Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Verschlüsselungstrojaner

Verschlüsselungstrojaner


Plagegeister aller Art und deren Bekämpfung: Verschlüsselungstrojaner

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 31.05.2012, 19:16   #1
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Verschlüsselungstrojaner - Standard

Verschlüsselungstrojaner


Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.
Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition (meistens Laufwerk C nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 11.06.2012, 17:41   #2
obudde
 
Verschlüsselungstrojaner - Standard

Verschlüsselungstrojaner


Hier das Log

Code:
ATTFilter
 18:36:04.0125 4688	TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
18:36:04.0656 4688	============================================================
18:36:04.0656 4688	Current date / time: 2012/06/11 18:36:04.0656
18:36:04.0656 4688	SystemInfo:
18:36:04.0656 4688	
18:36:04.0656 4688	OS Version: 5.1.2600 ServicePack: 3.0
18:36:04.0656 4688	Product type: Workstation
18:36:04.0656 4688	ComputerName: URSULA
18:36:04.0656 4688	UserName: Admin
18:36:04.0656 4688	Windows directory: C:\WINDOWS
18:36:04.0656 4688	System windows directory: C:\WINDOWS
18:36:04.0656 4688	Processor architecture: Intel x86
18:36:04.0656 4688	Number of processors: 2
18:36:04.0656 4688	Page size: 0x1000
18:36:04.0656 4688	Boot type: Normal boot
18:36:04.0656 4688	============================================================
18:36:06.0281 4688	Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
18:36:06.0296 4688	Drive \Device\Harddisk1\DR4 - Size: 0x7840000 (0.12 Gb), SectorSize: 0x200, Cylinders: 0xF, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
18:36:06.0296 4688	============================================================
18:36:06.0296 4688	\Device\Harddisk0\DR0:
18:36:06.0296 4688	MBR partitions:
18:36:06.0296 4688	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x249F16E6
18:36:06.0312 4688	\Device\Harddisk0\DR0\Partition1: MBR, Type 0xE, StartLBA 0x249F1764, BlocksNum 0xC34F28D
18:36:06.0328 4688	\Device\Harddisk0\DR0\Partition2: MBR, Type 0xE, StartLBA 0x30D40A30, BlocksNum 0x9640350
18:36:06.0328 4688	\Device\Harddisk1\DR4:
18:36:06.0328 4688	MBR partitions:
18:36:06.0328 4688	\Device\Harddisk1\DR4\Partition0: MBR, Type 0xE, StartLBA 0x20, BlocksNum 0x3C1E0
18:36:06.0328 4688	============================================================
18:36:06.0343 4688	C: <-> \Device\Harddisk0\DR0\Partition0
18:36:06.0343 4688	============================================================
18:36:06.0343 4688	Initialize success
18:36:06.0343 4688	============================================================
18:36:38.0656 0344	============================================================
18:36:38.0656 0344	Scan started
18:36:38.0656 0344	Mode: Manual; SigCheck; TDLFS; 
18:36:38.0656 0344	============================================================
18:36:41.0062 0344	Abiosdsk - ok
18:36:41.0062 0344	abp480n5 - ok
18:36:41.0171 0344	ACPI            (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
18:36:47.0484 0344	ACPI - ok
18:36:47.0515 0344	ACPIEC          (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
18:36:49.0390 0344	ACPIEC - ok
18:36:49.0828 0344	AcrSch2Svc      (dcc3fe93158ef05c2560b3b8e4d8cbc2) C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
18:36:52.0437 0344	AcrSch2Svc - ok
18:36:52.0640 0344	AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:36:54.0406 0344	AdobeFlashPlayerUpdateSvc - ok
18:36:54.0406 0344	adpu160m - ok
18:36:54.0687 0344	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
18:36:55.0140 0344	aec - ok
18:36:55.0250 0344	afcdp           (158ed54ce49cf828c1e46a811fff8804) C:\WINDOWS\system32\DRIVERS\afcdp.sys
18:36:58.0453 0344	afcdp - ok
18:37:09.0390 0344	afcdpsrv        (a07f038b7a28c439accda9cc46eb999f) C:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe
18:37:11.0859 0344	afcdpsrv - ok
18:37:11.0968 0344	AFD             (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
18:37:12.0546 0344	AFD - ok
18:37:12.0546 0344	Aha154x - ok
18:37:12.0562 0344	aic78u2 - ok
18:37:12.0562 0344	aic78xx - ok
18:37:12.0593 0344	Alerter         (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
18:37:13.0296 0344	Alerter - ok
18:37:13.0312 0344	ALG             (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
18:37:13.0812 0344	ALG - ok
18:37:13.0812 0344	AliIde - ok
18:37:13.0828 0344	amsint - ok
18:37:14.0031 0344	AppMgmt         (d45960be52c3c610d361977057f98c54) C:\WINDOWS\System32\appmgmts.dll
18:37:14.0296 0344	AppMgmt - ok
18:37:14.0296 0344	asc - ok
18:37:14.0312 0344	asc3350p - ok
18:37:14.0312 0344	asc3550 - ok
18:37:14.0406 0344	aspnet_state    (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
18:37:14.0609 0344	aspnet_state - ok
18:37:14.0640 0344	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:37:14.0937 0344	AsyncMac - ok
18:37:14.0953 0344	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
18:37:15.0187 0344	atapi - ok
18:37:15.0187 0344	Atdisk - ok
18:37:15.0203 0344	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:37:15.0484 0344	Atmarpc - ok
18:37:15.0515 0344	AudioSrv        (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
18:37:16.0125 0344	AudioSrv - ok
18:37:16.0171 0344	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
18:37:16.0375 0344	audstub - ok
18:37:16.0421 0344	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
18:37:16.0703 0344	Beep - ok
18:37:16.0906 0344	BITS            (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
18:37:17.0156 0344	BITS - ok
18:37:17.0234 0344	BlueletAudio    (5ff9a3f3476d726ae62da82d5da94c36) C:\WINDOWS\system32\DRIVERS\blueletaudio.sys
18:37:18.0328 0344	BlueletAudio - ok
18:37:18.0531 0344	BlueletSCOAudio (bd91afc523fd59f881e1763c38fb772f) C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys
18:37:18.0578 0344	BlueletSCOAudio - ok
18:37:18.0750 0344	BlueSoleil Hid Service (2d3db4a520aaad4bff4d18a5f98c91a8) C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe
18:37:19.0062 0344	BlueSoleil Hid Service - ok
18:37:19.0125 0344	Browser         (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
18:37:19.0406 0344	Browser - ok
18:37:19.0500 0344	BT              (c5cce2b26f73f8cf7f3c82159e79aa08) C:\WINDOWS\system32\DRIVERS\btnetdrv.sys
18:37:19.0734 0344	BT - ok
18:37:19.0828 0344	Btcsrusb        (fb2abc6d08d9f8d5ed8e02cbd18b39bb) C:\WINDOWS\system32\Drivers\btcusb.sys
18:37:19.0890 0344	Btcsrusb - ok
18:37:19.0937 0344	BTHidEnum       (ce643d0918123d76a5caab008fca9663) C:\WINDOWS\system32\Drivers\vbtenum.sys
18:37:20.0000 0344	BTHidEnum - ok
18:37:20.0015 0344	BTHidMgr        (dfca4fe4c8aec786b4d0f432eb730f48) C:\WINDOWS\system32\Drivers\BTHidMgr.sys
18:37:20.0156 0344	BTHidMgr - ok
18:37:20.0625 0344	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
18:37:20.0890 0344	cbidf2k - ok
18:37:21.0140 0344	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
18:37:21.0375 0344	CCDECODE - ok
18:37:21.0375 0344	cd20xrnt - ok
18:37:21.0453 0344	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
18:37:22.0171 0344	Cdaudio - ok
18:37:23.0078 0344	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
18:37:23.0343 0344	Cdfs - ok
18:37:23.0453 0344	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
18:37:23.0671 0344	Cdrom - ok
18:37:23.0671 0344	Changer - ok
18:37:23.0750 0344	CiSvc           (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
18:37:23.0968 0344	CiSvc - ok
18:37:23.0984 0344	ClipSrv         (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
18:37:24.0265 0344	ClipSrv - ok
18:37:24.0531 0344	clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:37:24.0703 0344	clr_optimization_v2.0.50727_32 - ok
18:37:24.0718 0344	CmdIde - ok
18:37:24.0718 0344	COMSysApp - ok
18:37:24.0734 0344	Cpqarray - ok
18:37:24.0765 0344	CryptSvc        (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
18:37:24.0968 0344	CryptSvc - ok
18:37:24.0968 0344	dac2w2k - ok
18:37:24.0984 0344	dac960nt - ok
18:37:25.0156 0344	DcomLaunch      (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
18:37:25.0375 0344	DcomLaunch - ok
18:37:25.0500 0344	Dhcp            (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
18:37:25.0796 0344	Dhcp - ok
18:37:26.0140 0344	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
18:37:26.0328 0344	Disk - ok
18:37:26.0328 0344	dmadmin - ok
18:37:26.0484 0344	dmboot          (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
18:37:26.0750 0344	dmboot - ok
18:37:26.0828 0344	dmio            (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
18:37:27.0062 0344	dmio - ok
18:37:27.0093 0344	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
18:37:27.0468 0344	dmload - ok
18:37:27.0531 0344	dmserver        (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
18:37:28.0093 0344	dmserver - ok
18:37:28.0171 0344	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
18:37:28.0406 0344	DMusic - ok
18:37:28.0453 0344	Dnscache        (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
18:37:28.0687 0344	Dnscache - ok
18:37:28.0828 0344	Dot3svc         (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
18:37:29.0093 0344	Dot3svc - ok
18:37:29.0109 0344	dpti2o - ok
18:37:29.0140 0344	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
18:37:29.0296 0344	drmkaud - ok
18:37:29.0437 0344	EapHost         (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
18:37:29.0671 0344	EapHost - ok
18:37:29.0718 0344	ERSvc           (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
18:37:30.0093 0344	ERSvc - ok
18:37:30.0203 0344	Eventlog        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
18:37:30.0531 0344	Eventlog - ok
18:37:30.0734 0344	EventSystem     (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
18:37:31.0046 0344	EventSystem - ok
18:37:31.0468 0344	F-Secure Gatekeeper (f9c578a787ec7d6eb22cf1eda62f0d8e) C:\Programme\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys
18:37:31.0859 0344	F-Secure Gatekeeper - ok
18:37:32.0078 0344	F-Secure HIPS   (b82a019cb96a6fcb8ca1a86d70ad87c9) C:\Programme\F-Secure\apps\ComputerSecurity\HIPS\drivers\fshs.sys
18:37:32.0296 0344	F-Secure HIPS - ok
18:37:32.0359 0344	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
18:37:32.0781 0344	Fastfat - ok
18:37:32.0906 0344	FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
18:37:33.0140 0344	FastUserSwitchingCompatibility - ok
18:37:33.0218 0344	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
18:37:33.0406 0344	Fdc - ok
18:37:33.0437 0344	Fips            (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
18:37:33.0953 0344	Fips - ok
18:37:33.0984 0344	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
18:37:34.0234 0344	Flpydisk - ok
18:37:34.0343 0344	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
18:37:34.0812 0344	FltMgr - ok
18:37:34.0890 0344	fltsrv          (d85453baf5de7e55cb13441452a4e2d3) C:\WINDOWS\system32\DRIVERS\fltsrv.sys
18:37:35.0015 0344	fltsrv - ok
18:37:35.0359 0344	FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
18:37:35.0703 0344	FontCache3.0.0.0 - ok
18:37:35.0828 0344	fsbts           (1d2de58a837e6909f98ca35103d10739) C:\WINDOWS\system32\Drivers\fsbts.sys
18:37:35.0937 0344	fsbts - ok
18:37:36.0078 0344	FSDFWD          (4f18a37f715533600dd1d3a0e7410239) C:\Programme\F-Secure\apps\ComputerSecurity\FWES\Program\fsdfwd.exe
18:37:36.0468 0344	FSDFWD - ok
18:37:36.0578 0344	FSFW            (4b9935f764d42c2f830e644919b2fa66) C:\WINDOWS\system32\drivers\fsdfw.sys
18:37:36.0781 0344	FSFW - ok
18:37:36.0796 0344	fshoster - ok
18:37:36.0984 0344	FSMA            (f46abb441ee8b700821c479fae5877e6) C:\Programme\F-Secure\apps\ComputerSecurity\Common\FSMA32.EXE
18:37:37.0609 0344	FSMA - ok
18:37:37.0656 0344	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:37:37.0828 0344	Fs_Rec - ok
18:37:37.0906 0344	Ftdisk          (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:37:38.0250 0344	Ftdisk - ok
18:37:38.0296 0344	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
18:37:38.0593 0344	Gpc - ok
18:37:38.0875 0344	hcw95bda        (a9157afe4b6f32dcce9bd18fecd53a0d) C:\WINDOWS\system32\Drivers\hcw95bda.sys
18:37:39.0187 0344	hcw95bda - ok
18:37:39.0218 0344	hcw95rc         (eb77f3c96c62e65cc25f04220b9a204a) C:\WINDOWS\system32\DRIVERS\hcw95rc.sys
18:37:39.0312 0344	hcw95rc - ok
18:37:39.0750 0344	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
18:37:40.0078 0344	HDAudBus - ok
18:37:40.0343 0344	helpsvc         (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
18:37:40.0625 0344	helpsvc - ok
18:37:40.0718 0344	HidServ         (b35da85e60c0103f2e4104532da2f12b) C:\WINDOWS\System32\hidserv.dll
18:37:40.0921 0344	HidServ - ok
18:37:40.0968 0344	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
18:37:41.0234 0344	HidUsb - ok
18:37:41.0640 0344	hkmsvc          (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
18:37:42.0000 0344	hkmsvc - ok
18:37:42.0000 0344	hpn - ok
18:37:42.0671 0344	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
18:37:43.0343 0344	HTTP - ok
18:37:43.0421 0344	HTTPFilter      (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
18:37:43.0843 0344	HTTPFilter - ok
18:37:43.0843 0344	i2omgmt - ok
18:37:43.0859 0344	i2omp - ok
18:37:44.0062 0344	i8042prt        (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:37:44.0281 0344	i8042prt - ok
18:37:51.0187 0344	idsvc           (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:37:51.0750 0344	idsvc - ok
18:37:51.0796 0344	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
18:37:52.0031 0344	Imapi - ok
18:37:52.0453 0344	ImapiService    (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
18:37:52.0828 0344	ImapiService - ok
18:37:52.0828 0344	ini910u - ok
18:37:57.0937 0344	IntcAzAudAddService (fc3a99650afe0b39fe1d214304a7d0d3) C:\WINDOWS\system32\drivers\RtkHDAud.sys
18:37:59.0250 0344	IntcAzAudAddService - ok
18:38:00.0187 0344	IntelIde - ok
18:38:00.0250 0344	intelppm        (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
18:38:00.0656 0344	intelppm - ok
18:38:00.0734 0344	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
18:38:00.0937 0344	Ip6Fw - ok
18:38:01.0453 0344	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:38:01.0953 0344	IpFilterDriver - ok
18:38:02.0531 0344	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
18:38:02.0750 0344	IpInIp - ok
18:38:03.0140 0344	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
18:38:03.0437 0344	IpNat - ok
18:38:03.0546 0344	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
18:38:03.0750 0344	IPSec - ok
18:38:04.0671 0344	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
18:38:04.0921 0344	IRENUM - ok
18:38:05.0375 0344	isapnp          (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
18:38:05.0593 0344	isapnp - ok
18:38:06.0218 0344	JavaQuickStarterService (126a16f569122ae00ad3d12ef831d651) C:\Programme\Java\jre6\bin\jqs.exe
18:38:06.0890 0344	JavaQuickStarterService - ok
18:38:07.0015 0344	Kbdclass        (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:38:07.0234 0344	Kbdclass - ok
18:38:07.0296 0344	kbdhid          (b6d6c117d771c98130497265f26d1882) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:38:07.0484 0344	kbdhid - ok
18:38:08.0421 0344	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
18:38:08.0828 0344	kmixer - ok
18:38:09.0156 0344	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
18:38:09.0296 0344	KSecDD - ok
18:38:09.0328 0344	lanmanserver    (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
18:38:09.0656 0344	lanmanserver - ok
18:38:10.0265 0344	lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
18:38:10.0546 0344	lanmanworkstation - ok
18:38:10.0546 0344	lbrtfdc - ok
18:38:10.0625 0344	LmHosts         (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
18:38:10.0828 0344	LmHosts - ok
18:38:11.0390 0344	lxdoCATSCustConnectService (51836e7cf12f174527a6a6232ff3767b) C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdoserv.exe
18:38:13.0500 0344	lxdoCATSCustConnectService - ok
18:38:13.0515 0344	lxdo_device - ok
18:38:13.0906 0344	MBAMProtector   (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
18:38:14.0109 0344	MBAMProtector - ok
18:38:14.0265 0344	MBAMService     (ba400ed640bca1eae5c727ae17c10207) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
18:38:14.0484 0344	MBAMService - ok
18:38:14.0515 0344	Messenger       (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
18:38:14.0703 0344	Messenger - ok
18:38:14.0750 0344	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
18:38:14.0937 0344	mnmdd - ok
18:38:14.0984 0344	mnmsrvc         (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
18:38:15.0234 0344	mnmsrvc - ok
18:38:15.0296 0344	Modem           (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
18:38:15.0453 0344	Modem - ok
18:38:15.0468 0344	Mouclass        (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
18:38:15.0656 0344	Mouclass - ok
18:38:15.0703 0344	mouhid          (66a6f73c74e1791464160a7065ce711a) C:\WINDOWS\system32\DRIVERS\mouhid.sys
18:38:15.0859 0344	mouhid - ok
18:38:15.0890 0344	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
18:38:16.0031 0344	MountMgr - ok
18:38:16.0062 0344	MPE             (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
18:38:16.0265 0344	MPE - ok
18:38:16.0265 0344	mraid35x - ok
18:38:16.0281 0344	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:38:16.0531 0344	MRxDAV - ok
18:38:16.0593 0344	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:38:16.0750 0344	MRxSmb - ok
18:38:16.0781 0344	MSDTC           (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
18:38:16.0921 0344	MSDTC - ok
18:38:16.0937 0344	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
18:38:17.0093 0344	Msfs - ok
18:38:17.0093 0344	MSIServer - ok
18:38:17.0125 0344	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:38:17.0296 0344	MSKSSRV - ok
18:38:17.0296 0344	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:38:17.0437 0344	MSPCLOCK - ok
18:38:17.0453 0344	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
18:38:17.0625 0344	MSPQM - ok
18:38:17.0640 0344	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:38:17.0859 0344	mssmbios - ok
18:38:17.0875 0344	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
18:38:18.0000 0344	MSTEE - ok
18:38:18.0031 0344	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
18:38:18.0093 0344	Mup - ok
18:38:18.0125 0344	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
18:38:18.0281 0344	NABTSFEC - ok
18:38:18.0312 0344	napagent        (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
18:38:18.0484 0344	napagent - ok
18:38:18.0515 0344	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
18:38:18.0718 0344	NDIS - ok
18:38:18.0750 0344	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
18:38:18.0875 0344	NdisIP - ok
18:38:18.0906 0344	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:38:18.0968 0344	NdisTapi - ok
18:38:18.0984 0344	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:38:19.0125 0344	Ndisuio - ok
18:38:19.0140 0344	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:38:19.0312 0344	NdisWan - ok
18:38:19.0343 0344	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
18:38:19.0406 0344	NDProxy - ok
18:38:19.0421 0344	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
18:38:19.0562 0344	NetBIOS - ok
18:38:19.0578 0344	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
18:38:19.0750 0344	NetBT - ok
18:38:19.0812 0344	NetDDE          (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
18:38:20.0109 0344	NetDDE - ok
18:38:20.0109 0344	NetDDEdsdm      (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
18:38:20.0265 0344	NetDDEdsdm - ok
18:38:20.0296 0344	Netlogon        (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
18:38:20.0468 0344	Netlogon - ok
18:38:20.0484 0344	Netman          (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
18:38:20.0781 0344	Netman - ok
18:38:20.0984 0344	NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:38:21.0046 0344	NetTcpPortSharing - ok
18:38:21.0078 0344	Nla             (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
18:38:21.0171 0344	Nla - ok
18:38:21.0187 0344	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
18:38:21.0359 0344	Npfs - ok
18:38:21.0406 0344	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
18:38:21.0671 0344	Ntfs - ok
18:38:21.0671 0344	NtLmSsp         (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
18:38:21.0812 0344	NtLmSsp - ok
18:38:21.0843 0344	NtmsSvc         (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
18:38:22.0062 0344	NtmsSvc - ok
18:38:22.0093 0344	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
18:38:22.0234 0344	Null - ok
18:38:22.0250 0344	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:38:22.0437 0344	NwlnkFlt - ok
18:38:22.0453 0344	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:38:22.0640 0344	NwlnkFwd - ok
18:38:22.0734 0344	odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
18:38:22.0890 0344	odserv - ok
18:38:22.0921 0344	ose             (5a432a042dae460abe7199b758e8606c) C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
18:38:23.0000 0344	ose - ok
18:38:23.0031 0344	Parport         (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\DRIVERS\parport.sys
18:38:23.0171 0344	Parport - ok
18:38:23.0187 0344	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
18:38:23.0359 0344	PartMgr - ok
18:38:23.0390 0344	ParVdm          (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
18:38:23.0546 0344	ParVdm - ok
18:38:23.0578 0344	PCI             (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
18:38:23.0734 0344	PCI - ok
18:38:23.0734 0344	PCIDump - ok
18:38:23.0750 0344	PCIIde          (59ba86d9a61cbcf4df8e598c331f5b82) C:\WINDOWS\system32\DRIVERS\pciide.sys
18:38:23.0890 0344	PCIIde - ok
18:38:23.0906 0344	Pcmcia          (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
18:38:24.0062 0344	Pcmcia - ok
18:38:24.0062 0344	PDCOMP - ok
18:38:24.0078 0344	PDFRAME - ok
18:38:24.0078 0344	PDRELI - ok
18:38:24.0093 0344	PDRFRAME - ok
18:38:24.0093 0344	perc2 - ok
18:38:24.0093 0344	perc2hib - ok
18:38:24.0140 0344	PlugPlay        (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
18:38:24.0203 0344	PlugPlay - ok
18:38:24.0218 0344	PolicyAgent     (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
18:38:24.0359 0344	PolicyAgent - ok
18:38:24.0359 0344	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
18:38:24.0578 0344	PptpMiniport - ok
18:38:24.0578 0344	ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
18:38:24.0718 0344	ProtectedStorage - ok
18:38:24.0765 0344	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
18:38:24.0906 0344	PSched - ok
18:38:24.0921 0344	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
18:38:25.0093 0344	Ptilink - ok
18:38:25.0109 0344	ql1080 - ok
18:38:25.0109 0344	Ql10wnt - ok
18:38:25.0109 0344	ql12160 - ok
18:38:25.0125 0344	ql1240 - ok
18:38:25.0125 0344	ql1280 - ok
18:38:25.0140 0344	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:38:25.0312 0344	RasAcd - ok
18:38:25.0343 0344	RasAuto         (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
18:38:25.0531 0344	RasAuto - ok
18:38:25.0546 0344	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:38:25.0703 0344	Rasl2tp - ok
18:38:25.0765 0344	RasMan          (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
18:38:25.0937 0344	RasMan - ok
18:38:25.0937 0344	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:38:26.0109 0344	RasPppoe - ok
18:38:26.0140 0344	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
18:38:26.0281 0344	Raspti - ok
18:38:26.0328 0344	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:38:26.0593 0344	Rdbss - ok
18:38:26.0953 0344	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:38:27.0156 0344	RDPCDD - ok
18:38:27.0390 0344	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:38:27.0812 0344	rdpdr - ok
18:38:29.0484 0344	RDPWD           (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
18:38:29.0718 0344	RDPWD - ok
18:38:29.0781 0344	RDSessMgr       (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
18:38:30.0031 0344	RDSessMgr - ok
18:38:30.0046 0344	redbook         (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
18:38:30.0218 0344	redbook - ok
18:38:30.0250 0344	RemoteAccess    (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
18:38:30.0515 0344	RemoteAccess - ok
18:38:30.0593 0344	RemoteRegistry  (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS\system32\regsvc.dll
18:38:30.0781 0344	RemoteRegistry - ok
18:38:30.0796 0344	ROOTMODEM       (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
18:38:30.0968 0344	ROOTMODEM - ok
18:38:31.0140 0344	RpcLocator      (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
18:38:31.0343 0344	RpcLocator - ok
18:38:31.0437 0344	RpcSs           (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
18:38:31.0562 0344	RpcSs - ok
18:38:31.0593 0344	RSVP            (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
18:38:31.0859 0344	RSVP - ok
18:38:31.0890 0344	RTL8023xp       (911e07056b865760c0762f6221145999) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
18:38:32.0484 0344	RTL8023xp - ok
18:38:32.0546 0344	rtl8139         (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
18:38:32.0687 0344	rtl8139 - ok
18:38:32.0750 0344	S3GIGP          (da6c93a04d87987a6464df09337a14af) C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys
18:38:32.0953 0344	S3GIGP - ok
18:38:32.0984 0344	S3LoadSv        (3dfe9f5b3ca0f1e2dd966a6033f66c5b) C:\WINDOWS\system32\S3LoadSv.exe
18:38:33.0062 0344	S3LoadSv - ok
18:38:33.0109 0344	SamSs           (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
18:38:33.0250 0344	SamSs - ok
18:38:33.0281 0344	SCardSvr        (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
18:38:33.0484 0344	SCardSvr - ok
18:38:33.0562 0344	Schedule        (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
18:38:33.0734 0344	Schedule - ok
18:38:33.0750 0344	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
18:38:33.0890 0344	Secdrv - ok
18:38:33.0906 0344	seclogon        (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
18:38:34.0046 0344	seclogon - ok
18:38:34.0046 0344	SENS            (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
18:38:34.0328 0344	SENS - ok
18:38:34.0343 0344	serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
18:38:34.0484 0344	serenum - ok
18:38:34.0484 0344	Serial          (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
18:38:34.0656 0344	Serial - ok
18:38:34.0703 0344	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
18:38:34.0843 0344	Sfloppy - ok
18:38:34.0875 0344	SharedAccess    (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
18:38:35.0078 0344	SharedAccess - ok
18:38:35.0109 0344	ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
18:38:35.0187 0344	ShellHWDetection - ok
18:38:35.0187 0344	Simbad - ok
18:38:35.0203 0344	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
18:38:35.0359 0344	SLIP - ok
18:38:35.0390 0344	snapman         (5583054ef09d13ca953da1fae287d80d) C:\WINDOWS\system32\DRIVERS\snapman.sys
18:38:35.0484 0344	snapman - ok
18:38:35.0484 0344	Sparrow - ok
18:38:35.0515 0344	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
18:38:35.0687 0344	splitter - ok
18:38:35.0703 0344	Spooler         (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
18:38:35.0812 0344	Spooler - ok
18:38:35.0812 0344	sr              (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
18:38:35.0984 0344	sr - ok
18:38:36.0015 0344	srservice       (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
18:38:36.0203 0344	srservice - ok
18:38:36.0250 0344	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
18:38:36.0375 0344	Srv - ok
18:38:36.0390 0344	SSDPSRV         (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
18:38:36.0578 0344	SSDPSRV - ok
18:38:36.0671 0344	Start BT in service (972c24cd7ff2c1ba19a89b990539b0ec) C:\Programme\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
18:38:36.0828 0344	Start BT in service - ok
18:38:36.0859 0344	stisvc          (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
18:38:37.0078 0344	stisvc - ok
18:38:37.0109 0344	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
18:38:37.0250 0344	streamip - ok
18:38:37.0265 0344	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
18:38:37.0406 0344	swenum - ok
18:38:37.0437 0344	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
18:38:37.0578 0344	swmidi - ok
18:38:37.0578 0344	SwPrv - ok
18:38:37.0593 0344	symc810 - ok
18:38:37.0593 0344	symc8xx - ok
18:38:37.0609 0344	sym_hi - ok
18:38:37.0609 0344	sym_u3 - ok
18:38:37.0843 0344	syncagentsrv    (60cd74de7993661649093da9a94987bd) C:\Programme\Gemeinsame Dateien\Acronis\SyncAgent\syncagentsrv.exe
18:38:38.0265 0344	syncagentsrv - ok
18:38:38.0328 0344	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
18:38:38.0500 0344	sysaudio - ok
18:38:38.0531 0344	SysmonLog       (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
18:38:38.0734 0344	SysmonLog - ok
18:38:38.0765 0344	TapiSrv         (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
18:38:38.0921 0344	TapiSrv - ok
18:38:38.0953 0344	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:38:39.0062 0344	Tcpip - ok
18:38:39.0078 0344	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
18:38:39.0203 0344	TDPIPE - ok
18:38:39.0390 0344	tdrpman         (9a33210297ca7019a3c148421940ab98) C:\WINDOWS\system32\DRIVERS\tdrpman.sys
18:38:39.0546 0344	tdrpman - ok
18:38:39.0562 0344	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
18:38:39.0718 0344	TDTCP - ok
18:38:39.0734 0344	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
18:38:39.0921 0344	TermDD - ok
18:38:39.0968 0344	TermService     (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
18:38:40.0156 0344	TermService - ok
18:38:40.0250 0344	Themes          (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
18:38:40.0296 0344	Themes - ok
18:38:40.0343 0344	timounter       (9853eff7fb1af233e05d2bc813fcee8e) C:\WINDOWS\system32\DRIVERS\timntr.sys
18:38:40.0468 0344	timounter - ok
18:38:40.0500 0344	TlntSvr         (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS\system32\tlntsvr.exe
18:38:40.0671 0344	TlntSvr - ok
18:38:40.0671 0344	TosIde - ok
18:38:40.0703 0344	TrkWks          (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
18:38:40.0859 0344	TrkWks - ok
18:38:40.0875 0344	uagp35          (d85938f272d1bcf3db3a31fc0a048928) C:\WINDOWS\system32\DRIVERS\uagp35.sys
18:38:41.0031 0344	uagp35 - ok
18:38:41.0046 0344	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
18:38:41.0203 0344	Udfs - ok
18:38:41.0203 0344	ultra - ok
18:38:41.0234 0344	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
18:38:41.0453 0344	Update - ok
18:38:41.0468 0344	upnphost        (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
18:38:41.0625 0344	upnphost - ok
18:38:41.0640 0344	UPS             (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
18:38:41.0796 0344	UPS - ok
18:38:41.0828 0344	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:38:41.0968 0344	usbccgp - ok
18:38:42.0000 0344	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
18:38:42.0156 0344	usbehci - ok
18:38:42.0171 0344	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
18:38:42.0312 0344	usbhub - ok
18:38:42.0343 0344	usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
18:38:42.0468 0344	usbprint - ok
18:38:42.0484 0344	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
18:38:42.0625 0344	usbscan - ok
18:38:42.0640 0344	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:38:42.0812 0344	USBSTOR - ok
18:38:42.0828 0344	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
18:38:42.0968 0344	usbuhci - ok
18:38:42.0984 0344	VComm           (51750b0539986186c6931fc40d171521) C:\WINDOWS\system32\DRIVERS\VComm.sys
18:38:43.0031 0344	VComm - ok
18:38:43.0031 0344	VcommMgr        (6d9c891c0a761afed1f3609c2e56f2b9) C:\WINDOWS\system32\Drivers\VcommMgr.sys
18:38:43.0078 0344	VcommMgr - ok
18:38:43.0109 0344	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
18:38:43.0250 0344	VgaSave - ok
18:38:43.0265 0344	ViaIde          (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
18:38:43.0390 0344	ViaIde - ok
18:38:43.0406 0344	videX32         (c8ee49fa76eb7c41a9cddfe58151a74e) C:\WINDOWS\system32\DRIVERS\videX32.sys
18:38:43.0515 0344	videX32 - ok
18:38:43.0546 0344	vididr          (3b264e62e5e7d4389db72a9dc29ccd07) C:\WINDOWS\system32\DRIVERS\vididr.sys
18:38:43.0593 0344	vididr - ok
18:38:43.0593 0344	vidsflt61       (7140e9ea599c2e5ffca0e783af9ede2e) C:\WINDOWS\system32\DRIVERS\vsflt61.sys
18:38:43.0640 0344	vidsflt61 - ok
18:38:43.0656 0344	VolSnap         (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
18:38:43.0796 0344	VolSnap - ok
18:38:43.0828 0344	VSS             (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
18:38:44.0046 0344	VSS - ok
18:38:44.0078 0344	W32Time         (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
18:38:44.0234 0344	W32Time - ok
18:38:44.0265 0344	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
18:38:44.0421 0344	Wanarp - ok
18:38:44.0421 0344	WDICA - ok
18:38:44.0453 0344	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
18:38:44.0609 0344	wdmaud - ok
18:38:44.0625 0344	WebClient       (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
18:38:44.0781 0344	WebClient - ok
18:38:44.0828 0344	winmgmt         (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
18:38:44.0984 0344	winmgmt - ok
18:38:45.0015 0344	WmdmPmSN        (051b1bdecd6dee18c771b5d5ec7f044d) C:\WINDOWS\system32\MsPMSNSv.dll
18:38:45.0093 0344	WmdmPmSN - ok
18:38:45.0140 0344	Wmi             (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS\System32\advapi32.dll
18:38:45.0265 0344	Wmi - ok
18:38:45.0296 0344	WmiApSrv        (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
18:38:45.0453 0344	WmiApSrv - ok
18:38:45.0578 0344	WMPNetworkSvc   (d3dbd6e76f4be9bee67eb631488b5f29) C:\Programme\Windows Media Player\WMPNetwk.exe
18:38:45.0875 0344	WMPNetworkSvc - ok
18:38:45.0906 0344	WpdUsb          (c60dc16d4e406810fad54b98dc92d5ec) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
18:38:45.0984 0344	WpdUsb - ok
18:38:46.0015 0344	wscsvc          (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
18:38:46.0156 0344	wscsvc - ok
18:38:46.0171 0344	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
18:38:46.0312 0344	WSTCODEC - ok
18:38:46.0328 0344	wuauserv        (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
18:38:46.0468 0344	wuauserv - ok
18:38:46.0500 0344	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
18:38:46.0578 0344	WudfPf - ok
18:38:46.0609 0344	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
18:38:46.0656 0344	WudfRd - ok
18:38:46.0687 0344	WudfSvc         (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
18:38:46.0781 0344	WudfSvc - ok
18:38:46.0812 0344	WZCSVC          (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
18:38:47.0015 0344	WZCSVC - ok
18:38:47.0031 0344	xfilt           (fcbc27869092850cdb75139f3818653a) C:\WINDOWS\system32\DRIVERS\xfilt.sys
18:38:47.0093 0344	xfilt - ok
18:38:47.0140 0344	xmlprov         (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
18:38:47.0296 0344	xmlprov - ok
18:38:47.0312 0344	MBR (0x1B8)     (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
18:38:47.0734 0344	\Device\Harddisk0\DR0 - ok
18:38:47.0734 0344	MBR (0x1B8)     (65e858a8a0293be11a920b0bc99d695e) \Device\Harddisk1\DR4
18:38:48.0578 0344	\Device\Harddisk1\DR4 - ok
18:38:48.0578 0344	Boot (0x1200)   (422c5b88e509fb7c72f48a4d0fe793ea) \Device\Harddisk0\DR0\Partition0
18:38:48.0578 0344	\Device\Harddisk0\DR0\Partition0 - ok
18:38:48.0609 0344	Boot (0x1200)   (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk0\DR0\Partition1
18:38:48.0609 0344	\Device\Harddisk0\DR0\Partition1 - ok
18:38:48.0640 0344	Boot (0x1200)   (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk0\DR0\Partition2
18:38:48.0640 0344	\Device\Harddisk0\DR0\Partition2 - ok
18:38:48.0640 0344	Boot (0x1200)   (db5916cdcf9f674ff9d731f5641e0df8) \Device\Harddisk1\DR4\Partition0
18:38:48.0640 0344	\Device\Harddisk1\DR4\Partition0 - ok
18:38:48.0656 0344	============================================================
18:38:48.0656 0344	Scan finished
18:38:48.0656 0344	============================================================
18:38:48.0796 0640	Detected object count: 0
18:38:48.0796 0640	Actual detected object count: 0
__________________
Antwort

Themen zu Verschlüsselungstrojaner
anti-malware, antivir, avira, avira antivir, backup, dateien, e-mail, eingefangen, erkannt, explorer, gen, guten, heute, hängen, laufen, malwarebytes, maus, platte, programme, rechner, rescue, schließe, system, windows


« Rechner stürzt willkürlich ab und faehrt wieder runter | Polizei-Trojaner, Trojan:Win32/Weelsof.A »


Ähnliche Themen: Verschlüsselungstrojaner


  1. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 29.10.2012 (3)
  2. (2x) Verschlüsselungstrojaner
    Mülltonne - 27.10.2012 (1)
  3. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 21.08.2012 (23)
  4. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 15.08.2012 (1)
  5. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 30.07.2012 (1)
  6. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 27.07.2012 (1)
  7. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 29.06.2012 (24)
  8. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 24.06.2012 (1)
  9. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 22.06.2012 (21)
  10. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 18.06.2012 (1)
  11. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 18.06.2012 (1)
  12. Verschlüsselungstrojaner!
    Log-Analyse und Auswertung - 16.06.2012 (3)
  13. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 14.06.2012 (5)
  14. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 13.06.2012 (2)
  15. Verschlüsselungstrojaner
    Plagegeister aller Art und deren Bekämpfung - 30.05.2012 (1)
  16. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 24.05.2012 (1)
  17. Verschlüsselungstrojaner
    Log-Analyse und Auswertung - 03.05.2012 (8)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Verschlüsselungstrojaner - Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html Hinweis : Bitte den Virenscanner abstellen bevor du den - Verschlüsselungstrojaner...
Archiv
Du betrachtest: Verschlüsselungstrojaner auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131