Win XP Pro Ukash Trojaner hilfe für Noob

CG · 27.09.2012, 11:04

Kein Problem...

Starte Malwarebytes und klicke auf den Reiter "Logdateien".
Hier sollten die Logs als Textdatei abgelegt sein.
Öffne die aus dem letzten Scan und kopiere den Inhalt hier rein.

**Ferrum** · 28.09.2012, 20:07

Okay hier der letzte scan report

HTML-Code:

Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org

Datenbank Version: v2012.09.26.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: MEYER-74E438B8A [Administrator]

Schutz: Aktiviert

26.09.2012 14:57:05
mbam-log-2012-09-26 (14-57-05).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 251789
Laufzeit: 29 Minute(n), 53 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\_OTL\MovedFiles\09252012_145350\C_Dokumente und Einstellungen\Administrator\0.0453891375991794.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09252012_145350\C_Dokumente und Einstellungen\Administrator\Anwendungsdaten\msconfig.dat (Trojan.Zbot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\_OTL\MovedFiles\09252012_145350\C_Dokumente und Einstellungen\All Users\Anwendungsdaten\uwfjplfl.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt.
c:\_otl\movedfiles\09252012_145350\c_windows\uwfjplfl.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

CG · 30.09.2012, 14:34

TDSSKiller von Kaspersky

Lade den TDSSKiller und entpacke das Archiv auf Deinen Desktop.
Vergewissere Dich, dass die TDSSKiller.exe direkt auf dem Desktop liegt (nicht in einem Ordner auf dem Desktop).
Starte die TDSSKiller.exe durch Doppelklick.
Nach Beendigung der Arbeit schlägt das Tool vor, das System neu zu starten.
Bestätige das ggfs. mit Y(es).
Beim Hochfahren des Systems führt der Treiber alle geplanten Operationen aus löscht sich danach.
Poste mir den Inhalt von C:\TDSSKiller<random>.txt hier in den Thread.

Hier findest Du eine ausführlichere Anleitung.

**Ferrum** · 01.10.2012, 12:17

Scanreport TDSSKiller:

HTML-Code:

13:14:49.0703 0488  TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
13:14:50.0718 0488  ============================================================
13:14:50.0718 0488  Current date / time: 2012/10/01 13:14:50.0718
13:14:50.0718 0488  SystemInfo:
13:14:50.0718 0488  
13:14:50.0718 0488  OS Version: 5.1.2600 ServicePack: 3.0
13:14:50.0718 0488  Product type: Workstation
13:14:50.0718 0488  ComputerName: MEYER-74E438B8A
13:14:50.0718 0488  UserName: Administrator
13:14:50.0718 0488  Windows directory: C:\WINDOWS
13:14:50.0718 0488  System windows directory: C:\WINDOWS
13:14:50.0718 0488  Processor architecture: Intel x86
13:14:50.0718 0488  Number of processors: 4
13:14:50.0718 0488  Page size: 0x1000
13:14:50.0718 0488  Boot type: Normal boot
13:14:50.0718 0488  ============================================================
13:14:51.0671 0488  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0CADE00 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
13:14:51.0671 0488  ============================================================
13:14:51.0671 0488  \Device\Harddisk0\DR0:
13:14:51.0671 0488  MBR partitions:
13:14:51.0671 0488  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A3A420A
13:14:51.0687 0488  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3A3A4288, BlocksNum 0x3A35D878
13:14:51.0687 0488  ============================================================
13:14:51.0703 0488  D: <-> \Device\Harddisk0\DR0\Partition2
13:14:51.0734 0488  C: <-> \Device\Harddisk0\DR0\Partition1
13:14:51.0734 0488  ============================================================
13:14:51.0734 0488  Initialize success
13:14:51.0734 0488  ============================================================
13:14:55.0187 3144  ============================================================
13:14:55.0187 3144  Scan started
13:14:55.0187 3144  Mode: Manual; 
13:14:55.0187 3144  ============================================================
13:14:55.0828 3144  ================ Scan system memory ========================
13:14:56.0296 3144  System memory - ok
13:14:56.0296 3144  ================ Scan services =============================
13:14:56.0312 3144  Abiosdsk - ok
13:14:56.0328 3144  abp480n5 - ok
13:14:56.0343 3144  [ AC407F1A62C3A300B4F2B5A9F1D55B2C ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:14:56.0359 3144  ACPI - ok
13:14:56.0375 3144  [ 9E1CA3160DAFB159CA14F83B1E317F75 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
13:14:56.0375 3144  ACPIEC - ok
13:14:56.0406 3144  [ E12CFCF1DDBFC50948A75E6E38793225 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
13:14:56.0406 3144  AdobeFlashPlayerUpdateSvc - ok
13:14:56.0421 3144  adpu160m - ok
13:14:56.0421 3144  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
13:14:56.0421 3144  aec - ok
13:14:56.0453 3144  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
13:14:56.0453 3144  AFD - ok
13:14:56.0453 3144  Aha154x - ok
13:14:56.0453 3144  aic78u2 - ok
13:14:56.0453 3144  aic78xx - ok
13:14:56.0484 3144  [ 738D80CC01D7BC7584BE917B7F544394 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
13:14:56.0484 3144  Alerter - ok
13:14:56.0500 3144  [ 190CD73D4984F94D823F9444980513E5 ] ALG             C:\WINDOWS\System32\alg.exe
13:14:56.0500 3144  ALG - ok
13:14:56.0515 3144  AliIde - ok
13:14:56.0562 3144  [ EF9DD27AA5A3BAAF2FD2B44C08A3E622 ] AmFSM           C:\WINDOWS\system32\DRIVERS\amm8651.sys
13:14:56.0562 3144  AmFSM - ok
13:14:56.0562 3144  amsint - ok
13:14:56.0640 3144  [ 6B467E791EC470D010BD50E5E98BF467 ] APPFLT          C:\WINDOWS\system32\Drivers\APPFLT.SYS
13:14:56.0640 3144  APPFLT - ok
13:14:56.0687 3144  [ D45960BE52C3C610D361977057F98C54 ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
13:14:56.0687 3144  AppMgmt - ok
13:14:56.0703 3144  asc - ok
13:14:56.0703 3144  asc3350p - ok
13:14:56.0703 3144  asc3550 - ok
13:14:56.0843 3144  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
13:14:56.0859 3144  aspnet_state - ok
13:14:56.0890 3144  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:14:56.0890 3144  AsyncMac - ok
13:14:56.0890 3144  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
13:14:56.0890 3144  atapi - ok
13:14:56.0906 3144  Atdisk - ok
13:14:56.0921 3144  [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt          C:\WINDOWS\system32\DRIVERS\atksgt.sys
13:14:56.0937 3144  atksgt - ok
13:14:56.0953 3144  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:14:56.0953 3144  Atmarpc - ok
13:14:56.0968 3144  [ 58ED0D5452DF7BE732193E7999C6B9A4 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
13:14:56.0968 3144  AudioSrv - ok
13:14:57.0000 3144  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
13:14:57.0000 3144  audstub - ok
13:14:57.0000 3144  AvFlt - ok
13:14:57.0031 3144  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
13:14:57.0031 3144  Beep - ok
13:14:57.0078 3144  [ D6F603772A789BB3228F310D650B8BD1 ] BITS            C:\WINDOWS\system32\qmgr.dll
13:14:57.0078 3144  BITS - ok
13:14:57.0093 3144  [ B71549F23736ADF83A571061C47777FD ] Browser         C:\WINDOWS\System32\browser.dll
13:14:57.0093 3144  Browser - ok
13:14:57.0109 3144  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
13:14:57.0109 3144  cbidf2k - ok
13:14:57.0140 3144  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
13:14:57.0140 3144  CCDECODE - ok
13:14:57.0140 3144  cd20xrnt - ok
13:14:57.0140 3144  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
13:14:57.0140 3144  Cdaudio - ok
13:14:57.0156 3144  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
13:14:57.0171 3144  Cdfs - ok
13:14:57.0187 3144  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:14:57.0187 3144  Cdrom - ok
13:14:57.0203 3144  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E ] CiSvc           C:\WINDOWS\system32\cisvc.exe
13:14:57.0203 3144  CiSvc - ok
13:14:57.0218 3144  [ 778A30ED3C134EB7E406AFC407E9997D ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
13:14:57.0218 3144  ClipSrv - ok
13:14:57.0234 3144  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:14:57.0234 3144  clr_optimization_v2.0.50727_32 - ok
13:14:57.0234 3144  CmdIde - ok
13:14:57.0234 3144  COMSysApp - ok
13:14:57.0234 3144  Cpqarray - ok
13:14:57.0250 3144  [ 611F824E5C703A5A899F84C5F1699E4D ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
13:14:57.0250 3144  CryptSvc - ok
13:14:57.0250 3144  dac2w2k - ok
13:14:57.0250 3144  dac960nt - ok
13:14:57.0281 3144  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
13:14:57.0281 3144  DcomLaunch - ok
13:14:57.0312 3144  [ C29A1C9B75BA38FA37F8C44405DEC360 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
13:14:57.0312 3144  Dhcp - ok
13:14:57.0312 3144  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
13:14:57.0312 3144  Disk - ok
13:14:57.0312 3144  dmadmin - ok
13:14:57.0343 3144  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
13:14:57.0343 3144  dmboot - ok
13:14:57.0359 3144  [ 53720AB12B48719D00E327DA470A619A ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
13:14:57.0359 3144  dmio - ok
13:14:57.0375 3144  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
13:14:57.0375 3144  dmload - ok
13:14:57.0390 3144  [ 25C83FFBBA13B554EB6D59A9B2E2EE78 ] dmserver        C:\WINDOWS\System32\dmserver.dll
13:14:57.0390 3144  dmserver - ok
13:14:57.0406 3144  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
13:14:57.0406 3144  DMusic - ok
13:14:57.0437 3144  [ 407F3227AC618FD1CA54B335B083DE07 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
13:14:57.0437 3144  Dnscache - ok
13:14:57.0453 3144  [ 676E36C4FF5BCEA1900F44182B9723E6 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
13:14:57.0453 3144  Dot3svc - ok
13:14:57.0453 3144  dpti2o - ok
13:14:57.0453 3144  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
13:14:57.0453 3144  drmkaud - ok
13:14:57.0484 3144  [ 5BB0F91FFD84057D094D106D9FF53298 ] DSAFLT          C:\WINDOWS\system32\Drivers\DSAFLT.SYS
13:14:57.0484 3144  DSAFLT - ok
13:14:57.0515 3144  [ 90700EB149C8EE9FD8F61821E7D4B8FE ] e1kexpress      C:\WINDOWS\system32\DRIVERS\e1k5132.sys
13:14:57.0515 3144  e1kexpress - ok
13:14:57.0531 3144  [ 4E4F2FDDAB0A0736D7671134DCCE91FB ] EapHost         C:\WINDOWS\System32\eapsvc.dll
13:14:57.0531 3144  EapHost - ok
13:14:57.0531 3144  [ 877C18558D70587AA7823A1A308AC96B ] ERSvc           C:\WINDOWS\System32\ersvc.dll
13:14:57.0531 3144  ERSvc - ok
13:14:57.0562 3144  [ A3EDBE9053889FB24AB22492472B39DC ] Eventlog        C:\WINDOWS\system32\services.exe
13:14:57.0562 3144  Eventlog - ok
13:14:57.0593 3144  [ AF4F6B5739D18CA7972AB53E091CBC74 ] EventSystem     C:\WINDOWS\system32\es.dll
13:14:57.0593 3144  EventSystem - ok
13:14:57.0609 3144  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
13:14:57.0609 3144  Fastfat - ok
13:14:57.0640 3144  [ 2DB7D303C36DDD055215052F118E8E75 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
13:14:57.0640 3144  FastUserSwitchingCompatibility - ok
13:14:57.0671 3144  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
13:14:57.0671 3144  Fdc - ok
13:14:57.0687 3144  [ B0678A548587C5F1967B0D70BACAD6C1 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
13:14:57.0687 3144  Fips - ok
13:14:57.0687 3144  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
13:14:57.0687 3144  Flpydisk - ok
13:14:57.0718 3144  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
13:14:57.0718 3144  FltMgr - ok
13:14:57.0718 3144  [ A38B9BA7A4C17F7DCE9EC4E8F7870026 ] FNETMON         C:\WINDOWS\system32\Drivers\fnetmon.SYS
13:14:57.0718 3144  FNETMON - ok
13:14:57.0750 3144  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
13:14:57.0750 3144  FontCache3.0.0.0 - ok
13:14:57.0750 3144  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:14:57.0750 3144  Fs_Rec - ok
13:14:57.0765 3144  [ 8F1955CE42E1484714B542F341647778 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:14:57.0765 3144  Ftdisk - ok
13:14:57.0796 3144  [ D556CB79967E92B5CC69686D16C1D846 ] gdrv            C:\WINDOWS\gdrv.sys
13:14:57.0796 3144  gdrv - ok
13:14:57.0843 3144  [ ACE536A519F5A6E4E49117B60DACDA6D ] GEST Service    C:\Programme\GIGABYTE\EnergySaver\GSvr.exe
13:14:57.0843 3144  GEST Service - ok
13:14:57.0875 3144  [ 9599A713E1776B8F69300FC9008F33C1 ] getPlusHelper   C:\Programme\NOS\bin\getPlus_Helper.dll
13:14:57.0875 3144  getPlusHelper - ok
13:14:57.0890 3144  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:14:57.0890 3144  Gpc - ok
13:14:57.0921 3144  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate         C:\Programme\Google\Update\GoogleUpdate.exe
13:14:57.0937 3144  gupdate - ok
13:14:57.0937 3144  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Programme\Google\Update\GoogleUpdate.exe
13:14:57.0937 3144  gupdatem - ok
13:14:57.0953 3144  [ 0E6BF670C0BE3E927C1418DB1029E642 ] HCW88AUD        C:\WINDOWS\system32\drivers\hcw88aud.sys
13:14:57.0953 3144  HCW88AUD - ok
13:14:57.0968 3144  [ 0CE49BE2016503B8DAB93BDAE7D5B653 ] HCW88BDA        C:\WINDOWS\system32\drivers\hcw88bda.sys
13:14:57.0968 3144  HCW88BDA - ok
13:14:57.0984 3144  [ E6E5666748AA0F7B5D9FDBEAEDB4B697 ] hcw88rc5        C:\WINDOWS\system32\Drivers\hcw88rc5.sys
13:14:57.0984 3144  hcw88rc5 - ok
13:14:57.0984 3144  [ DE3BD8795B836B072246EDBD7101A0C4 ] HCW88TSE        C:\WINDOWS\system32\drivers\hcw88tse.sys
13:14:57.0984 3144  HCW88TSE - ok
13:14:58.0015 3144  [ CE8DC63C670DB8E566364A4F9D44DBE5 ] hcw88vid        C:\WINDOWS\system32\drivers\hcw88vid.sys
13:14:58.0015 3144  hcw88vid - ok
13:14:58.0015 3144  [ 76C779A625CBB12F9CF22905870C5C1E ] HCW88XBAR       C:\WINDOWS\system32\drivers\HCW88BAR.sys
13:14:58.0015 3144  HCW88XBAR - ok
13:14:58.0062 3144  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
13:14:58.0062 3144  HDAudBus - ok
13:14:58.0078 3144  [ E4A123AD734A3731D29EBD3A01B3E535 ] HECI            C:\WINDOWS\system32\DRIVERS\HECI.sys
13:14:58.0078 3144  HECI - ok
13:14:58.0125 3144  [ CB66BF85BF599BEFD6C6A57C2E20357F ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
13:14:58.0125 3144  helpsvc - ok
13:14:58.0125 3144  HidServ - ok
13:14:58.0156 3144  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:14:58.0156 3144  HidUsb - ok
13:14:58.0171 3144  [ ED29F14101523A6E0E808107405D452C ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
13:14:58.0171 3144  hkmsvc - ok
13:14:58.0171 3144  hpn - ok
13:14:58.0203 3144  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
13:14:58.0203 3144  HTTP - ok
13:14:58.0218 3144  [ 9E4ADB854CEBCFB81A4B36718FEECD16 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
13:14:58.0218 3144  HTTPFilter - ok
13:14:58.0218 3144  i2omp - ok
13:14:58.0234 3144  [ E283B97CFBEB86C1D86BAED5F7846A92 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:14:58.0234 3144  i8042prt - ok
13:14:58.0343 3144  [ AD3191F675159D3728738E847D4A73EE ] ialm            C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
13:14:58.0375 3144  ialm - ok
13:14:58.0406 3144  [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT        C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
13:14:58.0406 3144  IDriverT - ok
13:14:58.0437 3144  [ C4E887CF7BA2D3624233231AECD34C9D ] IDSFLT          C:\WINDOWS\system32\Drivers\IDSFLT.SYS
13:14:58.0437 3144  IDSFLT - ok
13:14:58.0484 3144  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:14:58.0484 3144  idsvc - ok
13:14:58.0500 3144  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
13:14:58.0515 3144  Imapi - ok
13:14:58.0531 3144  [ D4B413AA210C21E46AEDD2BA5B68D38E ] ImapiService    C:\WINDOWS\system32\imapi.exe
13:14:58.0531 3144  ImapiService - ok
13:14:58.0562 3144  [ B02A8A25192EE1C5E653628637AB6AAA ] InCDfs          C:\WINDOWS\system32\drivers\InCDFs.sys
13:14:58.0562 3144  InCDfs - ok
13:14:58.0578 3144  [ B49BD5B663E1AF9BF3233B782B70D865 ] InCDPass        C:\WINDOWS\system32\drivers\InCDPass.sys
13:14:58.0578 3144  InCDPass - ok
13:14:58.0578 3144  [ 8FD364EDBD97983575CEE3E8909E62B4 ] InCDrec         C:\WINDOWS\system32\drivers\InCDrec.sys
13:14:58.0578 3144  InCDrec - ok
13:14:58.0578 3144  [ FC04E827133D54AB79CA254708F76CD0 ] incdrm          C:\WINDOWS\system32\drivers\InCDRm.sys
13:14:58.0578 3144  incdrm - ok
13:14:58.0640 3144  [ 067020BB8ABF1F6B80361051B2806C90 ] InCDsrv         C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
13:14:58.0656 3144  InCDsrv - ok
13:14:58.0656 3144  ini910u - ok
13:14:58.0765 3144  [ 2FEB5BF0312E1CB76CD2CAA875CBAA5D ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
13:14:58.0781 3144  IntcAzAudAddService - ok
13:14:58.0781 3144  IntelIde - ok
13:14:58.0812 3144  [ 4C7D2750158ED6E7AD642D97BFFAE351 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:14:58.0812 3144  intelppm - ok
13:14:58.0828 3144  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\drivers\ip6fw.sys
13:14:58.0828 3144  Ip6Fw - ok
13:14:58.0843 3144  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:14:58.0843 3144  IpFilterDriver - ok
13:14:58.0843 3144  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:14:58.0859 3144  IpInIp - ok
13:14:58.0890 3144  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:14:58.0890 3144  IpNat - ok
13:14:58.0890 3144  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:14:58.0890 3144  IPSec - ok
13:14:58.0890 3144  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
13:14:58.0890 3144  IRENUM - ok
13:14:58.0906 3144  [ 6DFB88F64135C525433E87648BDA30DE ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:14:58.0906 3144  isapnp - ok
13:14:58.0953 3144  [ 9AA67569D5257462E230767510B0C815 ] JavaQuickStarterService C:\Programme\Java\jre6\bin\jqs.exe
13:14:58.0953 3144  JavaQuickStarterService - ok
13:14:58.0968 3144  [ 1704D8C4C8807B889E43C649B478A452 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:14:58.0968 3144  Kbdclass - ok
13:14:58.0984 3144  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
13:14:58.0984 3144  kmixer - ok
13:14:59.0000 3144  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
13:14:59.0000 3144  KSecDD - ok
13:14:59.0015 3144  [ 2BBDCB79900990F0716DFCB714E72DE7 ] lanmanserver    C:\WINDOWS\System32\srvsvc.dll
13:14:59.0031 3144  lanmanserver - ok
13:14:59.0062 3144  [ 1869B14B06B44B44AF70548E1EA3303F ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
13:14:59.0062 3144  lanmanworkstation - ok
13:14:59.0078 3144  [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt          C:\WINDOWS\system32\DRIVERS\lirsgt.sys
13:14:59.0078 3144  lirsgt - ok
13:14:59.0109 3144  [ 636714B7D43C8D0C80449123FD266920 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
13:14:59.0109 3144  LmHosts - ok
13:14:59.0140 3144  [ 65E794E86468B61F2BC79ABC48BC4433 ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
13:14:59.0140 3144  MBAMProtector - ok
13:14:59.0171 3144  [ 0DCF16B1449811EFA47AB52CAC84093C ] MBAMScheduler   C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
13:14:59.0171 3144  MBAMScheduler - ok
13:14:59.0203 3144  [ 9EAABA4D601004BEA4DAA6E146E19A96 ] MBAMService     C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
13:14:59.0203 3144  MBAMService - ok
13:14:59.0218 3144  [ B7550A7107281D170CE85524B1488C98 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
13:14:59.0218 3144  Messenger - ok
13:14:59.0234 3144  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
13:14:59.0234 3144  mnmdd - ok
13:14:59.0265 3144  [ C2F1D365FD96791B037EE504868065D3 ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
13:14:59.0265 3144  mnmsrvc - ok
13:14:59.0296 3144  [ 6FB74EBD4EC57A6F1781DE3852CC3362 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
13:14:59.0296 3144  Modem - ok
13:14:59.0296 3144  [ B24CE8005DEAB254C0251E15CB71D802 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:14:59.0296 3144  Mouclass - ok
13:14:59.0343 3144  [ 66A6F73C74E1791464160A7065CE711A ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:14:59.0343 3144  mouhid - ok
13:14:59.0359 3144  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
13:14:59.0359 3144  MountMgr - ok
13:14:59.0375 3144  [ C0F8E0C2C3C0437CF37C6781896DC3EC ] MPE             C:\WINDOWS\system32\DRIVERS\MPE.sys
13:14:59.0375 3144  MPE - ok
13:14:59.0375 3144  mraid35x - ok
13:14:59.0390 3144  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:14:59.0390 3144  MRxDAV - ok
13:14:59.0421 3144  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:14:59.0421 3144  MRxSmb - ok
13:14:59.0453 3144  [ 35A031AF38C55F92D28AA03EE9F12CC9 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
13:14:59.0453 3144  MSDTC - ok
13:14:59.0453 3144  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
13:14:59.0453 3144  Msfs - ok
13:14:59.0453 3144  MSIServer - ok
13:14:59.0484 3144  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:14:59.0484 3144  MSKSSRV - ok
13:14:59.0500 3144  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:14:59.0500 3144  MSPCLOCK - ok
13:14:59.0500 3144  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
13:14:59.0500 3144  MSPQM - ok
13:14:59.0500 3144  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:14:59.0500 3144  mssmbios - ok
13:14:59.0515 3144  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
13:14:59.0515 3144  MSTEE - ok
13:14:59.0531 3144  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
13:14:59.0531 3144  Mup - ok
13:14:59.0546 3144  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
13:14:59.0546 3144  NABTSFEC - ok
13:14:59.0578 3144  [ D02734423B59B3AC14CDFE91E9665FF0 ] NAL             C:\WINDOWS\system32\Drivers\iqvw32.sys
13:14:59.0578 3144  NAL - ok
13:14:59.0609 3144  [ 46BB15AE2AC7D025D6D2567B876817BD ] napagent        C:\WINDOWS\System32\qagentrt.dll
13:14:59.0609 3144  napagent - ok
13:14:59.0656 3144  NAVENG - ok
13:14:59.0656 3144  NAVEX15 - ok
13:14:59.0703 3144  [ 5836B9E91863A00EC1B8E785EFD86ECB ] NBService       C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
13:14:59.0703 3144  NBService - ok
13:14:59.0734 3144  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
13:14:59.0734 3144  NDIS - ok
13:14:59.0765 3144  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
13:14:59.0765 3144  NdisIP - ok
13:14:59.0796 3144  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:14:59.0796 3144  NdisTapi - ok
13:14:59.0796 3144  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:14:59.0796 3144  Ndisuio - ok
13:14:59.0812 3144  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:14:59.0812 3144  NdisWan - ok
13:14:59.0828 3144  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
13:14:59.0828 3144  NDProxy - ok
13:14:59.0843 3144  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
13:14:59.0843 3144  NetBIOS - ok
13:14:59.0859 3144  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
13:14:59.0859 3144  NetBT - ok
13:14:59.0875 3144  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDE          C:\WINDOWS\system32\netdde.exe
13:14:59.0875 3144  NetDDE - ok
13:14:59.0906 3144  [ 8ACE4251BFFD09CE75679FE940E996CC ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
13:14:59.0906 3144  NetDDEdsdm - ok
13:14:59.0906 3144  [ D8F44FC13DB193C9379297973EE42272 ] NETFLTDI        C:\WINDOWS\system32\Drivers\NETFLTDI.SYS
13:14:59.0906 3144  NETFLTDI - ok
13:14:59.0968 3144  [ 9DEE136C4863D5065437D07262BB5C40 ] NETIMFLT01060044 C:\WINDOWS\system32\DRIVERS\neti1644.sys
13:14:59.0968 3144  NETIMFLT01060044 - ok
13:14:59.0984 3144  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] Netlogon        C:\WINDOWS\system32\lsass.exe
13:14:59.0984 3144  Netlogon - ok
13:15:00.0000 3144  [ E6D88F1F6745BF00B57E7855A2AB696C ] Netman          C:\WINDOWS\System32\netman.dll
13:15:00.0000 3144  Netman - ok
13:15:00.0015 3144  [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:15:00.0015 3144  NetTcpPortSharing - ok
13:15:00.0046 3144  [ F1B67B6B0751AE0E6E964B02821206A3 ] Nla             C:\WINDOWS\System32\mswsock.dll
13:15:00.0046 3144  Nla - ok
13:15:00.0109 3144  [ A328A46D87BB92CE4D8A4528E9D84787 ] NMIndexingService C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
13:15:00.0109 3144  NMIndexingService - ok
13:15:00.0125 3144  Norton Internet Security - ok
13:15:00.0140 3144  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
13:15:00.0156 3144  Npfs - ok
13:15:00.0156 3144  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
13:15:00.0156 3144  Ntfs - ok
13:15:00.0156 3144  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
13:15:00.0171 3144  NtLmSsp - ok
13:15:00.0187 3144  [ 56AF4064996FA5BAC9C449B1514B4770 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
13:15:00.0187 3144  NtmsSvc - ok
13:15:00.0203 3144  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
13:15:00.0218 3144  Null - ok
13:15:00.0328 3144  [ 07E25FE08344021091F000D84611A2AB ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
13:15:00.0359 3144  nv - ok
13:15:00.0359 3144  [ C05A34A53008C443BD9D0BD18683BFD4 ] NVSvc           C:\WINDOWS\system32\nvsvc32.exe
13:15:00.0359 3144  NVSvc - ok
13:15:00.0390 3144  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:15:00.0390 3144  NwlnkFlt - ok
13:15:00.0390 3144  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:15:00.0390 3144  NwlnkFwd - ok
13:15:00.0453 3144  [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv          C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
13:15:00.0453 3144  odserv - ok
13:15:00.0468 3144  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
13:15:00.0468 3144  ose - ok
13:15:00.0531 3144  [ 78B7642B0C51F24F0835C0226540D58B ] Panda Software Controller C:\Programme\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe
13:15:00.0531 3144  Panda Software Controller - ok
13:15:00.0562 3144  [ F84785660305B9B903FB3BCA8BA29837 ] Parport         C:\WINDOWS\system32\DRIVERS\parport.sys
13:15:00.0562 3144  Parport - ok
13:15:00.0562 3144  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
13:15:00.0562 3144  PartMgr - ok
13:15:00.0593 3144  [ C2BF987829099A3EAA2CA6A0A90ECB4F ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
13:15:00.0609 3144  ParVdm - ok
13:15:00.0609 3144  [ 55D654258A9C509B671310C314BD30B4 ] pavboot         C:\WINDOWS\system32\Drivers\pavboot.sys
13:15:00.0609 3144  pavboot - ok
13:15:00.0640 3144  [ AE848C1613C8738BB83ADAB4F0845E84 ] PAVFNSVR        C:\Programme\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
13:15:00.0640 3144  PAVFNSVR - ok
13:15:00.0687 3144  [ A110035FDC4B8F8F0CD5E71D031274E1 ] PavProc         C:\WINDOWS\system32\DRIVERS\PavProc.sys
13:15:00.0687 3144  PavProc - ok
13:15:00.0703 3144  [ 2AE3F6B23448443BBEF5DE207159213B ] PavPrSrv        C:\Programme\Gemeinsame Dateien\Panda Security\PavShld\pavprsrv.exe
13:15:00.0703 3144  PavPrSrv - ok
13:15:00.0703 3144  PavSRK.sys - ok
13:15:00.0734 3144  [ 97005413310966001FB6F4A5C503149C ] PAVSRV          C:\Programme\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
13:15:00.0734 3144  PAVSRV - ok
13:15:00.0734 3144  PavTPK.sys - ok
13:15:00.0765 3144  [ 387E8DEDC343AA2D1EFBC30580273ACD ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
13:15:00.0765 3144  PCI - ok
13:15:00.0781 3144  [ 59BA86D9A61CBCF4DF8E598C331F5B82 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
13:15:00.0781 3144  PCIIde - ok
13:15:00.0796 3144  [ A2A966B77D61847D61A3051DF87C8C97 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
13:15:00.0796 3144  Pcmcia - ok
13:15:00.0796 3144  perc2 - ok
13:15:00.0812 3144  perc2hib - ok
13:15:00.0828 3144  [ A3EDBE9053889FB24AB22492472B39DC ] PlugPlay        C:\WINDOWS\system32\services.exe
13:15:00.0828 3144  PlugPlay - ok
13:15:00.0843 3144  [ 831883B107684301F48ACE752C963984 ] PnkBstrA        C:\WINDOWS\system32\PnkBstrA.exe
13:15:00.0843 3144  PnkBstrA - ok
13:15:00.0859 3144  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
13:15:00.0859 3144  PolicyAgent - ok
13:15:00.0875 3144  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:15:00.0875 3144  PptpMiniport - ok
13:15:00.0875 3144  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
13:15:00.0875 3144  ProtectedStorage - ok
13:15:00.0875 3144  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
13:15:00.0875 3144  PSched - ok
13:15:00.0921 3144  [ 532053E8E3BB8FA7166AB4E7685FDDCC ] PSHost          C:\Programme\Panda Security\Panda Antivirus Pro 2012\Firewall\PSHOST.EXE
13:15:00.0921 3144  PSHost - ok
13:15:00.0937 3144  [ 196C450F2779D0B462C444DA4906EA7F ] PSIMSVC         C:\Programme\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
13:15:00.0937 3144  PSIMSVC - ok
13:15:00.0968 3144  [ 341457B79B3FC31A80C346C767045879 ] PskSvcRetail    C:\Programme\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe
13:15:00.0968 3144  PskSvcRetail - ok
13:15:00.0984 3144  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:15:00.0984 3144  Ptilink - ok
13:15:01.0000 3144  ql1080 - ok
13:15:01.0000 3144  Ql10wnt - ok
13:15:01.0000 3144  ql12160 - ok
13:15:01.0000 3144  ql1240 - ok
13:15:01.0000 3144  ql1280 - ok
13:15:01.0015 3144  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:15:01.0015 3144  RasAcd - ok
13:15:01.0046 3144  [ F5BA6CACCDB66C8F048E867563203246 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
13:15:01.0046 3144  RasAuto - ok
13:15:01.0046 3144  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:15:01.0046 3144  Rasl2tp - ok
13:15:01.0078 3144  [ F9A7B66EA345726EDB5862A46B1ECCD5 ] RasMan          C:\WINDOWS\System32\rasmans.dll
13:15:01.0078 3144  RasMan - ok
13:15:01.0078 3144  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:15:01.0093 3144  RasPppoe - ok
13:15:01.0093 3144  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
13:15:01.0093 3144  Raspti - ok
13:15:01.0109 3144  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:15:01.0109 3144  Rdbss - ok
13:15:01.0109 3144  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:15:01.0109 3144  RDPCDD - ok
13:15:01.0125 3144  [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr           C:\WINDOWS\system32\DRIVERS\rdpdr.sys
13:15:01.0125 3144  rdpdr - ok
13:15:01.0140 3144  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
13:15:01.0140 3144  RDPWD - ok
13:15:01.0156 3144  [ 263AF18AF0F3DB99F574C95F284CCEC9 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
13:15:01.0156 3144  RDSessMgr - ok
13:15:01.0171 3144  [ ED761D453856F795A7FE056E42C36365 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
13:15:01.0171 3144  redbook - ok
13:15:01.0187 3144  [ 0E97EC96D6942CEEC2D188CC2EB69A01 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
13:15:01.0187 3144  RemoteAccess - ok
13:15:01.0218 3144  [ E4CD1F3D84E1C2CA0B8CF7501E201593 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
13:15:01.0218 3144  RemoteRegistry - ok
13:15:01.0234 3144  [ 2A02E21867497DF20B8FC95631395169 ] RpcLocator      C:\WINDOWS\system32\locator.exe
13:15:01.0234 3144  RpcLocator - ok
13:15:01.0250 3144  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B ] RpcSs           C:\WINDOWS\system32\rpcss.dll
13:15:01.0250 3144  RpcSs - ok
13:15:01.0281 3144  [ 4BDD71B4B521521499DFD14735C4F398 ] RSVP            C:\WINDOWS\system32\rsvp.exe
13:15:01.0281 3144  RSVP - ok
13:15:01.0281 3144  [ AFB8261B56CBA0D86AEB6DF682AF9785 ] SamSs           C:\WINDOWS\system32\lsass.exe
13:15:01.0296 3144  SamSs - ok
13:15:01.0312 3144  [ DCEC079FAD95D36C8DD5CB6D779DFE32 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
13:15:01.0312 3144  SCardSvr - ok
13:15:01.0328 3144  [ A050194A44D7FA8D7186ED2F4E8367AE ] Schedule        C:\WINDOWS\system32\schedsvc.dll
13:15:01.0343 3144  Schedule - ok
13:15:01.0343 3144  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:15:01.0343 3144  Secdrv - ok
13:15:01.0359 3144  [ BEE4CFD1D48C23B44CF4B974B0B79B2B ] seclogon        C:\WINDOWS\System32\seclogon.dll
13:15:01.0359 3144  seclogon - ok
13:15:01.0359 3144  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3 ] SENS            C:\WINDOWS\system32\sens.dll
13:15:01.0359 3144  SENS - ok
13:15:01.0375 3144  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
13:15:01.0375 3144  serenum - ok
13:15:01.0375 3144  [ CF24EB4F0412C82BCD1F4F35A025E31D ] Serial          C:\WINDOWS\system32\DRIVERS\serial.sys
13:15:01.0375 3144  Serial - ok
13:15:01.0390 3144  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
13:15:01.0390 3144  Sfloppy - ok
13:15:01.0421 3144  [ CAD058D5F8B889A87CA3EB3CF624DCEF ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
13:15:01.0421 3144  SharedAccess - ok
13:15:01.0437 3144  [ 2DB7D303C36DDD055215052F118E8E75 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:15:01.0437 3144  ShellHWDetection - ok
13:15:01.0468 3144  [ 32D6F7632234F0354C79E915CA4613D4 ] ShldDrv         C:\WINDOWS\system32\DRIVERS\ShlDrv51.sys
13:15:01.0468 3144  ShldDrv - ok
13:15:01.0468 3144  Simbad - ok
13:15:01.0515 3144  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Programme\Skype\Updater\Updater.exe
13:15:01.0515 3144  SkypeUpdate - ok
13:15:01.0531 3144  [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
13:15:01.0531 3144  SLIP - ok
13:15:01.0531 3144  Sparrow - ok
13:15:01.0578 3144  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
13:15:01.0578 3144  splitter - ok
13:15:01.0593 3144  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
13:15:01.0593 3144  Spooler - ok
13:15:01.0609 3144  [ 50FA898F8C032796D3B1B9951BB5A90F ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
13:15:01.0609 3144  sr - ok
13:15:01.0656 3144  [ FE77A85495065F3AD59C5C65B6C54182 ] srservice       C:\WINDOWS\system32\srsvc.dll
13:15:01.0656 3144  srservice - ok
13:15:01.0656 3144  SRTSP - ok
13:15:01.0656 3144  SRTSPX - ok
13:15:01.0656 3144  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
13:15:01.0671 3144  Srv - ok
13:15:01.0687 3144  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
13:15:01.0687 3144  SSDPSRV - ok
13:15:01.0687 3144  [ BC2C5985611C5356B24AEB370953DED9 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
13:15:01.0687 3144  stisvc - ok
13:15:01.0703 3144  [ 77813007BA6265C4B6098187E6ED79D2 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
13:15:01.0703 3144  streamip - ok
13:15:01.0718 3144  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
13:15:01.0718 3144  swenum - ok
13:15:01.0718 3144  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
13:15:01.0718 3144  swmidi - ok
13:15:01.0734 3144  SwPrv - ok
13:15:01.0734 3144  symc810 - ok
13:15:01.0734 3144  symc8xx - ok
13:15:01.0750 3144  sym_hi - ok
13:15:01.0750 3144  sym_u3 - ok
13:15:01.0750 3144  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
13:15:01.0750 3144  sysaudio - ok
13:15:01.0765 3144  [ 2903FFFA2523926D6219428040DCE6B9 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
13:15:01.0765 3144  SysmonLog - ok
13:15:01.0781 3144  [ 05903CAC4B98908D55EA5774775B382E ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
13:15:01.0781 3144  TapiSrv - ok
13:15:01.0828 3144  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:15:01.0828 3144  Tcpip - ok
13:15:01.0859 3144  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
13:15:01.0859 3144  TDPIPE - ok
13:15:01.0859 3144  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
13:15:01.0859 3144  TDTCP - ok
13:15:01.0875 3144  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
13:15:01.0875 3144  TermDD - ok
13:15:01.0890 3144  [ B7DE02C863D8F5A005A7BF375375A6A4 ] TermService     C:\WINDOWS\System32\termsrv.dll
13:15:01.0890 3144  TermService - ok
13:15:01.0921 3144  [ 2DB7D303C36DDD055215052F118E8E75 ] Themes          C:\WINDOWS\System32\shsvcs.dll
13:15:01.0921 3144  Themes - ok
13:15:01.0937 3144  [ 03681A1CE77F51586903869A5AB1DEAB ] TlntSvr         C:\WINDOWS\system32\tlntsvr.exe
13:15:01.0937 3144  TlntSvr - ok
13:15:01.0953 3144  TosIde - ok
13:15:01.0984 3144  [ EACBB8E02114329DDDECE593AEDC61FE ] TPSrv           C:\Programme\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
13:15:01.0984 3144  TPSrv - ok
13:15:01.0984 3144  [ 626504572B175867F30F3215C04B3E2F ] TrkWks          C:\WINDOWS\system32\trkwks.dll
13:15:01.0984 3144  TrkWks - ok
13:15:02.0000 3144  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
13:15:02.0000 3144  Udfs - ok
13:15:02.0000 3144  ultra - ok
13:15:02.0015 3144  [ C81B8635DEE0D3EF5F64B3DD643023A5 ] UMWdf           C:\WINDOWS\system32\wdfmgr.exe
13:15:02.0015 3144  UMWdf - ok
13:15:02.0046 3144  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
13:15:02.0046 3144  Update - ok
13:15:02.0062 3144  [ 1DFD8975D8C89214B98D9387C1125B49 ] upnphost        C:\WINDOWS\System32\upnphost.dll
13:15:02.0078 3144  upnphost - ok
13:15:02.0078 3144  [ 9B11E6118958E63E1FEF129466E2BDA7 ] UPS             C:\WINDOWS\System32\ups.exe
13:15:02.0078 3144  UPS - ok
13:15:02.0109 3144  [ E919708DB44ED8543A7C017953148330 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
13:15:02.0109 3144  usbaudio - ok
13:15:02.0125 3144  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:15:02.0125 3144  usbccgp - ok
13:15:02.0140 3144  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:15:02.0140 3144  usbehci - ok
13:15:02.0156 3144  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:15:02.0156 3144  usbhub - ok
13:15:02.0171 3144  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
13:15:02.0171 3144  usbprint - ok
13:15:02.0203 3144  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:15:02.0203 3144  USBSTOR - ok
13:15:02.0203 3144  [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:15:02.0203 3144  usbuhci - ok
13:15:02.0218 3144  [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo        C:\WINDOWS\system32\Drivers\usbvideo.sys
13:15:02.0218 3144  usbvideo - ok
13:15:02.0250 3144  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
13:15:02.0250 3144  VgaSave - ok
13:15:02.0250 3144  ViaIde - ok
13:15:02.0265 3144  [ A5A712F4E880874A477AF790B5186E1D ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
13:15:02.0265 3144  VolSnap - ok
13:15:02.0281 3144  [ 68F106273BE29E7B7EF8266977268E78 ] VSS             C:\WINDOWS\System32\vssvc.exe
13:15:02.0281 3144  VSS - ok
13:15:02.0328 3144  [ 719BAC5B5A9C2C1FDF7323FB7E36CA32 ] VX6000          C:\WINDOWS\system32\DRIVERS\VX6000Xp.sys
13:15:02.0343 3144  VX6000 - ok
13:15:02.0359 3144  [ 7B353059E665F8B7AD2BBEAEF597CF45 ] W32Time         C:\WINDOWS\system32\w32time.dll
13:15:02.0359 3144  W32Time - ok
13:15:02.0375 3144  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:15:02.0375 3144  Wanarp - ok
13:15:02.0390 3144  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
13:15:02.0390 3144  wdmaud - ok
13:15:02.0406 3144  [ 81727C9873E3905A2FFC1EBD07265002 ] WebClient       C:\WINDOWS\System32\webclnt.dll
13:15:02.0406 3144  WebClient - ok
13:15:02.0468 3144  [ 6F3F3973D97714CC5F906A19FE883729 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
13:15:02.0468 3144  winmgmt - ok
13:15:02.0500 3144  [ A477391B7A8B0A0DAABADB17CF533A4B ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
13:15:02.0500 3144  WmdmPmSN - ok
13:15:02.0531 3144  [ FFA4D901D46D07A5BAB2D8307FBB51A6 ] Wmi             C:\WINDOWS\System32\advapi32.dll
13:15:02.0531 3144  Wmi - ok
13:15:02.0562 3144  [ 93908111BA57A6E60EC2FA2DE202105C ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
13:15:02.0562 3144  WmiApSrv - ok
13:15:02.0562 3144  [ 0411D0433E8C48AD24B2EF32D7C97AE0 ] WNMFLT          C:\WINDOWS\system32\Drivers\WNMFLT.SYS
13:15:02.0562 3144  WNMFLT - ok
13:15:02.0593 3144  [ C1B3D9D75C3FB735F5FA3A5806ADED57 ] WpdUsb          C:\WINDOWS\system32\Drivers\wpdusb.sys
13:15:02.0593 3144  WpdUsb - ok
13:15:02.0609 3144  [ 300B3E84FAF1A5C1F791C159BA28035D ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
13:15:02.0625 3144  wscsvc - ok
13:15:02.0625 3144  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
13:15:02.0625 3144  WSTCODEC - ok
13:15:02.0640 3144  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085 ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
13:15:02.0640 3144  wuauserv - ok
13:15:02.0671 3144  [ C4F109C005F6725162D2D12CA751E4A7 ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
13:15:02.0671 3144  WZCSVC - ok
13:15:02.0703 3144  [ 0ADA34871A2E1CD2CAAFED1237A47750 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
13:15:02.0703 3144  xmlprov - ok
13:15:02.0703 3144  ================ Scan global ===============================
13:15:02.0734 3144  [ 2C60091CA5F67C3032EAB3B30390C27F ] C:\WINDOWS\system32\basesrv.dll
13:15:02.0750 3144  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
13:15:02.0750 3144  [ A28CE25B59C90E12743001A1F2AE3613 ] C:\WINDOWS\system32\winsrv.dll
13:15:02.0765 3144  [ A3EDBE9053889FB24AB22492472B39DC ] C:\WINDOWS\system32\services.exe
13:15:02.0765 3144  [Global] - ok
13:15:02.0781 3144  ================ Scan MBR ==================================
13:15:02.0796 3144  [ 72B8CE41AF0DE751C946802B3ED844B4 ] \Device\Harddisk0\DR0
13:15:02.0953 3144  \Device\Harddisk0\DR0 - ok
13:15:02.0953 3144  ================ Scan VBR ==================================
13:15:02.0953 3144  [ 91D6DA398F7010A39D662C317CE55667 ] \Device\Harddisk0\DR0\Partition1
13:15:02.0953 3144  \Device\Harddisk0\DR0\Partition1 - ok
13:15:02.0968 3144  [ 58DFF22BAD77A09AC8A572A3FE7D28A3 ] \Device\Harddisk0\DR0\Partition2
13:15:03.0031 3144  \Device\Harddisk0\DR0\Partition2 - ok
13:15:03.0031 3144  ============================================================
13:15:03.0031 3144  Scan finished
13:15:03.0031 3144  ============================================================
13:15:03.0031 3408  Detected object count: 0
13:15:03.0031 3408  Actual detected object count: 0

CG · 02.10.2012, 18:06

Rootkit-Suche mit Sophos Anti-Rootkit

Was sind Rootkits?

Wichtig:

Deinstalliere über Systemsteuerung => Software/Programme vorhandene CD-Emulatoren wie Alcohol, Daemon-Tools oder ähnliche, da sie bei der Rootkit-Suche das Ergebnis verfälschen können.
Alle Programme gegen Viren, Spyware, usw. müssen während des Scans deaktiviert sein.
Alle anderen Programme sollen geschlossen sein.
Während des Scans nichts am Rechner machen.
Nach jedem Scan der Rechner neu gestartet werden.
Nicht vergessen, nach dem Rootkit-Scan die Security-Programme wieder einzuschalten!

Gehe zu Sophos und lade deren Anti-Rootkitscanner hier herunter.
(Bebilderte Anleitung in Englisch) - Kurzanleitung in Deutsch.
Das Programm ist auch für Vista und Windows 7 geeignet.
Du bekommst eine Installationsdatei sar_15_sfx.exe.
Starte diese mit Rechtsklick als Administrator, akzeptiere die Lizenzbestimmungen und lasse das Programm installieren,
ändere den vorgegebenen Pfad C:\Program Files\Sophos\Sophos Anti-Rootkit nicht.
Schließe alle anderen Programme und klicke Yes, um den Scan zu starten.
Wenn der Scan erst später oder erneut durchgeführt werden soll:
C:\Program Files\Sophos\Sophos Anti-Rootkit\sargui.exe per Rechtsklick als Administrator starten.
Lasse unter Area alles angehakt und starte den Scan mit Start scan.

Der Scan dauert einige Zeit, wenn er fertig ist, poppt ein Fenster mit einer Zusammenfassung, klicke dort "Ok".
Beende den Sophos Rootkitscanner, dieser Scan dient zunächst nur der Analyse.
Starte den Windows Explorer und gib in der Adresszeile %temp% ein,
dort gibt es eine Datei namens sarscan.log, deren Inhalt bitte hier posten.

CG · 11.10.2012, 08:51

Noch da...?!?

CG · 19.10.2012, 09:21

Thread wird aufgrund fehlender Rückmeldung geschlossen

Thread wird mangels Rückmeldung mit einigen Tipps zur Absicherung geschlossen, damit wir ihn nicht weiter unter Beobachtung halten müssen und aus den Abos löschen können. Wenn Du noch Fragen oder wieder Zeit zum Weitermachen hast, eröffne bitte einen neuen Thread.

Lesenswerte Blogeinträge zum Thema Absicherung

Thema: Win XP Pro Ukash Trojaner hilfe für Noob

Themen-Optionen

Thema durchsuchen

Anzeige

Lesezeichen

Lesezeichen

Berechtigungen