![]() |
|
Log-Analyse und Auswertung: BKA Trojaner (und vielleicht andere?)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 | |
/// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | ![]() BKA Trojaner (und vielleicht andere?) Sind diese Policies bewusst gesetzt worden? Zitat:
Downloade dir bitte ![]()
__________________ cheers, Leo |
![]() | #2 |
| ![]() BKA Trojaner (und vielleicht andere?) Nee die sagen mir nichts.
__________________Hier ist die Log von TDSSKiller Code:
ATTFilter 19:21:23.0046 0x0910 TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50 19:21:27.0875 0x0910 ============================================================ 19:21:27.0875 0x0910 Current date / time: 2013/11/21 19:21:27.0875 19:21:27.0875 0x0910 SystemInfo: 19:21:27.0875 0x0910 19:21:27.0875 0x0910 OS Version: 5.1.2600 ServicePack: 3.0 19:21:27.0875 0x0910 Product type: Workstation 19:21:27.0875 0x0910 ComputerName: ***** 19:21:27.0875 0x0910 UserName: ***** 19:21:27.0875 0x0910 Windows directory: C:\WINDOWS 19:21:27.0875 0x0910 System windows directory: C:\WINDOWS 19:21:27.0875 0x0910 Processor architecture: Intel x86 19:21:27.0875 0x0910 Number of processors: 2 19:21:27.0875 0x0910 Page size: 0x1000 19:21:27.0875 0x0910 Boot type: Normal boot 19:21:27.0875 0x0910 ============================================================ 19:21:32.0515 0x0910 KLMD registered as C:\WINDOWS\system32\drivers\19666241.sys 19:21:33.0781 0x0910 System UUID: {CCBA1C57-C6B9-4CC2-B39B-6BBD7D24ED8B} 19:21:37.0859 0x0910 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 19:21:37.0953 0x0910 ============================================================ 19:21:37.0953 0x0910 \Device\Harddisk0\DR0: 19:21:37.0953 0x0910 MBR partitions: 19:21:37.0953 0x0910 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A14BC1 19:21:37.0953 0x0910 ============================================================ 19:21:38.0109 0x0910 C: <-> \Device\Harddisk0\DR0\Partition1 19:21:38.0109 0x0910 ============================================================ 19:21:38.0109 0x0910 Initialize success 19:21:38.0109 0x0910 ============================================================ 19:22:06.0250 0x01a8 ============================================================ 19:22:06.0250 0x01a8 Scan started 19:22:06.0250 0x01a8 Mode: Manual; SigCheck; TDLFS; 19:22:06.0250 0x01a8 ============================================================ 19:22:06.0250 0x01a8 KSN ping started 19:22:08.0687 0x01a8 KSN ping finished: true 19:22:10.0187 0x01a8 ================ Scan system memory ======================== 19:22:10.0187 0x01a8 System memory - ok 19:22:10.0203 0x01a8 ================ Scan services ============================= 19:22:11.0921 0x01a8 Abiosdsk - ok 19:22:11.0937 0x01a8 abp480n5 - ok 19:22:12.0093 0x01a8 [ AC407F1A62C3A300B4F2B5A9F1D55B2C, 31F5FC61B37E22100B3A52A590295A7E827FFC581FA9960C64B9032452AAECED ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys 19:22:23.0671 0x01a8 ACPI - ok 19:22:24.0031 0x01a8 [ 9E1CA3160DAFB159CA14F83B1E317F75, 13B3E897B0E819BF734449416D9EC6EBCAC89538EC69BF48C068593B82D57004 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys 19:22:24.0328 0x01a8 ACPIEC - ok 19:22:24.0531 0x01a8 [ 438F31336B3DC248ABC632F1C8F34A24, 94C1218E7EC2EC6D4870A6FDC118097D7D3A359DA073DCD3A9770F399F830991 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe 19:22:24.0609 0x01a8 AdobeFlashPlayerUpdateSvc - ok 19:22:24.0609 0x01a8 adpu160m - ok 19:22:24.0750 0x01a8 [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys 19:22:25.0000 0x01a8 aec - ok 19:22:25.0125 0x01a8 [ F6B7B1ECD7B41736BDB6FF4B092BCB79, B892C7303E08238C025409D602CB2F58D273B19B81CF04E26EA52A27EE7706DB ] AFD C:\WINDOWS\System32\drivers\afd.sys 19:22:25.0187 0x01a8 AFD - ok 19:22:25.0218 0x01a8 Aha154x - ok 19:22:25.0265 0x01a8 aic78u2 - ok 19:22:25.0265 0x01a8 aic78xx - ok 19:22:25.0343 0x01a8 [ 738D80CC01D7BC7584BE917B7F544394, DCC17AAEF5CDDF52FAAC3CC6904EF421CD595F66318A2370BEE261D5C3A8E340 ] Alerter C:\WINDOWS\system32\alrsvc.dll 19:22:25.0609 0x01a8 Alerter - ok 19:22:25.0703 0x01a8 [ 190CD73D4984F94D823F9444980513E5, 93A32C2495CCA094F768BA707C74DA5C00B8A88A9236DD1A297439A7C2E6C6FA ] ALG C:\WINDOWS\System32\alg.exe 19:22:25.0812 0x01a8 ALG - ok 19:22:25.0828 0x01a8 AliIde - ok 19:22:27.0031 0x01a8 [ 267FC636801EDC5AB28E14036349E3BE, CFEF5DF5F9BE820283376BB86DB3CF6609C02D316A742E17459A2BFA42E724E0 ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys 19:22:28.0140 0x01a8 Ambfilt - ok 19:22:28.0156 0x01a8 amsint - ok 19:22:29.0125 0x01a8 [ 0D1E15010057B8426583A99CB179A6C4, 645C7D27E27AAC4124F7F907374B6A50D07D349B95AA869D7091372BD3AF653B ] AntiVirSchedulerService C:\Programme\Avira\AntiVir Desktop\sched.exe 19:22:29.0515 0x01a8 AntiVirSchedulerService - ok 19:22:29.0890 0x01a8 [ FDE9C7030FB1E9E2715E113EE6A10F90, 541F278D743C34C6D9940FC1250B90674EB88EC429D481012F27817DAB1B557A ] AntiVirService C:\Programme\Avira\AntiVir Desktop\avguard.exe 19:22:30.0078 0x01a8 AntiVirService - ok 19:22:30.0296 0x01a8 [ 30E3850F303EAE5C364782EA78579CC9, 8C94E5A9052F6E794685194EEACB31A174A947D60246908B6A0DEFA081A747A3 ] Apple Mobile Device C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe 19:22:30.0343 0x01a8 Apple Mobile Device - ok 19:22:30.0484 0x01a8 [ D45960BE52C3C610D361977057F98C54, 9186589B502F46B47672CFB8EBD558D51B0F3CBFE4E0DDBA625A4265236518CE ] AppMgmt C:\WINDOWS\System32\appmgmts.dll 19:22:30.0625 0x01a8 AppMgmt - ok 19:22:30.0656 0x01a8 asc - ok 19:22:30.0687 0x01a8 asc3350p - ok 19:22:30.0734 0x01a8 asc3550 - ok 19:22:30.0796 0x01a8 [ 9D8CB58B9A9E177DDD599791A58A654D, B3E645E8817696FA5D5E2255F9328F3B6A2E5FCE91737F4D654FF155DC9851E5 ] AsIO C:\WINDOWS\system32\drivers\AsIO.sys 19:22:30.0828 0x01a8 AsIO - ok 19:22:31.0156 0x01a8 [ 0E5E4957549056E2BF2C49F4F6B601AD, F7F19FDC906B719A3516D30A9B4A2262C8CC5B36B94E3D4195C345EC4610FF2B ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 19:22:31.0218 0x01a8 aspnet_state - ok 19:22:31.0281 0x01a8 [ E67493490466B5F04B58C22D2590E8CA, 5E6B448A26FD735A962703FFB3C61D5A14A0B71CEFA999BA7879F5B05FD5FC73 ] AsUpIO C:\WINDOWS\system32\drivers\AsUpIO.sys 19:22:31.0328 0x01a8 AsUpIO - ok 19:22:31.0390 0x01a8 [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 19:22:31.0656 0x01a8 AsyncMac - ok 19:22:31.0734 0x01a8 [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys 19:22:31.0984 0x01a8 atapi - ok 19:22:32.0000 0x01a8 Atdisk - ok 19:22:32.0062 0x01a8 [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys 19:22:32.0296 0x01a8 Atmarpc - ok 19:22:32.0375 0x01a8 [ 58ED0D5452DF7BE732193E7999C6B9A4, 254E2ECF592DDA2E3E6CA9F6F3E77926E2265586A7937BA95199ED47BCDE69A3 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll 19:22:32.0609 0x01a8 AudioSrv - ok 19:22:32.0687 0x01a8 [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys 19:22:32.0906 0x01a8 audstub - ok 19:22:33.0000 0x01a8 [ FE5C0B6E90EA6E0ECA1259571A13239F, 16FE8D7E8F750045DAD0D243FB69ABE9E5640388C907FA651FB0F38B4E9759BC ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys 19:22:33.0031 0x01a8 avgntflt - ok 19:22:33.0171 0x01a8 [ C0F13672DEA7BDB40A89414AB0411705, 5B0C2391340BEE31CB6D8D7433786EDD48BBCD5D5737A539D4A0A54F37636720 ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys 19:22:33.0218 0x01a8 avipbb - ok 19:22:33.0281 0x01a8 [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys 19:22:33.0312 0x01a8 avkmgr - ok 19:22:33.0390 0x01a8 [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys 19:22:33.0625 0x01a8 Beep - ok 19:22:33.0937 0x01a8 [ D6F603772A789BB3228F310D650B8BD1, A539025C70FD998A9B8703DE05CAE5E99BC721D8852EA561EBC2DD20CB371D2E ] BITS C:\WINDOWS\system32\qmgr.dll 19:22:34.0468 0x01a8 BITS - ok 19:22:34.0843 0x01a8 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Programme\Bonjour\mDNSResponder.exe 19:22:35.0234 0x01a8 Bonjour Service - ok 19:22:35.0312 0x01a8 [ B2CC8D85D27BF10C5FAF5B98C335978E, 96A88DFBC7D3C2215933B5C06E6B0BCB674A81AA6399030FEC602193171C7E38 ] Browser C:\WINDOWS\System32\browser.dll 19:22:35.0390 0x01a8 Browser - ok 19:22:35.0437 0x01a8 [ 92A964547B96D697E5E9ED43B4297F5A, 01A84802B68253FF093EAFED5B85DE716BB85EBD080D92D4814B6FB39286CD24 ] BrScnUsb C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys 19:22:35.0484 0x01a8 BrScnUsb - ok 19:22:35.0531 0x01a8 [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys 19:22:35.0765 0x01a8 cbidf2k - ok 19:22:35.0765 0x01a8 cd20xrnt - ok 19:22:35.0796 0x01a8 [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys 19:22:36.0062 0x01a8 Cdaudio - ok 19:22:36.0140 0x01a8 [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys 19:22:36.0406 0x01a8 Cdfs - ok 19:22:36.0515 0x01a8 [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys 19:22:36.0765 0x01a8 Cdrom - ok 19:22:36.0781 0x01a8 Changer - ok 19:22:36.0796 0x01a8 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E, ACB458E8A11AA2143734A5A0281973D95158E6402A6453F98F9832D1E19B01F9 ] CiSvc C:\WINDOWS\system32\cisvc.exe 19:22:37.0062 0x01a8 CiSvc - ok 19:22:37.0093 0x01a8 [ 778A30ED3C134EB7E406AFC407E9997D, 3E6AD115AB2596EB001BC21AEADDBC75F27C42DB90C986B7AD17743CE631234E ] ClipSrv C:\WINDOWS\system32\clipsrv.exe 19:22:37.0343 0x01a8 ClipSrv - ok 19:22:37.0453 0x01a8 [ 7FA87325900183197BC9710D1CE4C9FA, EFFCB4FDB69A01B019785F203F9779832AF7DE77FCE47B9421BEDC34816C1D82 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 19:22:37.0531 0x01a8 clr_optimization_v2.0.50727_32 - ok 19:22:37.0562 0x01a8 CmdIde - ok 19:22:37.0578 0x01a8 COMSysApp - ok 19:22:37.0625 0x01a8 Cpqarray - ok 19:22:37.0718 0x01a8 [ 611F824E5C703A5A899F84C5F1699E4D, 9EFA5612FE58E9974E4CC13D39D91D7B5DEA3ED66BEFBED3AAE6D2800FD8162A ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll 19:22:38.0000 0x01a8 CryptSvc - ok 19:22:38.0015 0x01a8 dac2w2k - ok 19:22:38.0015 0x01a8 dac960nt - ok 19:22:38.0296 0x01a8 [ D3D765E8455A961AE567B408F767D4F9, 897180595F716C9D1F86E08D976C843D2108B751210C035A09411C52B7E6EEFA ] DcomLaunch C:\WINDOWS\system32\rpcss.dll 19:22:38.0531 0x01a8 DcomLaunch - ok 19:22:38.0656 0x01a8 [ C29A1C9B75BA38FA37F8C44405DEC360, 7476D8BC4380CDE56764B2034AF3741DA4ED00F315E41C9A02B5EAD04374F241 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll 19:22:38.0890 0x01a8 Dhcp - ok 19:22:38.0937 0x01a8 [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys 19:22:39.0187 0x01a8 Disk - ok 19:22:39.0203 0x01a8 dmadmin - ok 19:22:39.0734 0x01a8 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA, 89B0AEE5BE01B9FE4FF2989FF16DB6121721ACDFCE6D9655C0ACD321D8C308BE ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys 19:22:40.0671 0x01a8 dmboot - ok 19:22:40.0796 0x01a8 [ 53720AB12B48719D00E327DA470A619A, 800264866A6267C9000A85D00095D57908D059D737E5F28C9C4049B884C46228 ] dmio C:\WINDOWS\system32\drivers\dmio.sys 19:22:41.0062 0x01a8 dmio - ok 19:22:41.0093 0x01a8 [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys 19:22:41.0328 0x01a8 dmload - ok 19:22:41.0359 0x01a8 [ 25C83FFBBA13B554EB6D59A9B2E2EE78, 9FBD655ED3E9163AE11EC207F283E387EFBA5A23108EC790BAE4846B35E66F16 ] dmserver C:\WINDOWS\System32\dmserver.dll 19:22:41.0656 0x01a8 dmserver - ok 19:22:41.0703 0x01a8 [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys 19:22:41.0968 0x01a8 DMusic - ok 19:22:42.0046 0x01a8 [ 4548494812BA3B416D489E0C6AF8D643, 29FDA5352C731F65816250BC0A4A0B67516F1BCCBD56B527EC54210CFA48A647 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 19:22:42.0093 0x01a8 Dnscache - ok 19:22:42.0203 0x01a8 [ 676E36C4FF5BCEA1900F44182B9723E6, 740CF18BD40E00FEA26CF0E6340C5D18F7D0B4390055FAEEC258B3AA790C4AE9 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll 19:22:42.0500 0x01a8 Dot3svc - ok 19:22:42.0515 0x01a8 dpti2o - ok 19:22:42.0562 0x01a8 [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 19:22:42.0796 0x01a8 drmkaud - ok 19:22:42.0875 0x01a8 [ 4E4F2FDDAB0A0736D7671134DCCE91FB, 8E2C57D1A006856C47CBDD5765A9DD317DB205B26DA8BFC70555A506257A1CD9 ] EapHost C:\WINDOWS\System32\eapsvc.dll 19:22:43.0109 0x01a8 EapHost - ok 19:22:43.0140 0x01a8 [ 877C18558D70587AA7823A1A308AC96B, 6B336A62112988D855513F45153F73F8470C41A448E9B7438B4A8EC1813AABF1 ] ERSvc C:\WINDOWS\System32\ersvc.dll 19:22:43.0390 0x01a8 ERSvc - ok 19:22:43.0578 0x01a8 [ F0A7D59AF279326528715B206669B86C, 2ABEFAA5C2C4A9487F7DBB1A92E65A72073DF9073F4F02083422A60AF49D42A3 ] Eventlog C:\WINDOWS\system32\services.exe 19:22:43.0640 0x01a8 Eventlog - ok 19:22:43.0812 0x01a8 [ ADA7241C16F3F42C7F210539FAD5F3AA, 70CF3FD831AD049D7C11AF0636E12FFC76A198BA05FC745CEB9A48516B9FA99E ] EventSystem C:\WINDOWS\system32\es.dll 19:22:43.0921 0x01a8 EventSystem - ok 19:22:44.0062 0x01a8 [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys 19:22:44.0296 0x01a8 Fastfat - ok 19:22:44.0484 0x01a8 [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll 19:22:44.0609 0x01a8 FastUserSwitchingCompatibility - ok 19:22:44.0796 0x01a8 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys 19:22:45.0046 0x01a8 Fdc - ok 19:22:45.0171 0x01a8 [ B0678A548587C5F1967B0D70BACAD6C1, 7E49910212ED87313F926E4800EA8D34809C287A686CA69B82B79C1A6451F88C ] Fips C:\WINDOWS\system32\drivers\Fips.sys 19:22:45.0437 0x01a8 Fips - ok 19:22:45.0531 0x01a8 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys 19:22:45.0843 0x01a8 Flpydisk - ok 19:22:46.0062 0x01a8 [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys 19:22:46.0406 0x01a8 FltMgr - ok 19:22:46.0875 0x01a8 [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 19:22:46.0953 0x01a8 FontCache3.0.0.0 - ok 19:22:47.0046 0x01a8 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 19:22:47.0437 0x01a8 Fs_Rec - ok 19:22:47.0593 0x01a8 [ 8F1955CE42E1484714B542F341647778, 8EB3F99625F409D3032561E8AB44BEFBFBFBA4EC873C2151C92A5CAAF7F2AA55 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys 19:22:47.0875 0x01a8 Ftdisk - ok 19:22:48.0125 0x01a8 [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 19:22:48.0171 0x01a8 GEARAspiWDM - ok 19:22:48.0562 0x01a8 [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys 19:22:48.0843 0x01a8 Gpc - ok 19:22:49.0437 0x01a8 [ 573C7D0A32852B48F3058CFD8026F511, BC384BBA394AFDCDA1A9ABC858C692AA84A1F0A31AF3DDF7F38D120C027927FB ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 19:22:49.0703 0x01a8 HDAudBus - ok 19:22:50.0328 0x01a8 [ CB66BF85BF599BEFD6C6A57C2E20357F, 55D3A0F9279FF316766F42548FCB61C452942B08A37590C4892DF110BE4E53C6 ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 19:22:50.0718 0x01a8 helpsvc - ok 19:22:50.0796 0x01a8 [ B35DA85E60C0103F2E4104532DA2F12B, E13C9F73DF7713554CB614B36123D75014F5121AA1FC9069733E61758751CBE4 ] HidServ C:\WINDOWS\System32\hidserv.dll 19:22:51.0234 0x01a8 HidServ - ok 19:22:51.0437 0x01a8 [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys 19:22:52.0046 0x01a8 hidusb - ok 19:22:52.0234 0x01a8 [ ED29F14101523A6E0E808107405D452C, B8FA987637787BEECC2EB06D36293DAC355523392B49A8C5A9491EEE961917E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll 19:22:52.0468 0x01a8 hkmsvc - ok 19:22:52.0500 0x01a8 hpn - ok 19:22:52.0734 0x01a8 [ 937031C085718C1C04A9C0864625EC6B, B812A70063750090202D646F466BD7F0377413F74AD109F8097CB2A1FB42466B ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys 19:22:53.0109 0x01a8 HTTP - ok 19:22:53.0312 0x01a8 [ 9E4ADB854CEBCFB81A4B36718FEECD16, 677AB64460775686F8366D6BF35D420A2486C3F07338A00A7C2788A5142B9F08 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll 19:22:53.0718 0x01a8 HTTPFilter - ok 19:22:53.0765 0x01a8 i2omgmt - ok 19:22:53.0781 0x01a8 i2omp - ok 19:22:54.0031 0x01a8 [ E283B97CFBEB86C1D86BAED5F7846A92, 7664F791D08C80DF1E52B34BE69F073AA645610C4BD975F498254807602374AB ] i8042prt C:\WINDOWS\system32\drivers\i8042prt.sys 19:22:54.0468 0x01a8 i8042prt - ok 19:22:58.0640 0x01a8 [ C4018896856A1A1F1F3A0A6EE7206551, DD7F27655E56296E6A5EBFB3B91047201C0D76E6271E1ACE1037DCCC2BFCB6BC ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys 19:23:05.0546 0x01a8 ialm - ok 19:23:06.0234 0x01a8 [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 19:23:07.0015 0x01a8 idsvc - ok 19:23:07.0109 0x01a8 [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys 19:23:07.0343 0x01a8 Imapi - ok 19:23:07.0453 0x01a8 [ D4B413AA210C21E46AEDD2BA5B68D38E, 2309622867AA8FC832A729FA78F48742D4BD6CA0DAFBFB9DDB0772D671E1ED75 ] ImapiService C:\WINDOWS\system32\imapi.exe 19:23:07.0718 0x01a8 ImapiService - ok 19:23:07.0734 0x01a8 ini910u - ok 19:23:11.0500 0x01a8 [ D934B46D095285D8E3EE21F739BB4AD0, 0DA382ECB22DE2BBEAA3BE58A673CD7CED0339926C6B85ABE8CA5EFC0FE1AA79 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys 19:23:19.0046 0x01a8 IntcAzAudAddService - ok 19:23:19.0078 0x01a8 IntelIde - ok 19:23:19.0171 0x01a8 [ 4C7D2750158ED6E7AD642D97BFFAE351, C05E4799752F090DCB632F07F62ADE38D31534621064D269AD535CA0BDFED448 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys 19:23:19.0390 0x01a8 intelppm - ok 19:23:19.0437 0x01a8 [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys 19:23:19.0687 0x01a8 Ip6Fw - ok 19:23:19.0750 0x01a8 [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 19:23:19.0968 0x01a8 IpFilterDriver - ok 19:23:20.0000 0x01a8 [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys 19:23:20.0218 0x01a8 IpInIp - ok 19:23:20.0328 0x01a8 [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys 19:23:20.0562 0x01a8 IpNat - ok 19:23:21.0046 0x01a8 [ C00149A7027081539A66DC5A46695EAD, 51F01CD6B37BA52B3D4DC9CAE3A9FBDDB2FA6FB6A9E779C9157BB056CEC3BEC9 ] iPod Service C:\Programme\iPod\bin\iPodService.exe 19:23:21.0500 0x01a8 iPod Service - ok 19:23:21.0625 0x01a8 [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys 19:23:21.0859 0x01a8 IPSec - ok 19:23:21.0906 0x01a8 [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys 19:23:22.0031 0x01a8 IRENUM - ok 19:23:22.0093 0x01a8 [ 6DFB88F64135C525433E87648BDA30DE, 8233EEFBEF36AAA152F2C55D23D7118F0DE40C9C22EB5D9793405A4770889540 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys 19:23:22.0343 0x01a8 isapnp - ok 19:23:22.0593 0x01a8 [ 80A79264302910C7C24BA7E44267EFEF, 6080C233478350C8E07515D20D2D60C3758C4A65432B04E8C8B816248621A3EF ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe 19:23:22.0703 0x01a8 JavaQuickStarterService - ok 19:23:22.0750 0x01a8 [ 1704D8C4C8807B889E43C649B478A452, E854C90CD301F42BE2520CEDAD35E49DF2D43606CF4EEED861B74882118D04D1 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys 19:23:22.0984 0x01a8 Kbdclass - ok 19:23:23.0015 0x01a8 [ B6D6C117D771C98130497265F26D1882, E79CC4EA5C088F988BA61F80764F9CAD9B78BC56A7E17DD54622C75483BC5DF4 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys 19:23:23.0250 0x01a8 kbdhid - ok 19:23:23.0375 0x01a8 [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys 19:23:23.0609 0x01a8 kmixer - ok 19:23:23.0703 0x01a8 [ C6EBF1D6AD71DF30DB49B8D3287E1368, 09A8F5BCE774BA8881195AB390692048C3B05EDC8C0BF3ACBC673FD391A29D72 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys 19:23:23.0734 0x01a8 KSecDD - ok 19:23:23.0843 0x01a8 [ 41202C42C8D1A4465AB121F806E93F24, 86E2E3CB8591FCDEA91B2FF99FF869C51DDC4D663882CE612B7FB522926DF60E ] LanmanServer C:\WINDOWS\System32\srvsvc.dll 19:23:23.0906 0x01a8 LanmanServer - ok 19:23:24.0062 0x01a8 [ C9B816901C1ABF28BA6C5B6CB65EB75B, CF155F810851D2478F99363A3B788F243A5D446516B6497EDAAA7CBDB8108224 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll 19:23:24.0109 0x01a8 lanmanworkstation - ok 19:23:24.0109 0x01a8 lbrtfdc - ok 19:23:24.0218 0x01a8 [ 636714B7D43C8D0C80449123FD266920, F06F6C7DC49B26EFCAC3570C67BA9BD934F62C6F382DA4DD2AB302C7B970F414 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll 19:23:24.0421 0x01a8 LmHosts - ok 19:23:24.0468 0x01a8 [ B7550A7107281D170CE85524B1488C98, A3854B16A65436BEF6BEDE918B43B3BE8F00D303660DB5831DD376271DC43239 ] Messenger C:\WINDOWS\System32\msgsvc.dll 19:23:24.0703 0x01a8 Messenger - ok 19:23:24.0750 0x01a8 [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys 19:23:24.0953 0x01a8 mnmdd - ok 19:23:25.0015 0x01a8 [ C2F1D365FD96791B037EE504868065D3, 87BD87E08FD00D115524B049F1A3A719AB86557D68968E7090CD0F271F985CAF ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe 19:23:25.0234 0x01a8 mnmsrvc - ok 19:23:25.0312 0x01a8 [ 6FB74EBD4EC57A6F1781DE3852CC3362, 0454509D9A31E0202C08AE17294E2682F227D177A3C73B303E4C8332757AFCA1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys 19:23:25.0546 0x01a8 Modem - ok 19:23:27.0562 0x01a8 [ C7D9F9717916B34C1B00DD4834AF485C, A9512A03E8142C83534189963F90ADA6FA425BD606928C40C3D724177105A658 ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys 19:23:31.0703 0x01a8 Monfilt - ok 19:23:32.0062 0x01a8 [ B24CE8005DEAB254C0251E15CB71D802, 6804A8ABDAD5EC846E7F8077D1EE9BA45D6226ACFF42C70BE3DE7C8980EF9EC4 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys 19:23:32.0484 0x01a8 Mouclass - ok 19:23:32.0765 0x01a8 [ 66A6F73C74E1791464160A7065CE711A, 3C570FA1E8EF976B83759220FE95BAC9D7D48D607F91B113EDE4790D34ACBD46 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys 19:23:33.0125 0x01a8 mouhid - ok 19:23:33.0343 0x01a8 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys 19:23:33.0750 0x01a8 MountMgr - ok 19:23:33.0765 0x01a8 mraid35x - ok 19:23:34.0171 0x01a8 [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys 19:23:34.0640 0x01a8 MRxDAV - ok 19:23:35.0406 0x01a8 [ FB2FCCC70F7174C7BF64F48E96D3ADF4, 484B4DF0A500CAE8AFA4F3A6393615A3963D91C95939025DF1A172C9A67D951D ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 19:23:37.0140 0x01a8 MRxSmb - ok 19:23:37.0609 0x01a8 [ 35A031AF38C55F92D28AA03EE9F12CC9, 97245D204C886EE8DCCC2DEAC80A0E358A7E0C1982F77389DA50DCF091FC9DDC ] MSDTC C:\WINDOWS\system32\msdtc.exe 19:23:37.0859 0x01a8 MSDTC - ok 19:23:38.0078 0x01a8 [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 19:23:38.0531 0x01a8 Msfs - ok 19:23:38.0546 0x01a8 MSIServer - ok 19:23:38.0859 0x01a8 [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 19:23:39.0218 0x01a8 MSKSSRV - ok 19:23:39.0343 0x01a8 [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 19:23:39.0625 0x01a8 MSPCLOCK - ok 19:23:39.0781 0x01a8 [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 19:23:40.0062 0x01a8 MSPQM - ok 19:23:40.0125 0x01a8 [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys 19:23:40.0328 0x01a8 mssmbios - ok 19:23:40.0437 0x01a8 [ D48659BB24C48345D926ECB45C1EBDF5, EDEDE58316827530C25F8085F62AD48EA6D44B0F8AC1917B940F53B02CF72EA6 ] MTsensor C:\WINDOWS\system32\DRIVERS\ASACPI.sys 19:23:40.0484 0x01a8 MTsensor - ok 19:23:40.0578 0x01a8 [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup C:\WINDOWS\system32\drivers\Mup.sys 19:23:40.0625 0x01a8 Mup - ok 19:23:40.0828 0x01a8 [ 46BB15AE2AC7D025D6D2567B876817BD, 102A101B96D1078C98FA0F871C801A9A8538E20E5686AB0C7680B2F6C92B3165 ] napagent C:\WINDOWS\System32\qagentrt.dll 19:23:41.0125 0x01a8 napagent - ok 19:23:41.0281 0x01a8 [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys 19:23:41.0515 0x01a8 NDIS - ok 19:23:41.0562 0x01a8 [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys 19:23:41.0609 0x01a8 NdisTapi - ok 19:23:41.0656 0x01a8 [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys 19:23:41.0921 0x01a8 Ndisuio - ok 19:23:42.0000 0x01a8 [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys 19:23:42.0250 0x01a8 NdisWan - ok 19:23:42.0296 0x01a8 [ 9282BD12DFB069D3889EB3FCC1000A9B, 09A46F1712BD9165068D8E153585FE3E6E5CBF4F1DDEC142115555D3A91AEC09 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 19:23:42.0359 0x01a8 NDProxy - ok 19:23:42.0421 0x01a8 [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys 19:23:42.0671 0x01a8 NetBIOS - ok 19:23:42.0796 0x01a8 [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys 19:23:43.0015 0x01a8 NetBT - ok 19:23:43.0125 0x01a8 [ 8ACE4251BFFD09CE75679FE940E996CC, 81969521B5EAEA09ECA63058BE9697BB69AF2596339CA9DF0CFEDC031DCFDC7E ] NetDDE C:\WINDOWS\system32\netdde.exe 19:23:43.0359 0x01a8 NetDDE - ok 19:23:43.0453 0x01a8 [ 8ACE4251BFFD09CE75679FE940E996CC, 81969521B5EAEA09ECA63058BE9697BB69AF2596339CA9DF0CFEDC031DCFDC7E ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe 19:23:43.0687 0x01a8 NetDDEdsdm - ok 19:23:43.0750 0x01a8 [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] Netlogon C:\WINDOWS\system32\lsass.exe 19:23:43.0953 0x01a8 Netlogon - ok 19:23:44.0125 0x01a8 [ E6D88F1F6745BF00B57E7855A2AB696C, 12A5EDD853600FF5EBF91E127077745AE1E61E66DBC1D4D4306570F171AF4A39 ] Netman C:\WINDOWS\System32\netman.dll 19:23:44.0375 0x01a8 Netman - ok 19:23:44.0515 0x01a8 [ D34612C5D02D026535B3095D620626AE, 1BBCCCBF49EB8807240A77DCB43C25C21682073CC5356594E2C4F53EF36BF657 ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 19:23:44.0625 0x01a8 NetTcpPortSharing - ok 19:23:44.0812 0x01a8 [ 4AA50627B01C0E9C6B4C6BD3AF648F12, D0CABA3CC35F15352EC4A1C70B14299000A168D548EEC24E3B229B19E349FB81 ] Nla C:\WINDOWS\System32\mswsock.dll 19:23:44.0906 0x01a8 Nla - ok 19:23:44.0968 0x01a8 [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 19:23:45.0203 0x01a8 Npfs - ok 19:23:45.0562 0x01a8 [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 19:23:46.0156 0x01a8 Ntfs - ok 19:23:46.0218 0x01a8 [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] NtLmSsp C:\WINDOWS\system32\lsass.exe 19:23:46.0437 0x01a8 NtLmSsp - ok 19:23:46.0750 0x01a8 [ 56AF4064996FA5BAC9C449B1514B4770, 154602EFEC22728503D4ABA025DF711B0F2CFC983F5E3BF25F2A4BCD1AE250EC ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll 19:23:47.0312 0x01a8 NtmsSvc - ok 19:23:47.0343 0x01a8 [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys 19:23:47.0562 0x01a8 Null - ok 19:23:47.0609 0x01a8 [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 19:23:47.0843 0x01a8 NwlnkFlt - ok 19:23:47.0906 0x01a8 [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 19:23:48.0125 0x01a8 NwlnkFwd - ok 19:23:48.0531 0x01a8 [ 1F0E05DFF4F5A833168E49BE1256F002, A858267572033C185293B0FD15B2BFDA679D0771A14C0ADF24461B529DBAD8DF ] odserv C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE 19:23:48.0968 0x01a8 odserv - ok 19:23:49.0093 0x01a8 [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE 19:23:49.0187 0x01a8 ose - ok 19:23:49.0328 0x01a8 [ F84785660305B9B903FB3BCA8BA29837, BDBDE61076800415D98759077E9E039C80B55DBE68E31F8BF44A909C6C3D3276 ] Parport C:\WINDOWS\system32\drivers\Parport.sys 19:23:49.0546 0x01a8 Parport - ok 19:23:49.0578 0x01a8 [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys 19:23:49.0781 0x01a8 PartMgr - ok 19:23:49.0843 0x01a8 [ C2BF987829099A3EAA2CA6A0A90ECB4F, 1DF21EA8E43875CFEECD869407429F82FB449707CFB845718499468E699BAAAA ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys 19:23:50.0046 0x01a8 ParVdm - ok 19:23:50.0125 0x01a8 [ 387E8DEDC343AA2D1EFBC30580273ACD, 5F3E642BDB759777E570ED5B22AC7E93CDCD362708F281657AD7BAB44EDEC802 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys 19:23:50.0359 0x01a8 PCI - ok 19:23:50.0375 0x01a8 PCIDump - ok 19:23:50.0421 0x01a8 [ 59BA86D9A61CBCF4DF8E598C331F5B82, 822D11C5CE77BFD7B2F25350CCBF92B0B9388EEA6D86ED220B768C720976D839 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys 19:23:50.0625 0x01a8 PCIIde - ok 19:23:50.0734 0x01a8 [ A2A966B77D61847D61A3051DF87C8C97, 6CED7CA26DC62B0AAFC83A2E07336DAD25954491201BB8E06103971F3F0B8B51 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys 19:23:50.0953 0x01a8 Pcmcia - ok 19:23:50.0984 0x01a8 PDCOMP - ok 19:23:51.0031 0x01a8 PDFRAME - ok 19:23:51.0062 0x01a8 PDRELI - ok 19:23:51.0093 0x01a8 PDRFRAME - ok 19:23:51.0140 0x01a8 perc2 - ok 19:23:51.0171 0x01a8 perc2hib - ok 19:23:51.0640 0x01a8 [ F0A7D59AF279326528715B206669B86C, 2ABEFAA5C2C4A9487F7DBB1A92E65A72073DF9073F4F02083422A60AF49D42A3 ] PlugPlay C:\WINDOWS\system32\services.exe 19:23:51.0687 0x01a8 PlugPlay - ok 19:23:51.0718 0x01a8 [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] PolicyAgent C:\WINDOWS\system32\lsass.exe 19:23:51.0921 0x01a8 PolicyAgent - ok 19:23:52.0000 0x01a8 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys 19:23:52.0218 0x01a8 PptpMiniport - ok 19:23:52.0265 0x01a8 [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe 19:23:52.0468 0x01a8 ProtectedStorage - ok 19:23:52.0546 0x01a8 [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys 19:23:52.0828 0x01a8 PSched - ok 19:23:52.0890 0x01a8 [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys 19:23:53.0078 0x01a8 Ptilink - ok 19:23:53.0109 0x01a8 ql1080 - ok 19:23:53.0156 0x01a8 Ql10wnt - ok 19:23:53.0171 0x01a8 ql12160 - ok 19:23:53.0203 0x01a8 ql1240 - ok 19:23:53.0234 0x01a8 ql1280 - ok 19:23:53.0265 0x01a8 [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys 19:23:53.0765 0x01a8 RasAcd - ok 19:23:53.0859 0x01a8 [ F5BA6CACCDB66C8F048E867563203246, AFEAD8FC02313F7EBC8F9F39E7ED2868852B480BE3902FA7BD0AFD81492AB243 ] RasAuto C:\WINDOWS\System32\rasauto.dll 19:23:54.0078 0x01a8 RasAuto - ok 19:23:54.0156 0x01a8 [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 19:23:54.0359 0x01a8 Rasl2tp - ok 19:23:54.0500 0x01a8 [ F9A7B66EA345726EDB5862A46B1ECCD5, 5D35429D394D36A1692A7E219BA1A85CD8096FEAE0F90BFE036A63118FEDBF57 ] RasMan C:\WINDOWS\System32\rasmans.dll 19:23:54.0750 0x01a8 RasMan - ok 19:23:54.0812 0x01a8 [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys 19:23:55.0031 0x01a8 RasPppoe - ok 19:23:55.0078 0x01a8 [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys 19:23:55.0312 0x01a8 Raspti - ok 19:23:55.0437 0x01a8 [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys 19:23:55.0656 0x01a8 Rdbss - ok 19:23:55.0687 0x01a8 [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 19:23:55.0953 0x01a8 RDPCDD - ok 19:23:56.0125 0x01a8 [ 15CABD0F7C00C47C70124907916AF3F1, 66B5C978B7FB6359AD8BAC9F568FE9D469E358FEAB07B1F129BA9E85F1DF723E ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys 19:23:56.0375 0x01a8 rdpdr - ok 19:23:56.0484 0x01a8 [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys 19:23:56.0562 0x01a8 RDPWD - ok 19:23:56.0828 0x01a8 [ 263AF18AF0F3DB99F574C95F284CCEC9, 2BFA9952E97EFEB386FC56EC2C125080CD12DAC078DBE43C395CB4D9F22165D3 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe 19:23:57.0093 0x01a8 RDSessMgr - ok 19:23:57.0187 0x01a8 [ ED761D453856F795A7FE056E42C36365, EF026585B33415D8FCE94A9F27D7A4396C7C35C88E06A4CF0FEA702401E8597A ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys 19:23:57.0390 0x01a8 redbook - ok 19:23:57.0437 0x01a8 [ 0E97EC96D6942CEEC2D188CC2EB69A01, D4253B4420BEF19451A55AB91E4834482181A31A31134F6E2AFE05C8E20C81A5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 19:23:57.0687 0x01a8 RemoteAccess - ok 19:23:57.0750 0x01a8 [ E4CD1F3D84E1C2CA0B8CF7501E201593, 649CC0B04F94D407EB6B4C7FDE2C6E4D2B1531307BC67C5775E44D66EF2E4F8A ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll 19:23:57.0968 0x01a8 RemoteRegistry - ok 19:23:58.0046 0x01a8 [ 2A02E21867497DF20B8FC95631395169, D89E2D17ED4E1C727847C0E92D2DF68AEB70BF0B956BD2FE024ED70A961759D2 ] RpcLocator C:\WINDOWS\system32\locator.exe 19:23:58.0296 0x01a8 RpcLocator - ok 19:23:58.0562 0x01a8 [ D3D765E8455A961AE567B408F767D4F9, 897180595F716C9D1F86E08D976C843D2108B751210C035A09411C52B7E6EEFA ] RpcSs C:\WINDOWS\system32\rpcss.dll 19:23:58.0812 0x01a8 RpcSs - ok 19:23:58.0953 0x01a8 [ F9541F3B59DA30423F2F76EF443C07FC, 531FA15BB281D9C93CEEECAF02984EA78669D213E6D43EFF2E11CF522F7A8191 ] RSUSBSTOR C:\WINDOWS\system32\Drivers\RtsUStor.sys 19:23:59.0015 0x01a8 RSUSBSTOR - ok 19:23:59.0140 0x01a8 [ 4BDD71B4B521521499DFD14735C4F398, 7B1498D3C67E56D05B58B7DA319ECB0117C37963AABB0E59B42831C087469DA1 ] RSVP C:\WINDOWS\system32\rsvp.exe 19:23:59.0343 0x01a8 RSVP - ok 19:23:59.0453 0x01a8 [ 89619EF503F949FAE09252A8B883EE11, D410C0BE5E930CABE5523FBE071814500AE9C7B29054DFE98B14904A4A221423 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 19:23:59.0515 0x01a8 RTLE8023xp - ok 19:23:59.0546 0x01a8 [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] SamSs C:\WINDOWS\system32\lsass.exe 19:23:59.0765 0x01a8 SamSs - ok 19:23:59.0859 0x01a8 [ DCEC079FAD95D36C8DD5CB6D779DFE32, F8546552D939A225853A0CE4913701A93738DF02C999D16E141E9A828814BBC6 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe 19:24:00.0062 0x01a8 SCardSvr - ok 19:24:00.0250 0x01a8 [ A050194A44D7FA8D7186ED2F4E8367AE, BCDF56D5A2F9E202DC67E7FE4BCC617BCC0BDFF2D221A621020068B17B2855BB ] Schedule C:\WINDOWS\system32\schedsvc.dll 19:24:00.0500 0x01a8 Schedule - ok 19:24:00.0531 0x01a8 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys 19:24:00.0640 0x01a8 Secdrv - ok 19:24:00.0656 0x01a8 [ BEE4CFD1D48C23B44CF4B974B0B79B2B, DF3B02D713F8A4602BE75F004074D5DF79AFF2D58FF37110B2A6AC29F680758B ] seclogon C:\WINDOWS\System32\seclogon.dll 19:24:00.0890 0x01a8 seclogon - ok 19:24:00.0953 0x01a8 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3, 95D83F054A6610328D56E56CD948A6618C590231853E56FC20E7557DB61384A4 ] SENS C:\WINDOWS\system32\sens.dll 19:24:01.0187 0x01a8 SENS - ok 19:24:01.0250 0x01a8 [ CF24EB4F0412C82BCD1F4F35A025E31D, B74CB094126F5C23F601C34D53B2DF5BE3E5918230AC9DCFCFFA8E66B3A0FA25 ] Serial C:\WINDOWS\system32\drivers\Serial.sys 19:24:01.0468 0x01a8 Serial - ok 19:24:01.0546 0x01a8 [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys 19:24:01.0765 0x01a8 Sfloppy - ok 19:24:02.0000 0x01a8 [ CAD058D5F8B889A87CA3EB3CF624DCEF, A7CDCF44261D1F4D820927253EA8EBB63714B7BAFF8B08DE073507D9A7EEA5BB ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 19:24:02.0437 0x01a8 SharedAccess - ok 19:24:02.0546 0x01a8 [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 19:24:02.0625 0x01a8 ShellHWDetection - ok 19:24:02.0640 0x01a8 Simbad - ok 19:24:02.0656 0x01a8 Sparrow - ok 19:24:02.0765 0x01a8 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys 19:24:02.0984 0x01a8 splitter - ok 19:24:03.0062 0x01a8 [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler C:\WINDOWS\system32\spoolsv.exe 19:24:03.0109 0x01a8 Spooler - ok 19:24:03.0187 0x01a8 [ 50FA898F8C032796D3B1B9951BB5A90F, 1C86273EC19EB96D6DB9CE6670C00683B77C99C42CC2F7E75BC50872B93446B1 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys 19:24:03.0312 0x01a8 sr - ok 19:24:03.0437 0x01a8 [ FE77A85495065F3AD59C5C65B6C54182, EB4BAF992F961B2FD5D24BFCB6BCB2142BC32933139A818835FEAB190E4283BB ] srservice C:\WINDOWS\system32\srsvc.dll 19:24:03.0562 0x01a8 srservice - ok 19:24:03.0828 0x01a8 [ 9B390283569EA58D43D2586032B892F5, FADC0AD9D8F715290F02A6A59B284A6AD53C5BD13933B1D3ECC03C558C9D5885 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys 19:24:04.0140 0x01a8 Srv - ok 19:24:04.0406 0x01a8 [ 6A09C136CF33547820CB963E4D5AAF9E, 9D2EACD8B3CEAFEF237D9DB9155DD9C86EC20C51CF2F8EB0DA81767C05CE6A7D ] SSCBFS3 C:\WINDOWS\system32\DRIVERS\sscbfs3.sys 19:24:04.0500 0x01a8 SSCBFS3 - ok 19:24:04.0593 0x01a8 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500, 2971D7D45D6942D310D47DBD19B9680D2D29527E79B86133C72217FD29259465 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 19:24:04.0718 0x01a8 SSDPSRV - ok 19:24:04.0828 0x01a8 [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 19:24:04.0859 0x01a8 ssmdrv - ok 19:24:05.0140 0x01a8 [ BC2C5985611C5356B24AEB370953DED9, 15CBAB8166827DC098E2B16AB6F49A1441A4CB52AF3588F0AD964CAB596DFE10 ] stisvc C:\WINDOWS\system32\wiaservc.dll 19:24:05.0609 0x01a8 stisvc - ok 19:24:05.0671 0x01a8 [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys 19:24:05.0890 0x01a8 swenum - ok 19:24:05.0968 0x01a8 [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys 19:24:06.0171 0x01a8 swmidi - ok 19:24:06.0187 0x01a8 SwPrv - ok 19:24:06.0203 0x01a8 symc810 - ok 19:24:06.0218 0x01a8 symc8xx - ok 19:24:06.0250 0x01a8 sym_hi - ok 19:24:06.0281 0x01a8 sym_u3 - ok 19:24:06.0343 0x01a8 [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys 19:24:06.0593 0x01a8 sysaudio - ok 19:24:06.0687 0x01a8 [ 2903FFFA2523926D6219428040DCE6B9, 4F13181931B0499F6C3F08138054DBCD1F84CB9806999A9172B80DE79D446F62 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe 19:24:06.0953 0x01a8 SysmonLog - ok 19:24:07.0140 0x01a8 [ 05903CAC4B98908D55EA5774775B382E, AC3666CBD894D737874A5998DC7F46A0A51A7B23B1835FC735B9AD503A2191CC ] TapiSrv C:\WINDOWS\System32\tapisrv.dll 19:24:07.0406 0x01a8 TapiSrv - ok 19:24:07.0656 0x01a8 [ AD978A1B783B5719720CFF204B666C8E, FA50A3664522C58E1637C06731B9CB9D56FF14F0A5F8AB496A1945585E8A2C16 ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys 19:24:07.0953 0x01a8 Tcpip - ok 19:24:08.0000 0x01a8 [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys 19:24:08.0203 0x01a8 TDPIPE - ok 19:24:08.0234 0x01a8 [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys 19:24:08.0453 0x01a8 TDTCP - ok 19:24:12.0984 0x01a8 [ 56BD31FA4B12F838871F5A00EADB8959, 5DA7B0CEA629F0524B757CA7DEEA198571461EC6385D486E566D7E8237705432 ] TeamViewer8 C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe 19:24:27.0093 0x01a8 TeamViewer8 - ok 19:24:27.0171 0x01a8 [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys 19:24:27.0390 0x01a8 TermDD - ok 19:24:27.0609 0x01a8 [ B7DE02C863D8F5A005A7BF375375A6A4, 6DE05A7B28CA5A78D58536347FC47F15883EEDBEF487CEA0117CC280FC582DCC ] TermService C:\WINDOWS\System32\termsrv.dll 19:24:27.0937 0x01a8 TermService - ok 19:24:28.0125 0x01a8 [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] Themes C:\WINDOWS\System32\shsvcs.dll 19:24:28.0171 0x01a8 Themes - ok 19:24:28.0250 0x01a8 [ 03681A1CE77F51586903869A5AB1DEAB, E2EC0A481412166B654682C2F3D953E96E757466135CBD2D813B967EDB13C721 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe 19:24:28.0390 0x01a8 TlntSvr - ok 19:24:28.0390 0x01a8 TosIde - ok 19:24:28.0468 0x01a8 [ 626504572B175867F30F3215C04B3E2F, 47E87CE9BC666D5CB5953C5D497DC00A7CC28F8EC0A064B3E47700279C5C4B91 ] TrkWks C:\WINDOWS\system32\trkwks.dll 19:24:28.0718 0x01a8 TrkWks - ok 19:24:28.0812 0x01a8 [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys 19:24:29.0031 0x01a8 Udfs - ok 19:24:29.0062 0x01a8 ultra - ok 19:24:29.0343 0x01a8 [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys 19:24:29.0859 0x01a8 Update - ok 19:24:30.0000 0x01a8 [ 1DFD8975D8C89214B98D9387C1125B49, 0B6B268487C8E45E9B86BF4A0A9DB669E0E45D600DE3C82B63F9986CA9E01082 ] upnphost C:\WINDOWS\System32\upnphost.dll 19:24:30.0156 0x01a8 upnphost - ok 19:24:30.0203 0x01a8 [ 9B11E6118958E63E1FEF129466E2BDA7, 97168BCE3F4A9BB9E6500F05E34851FB957B219C598944FADC28AC0011C0503B ] UPS C:\WINDOWS\System32\ups.exe 19:24:30.0406 0x01a8 UPS - ok 19:24:30.0468 0x01a8 [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys 19:24:30.0531 0x01a8 usbccgp - ok 19:24:30.0562 0x01a8 [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys 19:24:30.0609 0x01a8 usbehci - ok 19:24:30.0703 0x01a8 [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys 19:24:30.0921 0x01a8 usbhub - ok 19:24:30.0968 0x01a8 [ A717C8721046828520C9EDF31288FC00, 1530BBE832EDBB0974AD89D723A03FF7A0094B368992D73C2C3E62A181DF1E0A ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys 19:24:31.0203 0x01a8 usbprint - ok 19:24:31.0234 0x01a8 [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 19:24:31.0453 0x01a8 usbstor - ok 19:24:31.0500 0x01a8 [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys 19:24:31.0734 0x01a8 usbuhci - ok 19:24:31.0781 0x01a8 [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave C:\WINDOWS\System32\drivers\vga.sys 19:24:32.0000 0x01a8 VgaSave - ok 19:24:32.0015 0x01a8 ViaIde - ok 19:24:32.0078 0x01a8 [ A5A712F4E880874A477AF790B5186E1D, FE885ED04C3EAFC379787F836738A2769E43D07CF52DD917D90C38E001957A5E ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys 19:24:32.0296 0x01a8 VolSnap - ok 19:24:32.0500 0x01a8 [ 68F106273BE29E7B7EF8266977268E78, 1488AB7A654EBC94C73E1D494067189ACB95BC233980110CAC4C0297CDC4115A ] VSS C:\WINDOWS\System32\vssvc.exe 19:24:32.0640 0x01a8 VSS - ok 19:24:32.0765 0x01a8 [ 7B353059E665F8B7AD2BBEAEF597CF45, 84A4311F18A4B8DCB364741DEA7D18E2363F19564B2EF25214965DC729527068 ] W32Time C:\WINDOWS\system32\w32time.dll 19:24:33.0031 0x01a8 W32Time - ok 19:24:33.0109 0x01a8 [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys 19:24:33.0328 0x01a8 Wanarp - ok 19:24:33.0343 0x01a8 WDICA - ok 19:24:33.0406 0x01a8 [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys 19:24:33.0625 0x01a8 wdmaud - ok 19:24:33.0703 0x01a8 [ 81727C9873E3905A2FFC1EBD07265002, 6AC2383A1DCBB7FA3DB90FBB874C8E1819F5B7492717FF41E303EFC7BF72F93E ] WebClient C:\WINDOWS\System32\webclnt.dll 19:24:33.0921 0x01a8 WebClient - ok 19:24:34.0203 0x01a8 [ 6F3F3973D97714CC5F906A19FE883729, 7817118BE94D0F6FAE0F9CE48AD70FFE0AEF886CCE09C666768FAB61047F992F ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll 19:24:34.0406 0x01a8 winmgmt - ok 19:24:34.0531 0x01a8 [ C51B4A5C05A5475708E3C81C7765B71D, F776D2680BD3407307B7072626F78460361FC5BC38623C9E16F394D300AB25DE ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll 19:24:34.0578 0x01a8 WmdmPmSN - ok 19:24:35.0062 0x01a8 [ 57FA31A965D8FC3172641A93618FBE9E, 99F71CB79290C2B34926C96263672AB8A476A5660C98228770C52E5962DEE74A ] Wmi C:\WINDOWS\System32\advapi32.dll 19:24:35.0656 0x01a8 Wmi - ok 19:24:35.0828 0x01a8 [ 93908111BA57A6E60EC2FA2DE202105C, F395F25F18D15C6B9FEDB45FD31E10295FFE5517E2BC86ACAC11904EA0664BE2 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe 19:24:36.0093 0x01a8 WmiApSrv - ok 19:24:36.0703 0x01a8 [ BF05650BB7DF5E9EBDD25974E22403BB, AF173D89B768CFC7AB03DFADD4F049CAC40AC59A0C9208AF5AB92CB368983077 ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe 19:24:37.0781 0x01a8 WMPNetworkSvc - ok 19:24:37.0875 0x01a8 [ 300B3E84FAF1A5C1F791C159BA28035D, 0194856BDF94C1F274AF70AD558290ACDACDDEA331BD66FEB8E167ABD1E36786 ] wscsvc C:\WINDOWS\system32\wscsvc.dll 19:24:38.0109 0x01a8 wscsvc - ok 19:24:38.0156 0x01a8 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085, A1DB8909FA73337DB613D01824945485186654364A4DF129B8CB913CF87D1D2E ] wuauserv C:\WINDOWS\system32\wuauserv.dll 19:24:38.0375 0x01a8 wuauserv - ok 19:24:38.0437 0x01a8 [ F15FEAFFFBB3644CCC80C5DA584E6311, 79B3E9AF35976CE49921E9BEA3BA3B4A8AF762FD3F284B62954038B5FFB32471 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys 19:24:38.0500 0x01a8 WudfPf - ok 19:24:38.0609 0x01a8 [ 28B524262BCE6DE1F7EF9F510BA3985B, AEFF02B899801A63CBB262757C3D4369E38BFF0690BD085DE60E873DFBE3C3F4 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys 19:24:38.0656 0x01a8 WudfRd - ok 19:24:38.0703 0x01a8 [ 05231C04253C5BC30B26CBAAE680ED89, 5C03C2D7E0B573646D32F4093E2FF2C3BA391C39F5BA37D67F69D38E357FCC3D ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll 19:24:38.0750 0x01a8 WudfSvc - ok 19:24:39.0078 0x01a8 [ C4F109C005F6725162D2D12CA751E4A7, AC996B44338328BDD4442FE48406F286A64526F0EC77BE00A19FA7FDB0407CFE ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll 19:24:39.0640 0x01a8 WZCSVC - ok 19:24:39.0734 0x01a8 [ 0ADA34871A2E1CD2CAAFED1237A47750, 45BEF8649078BD74C1A347B5F2D3A1958E5A7DCD6C6BA8A2E0CAD277A929C64E ] xmlprov C:\WINDOWS\System32\xmlprov.dll 19:24:39.0984 0x01a8 xmlprov - ok 19:24:40.0000 0x01a8 ================ Scan global =============================== 19:24:40.0078 0x01a8 [ 2C60091CA5F67C3032EAB3B30390C27F, 9E205C8E67F4B61FCFA2A82AA1968D522C3B6410D7075BE813F7F1564D61632E ] C:\WINDOWS\system32\basesrv.dll 19:24:40.0312 0x01a8 [ 935B583E1E780BDB75718EAFD9667366, A0D5B616DE7D1F16D203CE96F258B931B493B375305809ECD3B47EE99294E451 ] C:\WINDOWS\system32\winsrv.dll 19:24:40.0578 0x01a8 [ 935B583E1E780BDB75718EAFD9667366, A0D5B616DE7D1F16D203CE96F258B931B493B375305809ECD3B47EE99294E451 ] C:\WINDOWS\system32\winsrv.dll 19:24:40.0703 0x01a8 [ F0A7D59AF279326528715B206669B86C, 2ABEFAA5C2C4A9487F7DBB1A92E65A72073DF9073F4F02083422A60AF49D42A3 ] C:\WINDOWS\system32\services.exe 19:24:40.0718 0x01a8 [ Global ] - ok 19:24:40.0718 0x01a8 ================ Scan MBR ================================== 19:24:40.0750 0x01a8 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0 19:24:41.0296 0x01a8 \Device\Harddisk0\DR0 - detected TDSS File System ( 1 ) 19:24:41.0296 0x01a8 \Device\Harddisk0\DR0 ( TDSS File System ) - warning 19:24:43.0734 0x01a8 ================ Scan VBR ================================== 19:24:43.0937 0x01a8 [ 650A24AB0A5EFC0C944CE0F12CC50755 ] \Device\Harddisk0\DR0\Partition1 19:24:43.0937 0x01a8 \Device\Harddisk0\DR0\Partition1 - ok 19:24:43.0937 0x01a8 Waiting for KSN requests completion. In queue: 34 19:24:44.0937 0x01a8 Waiting for KSN requests completion. In queue: 34 19:24:45.0984 0x01a8 AV detected via SS1: Avira Desktop, 13.6.0.778, enabled, outofdate 19:24:46.0343 0x01a8 Win FW state via NFM: enabled 19:24:48.0734 0x01a8 ============================================================ 19:24:48.0734 0x01a8 Scan finished 19:24:48.0734 0x01a8 ============================================================ 19:24:48.0968 0x0c90 Detected object count: 1 19:24:48.0968 0x0c90 Actual detected object count: 1 19:25:06.0968 0x0c90 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user 19:25:06.0968 0x0c90 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip 19:26:01.0593 0x0fd0 Deinitialize success |
![]() |
Themen zu BKA Trojaner (und vielleicht andere?) |
abgeschaltet, adware/installcore.gen, adware/yontoo.gen2, andere, benutzerkonto, bka trojaner, exp/pidief.aik.1, große, laufe, popup, quarantäne, tr/reveton.a.2326, tr/shakat.o.70, tr/spy.bebloh.u, tr/spy.zbot.ajoumea, trojaner |