KurzHier | 21.11.2012 13:16 | okay. also vorhin habe ich nochmal eine überprüfung von partition C mit awsMBR gemacht.
hier das log Code:
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-11-21 10:57:09
-----------------------------
10:57:09.203 OS Version: Windows 5.1.2600 Service Pack 3
10:57:09.203 Number of processors: 1 586 0x304
10:57:09.203 ComputerName: HOME UserName: Rene
10:57:10.578 Initialize success
10:58:25.593 AVAST engine defs: 12112000
10:59:44.140 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4
10:59:44.140 Disk 0 Vendor: ST380011A 8.01 Size: 76319MB BusType: 3
10:59:44.140 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T1L0-c
10:59:44.140 Disk 1 Vendor: SAMSUNG_SP8004H QW100-60 Size: 76351MB BusType: 3
10:59:44.156 Disk 0 MBR read successfully
10:59:44.156 Disk 0 MBR scan
10:59:44.187 Disk 0 Windows XP default MBR code
10:59:44.187 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76308 MB offset 63
10:59:44.203 Disk 0 scanning sectors +156280320
10:59:44.265 Disk 0 scanning C:\WINDOWS\system32\drivers
11:00:01.218 Service scanning
11:00:24.734 Modules scanning
11:00:32.843 Disk 0 trace - called modules:
11:00:33.375 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys intelide.sys PCIIDEX.SYS
11:00:33.375 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a16a820]
11:00:33.375 3 CLASSPNP.SYS[f7637fd7] -> nt!IofCallDriver -> \Device\00000059[0x8a08a2e0]
11:00:33.375 5 ACPI.sys[f75ad620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-4[0x8a2ff940]
11:00:33.781 AVAST engine scan C:\
12:58:19.594 Scan finished successfully
13:07:20.610 Disk 0 MBR has been saved successfully to "C:\Dokumente und Einstellungen\Rene\Desktop\MBR.dat"
13:07:20.610 The log file has been saved successfully to "C:\Dokumente und Einstellungen\Rene\Desktop\C.txt"
Und hier das vom TDSS Killer
ABER ich bin etwas irriteirt, weil TDSS ja auch nur die C Partion checkt wenn ich das richtig mitbekommen habe. Der Wurm wurde aber auf Partition F gefunden. Oder ist mein Gedankengang hier falsch? Code:
13:10:10.0454 3732 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
13:10:10.0626 3732 ============================================================
13:10:10.0626 3732 Current date / time: 2012/11/21 13:10:10.0626
13:10:10.0626 3732 SystemInfo:
13:10:10.0626 3732
13:10:10.0626 3732 OS Version: 5.1.2600 ServicePack: 3.0
13:10:10.0626 3732 Product type: Workstation
13:10:10.0626 3732 ComputerName: HOME
13:10:10.0626 3732 UserName: Rene
13:10:10.0626 3732 Windows directory: C:\WINDOWS
13:10:10.0626 3732 System windows directory: C:\WINDOWS
13:10:10.0626 3732 Processor architecture: Intel x86
13:10:10.0626 3732 Number of processors: 1
13:10:10.0626 3732 Page size: 0x1000
13:10:10.0626 3732 Boot type: Normal boot
13:10:10.0626 3732 ============================================================
13:10:12.0313 3732 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2861, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054
13:10:12.0329 3732 Drive \Device\Harddisk1\DR1 - Size: 0x12A3F92000 (74.56 Gb), SectorSize: 0x200, Cylinders: 0x2865, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000054
13:10:12.0329 3732 Drive \Device\Harddisk2\DR6 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:10:12.0423 3732 Drive \Device\Harddisk4\DR10 - Size: 0x3BB63FE00 (14.93 Gb), SectorSize: 0x200, Cylinders: 0x79C, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:10:12.0423 3732 ============================================================
13:10:12.0423 3732 \Device\Harddisk0\DR0:
13:10:12.0423 3732 MBR partitions:
13:10:12.0423 3732 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950A5C1
13:10:12.0423 3732 \Device\Harddisk1\DR1:
13:10:12.0423 3732 MBR partitions:
13:10:12.0423 3732 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x7F, BlocksNum 0x3A9D891
13:10:12.0438 3732 \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x3A9E0B1, BlocksNum 0x2711637
13:10:12.0454 3732 \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0x61AF727, BlocksNum 0x336D629
13:10:12.0454 3732 \Device\Harddisk2\DR6:
13:10:12.0454 3732 MBR partitions:
13:10:12.0454 3732 \Device\Harddisk2\DR6\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x74705982
13:10:12.0454 3732 \Device\Harddisk4\DR10:
13:10:12.0454 3732 MBR partitions:
13:10:12.0454 3732 \Device\Harddisk4\DR10\Partition1: MBR, Type 0xC, StartLBA 0x34, BlocksNum 0x1DD5A92
13:10:12.0454 3732 ============================================================
13:10:12.0501 3732 C: <-> \Device\Harddisk0\DR0\Partition1
13:10:12.0532 3732 F: <-> \Device\Harddisk1\DR1\Partition2
13:10:12.0563 3732 K: <-> \Device\Harddisk2\DR6\Partition1
13:10:12.0626 3732 E: <-> \Device\Harddisk1\DR1\Partition1
13:10:12.0657 3732 G: <-> \Device\Harddisk1\DR1\Partition3
13:10:12.0657 3732 ============================================================
13:10:12.0657 3732 Initialize success
13:10:12.0657 3732 ============================================================
13:10:58.0454 1964 ============================================================
13:10:58.0454 1964 Scan started
13:10:58.0454 1964 Mode: Manual; SigCheck; TDLFS;
13:10:58.0454 1964 ============================================================
13:11:00.0563 1964 ================ Scan system memory ========================
13:11:00.0563 1964 System memory - ok
13:11:00.0579 1964 ================ Scan services =============================
13:11:00.0688 1964 Abiosdsk - ok
13:11:00.0704 1964 abp480n5 - ok
13:11:00.0766 1964 [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:11:01.0048 1964 ACPI - ok
13:11:01.0094 1964 [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
13:11:01.0219 1964 ACPIEC - ok
13:11:01.0235 1964 adpu160m - ok
13:11:01.0282 1964 [ E696E749BEDCDA8B23757B8B5EA93780 ] aeaudio C:\WINDOWS\system32\drivers\aeaudio.sys
13:11:01.0298 1964 aeaudio - ok
13:11:01.0329 1964 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
13:11:01.0454 1964 aec - ok
13:11:01.0501 1964 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
13:11:01.0532 1964 AFD - ok
13:11:01.0579 1964 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
13:11:01.0719 1964 agp440 - ok
13:11:01.0719 1964 Aha154x - ok
13:11:01.0735 1964 aic78u2 - ok
13:11:01.0751 1964 aic78xx - ok
13:11:01.0938 1964 [ DD8520280304B6145A6BE31008748C7C ] ALCXWDM C:\WINDOWS\system32\drivers\ALCXWDM.SYS
13:11:02.0219 1964 ALCXWDM ( UnsignedFile.Multi.Generic ) - warning
13:11:02.0219 1964 ALCXWDM - detected UnsignedFile.Multi.Generic (1)
13:11:02.0266 1964 [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter C:\WINDOWS\system32\alrsvc.dll
13:11:02.0407 1964 Alerter - ok
13:11:02.0438 1964 [ 190CD73D4984F94D823F9444980513E5 ] ALG C:\WINDOWS\System32\alg.exe
13:11:02.0516 1964 ALG - ok
13:11:02.0516 1964 AliIde - ok
13:11:02.0532 1964 amsint - ok
13:11:02.0579 1964 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService F:\Avira\AntiVir Desktop\sched.exe
13:11:02.0610 1964 AntiVirSchedulerService - ok
13:11:02.0626 1964 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService F:\Avira\AntiVir Desktop\avguard.exe
13:11:02.0641 1964 AntiVirService - ok
13:11:02.0688 1964 [ D45960BE52C3C610D361977057F98C54 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
13:11:02.0766 1964 AppMgmt - ok
13:11:02.0782 1964 asc - ok
13:11:02.0798 1964 asc3350p - ok
13:11:02.0798 1964 asc3550 - ok
13:11:02.0860 1964 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:11:02.0985 1964 AsyncMac - ok
13:11:03.0016 1964 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
13:11:03.0157 1964 atapi - ok
13:11:03.0157 1964 Atdisk - ok
13:11:03.0188 1964 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:11:03.0329 1964 Atmarpc - ok
13:11:03.0360 1964 [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
13:11:03.0516 1964 AudioSrv - ok
13:11:03.0548 1964 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
13:11:03.0688 1964 audstub - ok
13:11:03.0719 1964 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
13:11:03.0766 1964 avgntflt - ok
13:11:03.0798 1964 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
13:11:03.0813 1964 avipbb - ok
13:11:03.0844 1964 [ 53E56450DA16A1A7F0D002F511113F67 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
13:11:03.0860 1964 avkmgr - ok
13:11:03.0907 1964 [ 5175E788BCD1CB7345AB21F3E14369D2 ] b57w2k C:\WINDOWS\system32\DRIVERS\b57xp32.sys
13:11:03.0923 1964 b57w2k ( UnsignedFile.Multi.Generic ) - warning
13:11:03.0923 1964 b57w2k - detected UnsignedFile.Multi.Generic (1)
13:11:03.0969 1964 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
13:11:04.0110 1964 Beep - ok
13:11:04.0157 1964 [ D6F603772A789BB3228F310D650B8BD1 ] BITS C:\WINDOWS\system32\qmgr.dll
13:11:04.0313 1964 BITS - ok
13:11:04.0344 1964 [ B71549F23736ADF83A571061C47777FD ] Browser C:\WINDOWS\System32\browser.dll
13:11:04.0376 1964 Browser - ok
13:11:04.0423 1964 [ 92A964547B96D697E5E9ED43B4297F5A ] BrScnUsb C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys
13:11:04.0454 1964 BrScnUsb - ok
13:11:04.0501 1964 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
13:11:04.0657 1964 cbidf2k - ok
13:11:04.0673 1964 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
13:11:04.0844 1964 CCDECODE - ok
13:11:04.0844 1964 cd20xrnt - ok
13:11:04.0876 1964 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
13:11:05.0032 1964 Cdaudio - ok
13:11:05.0048 1964 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
13:11:05.0188 1964 Cdfs - ok
13:11:05.0219 1964 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:11:05.0391 1964 Cdrom - ok
13:11:05.0391 1964 Changer - ok
13:11:05.0438 1964 [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc C:\WINDOWS\system32\cisvc.exe
13:11:05.0579 1964 CiSvc - ok
13:11:05.0626 1964 [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
13:11:05.0782 1964 ClipSrv - ok
13:11:05.0876 1964 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:11:05.0891 1964 clr_optimization_v2.0.50727_32 - ok
13:11:05.0907 1964 CmdIde - ok
13:11:05.0923 1964 cmuda - ok
13:11:05.0923 1964 COMSysApp - ok
13:11:05.0954 1964 Cpqarray - ok
13:11:06.0001 1964 [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
13:11:06.0141 1964 CryptSvc - ok
13:11:06.0141 1964 dac2w2k - ok
13:11:06.0157 1964 dac960nt - ok
13:11:06.0204 1964 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
13:11:06.0235 1964 DcomLaunch - ok
13:11:06.0282 1964 [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
13:11:06.0438 1964 Dhcp - ok
13:11:06.0454 1964 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
13:11:06.0610 1964 Disk - ok
13:11:06.0610 1964 dmadmin - ok
13:11:06.0719 1964 [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
13:11:06.0954 1964 dmboot - ok
13:11:06.0985 1964 [ 53720AB12B48719D00E327DA470A619A ] dmio C:\WINDOWS\system32\drivers\dmio.sys
13:11:07.0126 1964 dmio - ok
13:11:07.0157 1964 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
13:11:07.0298 1964 dmload - ok
13:11:07.0329 1964 [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver C:\WINDOWS\System32\dmserver.dll
13:11:07.0469 1964 dmserver - ok
13:11:07.0485 1964 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
13:11:07.0626 1964 DMusic - ok
13:11:07.0673 1964 [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
13:11:07.0688 1964 Dnscache - ok
13:11:07.0735 1964 [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
13:11:07.0891 1964 Dot3svc - ok
13:11:07.0907 1964 dpti2o - ok
13:11:07.0938 1964 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
13:11:08.0079 1964 drmkaud - ok
13:11:08.0110 1964 [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost C:\WINDOWS\System32\eapsvc.dll
13:11:08.0266 1964 EapHost - ok
13:11:08.0313 1964 [ 877C18558D70587AA7823A1A308AC96B ] ERSvc C:\WINDOWS\System32\ersvc.dll
13:11:08.0438 1964 ERSvc - ok
13:11:08.0485 1964 [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog C:\WINDOWS\system32\services.exe
13:11:08.0501 1964 Eventlog - ok
13:11:08.0548 1964 [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem C:\WINDOWS\system32\es.dll
13:11:08.0579 1964 EventSystem - ok
13:11:08.0626 1964 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
13:11:08.0766 1964 Fastfat - ok
13:11:08.0798 1964 [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
13:11:08.0860 1964 FastUserSwitchingCompatibility - ok
13:11:08.0891 1964 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
13:11:09.0016 1964 Fdc - ok
13:11:09.0048 1964 [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
13:11:09.0188 1964 Fips - ok
13:11:09.0204 1964 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
13:11:09.0360 1964 Flpydisk - ok
13:11:09.0407 1964 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
13:11:09.0548 1964 FltMgr - ok
13:11:09.0610 1964 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
13:11:09.0626 1964 FontCache3.0.0.0 - ok
13:11:09.0657 1964 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:11:09.0798 1964 Fs_Rec - ok
13:11:09.0829 1964 [ 8F1955CE42E1484714B542F341647778 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:11:09.0969 1964 Ftdisk - ok
13:11:10.0001 1964 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:11:10.0157 1964 Gpc - ok
13:11:10.0219 1964 [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
13:11:10.0360 1964 helpsvc - ok
13:11:10.0391 1964 [ B35DA85E60C0103F2E4104532DA2F12B ] HidServ C:\WINDOWS\System32\hidserv.dll
13:11:10.0563 1964 HidServ - ok
13:11:10.0594 1964 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:11:10.0735 1964 hidusb - ok
13:11:10.0782 1964 [ ED29F14101523A6E0E808107405D452C ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
13:11:10.0923 1964 hkmsvc - ok
13:11:10.0938 1964 hpn - ok
13:11:11.0001 1964 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
13:11:11.0032 1964 HTTP - ok
13:11:11.0063 1964 [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
13:11:11.0219 1964 HTTPFilter - ok
13:11:11.0251 1964 [ 363A6B97FEDABB9980589B0821B73E94 ] HWSuperPowerTablet C:\WINDOWS\system32\jwpen.exe
13:11:11.0282 1964 HWSuperPowerTablet ( UnsignedFile.Multi.Generic ) - warning
13:11:11.0282 1964 HWSuperPowerTablet - detected UnsignedFile.Multi.Generic (1)
13:11:11.0329 1964 [ 837BF90BEED418A114E14027E03A0131 ] hypen C:\WINDOWS\system32\Drivers\hypen.sys
13:11:11.0344 1964 hypen ( UnsignedFile.Multi.Generic ) - warning
13:11:11.0344 1964 hypen - detected UnsignedFile.Multi.Generic (1)
13:11:11.0360 1964 HYRDBios - ok
13:11:11.0376 1964 i2omgmt - ok
13:11:11.0391 1964 i2omp - ok
13:11:11.0407 1964 [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:11:11.0548 1964 i8042prt - ok
13:11:11.0641 1964 [ 9A883C3C4D91292C0D09DE7C728E781C ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
13:11:11.0735 1964 ialm ( UnsignedFile.Multi.Generic ) - warning
13:11:11.0735 1964 ialm - detected UnsignedFile.Multi.Generic (1)
13:11:11.0829 1964 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:11:11.0923 1964 idsvc - ok
13:11:11.0969 1964 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
13:11:12.0094 1964 Imapi - ok
13:11:12.0141 1964 [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService C:\WINDOWS\system32\imapi.exe
13:11:12.0282 1964 ImapiService - ok
13:11:12.0298 1964 ini910u - ok
13:11:12.0329 1964 [ 69C4E3C9E67A1F103B94E14FDD5F3213 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
13:11:12.0469 1964 IntelIde - ok
13:11:12.0501 1964 [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:11:12.0657 1964 intelppm - ok
13:11:12.0673 1964 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
13:11:12.0813 1964 Ip6Fw - ok
13:11:12.0844 1964 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:11:13.0001 1964 IpFilterDriver - ok
13:11:13.0001 1964 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:11:13.0141 1964 IpInIp - ok
13:11:13.0188 1964 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:11:13.0344 1964 IpNat - ok
13:11:13.0360 1964 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:11:13.0485 1964 IPSec - ok
13:11:13.0516 1964 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
13:11:13.0594 1964 IRENUM - ok
13:11:13.0610 1964 [ 6DFB88F64135C525433E87648BDA30DE ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:11:13.0751 1964 isapnp - ok
13:11:13.0923 1964 [ B591E761161D1EF547D76EF236EAA6A5 ] JavaQuickStarterService C:\Programme\Java\jre7\bin\jqs.exe
13:11:13.0938 1964 JavaQuickStarterService - ok
13:11:14.0235 1964 [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:11:14.0391 1964 Kbdclass - ok
13:11:14.0423 1964 [ B6D6C117D771C98130497265F26D1882 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
13:11:14.0563 1964 kbdhid - ok
13:11:14.0579 1964 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
13:11:14.0719 1964 kmixer - ok
13:11:14.0751 1964 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
13:11:14.0782 1964 KSecDD - ok
13:11:14.0829 1964 [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
13:11:14.0860 1964 lanmanserver - ok
13:11:14.0907 1964 [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
13:11:14.0954 1964 lanmanworkstation - ok
13:11:14.0969 1964 lbrtfdc - ok
13:11:15.0048 1964 [ F34B35F6F74E28A460749DA11D1117F8 ] LightScribeService C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
13:11:15.0110 1964 LightScribeService - ok
13:11:15.0157 1964 [ 636714B7D43C8D0C80449123FD266920 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
13:11:15.0298 1964 LmHosts - ok
13:11:15.0329 1964 [ B7550A7107281D170CE85524B1488C98 ] Messenger C:\WINDOWS\System32\msgsvc.dll
13:11:15.0501 1964 Messenger - ok
13:11:15.0532 1964 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
13:11:15.0657 1964 mnmdd - ok
13:11:15.0688 1964 [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
13:11:15.0844 1964 mnmsrvc - ok
13:11:15.0876 1964 [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
13:11:16.0016 1964 Modem - ok
13:11:16.0063 1964 [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:11:16.0219 1964 Mouclass - ok
13:11:16.0251 1964 [ 66A6F73C74E1791464160A7065CE711A ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:11:16.0391 1964 mouhid - ok
13:11:16.0407 1964 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
13:11:16.0563 1964 MountMgr - ok
13:11:16.0610 1964 [ C0F8E0C2C3C0437CF37C6781896DC3EC ] MPE C:\WINDOWS\system32\DRIVERS\MPE.sys
13:11:16.0751 1964 MPE - ok
13:11:16.0766 1964 mraid35x - ok
13:11:16.0798 1964 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:11:16.0938 1964 MRxDAV - ok
13:11:16.0985 1964 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:11:17.0063 1964 MRxSmb - ok
13:11:17.0110 1964 [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC C:\WINDOWS\system32\msdtc.exe
13:11:17.0251 1964 MSDTC - ok
13:11:17.0282 1964 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
13:11:17.0407 1964 Msfs - ok
13:11:17.0423 1964 MSIServer - ok
13:11:17.0454 1964 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:11:17.0594 1964 MSKSSRV - ok
13:11:17.0610 1964 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:11:17.0751 1964 MSPCLOCK - ok
13:11:17.0766 1964 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
13:11:17.0923 1964 MSPQM - ok
13:11:17.0954 1964 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:11:18.0079 1964 mssmbios - ok
13:11:18.0141 1964 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
13:11:18.0282 1964 MSTEE - ok
13:11:18.0313 1964 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
13:11:18.0329 1964 Mup - ok
13:11:18.0360 1964 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
13:11:18.0501 1964 NABTSFEC - ok
13:11:18.0548 1964 [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent C:\WINDOWS\System32\qagentrt.dll
13:11:18.0704 1964 napagent - ok
13:11:18.0813 1964 [ 6D8FCDD5BB3B676EF58FA234073492C6 ] NBService C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
13:11:18.0907 1964 NBService - ok
13:11:18.0938 1964 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
13:11:19.0079 1964 NDIS - ok
13:11:19.0126 1964 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
13:11:19.0282 1964 NdisIP - ok
13:11:19.0313 1964 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:11:19.0329 1964 NdisTapi - ok
13:11:19.0344 1964 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:11:19.0485 1964 Ndisuio - ok
13:11:19.0516 1964 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:11:19.0657 1964 NdisWan - ok
13:11:19.0688 1964 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
13:11:19.0719 1964 NDProxy - ok
13:11:19.0751 1964 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
13:11:19.0891 1964 NetBIOS - ok
13:11:19.0923 1964 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
13:11:20.0063 1964 NetBT - ok
13:11:20.0110 1964 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE C:\WINDOWS\system32\netdde.exe
13:11:20.0266 1964 NetDDE - ok
13:11:20.0266 1964 [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
13:11:20.0407 1964 NetDDEdsdm - ok
13:11:20.0438 1964 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon C:\WINDOWS\system32\lsass.exe
13:11:20.0594 1964 Netlogon - ok
13:11:20.0673 1964 [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman C:\WINDOWS\System32\netman.dll
13:11:20.0813 1964 Netman - ok
13:11:20.0844 1964 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:11:20.0860 1964 NetTcpPortSharing - ok
13:11:20.0923 1964 [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla C:\WINDOWS\System32\mswsock.dll
13:11:20.0954 1964 Nla - ok
13:11:21.0063 1964 [ 060DAF68493AD7ADF104413E5A62AFA8 ] NMIndexingService C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
13:11:21.0079 1964 NMIndexingService - ok
13:11:21.0126 1964 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
13:11:21.0251 1964 Npfs - ok
13:11:21.0313 1964 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
13:11:21.0501 1964 Ntfs - ok
13:11:21.0516 1964 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
13:11:21.0641 1964 NtLmSsp - ok
13:11:21.0688 1964 [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
13:11:21.0860 1964 NtmsSvc - ok
13:11:21.0876 1964 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
13:11:22.0016 1964 Null - ok
13:11:22.0454 1964 [ 8B2C874897EA498DA012284E12F9DB2B ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
13:11:23.0251 1964 nv - ok
13:11:23.0298 1964 [ 32F7DEC3729B3BAE66EEBCAB7B03B18F ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
13:11:23.0313 1964 NVSvc - ok
13:11:23.0360 1964 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:11:23.0501 1964 NwlnkFlt - ok
13:11:23.0516 1964 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:11:23.0657 1964 NwlnkFwd - ok
13:11:23.0704 1964 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
13:11:23.0719 1964 ose - ok
13:11:23.0766 1964 [ F84785660305B9B903FB3BCA8BA29837 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
13:11:23.0891 1964 Parport - ok
13:11:23.0938 1964 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
13:11:24.0063 1964 PartMgr - ok
13:11:24.0110 1964 [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
13:11:24.0235 1964 ParVdm - ok
13:11:24.0251 1964 [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
13:11:24.0391 1964 PCI - ok
13:11:24.0407 1964 PCIDump - ok
13:11:24.0423 1964 [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde C:\WINDOWS\system32\drivers\PCIIde.sys
13:11:24.0548 1964 PCIIde - ok
13:11:24.0594 1964 [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
13:11:24.0735 1964 Pcmcia - ok
13:11:24.0735 1964 PDCOMP - ok
13:11:24.0751 1964 PDFRAME - ok
13:11:24.0766 1964 PDRELI - ok
13:11:24.0782 1964 PDRFRAME - ok
13:11:24.0782 1964 perc2 - ok
13:11:24.0798 1964 perc2hib - ok
13:11:24.0844 1964 [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay C:\WINDOWS\system32\services.exe
13:11:24.0876 1964 PlugPlay - ok
13:11:24.0876 1964 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
13:11:25.0016 1964 PolicyAgent - ok
13:11:25.0063 1964 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:11:25.0188 1964 PptpMiniport - ok
13:11:25.0204 1964 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
13:11:25.0329 1964 ProtectedStorage - ok
13:11:25.0344 1964 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
13:11:25.0469 1964 PSched - ok
13:11:25.0532 1964 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:11:25.0657 1964 Ptilink - ok
13:11:25.0673 1964 ql1080 - ok
13:11:25.0673 1964 Ql10wnt - ok
13:11:25.0688 1964 ql12160 - ok
13:11:25.0704 1964 ql1240 - ok
13:11:25.0719 1964 ql1280 - ok
13:11:25.0735 1964 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:11:25.0876 1964 RasAcd - ok
13:11:25.0938 1964 [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto C:\WINDOWS\System32\rasauto.dll
13:11:26.0079 1964 RasAuto - ok
13:11:26.0110 1964 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:11:26.0251 1964 Rasl2tp - ok
13:11:26.0282 1964 [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan C:\WINDOWS\System32\rasmans.dll
13:11:26.0423 1964 RasMan - ok
13:11:26.0469 1964 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:11:26.0594 1964 RasPppoe - ok
13:11:26.0657 1964 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
13:11:26.0798 1964 Raspti - ok
13:11:26.0813 1964 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:11:26.0969 1964 Rdbss - ok
13:11:27.0032 1964 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:11:27.0173 1964 RDPCDD - ok
13:11:27.0219 1964 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
13:11:27.0360 1964 rdpdr - ok
13:11:27.0423 1964 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
13:11:27.0454 1964 RDPWD - ok
13:11:27.0516 1964 [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
13:11:27.0657 1964 RDSessMgr - ok
13:11:27.0673 1964 [ ED761D453856F795A7FE056E42C36365 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
13:11:27.0813 1964 redbook - ok
13:11:27.0844 1964 [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
13:11:27.0985 1964 RemoteAccess - ok
13:11:28.0016 1964 [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
13:11:28.0157 1964 RemoteRegistry - ok
13:11:28.0204 1964 [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator C:\WINDOWS\system32\locator.exe
13:11:28.0344 1964 RpcLocator - ok
13:11:28.0391 1964 [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs C:\WINDOWS\system32\rpcss.dll
13:11:28.0407 1964 RpcSs - ok
13:11:28.0438 1964 [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP C:\WINDOWS\system32\rsvp.exe
13:11:28.0579 1964 RSVP - ok
13:11:28.0641 1964 [ 594FF5620661D1386475406E78CB6F2F ] s0017bus C:\WINDOWS\system32\DRIVERS\s0017bus.sys
13:11:28.0657 1964 s0017bus - ok
13:11:28.0673 1964 [ 7258F550419D543BC5C8E80C578A5D54 ] s0017mdfl C:\WINDOWS\system32\DRIVERS\s0017mdfl.sys
13:11:28.0688 1964 s0017mdfl - ok
13:11:28.0735 1964 [ 1DE4F6607FEB17A15DBD4F1B139E6D2F ] s0017mdm C:\WINDOWS\system32\DRIVERS\s0017mdm.sys
13:11:28.0751 1964 s0017mdm - ok
13:11:28.0766 1964 [ 9814E6BACC06D2526CD52981C7EEEDF0 ] s0017mgmt C:\WINDOWS\system32\DRIVERS\s0017mgmt.sys
13:11:28.0782 1964 s0017mgmt - ok
13:11:28.0798 1964 [ 2C62CD58225973F26682CD4F783DDEDE ] s0017nd5 C:\WINDOWS\system32\DRIVERS\s0017nd5.sys
13:11:28.0813 1964 s0017nd5 - ok
13:11:28.0860 1964 [ F87C3422E84B2FB1B43E0A26247AD5A5 ] s0017obex C:\WINDOWS\system32\DRIVERS\s0017obex.sys
13:11:28.0876 1964 s0017obex - ok
13:11:28.0907 1964 [ DF5E7360A0AFA5956BF75DA683D0679F ] s0017unic C:\WINDOWS\system32\DRIVERS\s0017unic.sys
13:11:28.0923 1964 s0017unic - ok
13:11:28.0954 1964 [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs C:\WINDOWS\system32\lsass.exe
13:11:29.0094 1964 SamSs - ok
13:11:29.0126 1964 [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
13:11:29.0266 1964 SCardSvr - ok
13:11:29.0313 1964 [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule C:\WINDOWS\system32\schedsvc.dll
13:11:29.0469 1964 Schedule - ok
13:11:29.0516 1964 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:11:29.0579 1964 Secdrv - ok
13:11:29.0626 1964 [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon C:\WINDOWS\System32\seclogon.dll
13:11:29.0766 1964 seclogon - ok
13:11:29.0798 1964 [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS C:\WINDOWS\system32\sens.dll
13:11:29.0938 1964 SENS - ok
13:11:29.0969 1964 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
13:11:30.0110 1964 serenum - ok
13:11:30.0126 1964 [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
13:11:30.0266 1964 Serial - ok
13:11:30.0329 1964 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
13:11:30.0469 1964 Sfloppy - ok
13:11:30.0516 1964 [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
13:11:30.0657 1964 SharedAccess - ok
13:11:30.0688 1964 [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:11:30.0704 1964 ShellHWDetection - ok
13:11:30.0719 1964 Simbad - ok
13:11:30.0735 1964 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
13:11:30.0891 1964 SLIP - ok
13:11:30.0969 1964 [ FA3368A7039F5ABAA4B933703AC34763 ] smwdm C:\WINDOWS\system32\drivers\smwdm.sys
13:11:31.0048 1964 smwdm - ok
13:11:31.0048 1964 Sparrow - ok
13:11:31.0094 1964 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
13:11:31.0235 1964 splitter - ok
13:11:31.0282 1964 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
13:11:31.0298 1964 Spooler - ok
13:11:31.0344 1964 [ 50FA898F8C032796D3B1B9951BB5A90F ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
13:11:31.0423 1964 sr - ok
13:11:31.0469 1964 [ FE77A85495065F3AD59C5C65B6C54182 ] srservice C:\WINDOWS\system32\srsvc.dll
13:11:31.0532 1964 srservice - ok
13:11:31.0594 1964 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
13:11:31.0641 1964 Srv - ok
13:11:31.0673 1964 [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
13:11:31.0751 1964 SSDPSRV - ok
13:11:31.0782 1964 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
13:11:31.0798 1964 ssmdrv - ok
13:11:31.0860 1964 [ BC2C5985611C5356B24AEB370953DED9 ] stisvc C:\WINDOWS\system32\wiaservc.dll
13:11:32.0001 1964 stisvc - ok
13:11:32.0048 1964 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
13:11:32.0188 1964 streamip - ok
13:11:32.0204 1964 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
13:11:32.0344 1964 swenum - ok
13:11:32.0391 1964 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
13:11:32.0532 1964 swmidi - ok
13:11:32.0532 1964 SwPrv - ok
13:11:32.0548 1964 symc810 - ok
13:11:32.0563 1964 symc8xx - ok
13:11:32.0579 1964 sym_hi - ok
13:11:32.0594 1964 sym_u3 - ok
13:11:32.0610 1964 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
13:11:32.0766 1964 sysaudio - ok
13:11:32.0798 1964 [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
13:11:32.0954 1964 SysmonLog - ok
13:11:33.0001 1964 [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
13:11:33.0141 1964 TapiSrv - ok
13:11:33.0219 1964 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:11:33.0282 1964 Tcpip - ok
13:11:33.0313 1964 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
13:11:33.0469 1964 TDPIPE - ok
13:11:33.0469 1964 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
13:11:33.0610 1964 TDTCP - ok
13:11:33.0641 1964 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
13:11:33.0782 1964 TermDD - ok
13:11:33.0844 1964 [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService C:\WINDOWS\System32\termsrv.dll
13:11:33.0985 1964 TermService - ok
13:11:34.0001 1964 [ 2DB7D303C36DDD055215052F118E8E75 ] Themes C:\WINDOWS\System32\shsvcs.dll
13:11:34.0016 1964 Themes - ok
13:11:34.0063 1964 [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
13:11:34.0141 1964 TlntSvr - ok
13:11:34.0141 1964 TosIde - ok
13:11:34.0204 1964 [ 626504572B175867F30F3215C04B3E2F ] TrkWks C:\WINDOWS\system32\trkwks.dll
13:11:34.0329 1964 TrkWks - ok
13:11:34.0360 1964 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
13:11:34.0516 1964 Udfs - ok
13:11:34.0516 1964 ultra - ok
13:11:34.0563 1964 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
13:11:34.0719 1964 Update - ok
13:11:34.0766 1964 [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost C:\WINDOWS\System32\upnphost.dll
13:11:34.0876 1964 upnphost - ok
13:11:34.0891 1964 [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS C:\WINDOWS\System32\ups.exe
13:11:35.0048 1964 UPS - ok
13:11:35.0110 1964 [ 8E9DCCB2BA19C959A8C3A344445BB954 ] USB28xxBGA C:\WINDOWS\system32\DRIVERS\emBDA.sys
13:11:35.0157 1964 USB28xxBGA - ok
13:11:35.0204 1964 [ DA617CA98704142F10938089DD0738A4 ] USB28xxOEM C:\WINDOWS\system32\DRIVERS\emOEM.sys
13:11:35.0251 1964 USB28xxOEM - ok
13:11:35.0282 1964 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
13:11:35.0423 1964 usbaudio - ok
13:11:35.0469 1964 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:11:35.0626 1964 usbccgp - ok
13:11:35.0641 1964 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:11:35.0782 1964 usbehci - ok
13:11:35.0813 1964 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:11:35.0954 1964 usbhub - ok
13:11:35.0985 1964 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
13:11:36.0126 1964 usbprint - ok
13:11:36.0141 1964 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:11:36.0282 1964 usbstor - ok
13:11:36.0329 1964 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:11:36.0454 1964 usbuhci - ok
13:11:36.0469 1964 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
13:11:36.0610 1964 VgaSave - ok
13:11:36.0610 1964 ViaIde - ok
13:11:36.0657 1964 [ A5A712F4E880874A477AF790B5186E1D ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
13:11:36.0798 1964 VolSnap - ok
13:11:36.0876 1964 [ 68F106273BE29E7B7EF8266977268E78 ] VSS C:\WINDOWS\System32\vssvc.exe
13:11:36.0969 1964 VSS - ok
13:11:36.0985 1964 [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time C:\WINDOWS\system32\w32time.dll
13:11:37.0141 1964 W32Time - ok
13:11:37.0173 1964 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:11:37.0313 1964 Wanarp - ok
13:11:37.0329 1964 WDICA - ok
13:11:37.0360 1964 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
13:11:37.0516 1964 wdmaud - ok
13:11:37.0563 1964 [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient C:\WINDOWS\System32\webclnt.dll
13:11:37.0704 1964 WebClient - ok
13:11:37.0813 1964 [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
13:11:37.0985 1964 winmgmt - ok
13:11:38.0016 1964 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll
13:11:38.0048 1964 WmdmPmSN - ok
13:11:38.0094 1964 [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi C:\WINDOWS\System32\advapi32.dll
13:11:38.0173 1964 Wmi - ok
13:11:38.0219 1964 [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
13:11:38.0360 1964 WmiApSrv - ok
13:11:38.0438 1964 [ BF05650BB7DF5E9EBDD25974E22403BB ] WMPNetworkSvc C:\Programme\Windows Media Player\WMPNetwk.exe
13:11:38.0516 1964 WMPNetworkSvc - ok
13:11:38.0563 1964 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\DRIVERS\wpdusb.sys
13:11:38.0579 1964 WpdUsb - ok
13:11:38.0626 1964 [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc C:\WINDOWS\system32\wscsvc.dll
13:11:38.0766 1964 wscsvc - ok
13:11:38.0844 1964 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
13:11:39.0001 1964 WSTCODEC - ok
13:11:39.0188 1964 [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
13:11:39.0344 1964 wuauserv - ok
13:11:39.0376 1964 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
13:11:39.0407 1964 WudfPf - ok
13:11:39.0423 1964 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
13:11:39.0454 1964 WudfRd - ok
13:11:39.0469 1964 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
13:11:39.0501 1964 WudfSvc - ok
13:11:39.0563 1964 [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
13:11:39.0751 1964 WZCSVC - ok
13:11:39.0798 1964 [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
13:11:39.0954 1964 xmlprov - ok
13:11:39.0969 1964 ================ Scan global ===============================
13:11:40.0016 1964 [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
13:11:40.0063 1964 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
13:11:40.0110 1964 [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
13:11:40.0126 1964 [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
13:11:40.0126 1964 [Global] - ok
13:11:40.0141 1964 ================ Scan MBR ==================================
13:11:40.0157 1964 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
13:11:40.0501 1964 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
13:11:40.0501 1964 \Device\Harddisk0\DR0 - detected TDSS File System (1)
13:11:40.0516 1964 [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk1\DR1
13:11:40.0626 1964 \Device\Harddisk1\DR1 - ok
13:11:40.0641 1964 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR6
13:11:40.0782 1964 \Device\Harddisk2\DR6 - ok
13:11:40.0798 1964 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk4\DR10
13:11:40.0985 1964 \Device\Harddisk4\DR10 - ok
13:11:40.0985 1964 ================ Scan VBR ==================================
13:11:41.0001 1964 [ 4E5D71F4EAD3F5142A30636F1EBE1E92 ] \Device\Harddisk0\DR0\Partition1
13:11:41.0001 1964 \Device\Harddisk0\DR0\Partition1 - ok
13:11:41.0032 1964 [ 49EF259BDA37FA528F9B394D3FE0622C ] \Device\Harddisk1\DR1\Partition1
13:11:41.0032 1964 \Device\Harddisk1\DR1\Partition1 - ok
13:11:41.0048 1964 [ B6164B0A7A7848F0817CB476A1F4F165 ] \Device\Harddisk1\DR1\Partition2
13:11:41.0063 1964 \Device\Harddisk1\DR1\Partition2 - ok
13:11:41.0079 1964 [ 739443CA9142C47CF0AC35C5C23B0496 ] \Device\Harddisk1\DR1\Partition3
13:11:41.0079 1964 \Device\Harddisk1\DR1\Partition3 - ok
13:11:41.0094 1964 [ 3C45EA68360846C7F5175C326C35809D ] \Device\Harddisk2\DR6\Partition1
13:11:41.0094 1964 \Device\Harddisk2\DR6\Partition1 - ok
13:11:41.0110 1964 [ 2597B4018BD9219063B72A78B26D5988 ] \Device\Harddisk4\DR10\Partition1
13:11:41.0110 1964 \Device\Harddisk4\DR10\Partition1 - ok
13:11:41.0110 1964 ============================================================
13:11:41.0110 1964 Scan finished
13:11:41.0110 1964 ============================================================
13:11:41.0235 2716 Detected object count: 6
13:11:41.0235 2716 Actual detected object count: 6
13:12:05.0563 2716 ALCXWDM ( UnsignedFile.Multi.Generic ) - skipped by user
13:12:05.0563 2716 ALCXWDM ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:12:05.0563 2716 b57w2k ( UnsignedFile.Multi.Generic ) - skipped by user
13:12:05.0563 2716 b57w2k ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:12:05.0563 2716 HWSuperPowerTablet ( UnsignedFile.Multi.Generic ) - skipped by user
13:12:05.0563 2716 HWSuperPowerTablet ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:12:05.0563 2716 hypen ( UnsignedFile.Multi.Generic ) - skipped by user
13:12:05.0563 2716 hypen ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:12:05.0563 2716 ialm ( UnsignedFile.Multi.Generic ) - skipped by user
13:12:05.0563 2716 ialm ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:12:05.0563 2716 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
13:12:05.0563 2716 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
13:12:51.0141 3712 Deinitialize success |