:04:17.0562 2964  [ 6AB69B1871E89304521CA6B568674990 ] EapHost        C:\WINDOWS\System32\eapsvc.dll
10:04:17.0671 2964  EapHost - ok
10:04:17.0703 2964  [ 0DAF3544804650526751C478AECCCE63 ] EIO            C:\WINDOWS\system32\drivers\EIO.sys
10:04:17.0703 2964  EIO ( UnsignedFile.Multi.Generic ) - warning
10:04:17.0703 2964  EIO - detected UnsignedFile.Multi.Generic (1)
10:04:17.0765 2964  [ C61C83501268B0110B5C5DB7E63DEE0C ] ElbyCDFL        C:\WINDOWS\system32\Drivers\ElbyCDFL.sys
10:04:17.0781 2964  ElbyCDFL ( UnsignedFile.Multi.Generic ) - warning
10:04:17.0781 2964  ElbyCDFL - detected UnsignedFile.Multi.Generic (1)
10:04:17.0828 2964  [ AAA8999A169E39FB8B48AE49CD6AC30A ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
10:04:17.0828 2964  ElbyCDIO - ok
10:04:17.0859 2964  [ E205C313417DA6FA7AFE85912A310A65 ] ElbyDelay      C:\WINDOWS\system32\Drivers\ElbyDelay.sys
10:04:17.0875 2964  ElbyDelay - ok
10:04:17.0890 2964  [ 58F1C700C60D387E81A818601C95F008 ] ERSvc          C:\WINDOWS\System32\ersvc.dll
10:04:17.0984 2964  ERSvc - ok
10:04:18.0031 2964  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
10:04:18.0078 2964  Eventlog - ok
10:04:18.0125 2964  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem    C:\WINDOWS\system32\es.dll
10:04:18.0171 2964  EventSystem - ok
10:04:18.0203 2964  [ F696CF49C72F50EA0C1038C2DAA98A00 ] Fastfat        C:\WINDOWS\system32\drivers\Fastfat.sys
10:04:18.0312 2964  Fastfat - ok
10:04:18.0359 2964  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
10:04:18.0421 2964  FastUserSwitchingCompatibility - ok
10:04:18.0453 2964  [ 650FA0D37498F9E2B201A09DBCA0B85B ] Fdc            C:\WINDOWS\system32\DRIVERS\fdc.sys
10:04:18.0562 2964  Fdc - ok
10:04:18.0593 2964  [ 6A2757EDCAAAE0AD2F10E54D9901F3F1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
10:04:18.0703 2964  Fips - ok
10:04:18.0718 2964  [ 3B8607A2BF5AEC3DAB18CF3612C07C1D ] Flpydisk        C:\WINDOWS\system32\DRIVERS\flpydisk.sys
10:04:18.0828 2964  Flpydisk - ok
10:04:18.0859 2964  [ 87EC219A7AE5553144E2086D2D7DAA8A ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
10:04:18.0968 2964  FltMgr - ok
10:04:19.0031 2964  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
10:04:19.0046 2964  FontCache3.0.0.0 - ok
10:04:19.0078 2964  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:04:19.0187 2964  Fs_Rec - ok
10:04:19.0203 2964  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:04:19.0296 2964  Ftdisk - ok
10:04:19.0343 2964  [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM    C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
10:04:19.0359 2964  GEARAspiWDM - ok
10:04:19.0375 2964  [ 9479C26A5691CCEA495E2438EF11C948 ] Gpc            C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:04:19.0468 2964  Gpc - ok
10:04:19.0531 2964  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate        C:\Programme\Google\Update\GoogleUpdate.exe
10:04:19.0546 2964  gupdate - ok
10:04:19.0562 2964  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Programme\Google\Update\GoogleUpdate.exe
10:04:19.0578 2964  gupdatem - ok
10:04:19.0656 2964  [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc          C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
10:04:19.0671 2964  gusvc - ok
10:04:19.0703 2964  [ 3FCC124B6E08EE0E9351F717DD136939 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:04:19.0718 2964  HDAudBus ( UnsignedFile.Multi.Generic ) - warning
10:04:19.0718 2964  HDAudBus - detected UnsignedFile.Multi.Generic (1)
10:04:19.0781 2964  [ D45E3D2A66DE1DDF8F8ACCEE8B287A2A ] helpsvc        C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
10:04:19.0890 2964  helpsvc - ok
10:04:19.0906 2964  HidServ - ok
10:04:19.0937 2964  [ 5F845228561E9545EDC6F9EBFA15D338 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:04:20.0046 2964  hidusb - ok
10:04:20.0078 2964  [ 77CCEEC542B3DE7D70DCF1213966DF3A ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
10:04:20.0203 2964  hkmsvc - ok
10:04:20.0203 2964  hpn - ok
10:04:20.0250 2964  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
10:04:20.0281 2964  HTTP - ok
10:04:20.0328 2964  [ B55DD546B763FE88C8FABB44D06E7808 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
10:04:20.0453 2964  HTTPFilter - ok
10:04:20.0468 2964  i2omgmt - ok
10:04:20.0468 2964  i2omp - ok
10:04:20.0515 2964  [ C4A1CE8F6572FD471AE3701A2D2B365C ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:04:20.0609 2964  i8042prt - ok
10:04:20.0671 2964  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
10:04:20.0687 2964  IDriverT ( UnsignedFile.Multi.Generic ) - warning
10:04:20.0687 2964  IDriverT - detected UnsignedFile.Multi.Generic (1)
10:04:20.0781 2964  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc          c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
10:04:20.0875 2964  idsvc - ok
10:04:20.0890 2964  [ E32BF30D20B5C162775F9A3451E87B67 ] Imapi          C:\WINDOWS\system32\DRIVERS\imapi.sys
10:04:21.0000 2964  Imapi - ok
10:04:21.0031 2964  [ 3A87DBCEABF8082AF3CCA4B7CA587599 ] ImapiService    C:\WINDOWS\system32\imapi.exe
10:04:21.0140 2964  ImapiService - ok
10:04:21.0156 2964  ini910u - ok
10:04:21.0281 2964  [ 909D03B3B7FB7C830B74F74F4D0EA7CE ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:04:21.0453 2964  IntcAzAudAddService - ok
10:04:21.0453 2964  IntelIde - ok
10:04:21.0484 2964  [ AB064C25376791B4ACA8383D425D2CF5 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:04:21.0593 2964  intelppm - ok
10:04:21.0609 2964  [ EF9BB587E33C2C245B5B83E882501FF6 ] ip6fw          C:\WINDOWS\system32\drivers\ip6fw.sys
10:04:21.0703 2964  ip6fw - ok
10:04:21.0734 2964  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:04:21.0843 2964  IpFilterDriver - ok
10:04:21.0875 2964  [ 30ABA7A3F81E4B76C963CD6CAA23CB49 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:04:21.0968 2964  IpInIp - ok
10:04:22.0000 2964  [ EEB5787BD1445C8DC592F40691781774 ] IpNat          C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:04:22.0093 2964  IpNat - ok
10:04:22.0171 2964  [ 33642C17C232AA272C68E446A2619899 ] iPod Service    C:\Programme\iPod\bin\iPodService.exe
10:04:22.0203 2964  iPod Service - ok
10:04:22.0250 2964  [ BFEA19DAFF955239A16A80C3CDF64FBE ] IPSec          C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:04:22.0343 2964  IPSec - ok
10:04:22.0375 2964  [ 64E28D94089CFF1C3C77F02F99FFAC3F ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
10:04:22.0437 2964  IRENUM - ok
10:04:22.0468 2964  [ 463056DCC95CFA2A99511F48DDAEDEAF ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:04:22.0578 2964  isapnp - ok
10:04:22.0671 2964  [ 74E30A41CDCF331C74BC4D97BE40CC5B ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
10:04:22.0687 2964  JavaQuickStarterService - ok
10:04:22.0718 2964  [ 1ED0D3C456EA0A6B3033EF8ED57CE287 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:04:22.0812 2964  Kbdclass - ok
10:04:22.0859 2964  [ 55E8D7039254728E9F071118184FF53B ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
10:04:22.0953 2964  kmixer - ok
10:04:23.0000 2964  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
10:04:23.0062 2964  KSecDD - ok
10:04:23.0125 2964  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
10:04:23.0171 2964  lanmanserver - ok
10:04:23.0203 2964  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
10:04:23.0250 2964  lanmanworkstation - ok
10:04:23.0265 2964  lbrtfdc - ok
10:04:23.0312 2964  [ 261A21BC128CE547429BA6B776A068D4 ] LmHosts        C:\WINDOWS\System32\lmhsvc.dll
10:04:23.0421 2964  LmHosts - ok
10:04:23.0468 2964  [ 500D089CE760D83DA2B6CBA681AA9949 ] MBAMProtector  C:\WINDOWS\system32\drivers\mbam.sys
10:04:23.0484 2964  MBAMProtector - ok
10:04:23.0546 2964  [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler  C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
10:04:23.0578 2964  MBAMScheduler - ok
10:04:23.0593 2964  [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService    C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
10:04:23.0640 2964  MBAMService - ok
10:04:23.0734 2964  [ 8575512AE3D52A9E57E9E517C1DF09E8 ] McComponentHostService C:\Programme\McAfee Security Scan\3.0.287\McCHSvc.exe
10:04:23.0750 2964  McComponentHostService - ok
10:04:23.0781 2964  [ EAF6BD70AD2EDDC97CA415319D57950C ] Messenger      C:\WINDOWS\System32\msgsvc.dll
10:04:23.0890 2964  Messenger - ok
10:04:23.0937 2964  [ 7C4C76B39D5525C4A465E0BE32528E19 ] Microsoft Office Groove Audit Service C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe
10:04:23.0953 2964  Microsoft Office Groove Audit Service - ok
10:04:23.0984 2964  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd          C:\WINDOWS\system32\drivers\mnmdd.sys
10:04:24.0093 2964  mnmdd - ok
10:04:24.0125 2964  [ 43932756D56AB0516892AF851D3DDC1D ] mnmsrvc        C:\WINDOWS\System32\mnmsrvc.exe
10:04:24.0218 2964  mnmsrvc - ok
10:04:24.0265 2964  [ A56C51928098F60204B4C128EFD8F5F1 ] Modem          C:\WINDOWS\system32\drivers\Modem.sys
10:04:24.0375 2964  Modem - ok
10:04:24.0406 2964  [ D4CB32F616960E5CED68E4DFAC0B1C3B ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:04:24.0515 2964  Mouclass - ok
10:04:24.0546 2964  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:04:24.0656 2964  mouhid - ok
10:04:24.0687 2964  [ 07BE8CAFD246A7DFB7FD4A387E936E92 ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
10:04:24.0781 2964  MountMgr - ok
10:04:24.0859 2964  [ 313265CF4F5F02ED927774DA1DB3FE00 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
10:04:24.0875 2964  MozillaMaintenance - ok
10:04:24.0875 2964  mraid35x - ok
10:04:24.0890 2964  [ AC816EFF53BCA79369F0B8643165368C ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:04:25.0000 2964  MRxDAV - ok
10:04:25.0046 2964  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:04:25.0093 2964  MRxSmb - ok
10:04:25.0140 2964  [ A94AD5478835B5CDF5BCA797897A6EE2 ] MSDTC          C:\WINDOWS\System32\msdtc.exe
10:04:25.0234 2964  MSDTC - ok
10:04:25.0265 2964  [ 4D563545581E72C477AB00741B119853 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
10:04:25.0375 2964  Msfs - ok
10:04:25.0390 2964  MSIServer - ok
10:04:25.0421 2964  [ B16206732E541C04C1860D84447EF5BF ] MSKSSRV        C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:04:25.0515 2964  MSKSSRV - ok
10:04:25.0531 2964  [ BD33CFA58C156CBD5419A87C3A4CD0B2 ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:04:25.0640 2964  MSPCLOCK - ok
10:04:25.0656 2964  [ A7EC2F88FAE0F03252A60950660CC3E1 ] MSPQM          C:\WINDOWS\system32\drivers\MSPQM.sys
10:04:25.0765 2964  MSPQM - ok
10:04:25.0796 2964  [ F41814FD8811B2BA2A43A79AA8CCE82A ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:04:25.0906 2964  mssmbios - ok
10:04:25.0921 2964  [ 330D6D5DD6A02B8DE42E3E80646B0BF5 ] MSTEE          C:\WINDOWS\system32\drivers\MSTEE.sys
10:04:26.0015 2964  MSTEE - ok
10:04:26.0031 2964  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup            C:\WINDOWS\system32\drivers\Mup.sys
10:04:26.0078 2964  Mup - ok
10:04:26.0125 2964  [ DA2FC70D610C065325612735E7356756 ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:04:26.0218 2964  NABTSFEC - ok
10:04:26.0265 2964  [ 6E96D7597D3F330B703ADC41A3FAB368 ] napagent        C:\WINDOWS\System32\qagentrt.dll
10:04:26.0375 2964  napagent - ok
10:04:26.0406 2964  [ D1B364F049EB84A883C8A45D3B92FF3B ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
10:04:26.0515 2964  NDIS - ok
10:04:26.0531 2964  [ D4C3610766DA2367E0D219969A1BCAEE ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:04:26.0625 2964  NdisIP - ok
10:04:26.0656 2964  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:04:26.0703 2964  NdisTapi - ok
10:04:26.0734 2964  [ E8969046DC350ECD1E9209DFE341C170 ] Ndisuio        C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:04:26.0828 2964  Ndisuio - ok
10:04:26.0843 2964  [ 266FDED9836490FF227AD13E677BA4FB ] NdisWan        C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:04:26.0937 2964  NdisWan - ok
10:04:26.0968 2964  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy        C:\WINDOWS\system32\drivers\NDProxy.sys
10:04:27.0015 2964  NDProxy - ok
10:04:27.0109 2964  [ A0101E836D2A39682E134C47B1565256 ] Nero BackItUp Scheduler 3 C:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe
10:04:27.0156 2964  Nero BackItUp Scheduler 3 - ok
10:04:27.0171 2964  [ C70B403D8158E11BF0D43D5B153CBE6B ] NetBIOS        C:\WINDOWS\system32\DRIVERS\netbios.sys
10:04:27.0281 2964  NetBIOS - ok
10:04:27.0296 2964  [ C181E1F7A2A251B7AF6352DCBD8457F3 ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
10:04:27.0390 2964  NetBT - ok
10:04:27.0421 2964  [ 3E37C28CE9EB788073DC01D0CA059330 ] NetDDE          C:\WINDOWS\system32\netdde.exe
10:04:27.0531 2964  NetDDE - ok
10:04:27.0546 2964  [ 3E37C28CE9EB788073DC01D0CA059330 ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
10:04:27.0640 2964  NetDDEdsdm - ok
10:04:27.0671 2964  [ 85B67A8630D41F08EF8FD3AEFA12F53C ] Netlogon        C:\WINDOWS\system32\lsass.exe
10:04:27.0765 2964  Netlogon - ok
10:04:27.0812 2964  [ 5527A7E83E96CA138211CB90E4EDFA42 ] Netman          C:\WINDOWS\System32\netman.dll
10:04:27.0906 2964  Netman - ok
10:04:27.0984 2964  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
10:04:28.0000 2964  NetTcpPortSharing - ok
10:04:28.0031 2964  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla            C:\WINDOWS\System32\mswsock.dll
10:04:28.0046 2964  Nla - ok
10:04:28.0156 2964  [ 6EF0506CE1F553E9BD085645933C8686 ] NMIndexingService C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe
10:04:28.0171 2964  NMIndexingService - ok
10:04:28.0203 2964  [ 4A8A2AA0706B659175169DECF198E9D7 ] nmwcd          C:\WINDOWS\system32\drivers\ccdcmb.sys
10:04:28.0328 2964  nmwcd - ok
10:04:28.0359 2964  [ FD3E61831095AC62E6840D986B5A2016 ] nmwcdc          C:\WINDOWS\system32\drivers\ccdcmbo.sys
10:04:28.0406 2964  nmwcdc - ok
10:04:28.0453 2964  [ 02E96113511171BA7559386D10D3DAEA ] nmwcdnsu        C:\WINDOWS\system32\drivers\nmwcdnsu.sys
10:04:28.0500 2964  nmwcdnsu - ok
10:04:28.0515 2964  [ FB09150CFC7A499A53C308D04841A3BD ] nmwcdnsuc      C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
10:04:28.0578 2964  nmwcdnsuc - ok
10:04:28.0609 2964  [ 20C123AFC574ABF76BA35D39C26AE6DF ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
10:04:28.0703 2964  Npfs - ok
10:04:28.0750 2964  [ 34A993D7E519364F5D548B5726917753 ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
10:04:28.0890 2964  Ntfs - ok
10:04:28.0906 2964  [ 85B67A8630D41F08EF8FD3AEFA12F53C ] NtLmSsp        C:\WINDOWS\system32\lsass.exe
10:04:29.0000 2964  NtLmSsp - ok
10:04:29.0046 2964  [ DB7BB9BCB2C818E5E8787D52CAEE8CB6 ] NtmsSvc        C:\WINDOWS\system32\ntmssvc.dll
10:04:29.0171 2964  NtmsSvc - ok
10:04:29.0187 2964  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
10:04:29.0296 2964  Null - ok
10:04:29.0406 2964  [ 34C114DA0A5E03219444E46F122FF5A3 ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
10:04:29.0562 2964  nv - ok
10:04:29.0593 2964  [ FF8112711B5F9823D4595579B2130955 ] NVSvc          C:\WINDOWS\system32\nvsvc32.exe
10:04:29.0625 2964  NVSvc - ok
10:04:29.0640 2964  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:04:29.0734 2964  NwlnkFlt - ok
10:04:29.0765 2964  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:04:29.0859 2964  NwlnkFwd - ok
10:04:29.0937 2964  [ 1F0E05DFF4F5A833168E49BE1256F002 ] odserv          C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
10:04:29.0968 2964  odserv - ok
10:04:29.0984 2964  [ 5A432A042DAE460ABE7199B758E8606C ] ose            C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
10:04:30.0000 2964  ose - ok
10:04:30.0046 2964  [ 44FC7171FCC8A296BE5511F25F4D0FCF ] Parport        C:\WINDOWS\system32\drivers\Parport.sys
10:04:30.0140 2964  Parport - ok
10:04:30.0156 2964  [ 67075DA61516ADEDD710A9DA6C6C8ACB ] PartMgr        C:\WINDOWS\system32\drivers\PartMgr.sys
10:04:30.0250 2964  PartMgr - ok
10:04:30.0281 2964  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
10:04:30.0375 2964  ParVdm - ok
10:04:30.0406 2964  [ FD2041E9BA03DB7764B2248F02475079 ] pccsmcfd        C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
10:04:30.0468 2964  pccsmcfd - ok
10:04:30.0515 2964  [ 1C1912842815DE300D28E7CF1E59ED72 ] PCI            C:\WINDOWS\system32\DRIVERS\pci.sys
10:04:30.0609 2964  PCI - ok
10:04:30.0609 2964  PCIDump - ok
10:04:30.0640 2964  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
10:04:30.0734 2964  PCIIde - ok
10:04:30.0765 2964  [ 7317F5570B5DA1FB9977A2AF0EF73B65 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
10:04:30.0859 2964  Pcmcia - ok
10:04:30.0875 2964  PDCOMP - ok
10:04:30.0890 2964  PDFRAME - ok
10:04:30.0890 2964  PDRELI - ok
10:04:30.0906 2964  PDRFRAME - ok
10:04:30.0921 2964  perc2 - ok
10:04:30.0937 2964  perc2hib - ok
10:04:30.0984 2964  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
10:04:31.0031 2964  PlugPlay - ok
10:04:31.0031 2964  [ 85B67A8630D41F08EF8FD3AEFA12F53C ] PolicyAgent    C:\WINDOWS\system32\lsass.exe
10:04:31.0125 2964  PolicyAgent - ok
10:04:31.0171 2964  [ 87D6A848DC367056778168D40A6F1A70 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:04:31.0281 2964  PptpMiniport - ok
10:04:31.0296 2964  [ C9ADF0D55614A17BF34720CEB8E3B475 ] Processor      C:\WINDOWS\system32\DRIVERS\processr.sys
10:04:31.0406 2964  Processor - ok
10:04:31.0421 2964  [ 85B67A8630D41F08EF8FD3AEFA12F53C ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
10:04:31.0515 2964  ProtectedStorage - ok
10:04:31.0531 2964  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink        C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:04:31.0625 2964  Ptilink - ok
10:04:31.0671 2964  [ 81088114178112618B1C414A65E50F7C ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:04:31.0671 2964  PxHelp20 ( UnsignedFile.Multi.Generic ) - warning
10:04:31.0671 2964  PxHelp20 - detected UnsignedFile.Multi.Generic (1)
10:04:31.0687 2964  ql1080 - ok
10:04:31.0703 2964  Ql10wnt - ok
10:04:31.0718 2964  ql12160 - ok
10:04:31.0734 2964  ql1240 - ok
10:04:31.0750 2964  ql1280 - ok
10:04:31.0781 2964  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:04:31.0890 2964  RasAcd - ok
10:04:31.0937 2964  [ BD1C75DBA4442810CE75986CBDDA811E ] RasAuto        C:\WINDOWS\System32\rasauto.dll
10:04:32.0031 2964  RasAuto - ok
10:04:32.0046 2964  [ DBC6AEDA3111EDAF60948FC063565006 ] Rasl2tp        C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:04:32.0156 2964  Rasl2tp - ok
10:04:32.0187 2964  [ 0617964124624774E06259251C3C4A89 ] RasMan          C:\WINDOWS\System32\rasmans.dll
10:04:32.0281 2964  RasMan - ok
10:04:32.0296 2964  [ 96467FC3E135F0B174B8978BD8CE69F9 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:04:32.0390 2964  RasPppoe - ok
10:04:32.0406 2964  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
10:04:32.0500 2964  Raspti - ok
10:04:32.0531 2964  [ 1116A775BFA71F2C13F3D420DA455FF2 ] Rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:04:32.0640 2964  Rdbss - ok
10:04:32.0656 2964  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:04:32.0765 2964  RDPCDD - ok
10:04:32.0781 2964  [ 9B7B9221177C83C7CBFD20B4B67F23DC ] rdpdr          C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:04:32.0875 2964  rdpdr - ok
10:04:32.0906 2964  [ FC105DD312ED64EB66BFF111E8EC6EAC ] RDPWD          C:\WINDOWS\system32\drivers\RDPWD.sys
10:04:32.0937 2964  RDPWD - ok
10:04:32.0968 2964  [ 8331048121510BE89F0C219F996D4C73 ] RDSessMgr      C:\WINDOWS\system32\sessmgr.exe
10:04:33.0078 2964  RDSessMgr - ok
10:04:33.0109 2964  [ 9BF7E0E18D33511922FD4E8189AB3512 ] redbook        C:\WINDOWS\system32\DRIVERS\redbook.sys
10:04:33.0203 2964  redbook - ok
10:04:33.0234 2964  [ B01B75FEF07E4F9E056A221D305D87A1 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
10:04:33.0343 2964  RemoteAccess - ok
10:04:33.0375 2964  [ 6F08DAB2E580EBC2F56D9093FD1020CB ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
10:04:33.0484 2964  RemoteRegistry - ok
10:04:33.0515 2964  [ BD517C7FB119997EFFBE39D5E4B37B05 ] RichVideo      C:\Programme\CyberLink\Shared files\RichVideo.exe
10:04:33.0531 2964  RichVideo ( UnsignedFile.Multi.Generic ) - warning
10:04:33.0531 2964  RichVideo - detected UnsignedFile.Multi.Generic (1)
10:04:33.0546 2964  [ 2AFBFE15D724FE7E65FDF2114345F797 ] RpcLocator      C:\WINDOWS\system32\locator.exe
10:04:33.0656 2964  RpcLocator - ok
10:04:33.0718 2964  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs          C:\WINDOWS\system32\rpcss.dll
10:04:33.0765 2964  RpcSs - ok
10:04:33.0796 2964  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
10:04:33.0890 2964  RSVP - ok
10:04:33.0937 2964  [ 69EE1E8DC0C750A5D03739E6E9429959 ] RTL8023xp      C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
10:04:33.0968 2964  RTL8023xp - ok
10:04:33.0984 2964  [ 85B67A8630D41F08EF8FD3AEFA12F53C ] SamSs          C:\WINDOWS\system32\lsass.exe
10:04:34.0093 2964  SamSs - ok
10:04:34.0125 2964  [ BF6C754733A4014FCAAF96F91B2E27E2 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
10:04:34.0218 2964  SCardSvr - ok
10:04:34.0250 2964  [ D40970CE8F244DE4E884F66FF1C8D7CA ] Schedule        C:\WINDOWS\system32\schedsvc.dll
10:04:34.0359 2964  Schedule - ok
10:04:34.0390 2964  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:04:34.0468 2964  Secdrv - ok
10:04:34.0484 2964  [ 178EB42E864D4682F1B551BCAF0E7261 ] seclogon        C:\WINDOWS\System32\seclogon.dll
10:04:34.0593 2964  seclogon - ok
10:04:34.0609 2964  [ 4C1047EE46F3EF1A76767AEE2AC6471C ] SENS            C:\WINDOWS\system32\sens.dll
10:04:34.0703 2964  SENS - ok
10:04:34.0734 2964  [ DE23787927CB72533D4869855E955329 ] serenum        C:\WINDOWS\system32\DRIVERS\serenum.sys
10:04:34.0843 2964  serenum - ok
10:04:34.0875 2964  [ 66D1B3A5A71DE3AB51C77C3522AF6C92 ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
10:04:34.0968 2964  Serial - ok
10:04:35.0062 2964  [ 58D5BFDF3ADF49FE9CABD78CC61D92F6 ] ServiceLayer    C:\Programme\PC Connectivity Solution\ServiceLayer.exe
10:04:35.0093 2964  ServiceLayer ( UnsignedFile.Multi.Generic ) - warning
10:04:35.0093 2964  ServiceLayer - detected UnsignedFile.Multi.Generic (1)
10:04:35.0156 2964  [ DC495A349DFD94FBFE4CF0689ED647B2 ] Sfloppy        C:\WINDOWS\system32\drivers\Sfloppy.sys
10:04:35.0250 2964  Sfloppy - ok
10:04:35.0281 2964  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
10:04:35.0296 2964  ShellHWDetection - ok
10:04:35.0296 2964  Simbad - ok
10:04:35.0328 2964  [ 70B574953C6062F28C3DCF2394C7DDDE ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:04:35.0437 2964  SLIP - ok
10:04:35.0500 2964  [ 53C9845BA14BC6DD01F65DA4CA9CC898 ] SNXPCARD        C:\WINDOWS\system32\DRIVERS\snxpcard.sys
10:04:35.0546 2964  SNXPCARD - ok
10:04:35.0593 2964  [ 7B9AB821093B00D1E37FEB1032AD80B0 ] SNXPPAL        C:\WINDOWS\system32\DRIVERS\snxppal.sys
10:04:35.0609 2964  SNXPPAL ( UnsignedFile.Multi.Generic ) - warning
10:04:35.0609 2964  SNXPPAL - detected UnsignedFile.Multi.Generic (1)
10:04:35.0656 2964  [ 94E241365F6FC4B35D2740C4B90DE591 ] SNXPPALX        C:\WINDOWS\system32\DRIVERS\snxppalx.sys
10:04:35.0656 2964  SNXPPALX - ok
10:04:35.0671 2964  Sparrow - ok
10:04:35.0718 2964  [ E477A633EA2D387788879A30666E5998 ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
10:04:35.0812 2964  splitter - ok
10:04:35.0859 2964  [ 60784F891563FB1B767F70117FC2428F ] Spooler        C:\WINDOWS\system32\spoolsv.exe
10:04:35.0906 2964  Spooler - ok
10:04:35.0937 2964  [ 48D9EAD87DB3DED18845401F533195DC ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
10:04:36.0000 2964  sr - ok
10:04:36.0031 2964  [ 969A23CCDA161140398F513679334527 ] srservice      C:\WINDOWS\system32\srsvc.dll
10:04:36.0093 2964  srservice - ok
10:04:36.0125 2964  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv            C:\WINDOWS\system32\DRIVERS\srv.sys
10:04:36.0187 2964  Srv - ok
10:04:36.0234 2964  [ 5A93BC3AF9B22AD22CEBC0610F1F0002 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
10:04:36.0296 2964  SSDPSRV - ok
10:04:36.0343 2964  [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv          C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
10:04:36.0343 2964  ssmdrv - ok
10:04:36.0390 2964  [ 0FF527022DFDD4DF567727966EE2E4D7 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
10:04:36.0515 2964  stisvc - ok
10:04:36.0531 2964  [ FC2870338F6A08A562D6BEF72E66F478 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:04:36.0625 2964  streamip - ok
10:04:36.0656 2964  [ A5491F57E70167A10ED40E19D36EDD13 ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
10:04:36.0750 2964  swenum - ok
10:04:36.0765 2964  [ 5F8AB2829C52609E03560725EAF167F9 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
10:04:36.0875 2964  swmidi - ok
10:04:36.0890 2964  SwPrv - ok
10:04:36.0906 2964  symc810 - ok
10:04:36.0921 2964  symc8xx - ok
10:04:36.0921 2964  sym_hi - ok
10:04:36.0937 2964  sym_u3 - ok
10:04:36.0968 2964  [ FEAEE2DF25F435C153756707321BBF46 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
10:04:37.0078 2964  sysaudio - ok
10:04:37.0109 2964  [ A41B924D94720A8322EA596C65F38B8B ] SysmonLog      C:\WINDOWS\system32\smlogsvc.exe
10:04:37.0218 2964  SysmonLog - ok
10:04:37.0265 2964  [ 87AA6E9FC3F30FAB4FA6F483DE2B46AC ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
10:04:37.0375 2964  TapiSrv - ok
10:04:37.0406 2964  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip          C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:04:37.0437 2964  Tcpip - ok
10:04:37.0468 2964  [ 76AFDFEA26D4CB16E81FA32A22C34376 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
10:04:37.0578 2964  TDPIPE - ok
10:04:37.0593 2964  [ 2FC82251C9E895AA48624EBE05E5774E ] TDTCP          C:\WINDOWS\system32\drivers\TDTCP.sys
10:04:37.0687 2964  TDTCP - ok
10:04:37.0718 2964  [ 4E55B6F75AD92F13D6ABBF8D767CBCEC ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
10:04:37.0828 2964  TermDD - ok
10:04:37.0890 2964  [ D22CF58FBA476CDEEEEFD51913293A25 ] TermService    C:\WINDOWS\System32\termsrv.dll
10:04:38.0000 2964  TermService - ok
10:04:38.0031 2964  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
10:04:38.0046 2964  Themes - ok
10:04:38.0078 2964  [ 81351CC01274D058B5C20FDBFD6D9FC2 ] TlntSvr        C:\WINDOWS\System32\tlntsvr.exe
10:04:38.0156 2964  TlntSvr - ok
10:04:38.0171 2964  TosIde - ok
10:04:38.0187 2964  [ 8E5F45EEF4586AAE5453AF9AAF7F07C6 ] TrkWks          C:\WINDOWS\system32\trkwks.dll
10:04:38.0296 2964  TrkWks - ok
10:04:38.0328 2964  [ 70B9BFB2485A71DA07E61AF0C8C47E40 ] u46drv.sys      C:\WINDOWS\system32\DRIVERS\u46drv.sys
10:04:38.0343 2964  u46drv.sys ( UnsignedFile.Multi.Generic ) - warning
10:04:38.0343 2964  u46drv.sys - detected UnsignedFile.Multi.Generic (1)
10:04:38.0390 2964  [ C8591FCAB74C98FBEAB48B0DF88D482D ] U46_01          C:\WINDOWS\system32\drivers\u46Wdm.sys
10:04:38.0406 2964  U46_01 ( UnsignedFile.Multi.Generic ) - warning
10:04:38.0406 2964  U46_01 - detected UnsignedFile.Multi.Generic (1)
10:04:38.0437 2964  [ D8F25A4793698C8A6AE59CA4007B16C8 ] U46_AA          C:\WINDOWS\system32\drivers\u46drv1.sys
10:04:38.0437 2964  U46_AA ( UnsignedFile.Multi.Generic ) - warning
10:04:38.0437 2964  U46_AA - detected UnsignedFile.Multi.Generic (1)
10:04:38.0468 2964  [ 90374E55F93F2883377902CB9CBFC6DB ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
10:04:38.0578 2964  Udfs - ok
10:04:38.0593 2964  ultra - ok
10:04:38.0625 2964  [ AB0A7CA90D9E3D6A193905DC1715DED0 ] UMWdf          C:\WINDOWS\system32\wdfmgr.exe
10:04:38.0687 2964  UMWdf - ok
10:04:38.0734 2964  [ 415C2A770F4B6932308F9DE7B19B3139 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
10:04:38.0859 2964  Update - ok
10:04:38.0875 2964  [ 9F4946C557BADDB16C11B3E201E2A44B ] upnphost        C:\WINDOWS\System32\upnphost.dll
10:04:38.0937 2964  upnphost - ok
10:04:38.0968 2964  [ 587E643A4E2FFD9A00F114B057CEB773 ] upperdev        C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
10:04:39.0031 2964  upperdev - ok
10:04:39.0046 2964  [ 1E228347D770A8FB62DF01DBF53862C9 ] UPS            C:\WINDOWS\System32\ups.exe
10:04:39.0140 2964  UPS - ok
10:04:39.0203 2964  [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL        C:\WINDOWS\system32\Drivers\usbaapl.sys
10:04:39.0234 2964  USBAAPL - ok
10:04:39.0281 2964  [ B24CFF43DEB7AC8F2AC0F2FB8A4CE16D ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
10:04:39.0359 2964  usbaudio - ok
10:04:39.0390 2964  [ 9A0A8BE756BD7A9BAD4A3D0E9FA7BD79 ] usbccgp        C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:04:39.0500 2964  usbccgp - ok
10:04:39.0531 2964  [ D37FEE874B49D951F68E788D40D8C196 ] usbehci        C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:04:39.0625 2964  usbehci - ok
10:04:39.0656 2964  [ 8167383FE00199108F63269C2B8A99E1 ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:04:39.0765 2964  usbhub - ok
10:04:39.0796 2964  [ 5BE9C3F196C607AAA072ED660F9C0423 ] usbscan        C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:04:39.0890 2964  usbscan - ok
10:04:39.0921 2964  [ 1B5D25ACA397C94F82DD6175A41E399A ] usbser          C:\WINDOWS\system32\drivers\usbser.sys
10:04:40.0015 2964  usbser - ok
10:04:40.0062 2964  [ FCA6A196D47CB972A0E4ADC0DB9CD17C ] UsbserFilt      C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
10:04:40.0093 2964  UsbserFilt - ok
10:04:40.0125 2964  [ E3EEF7AE5105A9F99B1807031EDB4171 ] USBSTOR        C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:04:40.0234 2964  USBSTOR - ok
10:04:40.0250 2964  [ B02ADDB9A345CBAE360A29B2865C36A1 ] usbuhci        C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:04:40.0343 2964  usbuhci - ok
10:04:40.0375 2964  [ CC1F0DD100F577E9B029547FEE285813 ] VgaSave        C:\WINDOWS\System32\drivers\vga.sys
10:04:40.0468 2964  VgaSave - ok
10:04:40.0484 2964  ViaIde - ok
10:04:40.0484 2964  Video3D - ok
10:04:40.0515 2964  [ E847AAD4214BFD5923DDD8135E91351F ] VolSnap        C:\WINDOWS\system32\drivers\VolSnap.sys
10:04:40.0609 2964  VolSnap - ok
10:04:40.0640 2964  [ 33CF98F7C4500228A73730471029591D ] VSS            C:\WINDOWS\System32\vssvc.exe
10:04:40.0703 2964  VSS - ok
10:04:40.0734 2964  [ 308067D60DDDAF4DDDEE617BDA588370 ] W32Time        C:\WINDOWS\system32\w32time.dll
10:04:40.0843 2964  W32Time - ok
10:04:40.0875 2964  [ 8794191476E6B93161BAAA136E309454 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:04:40.0984 2964  Wanarp - ok
10:04:41.0031 2964  [ BBCFEAB7E871CDDAC2D397EE7FA91FDC ] Wdf01000        C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
10:04:41.0062 2964  Wdf01000 - ok
10:04:41.0078 2964  WDICA - ok
10:04:41.0093 2964  [ CF66393A0B2E361503BF381AC013B34A ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
10:04:41.0187 2964  wdmaud - ok
10:04:41.0218 2964  [ 41B860F99F574C53AABFB344CECC487F ] WebClient      C:\WINDOWS\System32\webclnt.dll
10:04:41.0312 2964  WebClient - ok
10:04:41.0390 2964  [ 3BDCB0061626EF7FAB39AA068976C711 ] winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
10:04:41.0500 2964  winmgmt - ok
10:04:41.0593 2964  [ 94A85E956A065E23E0010A6A7826243B ] WLSetupSvc      C:\Programme\Windows Live\installer\WLSetupSvc.exe
10:04:41.0609 2964  WLSetupSvc ( UnsignedFile.Multi.Generic ) - warning
10:04:41.0609 2964  WLSetupSvc - detected UnsignedFile.Multi.Generic (1)
10:04:41.0640 2964  [ 140EF97B64F560FD78643CAE2CDAD838 ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
10:04:41.0703 2964  WmdmPmSN - ok
10:04:41.0765 2964  [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi            C:\WINDOWS\System32\advapi32.dll
10:04:41.0859 2964  Wmi - ok
10:04:41.0906 2964  [ E6E27BF01A92DCDF8D7E04637699CD5B ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
10:04:42.0000 2964  WmiApSrv - ok
10:04:42.0031 2964  [ 1385E5AA9C9821790D33A9563B8D2DD0 ] WpdUsb          C:\WINDOWS\system32\Drivers\wpdusb.sys
10:04:42.0062 2964  WpdUsb - ok
10:04:42.0078 2964  [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL        C:\WINDOWS\System32\drivers\ws2ifsl.sys
10:04:42.0171 2964  WS2IFSL - ok
10:04:42.0218 2964  [ BC628EA852244CCE94C6558290195912 ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
10:04:42.0328 2964  wscsvc - ok
10:04:42.0359 2964  [ 330029931EB8E3384CBC4C10880D5B14 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:04:42.0453 2964  WSTCODEC - ok
10:04:42.0500 2964  [ 330E127A8B3F98C54DBCE6E27DE60AE8 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
10:04:42.0609 2964  wuauserv - ok
10:04:42.0640 2964  [ CBD9A8ED43B4D0D4723226B7ED98C327 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
10:04:42.0765 2964  WZCSVC - ok
10:04:42.0796 2964  [ 4CC3C4EB6C6CD20EF839C01E30F35778 ] xmlprov        C:\WINDOWS\System32\xmlprov.dll
10:04:42.0906 2964  xmlprov - ok
10:04:42.0921 2964  ================ Scan global ===============================
10:04:42.0984 2964  [ 7B5EBD3CF7BFE8A2EFEA72D77B4334B8 ] C:\WINDOWS\system32\basesrv.dll
10:04:43.0000 2964  [ 77A50BBD2A1CD6D54A876BB63570E2A8 ] C:\WINDOWS\system32\winsrv.dll
10:04:43.0015 2964  [ 77A50BBD2A1CD6D54A876BB63570E2A8 ] C:\WINDOWS\system32\winsrv.dll
10:04:43.0031 2964  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
10:04:43.0031 2964  [Global] - ok
10:04:43.0031 2964  ================ Scan MBR ==================================
10:04:43.0046 2964  [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
10:04:43.0281 2964  \Device\Harddisk0\DR0 - ok
10:04:43.0312 2964  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk1\DR1
10:04:43.0343 2964  \Device\Harddisk1\DR1 - ok
10:04:43.0343 2964  ================ Scan VBR ==================================
10:04:43.0359 2964  [ 60B2AA145345E3CC3CFC12979121780E ] \Device\Harddisk0\DR0\Partition1
10:04:43.0359 2964  \Device\Harddisk0\DR0\Partition1 - ok
10:04:43.0359 2964  [ 4589C3783E38BE17B44BA6E045A08A21 ] \Device\Harddisk1\DR1\Partition1
10:04:43.0359 2964  \Device\Harddisk1\DR1\Partition1 - ok
10:04:43.0359 2964  ============================================================
10:04:43.0359 2964  Scan finished
10:04:43.0359 2964  ============================================================
10:04:43.0468 1244  Detected object count: 15
10:04:43.0468 1244  Actual detected object count: 15
10:13:41.0562 1244  6b7ac38611882a1 ( Rootkit.Win32.Necurs.gen ) - skipped by user
10:13:41.0562 1244  6b7ac38611882a1 ( Rootkit.Win32.Necurs.gen ) - User select action: Skip
10:13:41.0562 1244  d347bus ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0562 1244  d347bus ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0562 1244  d347prt ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0562 1244  d347prt ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  EIO ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  EIO ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  ElbyCDFL ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  ElbyCDFL ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  HDAudBus ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  HDAudBus ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  PxHelp20 ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  RichVideo ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  RichVideo ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0578 1244  ServiceLayer ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0578 1244  ServiceLayer ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0593 1244  SNXPPAL ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0593 1244  SNXPPAL ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0593 1244  u46drv.sys ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0593 1244  u46drv.sys ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0593 1244  U46_01 ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0593 1244  U46_01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0593 1244  U46_AA ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0593 1244  U46_AA ( UnsignedFile.Multi.Generic ) - User select action: Skip
10:13:41.0593 1244  WLSetupSvc ( UnsignedFile.Multi.Generic ) - skipped by user
10:13:41.0593 1244  WLSetupSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus 05.12.2012 15:17
Edit: die Logs bitte endlich in CODE-Tags posten! :kloppen:
Werd es ausnahmsweise mal korrigieren


Code:
10:13:41.0562 1244  6b7ac38611882a1 ( Rootkit.Win32.Necurs.gen ) - skipped by user
Diesen Eintrag bitte mit dem TDSS-Killer fixen. Aber bitte nur diesen Eintrag!

Um das zu tun musst du den TDSS-Killer neu starten und einen neuen Scan machen. Wenn du danach die Ergebnisse siehst, stellst du bitte diesen Eintrag auf CURE bzw. DELETE (je nachdem was dir angeboten wird, alle anderen bitte auf SKIP lassen! ) und klickst dann unten rechts auf continue

Starte Windows danach neu und mach wieder ein komplett neues Log mit dem TDSS-Killer. Wie immer wieder in CODE-Tags posten.

bigbossburg 05.12.2012 17:14
Ich glaube ich habs jetzt kapiert wie man in in CODE-Tags postet entschuldige.

ich hab nun beim Neustart folgende 2 Meldungen bekommen.

Malwarebytes Anti Malware

(Shl_NotifyIcon) Die Ausführung der gewünschten Aktion ist fehlgeschlagen. Fehlermeldung 2

und

Datei öffnen Sicherheitswarnung

Der Herausgeber konnte nicht verifiziert werden möchten Sie diese Software ausfühen ?

Name: 0765A3A1-EDB4-45D3-9BEE-63E2FD50554A.exe

Unbekannter Herausgeber

cosinus 05.12.2012 17:29
Zitat:
ich hab nun beim Neustart folgende 2 Meldungen bekommen.
Die sind doch jetzt irrelevenat und außerdem ist deine Kiste noch befallen! Mach bitte das mit dem TDSS-Killer wie ich eben schrieb!

bigbossburg 05.12.2012 17:31
Das mit dm TDSS-Killer habe ich durchgeführt und beim Neustart, der ja notwendig ist,hab ich die 2 Meldungen bekommen.

cosinus 05.12.2012 22:13
Und was solltest du dem Fixen mit dem TDSS-Killer machen? :pfeiff:


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:28 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131