Der Bluescreen ist jetzt weg. Aber nach 5sek im abgesicherten Modus gibts einen Neustart. Code:
23:23:48.0265 0428 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
23:23:48.0296 0428 ============================================================
23:23:48.0296 0428 Current date / time: 2012/07/26 23:23:48.0296
23:23:48.0296 0428 SystemInfo:
23:23:48.0296 0428
23:23:48.0296 0428 OS Version: 5.1.2600 ServicePack: 3.0
23:23:48.0296 0428 Product type: Workstation
23:23:48.0296 0428 ComputerName: ***
23:23:48.0296 0428 UserName: ***
23:23:48.0296 0428 Windows directory: C:\WINDOWS
23:23:48.0296 0428 System windows directory: C:\WINDOWS
23:23:48.0296 0428 Processor architecture: Intel x86
23:23:48.0296 0428 Number of processors: 2
23:23:48.0296 0428 Page size: 0x1000
23:23:48.0296 0428 Boot type: Normal boot
23:23:48.0296 0428 ============================================================
23:23:48.0593 0428 Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3901, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:23:48.0593 0428 Drive \Device\Harddisk1\DR1 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
23:23:48.0593 0428 Drive \Device\Harddisk2\DR2 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x1C042, SectorsPerTrack: 0x13, TracksPerCylinder: 0xE0, Type 'K0', Flags 0x00000050
23:23:48.0593 0428 ============================================================
23:23:48.0593 0428 \Device\Harddisk0\DR0:
23:23:48.0593 0428 MBR partitions:
23:23:48.0593 0428 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1000, BlocksNum 0xDF93800
23:23:48.0593 0428 \Device\Harddisk1\DR1:
23:23:48.0593 0428 MBR partitions:
23:23:48.0593 0428 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x1000, BlocksNum 0x61AB800
23:23:48.0593 0428 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x61AC800, BlocksNum 0x61AA800
23:23:48.0593 0428 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0xC358000, BlocksNum 0x66C1800
23:23:48.0593 0428 \Device\Harddisk2\DR2:
23:23:48.0593 0428 MBR partitions:
23:23:48.0593 0428 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xFFFE000
23:23:48.0593 0428 \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0xFFFF800, BlocksNum 0x6B09000
23:23:48.0593 0428 \Device\Harddisk2\DR2\Partition2: MBR, Type 0x7, StartLBA 0x16B09800, BlocksNum 0x66BC000
23:23:48.0593 0428 ============================================================
23:23:48.0593 0428 C: <-> \Device\Harddisk0\DR0\Partition0
23:23:48.0609 0428 D: <-> \Device\Harddisk1\DR1\Partition0
23:23:48.0625 0428 E: <-> \Device\Harddisk2\DR2\Partition0
23:23:48.0625 0428 F: <-> \Device\Harddisk1\DR1\Partition1
23:23:48.0625 0428 G: <-> \Device\Harddisk1\DR1\Partition2
23:23:48.0625 0428 H: <-> \Device\Harddisk2\DR2\Partition1
23:23:48.0656 0428 I: <-> \Device\Harddisk2\DR2\Partition2
23:23:48.0656 0428 ============================================================
23:23:48.0656 0428 Initialize success
23:23:48.0656 0428 ============================================================
23:24:09.0203 3172 ============================================================
23:24:09.0203 3172 Scan started
23:24:09.0203 3172 Mode: Manual; SigCheck; TDLFS;
23:24:09.0203 3172 ============================================================
23:24:09.0281 3172 Abiosdsk - ok
23:24:09.0281 3172 abp480n5 - ok
23:24:09.0281 3172 ACPI (ac407f1a62c3a300b4f2b5a9f1d55b2c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
23:24:09.0687 3172 ACPI - ok
23:24:09.0687 3172 ACPIEC (9e1ca3160dafb159ca14f83b1e317f75) C:\WINDOWS\system32\drivers\ACPIEC.sys
23:24:09.0750 3172 ACPIEC - ok
23:24:09.0750 3172 adpu160m - ok
23:24:09.0765 3172 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
23:24:09.0828 3172 aec - ok
23:24:09.0828 3172 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
23:24:09.0843 3172 AFD - ok
23:24:09.0843 3172 Aha154x - ok
23:24:09.0859 3172 aic78u2 - ok
23:24:09.0859 3172 aic78xx - ok
23:24:09.0859 3172 Alerter (738d80cc01d7bc7584be917b7f544394) C:\WINDOWS\system32\alrsvc.dll
23:24:09.0921 3172 Alerter - ok
23:24:09.0921 3172 ALG (190cd73d4984f94d823f9444980513e5) C:\WINDOWS\System32\alg.exe
23:24:09.0953 3172 ALG - ok
23:24:09.0953 3172 AliIde - ok
23:24:10.0000 3172 Ambfilt (f6af59d6eee5e1c304f7f73706ad11d8) C:\WINDOWS\system32\drivers\Ambfilt.sys
23:24:10.0062 3172 Ambfilt - ok
23:24:10.0093 3172 amsint - ok
23:24:10.0093 3172 AntiVirSchedulerService (466a0d95960dad3222c896d2cea99993) C:\Programme\Avira\AntiVir Desktop\sched.exe
23:24:10.0109 3172 AntiVirSchedulerService - ok
23:24:10.0109 3172 AntiVirService (a489be6bb0aa1ff406b488b60542314b) C:\Programme\Avira\AntiVir Desktop\avguard.exe
23:24:10.0109 3172 AntiVirService - ok
23:24:10.0125 3172 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
23:24:10.0125 3172 Apple Mobile Device - ok
23:24:10.0125 3172 AppMgmt (d45960be52c3c610d361977057f98c54) C:\WINDOWS\System32\appmgmts.dll
23:24:10.0171 3172 AppMgmt - ok
23:24:10.0171 3172 asc - ok
23:24:10.0171 3172 asc3350p - ok
23:24:10.0171 3172 asc3550 - ok
23:24:10.0187 3172 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
23:24:10.0187 3172 aspnet_state - ok
23:24:10.0203 3172 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
23:24:10.0250 3172 AsyncMac - ok
23:24:10.0265 3172 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\drivers\atapi.sys
23:24:10.0328 3172 atapi - ok
23:24:10.0328 3172 Atdisk - ok
23:24:10.0343 3172 Ati HotKey Poller (88f1cb6714b9b59cf0ef68356cbefbaa) C:\WINDOWS\system32\Ati2evxx.exe
23:24:10.0359 3172 Ati HotKey Poller - ok
23:24:10.0375 3172 ATI Smart (613e7ada3279f7ad20588b919c223481) C:\WINDOWS\system32\ati2sgag.exe
23:24:10.0390 3172 ATI Smart ( UnsignedFile.Multi.Generic ) - warning
23:24:10.0390 3172 ATI Smart - detected UnsignedFile.Multi.Generic (1)
23:24:10.0500 3172 ati2mtag (2f24aff9e8409821aafa005d3706b583) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
23:24:10.0562 3172 ati2mtag - ok
23:24:10.0593 3172 AtiHdmiService (1e82f05cff41316bcaa513909d99a004) C:\WINDOWS\system32\drivers\AtiHdmi.sys
23:24:10.0593 3172 AtiHdmiService - ok
23:24:10.0609 3172 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
23:24:10.0656 3172 Atmarpc - ok
23:24:10.0671 3172 AudioSrv (58ed0d5452df7be732193e7999c6b9a4) C:\WINDOWS\System32\audiosrv.dll
23:24:10.0718 3172 AudioSrv - ok
23:24:10.0718 3172 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
23:24:10.0781 3172 audstub - ok
23:24:10.0781 3172 avgntflt (d5541f0afb767e85fc412fc609d96a74) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
23:24:10.0812 3172 avgntflt - ok
23:24:10.0828 3172 avipbb (7d967a682d4694df7fa57d63a2db01fe) C:\WINDOWS\system32\DRIVERS\avipbb.sys
23:24:10.0828 3172 avipbb - ok
23:24:10.0843 3172 avkmgr (53e56450da16a1a7f0d002f511113f67) C:\WINDOWS\system32\DRIVERS\avkmgr.sys
23:24:10.0843 3172 avkmgr - ok
23:24:10.0843 3172 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
23:24:10.0906 3172 Beep - ok
23:24:10.0921 3172 BITS (d6f603772a789bb3228f310d650b8bd1) C:\WINDOWS\system32\qmgr.dll
23:24:11.0000 3172 BITS - ok
23:24:11.0000 3172 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Programme\Bonjour\mDNSResponder.exe
23:24:11.0015 3172 Bonjour Service - ok
23:24:11.0015 3172 Browser (b42057f06bbb98b31876c0b3f2b54e33) C:\WINDOWS\System32\browser.dll
23:24:11.0078 3172 Browser - ok
23:24:11.0078 3172 catchme - ok
23:24:11.0078 3172 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
23:24:11.0140 3172 cbidf2k - ok
23:24:11.0140 3172 cd20xrnt - ok
23:24:11.0140 3172 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
23:24:11.0203 3172 Cdaudio - ok
23:24:11.0203 3172 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
23:24:11.0265 3172 Cdfs - ok
23:24:11.0281 3172 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
23:24:11.0343 3172 Cdrom - ok
23:24:11.0343 3172 cerc6 - ok
23:24:11.0343 3172 Changer - ok
23:24:11.0343 3172 CiSvc (28e3040d1f1ca2008cd6b29dfebc9a5e) C:\WINDOWS\system32\cisvc.exe
23:24:11.0390 3172 CiSvc - ok
23:24:11.0406 3172 ClipSrv (778a30ed3c134eb7e406afc407e9997d) C:\WINDOWS\system32\clipsrv.exe
23:24:11.0468 3172 ClipSrv - ok
23:24:11.0468 3172 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
23:24:11.0484 3172 clr_optimization_v2.0.50727_32 - ok
23:24:11.0500 3172 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
23:24:11.0515 3172 clr_optimization_v4.0.30319_32 - ok
23:24:11.0515 3172 CmdIde - ok
23:24:11.0515 3172 COMSysApp - ok
23:24:11.0515 3172 Cpqarray - ok
23:24:11.0515 3172 CryptSvc (611f824e5c703a5a899f84c5f1699e4d) C:\WINDOWS\System32\cryptsvc.dll
23:24:11.0578 3172 CryptSvc - ok
23:24:11.0578 3172 dac2w2k - ok
23:24:11.0578 3172 dac960nt - ok
23:24:11.0593 3172 DcomLaunch (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\system32\rpcss.dll
23:24:11.0593 3172 DcomLaunch - ok
23:24:11.0609 3172 Dhcp (c29a1c9b75ba38fa37f8c44405dec360) C:\WINDOWS\System32\dhcpcsvc.dll
23:24:11.0656 3172 Dhcp - ok
23:24:11.0671 3172 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
23:24:11.0718 3172 Disk - ok
23:24:11.0734 3172 dmadmin - ok
23:24:11.0750 3172 dmboot (0dcfc8395a99fecbb1ef771cec7fe4ea) C:\WINDOWS\system32\drivers\dmboot.sys
23:24:11.0828 3172 dmboot - ok
23:24:11.0828 3172 dmio (53720ab12b48719d00e327da470a619a) C:\WINDOWS\system32\drivers\dmio.sys
23:24:11.0890 3172 dmio - ok
23:24:11.0890 3172 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
23:24:11.0953 3172 dmload - ok
23:24:11.0953 3172 dmserver (25c83ffbba13b554eb6d59a9b2e2ee78) C:\WINDOWS\System32\dmserver.dll
23:24:12.0000 3172 dmserver - ok
23:24:12.0015 3172 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
23:24:12.0062 3172 DMusic - ok
23:24:12.0078 3172 Dnscache (407f3227ac618fd1ca54b335b083de07) C:\WINDOWS\System32\dnsrslvr.dll
23:24:12.0078 3172 Dnscache - ok
23:24:12.0093 3172 Dot3svc (676e36c4ff5bcea1900f44182b9723e6) C:\WINDOWS\System32\dot3svc.dll
23:24:12.0156 3172 Dot3svc - ok
23:24:12.0156 3172 dpti2o - ok
23:24:12.0156 3172 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
23:24:12.0203 3172 drmkaud - ok
23:24:12.0218 3172 EapHost (4e4f2fddab0a0736d7671134dcce91fb) C:\WINDOWS\System32\eapsvc.dll
23:24:12.0265 3172 EapHost - ok
23:24:12.0281 3172 eprdrv (5c33b1e67a33993c3125a6a7e44a435e) C:\WINDOWS\System32\drivers\eprdrv.SYS
23:24:12.0281 3172 eprdrv ( UnsignedFile.Multi.Generic ) - warning
23:24:12.0281 3172 eprdrv - detected UnsignedFile.Multi.Generic (1)
23:24:12.0281 3172 ERSvc (877c18558d70587aa7823a1a308ac96b) C:\WINDOWS\System32\ersvc.dll
23:24:12.0343 3172 ERSvc - ok
23:24:12.0343 3172 Eventlog (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:24:12.0359 3172 Eventlog - ok
23:24:12.0359 3172 EventSystem (af4f6b5739d18ca7972ab53e091cbc74) C:\WINDOWS\system32\es.dll
23:24:12.0375 3172 EventSystem - ok
23:24:12.0375 3172 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
23:24:12.0437 3172 Fastfat - ok
23:24:12.0437 3172 FastUserSwitchingCompatibility (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:24:12.0453 3172 FastUserSwitchingCompatibility - ok
23:24:12.0453 3172 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
23:24:12.0515 3172 Fdc - ok
23:24:12.0515 3172 Fips (b0678a548587c5f1967b0d70bacad6c1) C:\WINDOWS\system32\drivers\Fips.sys
23:24:12.0578 3172 Fips - ok
23:24:12.0578 3172 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
23:24:12.0640 3172 Flpydisk - ok
23:24:12.0640 3172 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
23:24:12.0703 3172 FltMgr - ok
23:24:12.0703 3172 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
23:24:12.0718 3172 FontCache3.0.0.0 - ok
23:24:12.0718 3172 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:24:12.0781 3172 Fs_Rec - ok
23:24:12.0781 3172 FTDIBUS (47b9cf937ac479046da289bd5a769ce9) C:\WINDOWS\system32\drivers\ftdibus.sys
23:24:12.0796 3172 FTDIBUS - ok
23:24:12.0796 3172 Ftdisk (8f1955ce42e1484714b542f341647778) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
23:24:12.0859 3172 Ftdisk - ok
23:24:12.0859 3172 FTSER2K (216b9a2191676034999785c7f94fa5d6) C:\WINDOWS\system32\drivers\ftser2k.sys
23:24:12.0875 3172 FTSER2K - ok
23:24:12.0875 3172 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
23:24:12.0875 3172 GEARAspiWDM - ok
23:24:12.0890 3172 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
23:24:12.0937 3172 Gpc - ok
23:24:12.0968 3172 Hardlock (d95554949082fd29a04d351b58396718) C:\WINDOWS\system32\drivers\hardlock.sys
23:24:13.0015 3172 Hardlock - ok
23:24:13.0015 3172 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
23:24:13.0078 3172 HDAudBus - ok
23:24:13.0078 3172 helpsvc (cb66bf85bf599befd6c6a57c2e20357f) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
23:24:13.0140 3172 helpsvc - ok
23:24:13.0140 3172 HidServ - ok
23:24:13.0140 3172 hkmsvc (ed29f14101523a6e0e808107405d452c) C:\WINDOWS\System32\kmsvc.dll
23:24:13.0203 3172 hkmsvc - ok
23:24:13.0203 3172 hpn - ok
23:24:13.0218 3172 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
23:24:13.0218 3172 HTTP - ok
23:24:13.0218 3172 HTTPFilter (9e4adb854cebcfb81a4b36718feecd16) C:\WINDOWS\System32\w3ssl.dll
23:24:13.0281 3172 HTTPFilter - ok
23:24:13.0281 3172 i2omgmt - ok
23:24:13.0281 3172 i2omp - ok
23:24:13.0281 3172 i8042prt (e283b97cfbeb86c1d86baed5f7846a92) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
23:24:13.0343 3172 i8042prt - ok
23:24:13.0359 3172 iastor (d483687eace0c065ee772481a96e05f5) C:\WINDOWS\system32\drivers\iastor.sys
23:24:13.0375 3172 iastor - ok
23:24:13.0390 3172 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
23:24:13.0437 3172 idsvc - ok
23:24:13.0437 3172 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
23:24:13.0500 3172 Imapi - ok
23:24:13.0515 3172 ImapiService (d4b413aa210c21e46aedd2ba5b68d38e) C:\WINDOWS\system32\imapi.exe
23:24:13.0562 3172 ImapiService - ok
23:24:13.0562 3172 ini910u - ok
23:24:13.0703 3172 IntcAzAudAddService (f9bb9063a6557098dbaf7396e026c922) C:\WINDOWS\system32\drivers\RtkHDAud.sys
23:24:13.0781 3172 IntcAzAudAddService - ok
23:24:13.0812 3172 IntelIde - ok
23:24:13.0812 3172 intelppm (4c7d2750158ed6e7ad642d97bffae351) C:\WINDOWS\system32\DRIVERS\intelppm.sys
23:24:13.0875 3172 intelppm - ok
23:24:13.0875 3172 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
23:24:13.0937 3172 Ip6Fw - ok
23:24:13.0937 3172 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:24:13.0984 3172 IpFilterDriver - ok
23:24:14.0000 3172 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
23:24:14.0046 3172 IpInIp - ok
23:24:14.0062 3172 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
23:24:14.0109 3172 IpNat - ok
23:24:14.0140 3172 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Programme\iPod\bin\iPodService.exe
23:24:14.0156 3172 iPod Service - ok
23:24:14.0156 3172 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
23:24:14.0218 3172 IPSec - ok
23:24:14.0218 3172 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
23:24:14.0250 3172 IRENUM - ok
23:24:14.0250 3172 isapnp (6dfb88f64135c525433e87648bda30de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
23:24:14.0312 3172 isapnp - ok
23:24:14.0328 3172 JavaQuickStarterService (c2c1660ddcc9bd67eb98d6d5f91c107f) C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
23:24:14.0328 3172 JavaQuickStarterService - ok
23:24:14.0328 3172 Kbdclass (1704d8c4c8807b889e43c649b478a452) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
23:24:14.0390 3172 Kbdclass - ok
23:24:14.0390 3172 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
23:24:14.0453 3172 kmixer - ok
23:24:14.0453 3172 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
23:24:14.0468 3172 KSecDD - ok
23:24:14.0468 3172 L1e (101457d884e3dd4636baefb9b7e7d3f3) C:\WINDOWS\system32\DRIVERS\l1e51x86.sys
23:24:14.0484 3172 L1e - ok
23:24:14.0484 3172 LanmanServer (2bbdcb79900990f0716dfcb714e72de7) C:\WINDOWS\System32\srvsvc.dll
23:24:14.0500 3172 LanmanServer - ok
23:24:14.0500 3172 lanmanworkstation (1869b14b06b44b44af70548e1ea3303f) C:\WINDOWS\System32\wkssvc.dll
23:24:14.0515 3172 lanmanworkstation - ok
23:24:14.0515 3172 lbrtfdc - ok
23:24:14.0515 3172 LcSvrAdm (99f271176da4fe58df111d96811e26e3) C:\ElsaWin\bin\LcSvrAdm.exe
23:24:14.0515 3172 LcSvrAdm ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0515 3172 LcSvrAdm - detected UnsignedFile.Multi.Generic (1)
23:24:14.0562 3172 LcSvrAuf (ca2605d4114063b2c5b1ecdabf6ef0b1) C:\ElsaWin\bin\LcSvrAuf.exe
23:24:14.0578 3172 LcSvrAuf ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0578 3172 LcSvrAuf - detected UnsignedFile.Multi.Generic (1)
23:24:14.0593 3172 LcSvrDba (b52272c663ac43edebe165ce0deaa3aa) C:\ElsaWin\bin\LcSvrDba.exe
23:24:14.0593 3172 LcSvrDba ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0593 3172 LcSvrDba - detected UnsignedFile.Multi.Generic (1)
23:24:14.0609 3172 LcSvrHis (d36ef60e54e9358913f6fde465d9bbbd) C:\ElsaWin\bin\LcSvrHis.exe
23:24:14.0609 3172 LcSvrHis ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0609 3172 LcSvrHis - detected UnsignedFile.Multi.Generic (1)
23:24:14.0625 3172 LcSvrPAS (48e03714b1cec5ac335406a96acc8c8c) C:\ElsaWin\bin\LcSvrPas.exe
23:24:14.0625 3172 LcSvrPAS ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0625 3172 LcSvrPAS - detected UnsignedFile.Multi.Generic (1)
23:24:14.0640 3172 LcSvrSaz (e302c2b1fb2fe552efefacd6bde3d58d) C:\ElsaWin\bin\LcSvrSaz.exe
23:24:14.0640 3172 LcSvrSaz ( UnsignedFile.Multi.Generic ) - warning
23:24:14.0640 3172 LcSvrSaz - detected UnsignedFile.Multi.Generic (1)
23:24:14.0671 3172 LmHosts (636714b7d43c8d0c80449123fd266920) C:\WINDOWS\System32\lmhsvc.dll
23:24:14.0718 3172 LmHosts - ok
23:24:14.0718 3172 MBAMProtector (6dfe7f2e8e8a337263aa5c92a215f161) C:\WINDOWS\system32\drivers\mbam.sys
23:24:14.0734 3172 MBAMProtector - ok
23:24:14.0750 3172 MBAMService (43683e970f008c93c9429ef428147a54) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
23:24:14.0765 3172 MBAMService - ok
23:24:14.0765 3172 Messenger (b7550a7107281d170ce85524b1488c98) C:\WINDOWS\System32\msgsvc.dll
23:24:14.0828 3172 Messenger - ok
23:24:14.0828 3172 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
23:24:14.0890 3172 mnmdd - ok
23:24:14.0890 3172 mnmsrvc (c2f1d365fd96791b037ee504868065d3) C:\WINDOWS\system32\mnmsrvc.exe
23:24:14.0953 3172 mnmsrvc - ok
23:24:14.0953 3172 Modem (6fb74ebd4ec57a6f1781de3852cc3362) C:\WINDOWS\system32\drivers\Modem.sys
23:24:15.0015 3172 Modem - ok
23:24:15.0046 3172 Monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\Monfilt.sys
23:24:15.0093 3172 Monfilt - ok
23:24:15.0093 3172 Mouclass (b24ce8005deab254c0251e15cb71d802) C:\WINDOWS\system32\DRIVERS\mouclass.sys
23:24:15.0156 3172 Mouclass - ok
23:24:15.0156 3172 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
23:24:15.0218 3172 MountMgr - ok
23:24:15.0218 3172 mraid35x - ok
23:24:15.0234 3172 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
23:24:15.0281 3172 MRxDAV - ok
23:24:15.0296 3172 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:24:15.0328 3172 MRxSmb - ok
23:24:15.0328 3172 MSDTC (35a031af38c55f92d28aa03ee9f12cc9) C:\WINDOWS\system32\msdtc.exe
23:24:15.0390 3172 MSDTC - ok
23:24:15.0390 3172 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
23:24:15.0453 3172 Msfs - ok
23:24:15.0453 3172 MSIServer - ok
23:24:15.0453 3172 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
23:24:15.0515 3172 MSKSSRV - ok
23:24:15.0515 3172 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
23:24:15.0562 3172 MSPCLOCK - ok
23:24:15.0562 3172 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
23:24:15.0625 3172 MSPQM - ok
23:24:15.0625 3172 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
23:24:15.0687 3172 mssmbios - ok
23:24:15.0687 3172 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
23:24:15.0687 3172 MTsensor - ok
23:24:15.0703 3172 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
23:24:15.0718 3172 Mup - ok
23:24:15.0718 3172 napagent (46bb15ae2ac7d025d6d2567b876817bd) C:\WINDOWS\System32\qagentrt.dll
23:24:15.0781 3172 napagent - ok
23:24:15.0796 3172 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
23:24:15.0859 3172 NDIS - ok
23:24:15.0859 3172 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:24:15.0875 3172 NdisTapi - ok
23:24:15.0875 3172 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
23:24:15.0921 3172 Ndisuio - ok
23:24:15.0937 3172 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:24:16.0000 3172 NdisWan - ok
23:24:16.0000 3172 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
23:24:16.0015 3172 NDProxy - ok
23:24:16.0015 3172 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
23:24:16.0062 3172 NetBIOS - ok
23:24:16.0078 3172 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
23:24:16.0140 3172 NetBT - ok
23:24:16.0140 3172 NetDDE (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:24:16.0203 3172 NetDDE - ok
23:24:16.0203 3172 NetDDEdsdm (8ace4251bffd09ce75679fe940e996cc) C:\WINDOWS\system32\netdde.exe
23:24:16.0265 3172 NetDDEdsdm - ok
23:24:16.0265 3172 Netlogon (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:24:16.0312 3172 Netlogon - ok
23:24:16.0328 3172 Netman (e6d88f1f6745bf00b57e7855a2ab696c) C:\WINDOWS\System32\netman.dll
23:24:16.0375 3172 Netman - ok
23:24:16.0390 3172 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
23:24:16.0406 3172 NetTcpPortSharing - ok
23:24:16.0421 3172 Nla (f1b67b6b0751ae0e6e964b02821206a3) C:\WINDOWS\System32\mswsock.dll
23:24:16.0421 3172 Nla - ok
23:24:16.0421 3172 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
23:24:16.0484 3172 Npfs - ok
23:24:16.0500 3172 NSHE (f8e396f5e703d7a8f37d90f59c776268) C:\WINDOWS\system32\Drivers\NSHE.SYS
23:24:16.0500 3172 NSHE ( UnsignedFile.Multi.Generic ) - warning
23:24:16.0500 3172 NSHE - detected UnsignedFile.Multi.Generic (1)
23:24:16.0515 3172 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
23:24:16.0593 3172 Ntfs - ok
23:24:16.0593 3172 NtLmSsp (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:24:16.0640 3172 NtLmSsp - ok
23:24:16.0656 3172 NtmsSvc (56af4064996fa5bac9c449b1514b4770) C:\WINDOWS\system32\ntmssvc.dll
23:24:16.0734 3172 NtmsSvc - ok
23:24:16.0734 3172 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
23:24:16.0781 3172 Null - ok
23:24:16.0796 3172 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
23:24:16.0843 3172 NwlnkFlt - ok
23:24:16.0843 3172 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
23:24:16.0906 3172 NwlnkFwd - ok
23:24:16.0906 3172 Parport (f84785660305b9b903fb3bca8ba29837) C:\WINDOWS\system32\drivers\Parport.sys
23:24:16.0968 3172 Parport - ok
23:24:16.0968 3172 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
23:24:17.0031 3172 PartMgr - ok
23:24:17.0031 3172 ParVdm (c2bf987829099a3eaa2ca6a0a90ecb4f) C:\WINDOWS\system32\drivers\ParVdm.sys
23:24:17.0078 3172 ParVdm - ok
23:24:17.0093 3172 PCI (387e8dedc343aa2d1efbc30580273acd) C:\WINDOWS\system32\DRIVERS\pci.sys
23:24:17.0140 3172 PCI - ok
23:24:17.0140 3172 PCIDump - ok
23:24:17.0156 3172 PCIIde - ok
23:24:17.0156 3172 Pcmcia (a2a966b77d61847d61a3051df87c8c97) C:\WINDOWS\system32\drivers\Pcmcia.sys
23:24:17.0218 3172 Pcmcia - ok
23:24:17.0218 3172 PDCOMP - ok
23:24:17.0218 3172 PDFRAME - ok
23:24:17.0218 3172 PDRELI - ok
23:24:17.0218 3172 PDRFRAME - ok
23:24:17.0218 3172 perc2 - ok
23:24:17.0218 3172 perc2hib - ok
23:24:17.0234 3172 PlugPlay (a3edbe9053889fb24ab22492472b39dc) C:\WINDOWS\system32\services.exe
23:24:17.0234 3172 PlugPlay - ok
23:24:17.0234 3172 PolicyAgent (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:24:17.0296 3172 PolicyAgent - ok
23:24:17.0296 3172 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
23:24:17.0359 3172 PptpMiniport - ok
23:24:17.0359 3172 ProtectedStorage (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:24:17.0406 3172 ProtectedStorage - ok
23:24:17.0421 3172 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
23:24:17.0468 3172 PSched - ok
23:24:17.0484 3172 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
23:24:17.0531 3172 Ptilink - ok
23:24:17.0531 3172 ql1080 - ok
23:24:17.0546 3172 Ql10wnt - ok
23:24:17.0546 3172 ql12160 - ok
23:24:17.0546 3172 ql1240 - ok
23:24:17.0546 3172 ql1280 - ok
23:24:17.0546 3172 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:24:17.0609 3172 RasAcd - ok
23:24:17.0609 3172 RasAuto (f5ba6caccdb66c8f048e867563203246) C:\WINDOWS\System32\rasauto.dll
23:24:17.0671 3172 RasAuto - ok
23:24:17.0671 3172 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
23:24:17.0734 3172 Rasl2tp - ok
23:24:17.0734 3172 RasMan (f9a7b66ea345726edb5862a46b1eccd5) C:\WINDOWS\System32\rasmans.dll
23:24:17.0796 3172 RasMan - ok
23:24:17.0796 3172 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:24:17.0859 3172 RasPppoe - ok
23:24:17.0859 3172 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
23:24:17.0906 3172 Raspti - ok
23:24:17.0921 3172 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:24:17.0984 3172 Rdbss - ok
23:24:17.0984 3172 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
23:24:18.0031 3172 RDPCDD - ok
23:24:18.0046 3172 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
23:24:18.0109 3172 rdpdr - ok
23:24:18.0109 3172 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
23:24:18.0125 3172 RDPWD - ok
23:24:18.0140 3172 RDSessMgr (263af18af0f3db99f574c95f284ccec9) C:\WINDOWS\system32\sessmgr.exe
23:24:18.0187 3172 RDSessMgr - ok
23:24:18.0203 3172 redbook (ed761d453856f795a7fe056e42c36365) C:\WINDOWS\system32\DRIVERS\redbook.sys
23:24:18.0250 3172 redbook - ok
23:24:18.0265 3172 RemoteAccess (0e97ec96d6942ceec2d188cc2eb69a01) C:\WINDOWS\System32\mprdim.dll
23:24:18.0312 3172 RemoteAccess - ok
23:24:18.0328 3172 RemoteRegistry (e4cd1f3d84e1c2ca0b8cf7501e201593) C:\WINDOWS\system32\regsvc.dll
23:24:18.0375 3172 RemoteRegistry - ok
23:24:18.0375 3172 RpcLocator (2a02e21867497df20b8fc95631395169) C:\WINDOWS\system32\locator.exe
23:24:18.0437 3172 RpcLocator - ok
23:24:18.0453 3172 RpcSs (3127afbf2c1ed0ab14a1bbb7aaecb85b) C:\WINDOWS\System32\rpcss.dll
23:24:18.0468 3172 RpcSs - ok
23:24:18.0468 3172 RSVP (4bdd71b4b521521499dfd14735c4f398) C:\WINDOWS\system32\rsvp.exe
23:24:18.0531 3172 RSVP - ok
23:24:18.0531 3172 SamSs (afb8261b56cba0d86aeb6df682af9785) C:\WINDOWS\system32\lsass.exe
23:24:18.0578 3172 SamSs - ok
23:24:18.0593 3172 SCardSvr (dcec079fad95d36c8dd5cb6d779dfe32) C:\WINDOWS\System32\SCardSvr.exe
23:24:18.0656 3172 SCardSvr - ok
23:24:18.0656 3172 Schedule (a050194a44d7fa8d7186ed2f4e8367ae) C:\WINDOWS\system32\schedsvc.dll
23:24:18.0718 3172 Schedule - ok
23:24:18.0718 3172 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
23:24:18.0750 3172 Secdrv - ok
23:24:18.0750 3172 seclogon (bee4cfd1d48c23b44cf4b974b0b79b2b) C:\WINDOWS\System32\seclogon.dll
23:24:18.0812 3172 seclogon - ok
23:24:18.0812 3172 SENS (2aac9b6ed9eddffb721d6452e34d67e3) C:\WINDOWS\system32\sens.dll
23:24:18.0859 3172 SENS - ok
23:24:18.0875 3172 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
23:24:18.0921 3172 serenum - ok
23:24:18.0921 3172 Serial (cf24eb4f0412c82bcd1f4f35a025e31d) C:\WINDOWS\system32\DRIVERS\serial.sys
23:24:18.0984 3172 Serial - ok
23:24:18.0984 3172 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
23:24:19.0046 3172 Sfloppy - ok
23:24:19.0062 3172 SharedAccess (cad058d5f8b889a87ca3eb3cf624dcef) C:\WINDOWS\System32\ipnathlp.dll
23:24:19.0109 3172 SharedAccess - ok
23:24:19.0125 3172 ShellHWDetection (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:24:19.0125 3172 ShellHWDetection - ok
23:24:19.0125 3172 Simbad - ok
23:24:19.0140 3172 simdrv (fdf871ba2ae7332f5b57726fe012c949) C:\WINDOWS\System32\drivers\simdrv.SYS
23:24:19.0140 3172 simdrv ( UnsignedFile.Multi.Generic ) - warning
23:24:19.0140 3172 simdrv - detected UnsignedFile.Multi.Generic (1)
23:24:19.0140 3172 SkypeUpdate (ea396139541706b4b433641d62ea53ce) C:\Programme\Skype\Updater\Updater.exe
23:24:19.0156 3172 SkypeUpdate - ok
23:24:19.0156 3172 Sparrow - ok
23:24:19.0156 3172 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
23:24:19.0218 3172 splitter - ok
23:24:19.0218 3172 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
23:24:19.0234 3172 Spooler - ok
23:24:19.0234 3172 sr (50fa898f8c032796d3b1b9951bb5a90f) C:\WINDOWS\system32\DRIVERS\sr.sys
23:24:19.0265 3172 sr - ok
23:24:19.0265 3172 srservice (fe77a85495065f3ad59c5c65b6c54182) C:\WINDOWS\system32\srsvc.dll
23:24:19.0296 3172 srservice - ok
23:24:19.0312 3172 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
23:24:19.0328 3172 Srv - ok
23:24:19.0343 3172 SSDPSRV (4df5b05dfaec29e13e1ed6f6ee12c500) C:\WINDOWS\System32\ssdpsrv.dll
23:24:19.0375 3172 SSDPSRV - ok
23:24:19.0375 3172 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
23:24:19.0375 3172 ssmdrv - ok
23:24:19.0390 3172 stisvc (bc2c5985611c5356b24aeb370953ded9) C:\WINDOWS\system32\wiaservc.dll
23:24:19.0453 3172 stisvc - ok
23:24:19.0453 3172 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
23:24:19.0500 3172 swenum - ok
23:24:19.0515 3172 SwitchBoard (f577910a133a592234ebaad3f3afa258) C:\Programme\Gemeinsame Dateien\Adobe\SwitchBoard\SwitchBoard.exe
23:24:19.0546 3172 SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
23:24:19.0546 3172 SwitchBoard - detected UnsignedFile.Multi.Generic (1)
23:24:19.0546 3172 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
23:24:19.0593 3172 swmidi - ok
23:24:19.0593 3172 SwPrv - ok
23:24:19.0609 3172 symc810 - ok
23:24:19.0609 3172 symc8xx - ok
23:24:19.0609 3172 sym_hi - ok
23:24:19.0609 3172 sym_u3 - ok
23:24:19.0609 3172 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
23:24:19.0671 3172 sysaudio - ok
23:24:19.0671 3172 SysmonLog (2903fffa2523926d6219428040dce6b9) C:\WINDOWS\system32\smlogsvc.exe
23:24:19.0734 3172 SysmonLog - ok
23:24:19.0750 3172 TapiSrv (05903cac4b98908d55ea5774775b382e) C:\WINDOWS\System32\tapisrv.dll
23:24:19.0796 3172 TapiSrv - ok
23:24:19.0812 3172 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
23:24:19.0828 3172 Tcpip - ok
23:24:19.0843 3172 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
23:24:19.0890 3172 TDPIPE - ok
23:24:19.0890 3172 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
23:24:19.0953 3172 TDTCP - ok
23:24:19.0953 3172 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
23:24:20.0015 3172 TermDD - ok
23:24:20.0031 3172 TermService (b7de02c863d8f5a005a7bf375375a6a4) C:\WINDOWS\System32\termsrv.dll
23:24:20.0078 3172 TermService - ok
23:24:20.0093 3172 Themes (2db7d303c36ddd055215052f118e8e75) C:\WINDOWS\System32\shsvcs.dll
23:24:20.0093 3172 Themes - ok
23:24:20.0093 3172 TlntSvr (03681a1ce77f51586903869a5ab1deab) C:\WINDOWS\system32\tlntsvr.exe
23:24:20.0140 3172 TlntSvr - ok
23:24:20.0140 3172 TosIde - ok
23:24:20.0156 3172 Transbase (79bbcb1d8c674ae8977dfd80689982e9) C:\BMWgroup\ETKLokal\transbase\tbmux32.exe
23:24:20.0156 3172 Transbase ( UnsignedFile.Multi.Generic ) - warning
23:24:20.0156 3172 Transbase - detected UnsignedFile.Multi.Generic (1)
23:24:20.0156 3172 TrkWks (626504572b175867f30f3215c04b3e2f) C:\WINDOWS\system32\trkwks.dll
23:24:20.0218 3172 TrkWks - ok
23:24:20.0218 3172 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
23:24:20.0265 3172 Udfs - ok
23:24:20.0281 3172 ultra - ok
23:24:20.0281 3172 UMWdf (c81b8635dee0d3ef5f64b3dd643023a5) C:\WINDOWS\system32\wdfmgr.exe
23:24:20.0281 3172 UMWdf - ok
23:24:20.0296 3172 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
23:24:20.0359 3172 Update - ok
23:24:20.0375 3172 upnphost (1dfd8975d8c89214b98d9387c1125b49) C:\WINDOWS\System32\upnphost.dll
23:24:20.0406 3172 upnphost - ok
23:24:20.0421 3172 UPS (9b11e6118958e63e1fef129466e2bda7) C:\WINDOWS\System32\ups.exe
23:24:20.0468 3172 UPS - ok
23:24:20.0484 3172 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\WINDOWS\system32\Drivers\usbaapl.sys
23:24:20.0484 3172 USBAAPL - ok
23:24:20.0500 3172 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
23:24:20.0546 3172 usbehci - ok
23:24:20.0546 3172 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
23:24:20.0609 3172 usbhub - ok
23:24:20.0609 3172 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
23:24:20.0671 3172 usbprint - ok
23:24:20.0671 3172 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
23:24:20.0734 3172 usbscan - ok
23:24:20.0734 3172 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
23:24:20.0796 3172 USBSTOR - ok
23:24:20.0796 3172 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
23:24:20.0843 3172 usbuhci - ok
23:24:20.0843 3172 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
23:24:20.0906 3172 VgaSave - ok
23:24:20.0906 3172 ViaIde - ok
23:24:20.0906 3172 VolSnap (a5a712f4e880874a477af790b5186e1d) C:\WINDOWS\system32\drivers\VolSnap.sys
23:24:20.0968 3172 VolSnap - ok
23:24:20.0984 3172 VSGate (8b885516295a394a1341c9b711792ce9) C:\ElsaWin\bin\VSgate.exe
23:24:20.0984 3172 VSGate ( UnsignedFile.Multi.Generic ) - warning
23:24:20.0984 3172 VSGate - detected UnsignedFile.Multi.Generic (1)
23:24:20.0984 3172 VSS (68f106273be29e7b7ef8266977268e78) C:\WINDOWS\System32\vssvc.exe
23:24:21.0031 3172 VSS - ok
23:24:21.0031 3172 W32Time (7b353059e665f8b7ad2bbeaef597cf45) C:\WINDOWS\system32\w32time.dll
23:24:21.0093 3172 W32Time - ok
23:24:21.0093 3172 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:24:21.0156 3172 Wanarp - ok
23:24:21.0156 3172 WDICA - ok
23:24:21.0156 3172 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
23:24:21.0218 3172 wdmaud - ok
23:24:21.0218 3172 WebClient (81727c9873e3905a2ffc1ebd07265002) C:\WINDOWS\System32\webclnt.dll
23:24:21.0281 3172 WebClient - ok
23:24:21.0281 3172 WinDriver6 (135b5fb324982b47758410ed5440137d) C:\WINDOWS\system32\drivers\windrvr6.sys
23:24:21.0296 3172 WinDriver6 ( UnsignedFile.Multi.Generic ) - warning
23:24:21.0296 3172 WinDriver6 - detected UnsignedFile.Multi.Generic (1)
23:24:21.0296 3172 winmgmt (6f3f3973d97714cc5f906a19fe883729) C:\WINDOWS\system32\wbem\WMIsvc.dll
23:24:21.0359 3172 winmgmt - ok
23:24:21.0359 3172 WmdmPmSN (a477391b7a8b0a0daabadb17cf533a4b) C:\WINDOWS\system32\MsPMSNSv.dll
23:24:21.0375 3172 WmdmPmSN - ok
23:24:21.0390 3172 Wmi (ffa4d901d46d07a5bab2d8307fbb51a6) C:\WINDOWS\System32\advapi32.dll
23:24:21.0406 3172 Wmi - ok
23:24:21.0406 3172 WmiApSrv (93908111ba57a6e60ec2fa2de202105c) C:\WINDOWS\system32\wbem\wmiapsrv.exe
23:24:21.0468 3172 WmiApSrv - ok
23:24:21.0484 3172 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
23:24:21.0515 3172 WPFFontCache_v0400 - ok
23:24:21.0531 3172 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
23:24:21.0578 3172 WS2IFSL - ok
23:24:21.0578 3172 wscsvc (300b3e84faf1a5c1f791c159ba28035d) C:\WINDOWS\system32\wscsvc.dll
23:24:21.0640 3172 wscsvc - ok
23:24:21.0640 3172 wuauserv (7b4fe05202aa6bf9f4dfd0e6a0d8a085) C:\WINDOWS\system32\wuauserv.dll
23:24:21.0687 3172 wuauserv - ok
23:24:21.0703 3172 WZCSVC (c4f109c005f6725162d2d12ca751e4a7) C:\WINDOWS\System32\wzcsvc.dll
23:24:21.0765 3172 WZCSVC - ok
23:24:21.0781 3172 xmlprov (0ada34871a2e1cd2caafed1237a47750) C:\WINDOWS\System32\xmlprov.dll
23:24:21.0828 3172 xmlprov - ok
23:24:21.0843 3172 MBR (0x1B8) (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk0\DR0
23:24:22.0015 3172 \Device\Harddisk0\DR0 - ok
23:24:22.0015 3172 MBR (0x1B8) (72b8ce41af0de751c946802b3ed844b4) \Device\Harddisk1\DR1
23:24:22.0203 3172 \Device\Harddisk1\DR1 - ok
23:24:22.0203 3172 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk2\DR2
23:24:22.0265 3172 \Device\Harddisk2\DR2 - ok
23:24:22.0265 3172 Boot (0x1200) (9d6895478d6a81655a11bdede8578a30) \Device\Harddisk0\DR0\Partition0
23:24:22.0265 3172 \Device\Harddisk0\DR0\Partition0 - ok
23:24:22.0265 3172 Boot (0x1200) (f5b6984bb7afd51c80905183dd755c97) \Device\Harddisk1\DR1\Partition0
23:24:22.0265 3172 \Device\Harddisk1\DR1\Partition0 - ok
23:24:22.0265 3172 Boot (0x1200) (b0d8725293918211c3210ddc71efa1cb) \Device\Harddisk1\DR1\Partition1
23:24:22.0265 3172 \Device\Harddisk1\DR1\Partition1 - ok
23:24:22.0281 3172 Boot (0x1200) (143e4f55735dbe7f76dae87cb4058c3d) \Device\Harddisk1\DR1\Partition2
23:24:22.0281 3172 \Device\Harddisk1\DR1\Partition2 - ok
23:24:22.0281 3172 Boot (0x1200) (ad4eee93c653464dcab383442694eb74) \Device\Harddisk2\DR2\Partition0
23:24:22.0281 3172 \Device\Harddisk2\DR2\Partition0 - ok
23:24:22.0281 3172 Boot (0x1200) (439920a04f936056b252feb169075f66) \Device\Harddisk2\DR2\Partition1
23:24:22.0281 3172 \Device\Harddisk2\DR2\Partition1 - ok
23:24:22.0281 3172 Boot (0x1200) (d952d80b186dd5a519ab11470fa79662) \Device\Harddisk2\DR2\Partition2
23:24:22.0281 3172 \Device\Harddisk2\DR2\Partition2 - ok
23:24:22.0281 3172 ============================================================
23:24:22.0281 3172 Scan finished
23:24:22.0281 3172 ============================================================
23:24:22.0390 3176 Detected object count: 14
23:24:22.0390 3176 Actual detected object count: 14
23:24:28.0140 3176 ATI Smart ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 ATI Smart ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 eprdrv ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 eprdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrAdm ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrAdm ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrAuf ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrAuf ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrDba ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrDba ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrHis ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrHis ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrPAS ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrPAS ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 LcSvrSaz ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 LcSvrSaz ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 NSHE ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 NSHE ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 simdrv ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 simdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 Transbase ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 Transbase ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0140 3176 VSGate ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0140 3176 VSGate ( UnsignedFile.Multi.Generic ) - User select action: Skip
23:24:28.0156 3176 WinDriver6 ( UnsignedFile.Multi.Generic ) - skipped by user
23:24:28.0156 3176 WinDriver6 ( UnsignedFile.Multi.Generic ) - User select action: Skip
|
