![]() |
Trojaner Vista Desktop leer Festplatte defekt? Hallo! Habe mir irgendwie einen Trojaner zugezogen :eek:, obwohl ich meinem Virenprogramm keinerlei Installation erlaubt habe. Ständig öffnen sich setup Dateien mit mehrstelligen Ziffern im Namen. Klicke ich auf abbrechen kommt die nächste setup Datei. Außerdem versucht sich Java ständig ins Internet zu wählen. Habe ein ähnliches Problem bereits hier im Forum mitverfolgt und deshalb eine Analyse über Malwarebytes durchgeführt: 51 infizierte Dateien und folgende Log datei: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Datenbank Version: 6548 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 10.05.2011 22:33:35 mbam-log-2011-05-10 (22-33-35).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 295243 Laufzeit: 1 Stunde(n), 20 Minute(n), 8 Sekunde(n) Infizierte Speicherprozesse: 2 Infizierte Speichermodule: 2 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 3 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 44 Infizierte Speicherprozesse: c:\programdata\trwkcwhfgpmgtx.exe (Rogue.Installer.Gen) -> 2836 -> Unloaded process successfully. c:\Users\Tini\l.exe (Rootkit.TDSS) -> 1856 -> Unloaded process successfully. Infizierte Speichermodule: c:\Users\Tini\AppData\Local\ohtsaw.dll (Trojan.Hiloti) -> Delete on reboot. c:\Users\Tini\AppData\Local\atifacosaqomi.dll (Trojan.Agent.U) -> Delete on reboot. Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Acuge (Trojan.Hiloti) -> Value: Acuge -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\trwKcwHFGPMgtX (Rogue.Installer.Gen) -> Value: trwKcwHFGPMgtX -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Jyonozi (Trojan.Agent.U) -> Value: Jyonozi -> Delete on reboot. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\Users\Tini\AppData\Local\ohtsaw.dll (Trojan.Hiloti) -> Delete on reboot. c:\programdata\trwkcwhfgpmgtx.exe (Rogue.Installer.Gen) -> Quarantined and deleted successfully. c:\Users\Tini\l.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\m.exe (Trojan.FraudPack.Gen) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\0.027067628380521125.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\0.6096786126294245.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\2473.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\24A0.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\tmp6586.tmp (Rogue.Installer.Gen) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\adobe_flash_player.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\FDA0.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1061641952.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1408728840.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1749326048.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1752513760.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1827524832.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1828728456.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup1991873248.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3032938720.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3279916256.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3528403200.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3535678688.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3609256072.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3814930144.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup3822213344.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup4035532000.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup4061674376.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup4155243400.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup831226592.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup862498016.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2205707144.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2415815816.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2447262856.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2533755104.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2631627400.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2669623520.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2895472864.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\Temp\setup2908522376.exe (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\LocalLow\Sun\Java\deployment\cache\6.0\47\4d261d6f-70984861 (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Roaming\Adobe\plugs\mmc1500230.txt (Trojan.Hiloti) -> Quarantined and deleted successfully. c:\Windows\Temp\set4816.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Roaming\Adobe\plugs\mmc155.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Roaming\Adobe\plugs\mmc17.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\Users\Tini\AppData\Local\atifacosaqomi.dll (Trojan.Agent.U) -> Delete on reboot. Gerade läuft OTL. Hier entstanden folgende Log Dateien:OTL Logfile: Code: OTL logfile created on: 10.05.2011 22:44:32 - Run 1 OTL Logfile: Code: OTL Extras logfile created on: 10.05.2011 22:44:32 - Run 1 Problem ist auch, dass ich unter Windows-Start nur ein leeres Feld sehe und alle programme verschwunden sind. Ebenso die Desktop Items und angeblich alle meine persönlichen Dateien. Komme ich an diese wieder ran? Kann mir jemand helfen? Besten Dank! |
:hallo: Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist. Vista und Win7 User Alle Tools mit Rechtsklick "als Administrator ausführen" starten. Schritt 1
Schritt 2 Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!Lade ComboFix von einem der unten aufgeführten Links herunter. Du musst diese umbenennen, bevor Du es auf den Desktop speicherst. Speichere ComboFix auf deinen Desktop.**NB: Es ist wichtig, das ComboFix.exe auf dem Desktop gespeichert wird** http://i266.photobucket.com/albums/i...ownload_FF.gif http://i94.photobucket.com/albums/l8...x-Download.png
Schritt 3 Rootkit-Suche mit Gmer Was sind Rootkits? Wichtig: Bei jedem Rootkit-Scans soll/en:
Lade Dir Gmer von dieser Seite herunter (auf den Button Download EXE drücken) und das Programm auf dem Desktop speichern.
Nun das Logfile in Code-Tags posten. |
Trojaner Vista Desktop leer Festplatte defekt? Vielen Dank für die schnelle Antwort. Habe nun kaspersky laufen lassen... Ergebnis: Feld leer. System scan completed. Processed: 244 objects Infection: not found. kaspersky log report: 2011/05/10 23:10:00.0240 6100 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16 2011/05/10 23:10:00.0271 6100 ================================================================================ 2011/05/10 23:10:00.0271 6100 SystemInfo: 2011/05/10 23:10:00.0271 6100 2011/05/10 23:10:00.0271 6100 OS Version: 6.0.6002 ServicePack: 2.0 2011/05/10 23:10:00.0271 6100 Product type: Workstation 2011/05/10 23:10:00.0271 6100 ComputerName: MERLIN 2011/05/10 23:10:00.0271 6100 UserName: Tini 2011/05/10 23:10:00.0271 6100 Windows directory: C:\Windows 2011/05/10 23:10:00.0271 6100 System windows directory: C:\Windows 2011/05/10 23:10:00.0271 6100 Processor architecture: Intel x86 2011/05/10 23:10:00.0271 6100 Number of processors: 2 2011/05/10 23:10:00.0271 6100 Page size: 0x1000 2011/05/10 23:10:00.0271 6100 Boot type: Normal boot 2011/05/10 23:10:00.0271 6100 ================================================================================ 2011/05/10 23:10:00.0568 6100 Initialize success 2011/05/10 23:10:24.0795 6136 ================================================================================ 2011/05/10 23:10:24.0795 6136 Scan started 2011/05/10 23:10:24.0795 6136 Mode: Manual; 2011/05/10 23:10:24.0795 6136 ================================================================================ 2011/05/10 23:10:25.0902 6136 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 2011/05/10 23:10:26.0089 6136 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 2011/05/10 23:10:26.0230 6136 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 2011/05/10 23:10:26.0292 6136 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 2011/05/10 23:10:26.0448 6136 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 2011/05/10 23:10:26.0604 6136 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys 2011/05/10 23:10:26.0745 6136 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 2011/05/10 23:10:26.0776 6136 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 2011/05/10 23:10:26.0807 6136 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 2011/05/10 23:10:26.0932 6136 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 2011/05/10 23:10:26.0979 6136 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 2011/05/10 23:10:27.0072 6136 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 2011/05/10 23:10:27.0197 6136 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys 2011/05/10 23:10:27.0400 6136 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 2011/05/10 23:10:27.0493 6136 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 2011/05/10 23:10:27.0618 6136 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/05/10 23:10:27.0712 6136 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 2011/05/10 23:10:27.0899 6136 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2011/05/10 23:10:28.0086 6136 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\Windows\system32\DRIVERS\avgntflt.sys 2011/05/10 23:10:28.0149 6136 avipbb (5fedef54757b34fb611b9ec8fb399364) C:\Windows\system32\DRIVERS\avipbb.sys 2011/05/10 23:10:28.0367 6136 b57nd60x (502f1c30bd50b32d00ce4dcaecc3d3c7) C:\Windows\system32\DRIVERS\b57nd60x.sys 2011/05/10 23:10:28.0523 6136 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 2011/05/10 23:10:28.0663 6136 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 2011/05/10 23:10:28.0726 6136 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 2011/05/10 23:10:28.0866 6136 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 2011/05/10 23:10:28.0913 6136 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 2011/05/10 23:10:28.0960 6136 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 2011/05/10 23:10:29.0131 6136 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 2011/05/10 23:10:29.0241 6136 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 2011/05/10 23:10:29.0381 6136 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 2011/05/10 23:10:29.0506 6136 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 2011/05/10 23:10:29.0662 6136 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/05/10 23:10:29.0896 6136 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 2011/05/10 23:10:30.0067 6136 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys 2011/05/10 23:10:30.0192 6136 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 2011/05/10 23:10:30.0364 6136 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/05/10 23:10:30.0411 6136 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 2011/05/10 23:10:30.0567 6136 CnxtHdAudService (01b80273c019f0f25f27fa2e80a85578) C:\Windows\system32\drivers\CHDRT32.sys 2011/05/10 23:10:30.0801 6136 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 2011/05/10 23:10:30.0832 6136 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 2011/05/10 23:10:30.0879 6136 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 2011/05/10 23:10:31.0253 6136 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys 2011/05/10 23:10:31.0456 6136 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 2011/05/10 23:10:31.0549 6136 DKbFltr (73baf270d24fe726b9cd7f80bb17a23d) C:\Windows\system32\DRIVERS\DKbFltr.sys 2011/05/10 23:10:31.0690 6136 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys 2011/05/10 23:10:31.0799 6136 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys 2011/05/10 23:10:31.0861 6136 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys 2011/05/10 23:10:32.0002 6136 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 2011/05/10 23:10:32.0220 6136 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 2011/05/10 23:10:32.0361 6136 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 2011/05/10 23:10:32.0548 6136 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 2011/05/10 23:10:32.0782 6136 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 2011/05/10 23:10:32.0938 6136 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 2011/05/10 23:10:33.0125 6136 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 2011/05/10 23:10:33.0406 6136 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 2011/05/10 23:10:33.0749 6136 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 2011/05/10 23:10:33.0843 6136 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 2011/05/10 23:10:33.0983 6136 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 2011/05/10 23:10:34.0155 6136 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/05/10 23:10:34.0326 6136 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 2011/05/10 23:10:34.0498 6136 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 2011/05/10 23:10:34.0654 6136 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 2011/05/10 23:10:35.0028 6136 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 2011/05/10 23:10:35.0169 6136 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/05/10 23:10:35.0340 6136 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 2011/05/10 23:10:35.0449 6136 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 2011/05/10 23:10:35.0574 6136 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 2011/05/10 23:10:35.0637 6136 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 2011/05/10 23:10:35.0793 6136 HPFXBULK (299683d4c8aaa3f6f5d5d226a1782a6e) C:\Windows\system32\drivers\hpfxbulk.sys 2011/05/10 23:10:36.0027 6136 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS 2011/05/10 23:10:36.0214 6136 HSF_DPV (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS 2011/05/10 23:10:36.0541 6136 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 2011/05/10 23:10:36.0838 6136 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 2011/05/10 23:10:37.0041 6136 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/05/10 23:10:37.0165 6136 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 2011/05/10 23:10:37.0353 6136 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 2011/05/10 23:10:37.0727 6136 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 2011/05/10 23:10:38.0039 6136 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 2011/05/10 23:10:38.0382 6136 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/05/10 23:10:38.0772 6136 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 2011/05/10 23:10:39.0022 6136 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 2011/05/10 23:10:39.0287 6136 irda (e50a95179211b12946f7e035d60af560) C:\Windows\system32\DRIVERS\irda.sys 2011/05/10 23:10:39.0490 6136 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 2011/05/10 23:10:39.0724 6136 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 2011/05/10 23:10:39.0895 6136 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/05/10 23:10:40.0051 6136 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 2011/05/10 23:10:40.0129 6136 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 2011/05/10 23:10:40.0301 6136 k57nd60x (eac21e8014c7e6ee341afffb7e2bbd54) C:\Windows\system32\DRIVERS\k57nd60x.sys 2011/05/10 23:10:40.0410 6136 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/05/10 23:10:40.0613 6136 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\drivers\kbdhid.sys 2011/05/10 23:10:40.0722 6136 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 2011/05/10 23:10:40.0987 6136 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 2011/05/10 23:10:41.0143 6136 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 2011/05/10 23:10:41.0346 6136 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 2011/05/10 23:10:41.0455 6136 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 2011/05/10 23:10:41.0580 6136 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 2011/05/10 23:10:41.0705 6136 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 2011/05/10 23:10:41.0845 6136 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 2011/05/10 23:10:42.0017 6136 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 2011/05/10 23:10:42.0064 6136 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 2011/05/10 23:10:42.0173 6136 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 2011/05/10 23:10:42.0313 6136 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 2011/05/10 23:10:42.0376 6136 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 2011/05/10 23:10:42.0501 6136 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 2011/05/10 23:10:42.0579 6136 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 2011/05/10 23:10:42.0719 6136 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 2011/05/10 23:10:42.0828 6136 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 2011/05/10 23:10:42.0922 6136 mrxsmb (5fe5cf325f5b02ebc60832d3440cb414) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/05/10 23:10:43.0047 6136 mrxsmb10 (30b9c769446af379a2afb72b0392604d) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/05/10 23:10:43.0093 6136 mrxsmb20 (fea239b3ec4877e2b7e23204af589ddf) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/05/10 23:10:43.0187 6136 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys 2011/05/10 23:10:43.0234 6136 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 2011/05/10 23:10:43.0327 6136 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 2011/05/10 23:10:43.0437 6136 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 2011/05/10 23:10:43.0515 6136 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 2011/05/10 23:10:43.0639 6136 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/05/10 23:10:43.0764 6136 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 2011/05/10 23:10:43.0889 6136 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 2011/05/10 23:10:44.0279 6136 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/05/10 23:10:44.0404 6136 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 2011/05/10 23:10:44.0513 6136 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 2011/05/10 23:10:44.0669 6136 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 2011/05/10 23:10:44.0841 6136 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 2011/05/10 23:10:44.0887 6136 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/05/10 23:10:45.0028 6136 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/05/10 23:10:45.0153 6136 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/05/10 23:10:45.0231 6136 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 2011/05/10 23:10:45.0309 6136 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 2011/05/10 23:10:45.0418 6136 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 2011/05/10 23:10:45.0683 6136 NETw5v32 (ae642d069681a826d5f16e4f6ad158f3) C:\Windows\system32\DRIVERS\NETw5v32.sys 2011/05/10 23:10:45.0870 6136 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 2011/05/10 23:10:45.0933 6136 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 2011/05/10 23:10:46.0011 6136 NSCIRDA (6d8d2e5652fc2442c810c5d8be784148) C:\Windows\system32\DRIVERS\nscirda.sys 2011/05/10 23:10:46.0151 6136 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 2011/05/10 23:10:46.0229 6136 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 2011/05/10 23:10:46.0354 6136 NTIDrvr (2757d2ba59aee155209e24942ab127c9) C:\Windows\system32\Drivers\NTIDrvr.sys 2011/05/10 23:10:46.0401 6136 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 2011/05/10 23:10:46.0416 6136 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 2011/05/10 23:10:46.0541 6136 NVHDA (5942c96a3ac3029490961949f9009344) C:\Windows\system32\drivers\nvhda32v.sys 2011/05/10 23:10:47.0118 6136 nvlddmkm (7faa756fefdd371745c88f8ae3141f0f) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2011/05/10 23:10:47.0321 6136 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 2011/05/10 23:10:47.0383 6136 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 2011/05/10 23:10:47.0539 6136 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 2011/05/10 23:10:47.0664 6136 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/05/10 23:10:47.0789 6136 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 2011/05/10 23:10:47.0883 6136 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 2011/05/10 23:10:48.0023 6136 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 2011/05/10 23:10:48.0117 6136 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 2011/05/10 23:10:48.0163 6136 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys 2011/05/10 23:10:48.0288 6136 pcmcia (b7c5a8769541900f6dfa6fe0c5e4d513) C:\Windows\system32\DRIVERS\pcmcia.sys 2011/05/10 23:10:48.0460 6136 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 2011/05/10 23:10:48.0647 6136 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 2011/05/10 23:10:48.0694 6136 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 2011/05/10 23:10:48.0850 6136 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 2011/05/10 23:10:48.0943 6136 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\Windows\system32\Drivers\PxHelp20.sys 2011/05/10 23:10:49.0162 6136 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 2011/05/10 23:10:49.0661 6136 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 2011/05/10 23:10:49.0817 6136 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 2011/05/10 23:10:49.0942 6136 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 2011/05/10 23:10:50.0067 6136 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/05/10 23:10:50.0145 6136 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/05/10 23:10:50.0285 6136 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 2011/05/10 23:10:50.0363 6136 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 2011/05/10 23:10:50.0425 6136 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/05/10 23:10:50.0613 6136 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 2011/05/10 23:10:50.0706 6136 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 2011/05/10 23:10:50.0800 6136 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 2011/05/10 23:10:50.0956 6136 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 2011/05/10 23:10:51.0018 6136 RTSTOR (d97d8259293b7a82cb891f37f997df3f) C:\Windows\system32\drivers\RTSTOR.SYS 2011/05/10 23:10:51.0221 6136 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 2011/05/10 23:10:51.0315 6136 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys 2011/05/10 23:10:51.0346 6136 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2011/05/10 23:10:51.0486 6136 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 2011/05/10 23:10:51.0533 6136 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 2011/05/10 23:10:51.0611 6136 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 2011/05/10 23:10:51.0814 6136 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 2011/05/10 23:10:51.0861 6136 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 2011/05/10 23:10:51.0907 6136 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 2011/05/10 23:10:51.0954 6136 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 2011/05/10 23:10:52.0079 6136 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 2011/05/10 23:10:52.0141 6136 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 2011/05/10 23:10:52.0204 6136 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 2011/05/10 23:10:52.0329 6136 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 2011/05/10 23:10:52.0422 6136 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 2011/05/10 23:10:52.0609 6136 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 2011/05/10 23:10:52.0734 6136 srv2 (a5940ca32ed206f90be9fabdf6e92de4) C:\Windows\system32\DRIVERS\srv2.sys 2011/05/10 23:10:53.0015 6136 srvnet (37aa1d560d5fa486c4b11c2f276ada61) C:\Windows\system32\DRIVERS\srvnet.sys 2011/05/10 23:10:53.0187 6136 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys 2011/05/10 23:10:53.0358 6136 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 2011/05/10 23:10:53.0405 6136 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 2011/05/10 23:10:53.0467 6136 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 2011/05/10 23:10:53.0623 6136 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 2011/05/10 23:10:53.0733 6136 SynTP (5c3e900f41426a372de60675afc8aa07) C:\Windows\system32\DRIVERS\SynTP.sys 2011/05/10 23:10:54.0013 6136 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys 2011/05/10 23:10:54.0341 6136 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys 2011/05/10 23:10:54.0715 6136 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 2011/05/10 23:10:55.0137 6136 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 2011/05/10 23:10:55.0339 6136 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 2011/05/10 23:10:55.0511 6136 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 2011/05/10 23:10:55.0714 6136 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 2011/05/10 23:10:55.0932 6136 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/05/10 23:10:56.0057 6136 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 2011/05/10 23:10:56.0166 6136 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 2011/05/10 23:10:56.0291 6136 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 2011/05/10 23:10:56.0385 6136 UBHelper (f763e070843ee2803de1395002b42938) C:\Windows\system32\drivers\UBHelper.sys 2011/05/10 23:10:56.0603 6136 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 2011/05/10 23:10:56.0728 6136 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 2011/05/10 23:10:56.0868 6136 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 2011/05/10 23:10:57.0009 6136 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 2011/05/10 23:10:57.0118 6136 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 2011/05/10 23:10:57.0196 6136 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 2011/05/10 23:10:57.0274 6136 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/05/10 23:10:57.0445 6136 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 2011/05/10 23:10:57.0617 6136 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 2011/05/10 23:10:57.0742 6136 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 2011/05/10 23:10:57.0835 6136 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys 2011/05/10 23:10:57.0945 6136 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 2011/05/10 23:10:58.0085 6136 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 2011/05/10 23:10:58.0257 6136 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/05/10 23:10:58.0459 6136 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/05/10 23:10:58.0537 6136 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys 2011/05/10 23:10:58.0693 6136 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/05/10 23:10:58.0849 6136 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 2011/05/10 23:10:59.0005 6136 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 2011/05/10 23:10:59.0146 6136 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 2011/05/10 23:10:59.0255 6136 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 2011/05/10 23:10:59.0395 6136 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 2011/05/10 23:10:59.0536 6136 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 2011/05/10 23:10:59.0661 6136 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 2011/05/10 23:10:59.0895 6136 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 2011/05/10 23:11:00.0035 6136 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 2011/05/10 23:11:00.0113 6136 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/05/10 23:11:00.0129 6136 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/05/10 23:11:00.0394 6136 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 2011/05/10 23:11:00.0503 6136 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 2011/05/10 23:11:00.0784 6136 winachsf (5c7bdcf5864db00323fe2d90fa26a8a2) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS 2011/05/10 23:11:01.0002 6136 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/05/10 23:11:01.0065 6136 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 2011/05/10 23:11:01.0314 6136 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/05/10 23:11:01.0767 6136 ================================================================================ 2011/05/10 23:11:01.0767 6136 Scan finished 2011/05/10 23:11:01.0767 6136 ================================================================================ Combofix Logfile: Code: ComboFix 11-05-09.03 - Tini 10.05.2011 23:19:59.1.2 - x86 GMER Logfile: Code: GMER 1.0.15.15627 - hxxp://www.gmer.net Habe nun die drei Schritte durchgeführt. Jetzt sind einige Dateien wieder da... nur kann ich noch nicht alles vollständig auf dem Desktop sehen bzw... fehlt mein Startmenü noch. Das heißt beim Aufrufen von Windows Start über die Taskleiste unten links sind im Feld "Programme" noch alle Felder leer... Lohnt es sich eigentlich, die Sicherungs CDs von der Erstinstallation (bei Neukauf angefertigt) einzulegen? Bessert sich dann die Leere im Startmenü? Vielen Dank schon mal! |
Wenn Du willst kannst Du das Backup wieder einspielen falls nicht dann folgendes: Schritt 1 Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop. Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. (Könnte eine Weile dauern ) Vista und 7 User müssen das Tool per Rechtsklick als Administrator ausführen! Schritt 2 Unter den Eigenschaften der betroffenen Benutzerordner das Häkchen bei "versteckt" entfernen und diese Änderung für sämtl. Unterordner und Dateien mit übernehmen Schritt 3 Da wir in der Registry Änderungen vornehmen müssen, wirst Du die Registry vorher wie folgt sichern: Lade das Tool ERUNT von Lars Hederer herunter und installiere es. Starte die erunt.exe und erstelle damit eine Backup der Registry in den vorgegebenen Ordner. Unter Sicherungsoptionen bitte alle drei Möglichkeiten anhaken. Das Programm nicht in den Systemstart aufnehmen. Schritt 4 Über "regedit" (eingeben im Suchfeld beiM Startmenü) nach "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" navigieren. Dort beim Eintrag "NoDesktop" den Wert von 1 auf 0 ändern. Regedit verlassen. |
Alle Zeitangaben in WEZ +1. Es ist jetzt 17:54 Uhr. |
Copyright ©2000-2025, Trojaner-Board