Hallo,

seit einigen Tagen habe ich bei Firefox das Phänome, dass mir Suchvorschläge angezeigt werden. Die Suchvorschläge erscheinen in einem kleinen PopUp im Firefox-Tab unten rechts sowie bei einigen Seiten während der Eingabe in die Suchmaske.

Eine Suche mit verschiedenen Scannern hat kein Ergebnis gebracht.


Anbei die OTL.txt, eine extra.txt wurde beim Scan mit OTL nicht erstellt.

Als System habe ich WIN 7 Ultimate.

Vielleicht hat ja jemand eine Idee? Ich bin für jede Hilfe Dankbar..

Eine Suche mit verschiedenen Scannern hat kein Ergebnis gebracht.

Welche Scanner? Malwarebytes? Wenn ja bitte davon alle Logs posten auch wenn keine Funde dabei waren-

Anbei ein Log von Malwarebytes und ein Log von 3 Scans mit Eset.
Malwarebytes ohne Befund.
In den ersten beiden Scans von Eset ein Fund (a variant of Win32/Packed.VMProtect.AAD trojan), die Datei habe ich manuell entfernt.


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 7764

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

21.09.2011 20:42:56
mbam-log-2011-09-21 (20-42-56).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 225011
Laufzeit: 8 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=1398b0c8f2330543b067454f03017931
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2011-09-22 10:44:06
# local_time=2011-09-23 12:44:06 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 139682 68358471 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=53175
# found=1
# cleaned=0
# scan_time=2824
C:\Program Files (x86)\EA\Bulletstorm\Binaries\Win32\xlive.dll a variant of Win32/Packed.VMProtect.AAD trojan (unable to clean) 00000000000000000000000000000000 I
esets_scanner_update returned -1 esets_gle=53251
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=1398b0c8f2330543b067454f03017931
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-23 08:39:15
# local_time=2011-09-23 10:39:15 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 178214 68397003 0 0
# compatibility_mode=8192 67108863 100 0 38706 38706 0 0
# scanned=244
# found=1
# cleaned=0
# scan_time=2
C:\$Recycle.Bin\S-1-5-21-1594146350-2317732049-1139271448-1000\$RZQL277.dll a variant of Win32/Packed.VMProtect.AAD trojan (unable to clean) 00000000000000000000000000000000 I
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=1398b0c8f2330543b067454f03017931
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-23 12:30:44
# local_time=2011-09-23 02:30:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=5893 16776573 100 94 189461 68408250 0 0
# compatibility_mode=8192 67108863 100 0 49953 49953 0 0
# scanned=185750
# found=0
# cleaned=0
# scan_time=2664

Bitte routinemäßig einen Vollscan mit Malwarebytes machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

Hi,

Danke schon mal für die Hilfe.
Anbei ein aktuelles Log von Malewarebytes.

Seit Entfernung der kritischen Datei habe ich die Probleme mit Searchompletition nicht mehr, ich werde den Verdacht trotzdem nicht los, dass sich in meinem System etwas eingenistet hat.

VG,

Karl

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 7764

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

21.09.2011 20:42:56
mbam-log-2011-09-21 (20-42-56).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 225011
Laufzeit: 8 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Art des Suchlaufs: Quick-Scan

Sry aber ich wollte einen Vollscan sehen...bitte nachholen und Log posten!
Denk dran vorher die Signaturen von Malwarebytes zu aktualisieren, da gibt es sehr häufig neue Updates!

ui, das war das falsche Log.

Hier das richtige, mit aktuellen Signaturen:

Malwarebytes' Anti-Malware 1.51.2.1300
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Datenbank Version: 7784

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

24.09.2011 00:30:30
mbam-log-2011-09-24 (00-30-30).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|I:\|)
Durchsuchte Objekte: 404436
Laufzeit: 41 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Hinweis: Falls Du Deinen Benutzernamen unkenntlich gemacht hast, musst Du das Ausgesternte in Deinen richtigen Benutzernamen wieder verwandeln, sonst funktioniert das Script nicht!!

:OTL
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 18 D4 5E 04 31 76 CC 01  [binary data]
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: anttoolbar@ant.com:2.4.3
FF - prefs.js..network.proxy.autoconfig_url: "http://www.zdf.de/ZDFmediathek/content/631716?inPopup=true"
FF - prefs.js..network.proxy.http: "localhost"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.socks: "localhost"
FF - prefs.js..network.proxy.socks_port: 9050
FF - prefs.js..network.proxy.socks_remote_dns: true
FF - prefs.js..network.proxy.ssl: "localhost"
FF - prefs.js..network.proxy.ssl_port: 9666
[2011.09.07 21:37:15 | 000,000,000 | ---D | M] (Gutscheinrausch.de) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\mail@gutscheinrausch.de
[2011.09.07 21:37:15 | 000,000,000 | ---D | M] (Ad-Bye - For Facebook) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\s.alfa@idev.com
[2009.09.04 09:18:18 | 000,002,235 | ---- | M] () -- C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\gtogs2sc.default\searchplugins\askcom.xml
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\Shell - "" = AutoRun
O33 - MountPoints2\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\Shell\AutoRun\command - "" = I:\Launcher.exe
[2011.09.21 19:18:01 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\119614890736362740
[2011.09.21 19:17:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\119611678100825332
[2011.09.21 10:40:54 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\119614890734658804
[2011.09.21 10:40:51 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\119611678099121396
[2011.09.08 13:22:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\28050
:Commands
[emptytemp]
[resethosts]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hi,
Hier das Log:

All processes killed
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Local Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP| /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: anttoolbar@ant.com:2.4.3 removed from extensions.enabledItems
Prefs.js: "hxxp://www.zdf.de/ZDFmediathek/content/631716?inPopup=true" removed from network.proxy.autoconfig_url
Prefs.js: "localhost" removed from network.proxy.http
Prefs.js: 9666 removed from network.proxy.http_port
Prefs.js: "" removed from network.proxy.no_proxies_on
Prefs.js: "localhost" removed from network.proxy.socks
Prefs.js: 9050 removed from network.proxy.socks_port
Prefs.js: true removed from network.proxy.socks_remote_dns
Prefs.js: "localhost" removed from network.proxy.ssl
Prefs.js: 9666 removed from network.proxy.ssl_port
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\mail@gutscheinrausch.de\chrome\content\skin folder moved successfully.
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\mail@gutscheinrausch.de\chrome\content folder moved successfully.
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\mail@gutscheinrausch.de\chrome folder moved successfully.
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\mail@gutscheinrausch.de folder moved successfully.
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\s.alfa@idev.com\content folder moved successfully.
C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\gtogs2sc.default\extensions\s.alfa@idev.com folder moved successfully.
C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\gtogs2sc.default\searchplugins\askcom.xml moved successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c8f9f27e-d984-11e0-afa2-f6bf353836e5}\ not found.
File I:\Launcher.exe not found.
C:\Users\***\AppData\Local\119614890736362740\19030\cache\temp folder moved successfully.
C:\Users\***\AppData\Local\119614890736362740\19030\cache\persistent folder moved successfully.
C:\Users\***\AppData\Local\119614890736362740\19030\cache folder moved successfully.
C:\Users\***\AppData\Local\119614890736362740\19030 folder moved successfully.
C:\Users\***\AppData\Local\119614890736362740 folder moved successfully.
C:\Users\***\AppData\Local\119611678100825332\19030\cache\temp folder moved successfully.
C:\Users\***\AppData\Local\119611678100825332\19030\cache\persistent folder moved successfully.
C:\Users\***\AppData\Local\119611678100825332\19030\cache folder moved successfully.
C:\Users\***\AppData\Local\119611678100825332\19030 folder moved successfully.
C:\Users\***\AppData\Local\119611678100825332 folder moved successfully.
C:\Users\***\AppData\Local\119614890734658804\19030\cache\temp folder moved successfully.
C:\Users\***\AppData\Local\119614890734658804\19030\cache\persistent folder moved successfully.
C:\Users\***\AppData\Local\119614890734658804\19030\cache folder moved successfully.
C:\Users\***\AppData\Local\119614890734658804\19030 folder moved successfully.
C:\Users\***\AppData\Local\119614890734658804 folder moved successfully.
C:\Users\***\AppData\Local\119611678099121396\19030\cache\temp folder moved successfully.
C:\Users\***\AppData\Local\119611678099121396\19030\cache\persistent folder moved successfully.
C:\Users\***\AppData\Local\119611678099121396\19030\cache folder moved successfully.
C:\Users\***\AppData\Local\119611678099121396\19030 folder moved successfully.
C:\Users\***\AppData\Local\119611678099121396 folder moved successfully.
C:\Users\***\AppData\Local\28050\eidos\e2f8ccfe\cache\temp folder moved successfully.
C:\Users\***\AppData\Local\28050\eidos\e2f8ccfe\cache\persistent folder moved successfully.
C:\Users\***\AppData\Local\28050\eidos\e2f8ccfe\cache folder moved successfully.
C:\Users\***\AppData\Local\28050\eidos\e2f8ccfe folder moved successfully.
C:\Users\***\AppData\Local\28050\eidos folder moved successfully.
C:\Users\***\AppData\Local\28050 folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 637261 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 6713092 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: ***
->Temp folder emptied: 3767537497 bytes
->Temporary Internet Files folder emptied: 334461033 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 130998111 bytes
->Flash cache emptied: 8790 bytes

User: Malin
->Temp folder emptied: 60739 bytes
->Temporary Internet Files folder emptied: 1706658 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 69421043 bytes
->Flash cache emptied: 1105 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 200704 bytes
%systemroot%\System32 .tmp files removed: 3237984 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 243263630 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50568 bytes
RecycleBin emptied: 10733277142 bytes

Total Files Cleaned = 14.583,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.29.1 log created on 09242011_143343

Files\Folders moved on Reboot...
File move failed. C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SIMWWSIC\background-banner-right-v9[1].jpg moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SIMWWSIC\list-item-plus[2].png moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SHPLZ5YK\background_button_green_full[1].png moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KH8LA2OG\background-banner-middle-v9[1].jpg moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KH8LA2OG\background-banner-right-v45[1].jpg moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KH8LA2OG\background_banner_green_50_v9[1].jpg moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7HGU0XHL\background-banner-middle-v45[1].jpg moved successfully.
C:\Users\***\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7HGU0XHL\background_banner_green_50_v45[1].jpg moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Das Tool so einstellen wie unten im Bild angegeben - also beide Haken setzen, auf Start scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.




Falls du durch die Infektion auf deine Dokumente/Eigenen Dateien nicht zugreifen kannst, Verknüpfungen auf dem Desktop oder im Startmenü unter "alle Programme" fehlen, bitte unhide ausführen:
Downloade dir bitte unhide.exe und speichere diese Datei auf deinem Desktop.
Starte das Tool und es sollten alle Dateien und Ordner wieder sichtbar sein. ( Könnte eine Weile dauern )
Windows-Vista und Windows-7-User müssen das Tool per Rechtsklick als Administrator ausführen!

15:17:19.0159 5116 TDSS rootkit removing tool 2.6.0.0 Sep 23 2011 07:42:37
15:17:19.0597 5116 ============================================================
15:17:19.0597 5116 Current date / time: 2011/09/24 15:17:19.0597
15:17:19.0597 5116 SystemInfo:
15:17:19.0597 5116
15:17:19.0597 5116 OS Version: 6.1.7601 ServicePack: 1.0
15:17:19.0597 5116 Product type: Workstation
15:17:19.0597 5116 ComputerName: ***
15:17:19.0597 5116 UserName: ***
15:17:19.0597 5116 Windows directory: C:\Windows
15:17:19.0597 5116 System windows directory: C:\Windows
15:17:19.0597 5116 Running under WOW64
15:17:19.0597 5116 Processor architecture: Intel x64
15:17:19.0597 5116 Number of processors: 4
15:17:19.0597 5116 Page size: 0x1000
15:17:19.0597 5116 Boot type: Normal boot
15:17:19.0597 5116 ============================================================
15:17:19.0992 5116 Initialize success
15:17:36.0616 1844 ============================================================
15:17:36.0616 1844 Scan started
15:17:36.0616 1844 Mode: Manual;
15:17:36.0616 1844 ============================================================
15:17:36.0973 1844 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
15:17:36.0976 1844 1394ohci - ok
15:17:37.0049 1844 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
15:17:37.0053 1844 ACPI - ok
15:17:37.0108 1844 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
15:17:37.0109 1844 AcpiPmi - ok
15:17:37.0208 1844 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
15:17:37.0214 1844 adp94xx - ok
15:17:37.0237 1844 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
15:17:37.0242 1844 adpahci - ok
15:17:37.0257 1844 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
15:17:37.0260 1844 adpu320 - ok
15:17:37.0354 1844 afcdp (b794dd8acc5cc76177156463dab4bebb) C:\Windows\system32\DRIVERS\afcdp.sys
15:17:37.0356 1844 afcdp - ok
15:17:37.0462 1844 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
15:17:37.0467 1844 AFD - ok
15:17:37.0536 1844 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
15:17:37.0537 1844 agp440 - ok
15:17:37.0560 1844 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
15:17:37.0562 1844 aliide - ok
15:17:37.0577 1844 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
15:17:37.0578 1844 amdide - ok
15:17:37.0602 1844 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
15:17:37.0603 1844 AmdK8 - ok
15:17:37.0612 1844 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
15:17:37.0614 1844 AmdPPM - ok
15:17:37.0667 1844 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
15:17:37.0669 1844 amdsata - ok
15:17:37.0723 1844 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
15:17:37.0726 1844 amdsbs - ok
15:17:37.0744 1844 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
15:17:37.0745 1844 amdxata - ok
15:17:37.0828 1844 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
15:17:37.0830 1844 AppID - ok
15:17:38.0135 1844 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
15:17:38.0137 1844 arc - ok
15:17:38.0153 1844 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
15:17:38.0155 1844 arcsas - ok
15:17:38.0324 1844 ASMMAP64 (4c016fd76ed5c05e84ca8cab77993961) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys
15:17:38.0325 1844 ASMMAP64 - ok
15:17:38.0390 1844 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
15:17:38.0391 1844 aswFsBlk - ok
15:17:38.0466 1844 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
15:17:38.0467 1844 aswMonFlt - ok
15:17:38.0482 1844 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
15:17:38.0483 1844 aswRdr - ok
15:17:38.0506 1844 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
15:17:38.0510 1844 aswSnx - ok
15:17:38.0560 1844 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
15:17:38.0562 1844 aswSP - ok
15:17:38.0577 1844 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
15:17:38.0578 1844 aswTdi - ok
15:17:38.0596 1844 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
15:17:38.0597 1844 AsyncMac - ok
15:17:38.0666 1844 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
15:17:38.0667 1844 atapi - ok
15:17:38.0754 1844 athr (0acc06fcf46f64ed4f11e57ee461c1f4) C:\Windows\system32\DRIVERS\athrx.sys
15:17:38.0781 1844 athr - ok
15:17:38.0948 1844 ATKWMIACPIIO (ac31727f9946e9009480708e4d1b9986) C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys
15:17:38.0949 1844 ATKWMIACPIIO - ok
15:17:39.0039 1844 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
15:17:39.0045 1844 b06bdrv - ok
15:17:39.0108 1844 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
15:17:39.0112 1844 b57nd60a - ok
15:17:39.0134 1844 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
15:17:39.0135 1844 Beep - ok
15:17:39.0211 1844 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
15:17:39.0212 1844 blbdrive - ok
15:17:39.0260 1844 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
15:17:39.0262 1844 bowser - ok
15:17:39.0301 1844 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
15:17:39.0302 1844 BrFiltLo - ok
15:17:39.0311 1844 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
15:17:39.0312 1844 BrFiltUp - ok
15:17:39.0324 1844 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
15:17:39.0328 1844 Brserid - ok
15:17:39.0338 1844 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
15:17:39.0340 1844 BrSerWdm - ok
15:17:39.0350 1844 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
15:17:39.0351 1844 BrUsbMdm - ok
15:17:39.0359 1844 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
15:17:39.0360 1844 BrUsbSer - ok
15:17:39.0434 1844 BTATH_BUS (a83a91d07d1fe6bbe7a9db46ca00434b) C:\Windows\system32\DRIVERS\btath_bus.sys
15:17:39.0435 1844 BTATH_BUS - ok
15:17:39.0504 1844 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
15:17:39.0505 1844 BTHMODEM - ok
15:17:39.0518 1844 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
15:17:39.0522 1844 cdfs - ok
15:17:39.0608 1844 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
15:17:39.0611 1844 cdrom - ok
15:17:39.0666 1844 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
15:17:39.0668 1844 circlass - ok
15:17:39.0704 1844 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
15:17:39.0709 1844 CLFS - ok
15:17:39.0730 1844 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
15:17:39.0731 1844 CmBatt - ok
15:17:39.0748 1844 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
15:17:39.0750 1844 cmdide - ok
15:17:39.0821 1844 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
15:17:39.0826 1844 CNG - ok
15:17:39.0841 1844 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
15:17:39.0842 1844 Compbatt - ok
15:17:39.0903 1844 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
15:17:39.0904 1844 CompositeBus - ok
15:17:39.0962 1844 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
15:17:39.0964 1844 crcdisk - ok
15:17:40.0024 1844 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
15:17:40.0031 1844 CSC - ok
15:17:40.0096 1844 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
15:17:40.0098 1844 DfsC - ok
15:17:40.0179 1844 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
15:17:40.0180 1844 discache - ok
15:17:40.0203 1844 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
15:17:40.0205 1844 Disk - ok
15:17:40.0278 1844 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
15:17:40.0279 1844 drmkaud - ok
15:17:40.0351 1844 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
15:17:40.0356 1844 DXGKrnl - ok
15:17:40.0474 1844 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
15:17:40.0544 1844 ebdrv - ok
15:17:40.0612 1844 ElbyCDIO (15814b675e9d08953f2c64e4e5ccb4f4) C:\Windows\system32\Drivers\ElbyCDIO.sys
15:17:40.0613 1844 ElbyCDIO - ok
15:17:40.0643 1844 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
15:17:40.0649 1844 elxstor - ok
15:17:40.0702 1844 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
15:17:40.0704 1844 ErrDev - ok
15:17:40.0761 1844 ETD (871ab1bfa00eca5dfde99d6eece1bfd4) C:\Windows\system32\DRIVERS\ETD.sys
15:17:40.0763 1844 ETD - ok
15:17:40.0779 1844 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
15:17:40.0781 1844 exfat - ok
15:17:40.0808 1844 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
15:17:40.0811 1844 fastfat - ok
15:17:40.0822 1844 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
15:17:40.0824 1844 fdc - ok
15:17:40.0846 1844 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
15:17:40.0847 1844 FileInfo - ok
15:17:40.0872 1844 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
15:17:40.0873 1844 Filetrace - ok
15:17:40.0882 1844 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
15:17:40.0884 1844 flpydisk - ok
15:17:40.0981 1844 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
15:17:41.0002 1844 FltMgr - ok
15:17:41.0108 1844 fltsrv (b8afe7a30d34c0e9fdba81632294547c) C:\Windows\system32\DRIVERS\fltsrv.sys
15:17:41.0110 1844 fltsrv - ok
15:17:41.0161 1844 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
15:17:41.0163 1844 FsDepends - ok
15:17:41.0176 1844 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
15:17:41.0177 1844 Fs_Rec - ok
15:17:41.0229 1844 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
15:17:41.0232 1844 fvevol - ok
15:17:41.0249 1844 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
15:17:41.0251 1844 gagp30kx - ok
15:17:41.0313 1844 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
15:17:41.0314 1844 GEARAspiWDM - ok
15:17:41.0371 1844 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
15:17:41.0373 1844 hcw85cir - ok
15:17:41.0428 1844 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
15:17:41.0432 1844 HdAudAddService - ok
15:17:41.0487 1844 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
15:17:41.0489 1844 HDAudBus - ok
15:17:41.0497 1844 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
15:17:41.0498 1844 HidBatt - ok
15:17:41.0507 1844 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
15:17:41.0509 1844 HidBth - ok
15:17:41.0527 1844 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
15:17:41.0528 1844 HidIr - ok
15:17:41.0579 1844 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
15:17:41.0580 1844 HidUsb - ok
15:17:41.0669 1844 hotcore3 (c227dfcf703d02ead4d7e44b0ba7c181) C:\Windows\system32\DRIVERS\hotcore3.sys
15:17:41.0670 1844 hotcore3 - ok
15:17:41.0691 1844 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
15:17:41.0693 1844 HpSAMD - ok
15:17:41.0832 1844 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
15:17:41.0840 1844 HTTP - ok
15:17:41.0890 1844 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
15:17:41.0890 1844 hwpolicy - ok
15:17:41.0953 1844 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
15:17:41.0955 1844 i8042prt - ok
15:17:42.0039 1844 iaStor (f7ce9be72edac499b713eca6dae5d26f) C:\Windows\system32\DRIVERS\iaStor.sys
15:17:42.0041 1844 iaStor - ok
15:17:42.0103 1844 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
15:17:42.0109 1844 iaStorV - ok
15:17:42.0408 1844 igfx (795c99dc4f574c97c03d0bb39cf099ee) C:\Windows\system32\DRIVERS\igdkmd64.sys
15:17:42.0638 1844 igfx - ok
15:17:42.0663 1844 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
15:17:42.0664 1844 iirsp - ok
15:17:42.0803 1844 IntcAzAudAddService (9f573c952961f444f400489e81eca381) C:\Windows\system32\drivers\RTKVHD64.sys
15:17:42.0817 1844 IntcAzAudAddService - ok
15:17:42.0843 1844 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
15:17:42.0844 1844 intelide - ok
15:17:42.0908 1844 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
15:17:42.0909 1844 intelppm - ok
15:17:42.0966 1844 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:17:42.0968 1844 IpFilterDriver - ok
15:17:43.0001 1844 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
15:17:43.0003 1844 IPMIDRV - ok
15:17:43.0027 1844 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
15:17:43.0029 1844 IPNAT - ok
15:17:43.0086 1844 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
15:17:43.0087 1844 IRENUM - ok
15:17:43.0103 1844 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
15:17:43.0105 1844 isapnp - ok
15:17:43.0134 1844 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
15:17:43.0137 1844 iScsiPrt - ok
15:17:43.0206 1844 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
15:17:43.0207 1844 kbdclass - ok
15:17:43.0263 1844 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
15:17:43.0265 1844 kbdhid - ok
15:17:43.0334 1844 kbfiltr (e63ef8c3271d014f14e2469ce75fecb4) C:\Windows\system32\DRIVERS\kbfiltr.sys
15:17:43.0335 1844 kbfiltr - ok
15:17:43.0351 1844 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
15:17:43.0353 1844 KSecDD - ok
15:17:43.0418 1844 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
15:17:43.0420 1844 KSecPkg - ok
15:17:43.0439 1844 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
15:17:43.0440 1844 ksthunk - ok
15:17:43.0576 1844 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
15:17:43.0578 1844 lltdio - ok
15:17:43.0639 1844 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
15:17:43.0641 1844 LSI_FC - ok
15:17:43.0685 1844 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
15:17:43.0687 1844 LSI_SAS - ok
15:17:43.0727 1844 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
15:17:43.0762 1844 LSI_SAS2 - ok
15:17:43.0780 1844 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
15:17:43.0782 1844 LSI_SCSI - ok
15:17:43.0794 1844 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
15:17:43.0796 1844 luafv - ok
15:17:43.0866 1844 MBAMProtector (23a854450dab5c9b7a42ab9be6f2e4bd) C:\Windows\system32\drivers\mbam.sys
15:17:43.0866 1844 MBAMProtector - ok
15:17:43.0902 1844 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
15:17:43.0903 1844 megasas - ok
15:17:43.0923 1844 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
15:17:43.0927 1844 MegaSR - ok
15:17:43.0982 1844 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
15:17:43.0983 1844 MEIx64 - ok
15:17:44.0046 1844 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
15:17:44.0048 1844 Modem - ok
15:17:44.0113 1844 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
15:17:44.0114 1844 monitor - ok
15:17:44.0182 1844 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
15:17:44.0183 1844 mouclass - ok
15:17:44.0235 1844 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
15:17:44.0236 1844 mouhid - ok
15:17:44.0291 1844 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
15:17:44.0292 1844 mountmgr - ok
15:17:44.0345 1844 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
15:17:44.0348 1844 mpio - ok
15:17:44.0370 1844 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
15:17:44.0372 1844 mpsdrv - ok
15:17:44.0428 1844 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
15:17:44.0431 1844 MRxDAV - ok
15:17:44.0463 1844 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:17:44.0465 1844 mrxsmb - ok
15:17:44.0506 1844 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:17:44.0509 1844 mrxsmb10 - ok
15:17:44.0560 1844 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:17:44.0562 1844 mrxsmb20 - ok
15:17:44.0584 1844 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
15:17:44.0585 1844 msahci - ok
15:17:44.0642 1844 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
15:17:44.0644 1844 msdsm - ok
15:17:44.0668 1844 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
15:17:44.0669 1844 Msfs - ok
15:17:44.0686 1844 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
15:17:44.0687 1844 mshidkmdf - ok
15:17:44.0703 1844 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
15:17:44.0704 1844 msisadrv - ok
15:17:44.0776 1844 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
15:17:44.0777 1844 MSKSSRV - ok
15:17:44.0786 1844 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
15:17:44.0788 1844 MSPCLOCK - ok
15:17:44.0809 1844 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
15:17:44.0810 1844 MSPQM - ok
15:17:44.0870 1844 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
15:17:44.0874 1844 MsRPC - ok
15:17:44.0938 1844 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
15:17:44.0938 1844 mssmbios - ok
15:17:44.0955 1844 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
15:17:44.0956 1844 MSTEE - ok
15:17:44.0979 1844 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
15:17:44.0980 1844 MTConfig - ok
15:17:45.0031 1844 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
15:17:45.0032 1844 Mup - ok
15:17:45.0099 1844 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
15:17:45.0104 1844 NativeWifiP - ok
15:17:45.0186 1844 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
15:17:45.0201 1844 NDIS - ok
15:17:45.0260 1844 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
15:17:45.0261 1844 NdisCap - ok
15:17:45.0320 1844 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
15:17:45.0321 1844 NdisTapi - ok
15:17:45.0399 1844 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
15:17:45.0401 1844 Ndisuio - ok
15:17:45.0460 1844 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
15:17:45.0463 1844 NdisWan - ok
15:17:45.0522 1844 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
15:17:45.0524 1844 NDProxy - ok
15:17:45.0574 1844 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
15:17:45.0575 1844 NetBIOS - ok
15:17:45.0637 1844 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
15:17:45.0641 1844 NetBT - ok
15:17:45.0710 1844 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
15:17:45.0712 1844 nfrd960 - ok
15:17:45.0814 1844 NPF (351533acc2a069b94e80bbfc177e8fdf) C:\Windows\system32\drivers\npf.sys
15:17:45.0815 1844 NPF - ok
15:17:45.0824 1844 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
15:17:45.0826 1844 Npfs - ok
15:17:45.0860 1844 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
15:17:45.0862 1844 nsiproxy - ok
15:17:45.0954 1844 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
15:17:45.0994 1844 Ntfs - ok
15:17:46.0012 1844 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
15:17:46.0013 1844 Null - ok
15:17:46.0305 1844 nvlddmkm (cc1efea1f0ab17e59bd4b5baff3e5cb0) C:\Windows\system32\DRIVERS\nvlddmkm.sys
15:17:46.0371 1844 nvlddmkm - ok
15:17:46.0432 1844 nvpciflt (2e5de4423bf6d1c44609febed7b1ff0f) C:\Windows\system32\DRIVERS\nvpciflt.sys
15:17:46.0433 1844 nvpciflt - ok
15:17:46.0498 1844 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
15:17:46.0501 1844 nvraid - ok
15:17:46.0521 1844 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
15:17:46.0524 1844 nvstor - ok
15:17:46.0582 1844 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
15:17:46.0585 1844 nv_agp - ok
15:17:46.0630 1844 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
15:17:46.0633 1844 ohci1394 - ok
15:17:46.0696 1844 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
15:17:46.0699 1844 Parport - ok
15:17:46.0724 1844 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
15:17:46.0726 1844 partmgr - ok
15:17:46.0756 1844 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
15:17:46.0758 1844 pci - ok
15:17:46.0780 1844 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
15:17:46.0782 1844 pciide - ok
15:17:46.0833 1844 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
15:17:46.0835 1844 pcmcia - ok
15:17:46.0911 1844 pcouffin (af7ce12c4f3dc8cb2b07685c916bbcfe) C:\Windows\system32\Drivers\pcouffin.sys
15:17:46.0913 1844 pcouffin - ok
15:17:46.0938 1844 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
15:17:46.0939 1844 pcw - ok
15:17:46.0968 1844 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
15:17:46.0976 1844 PEAUTH - ok
15:17:47.0110 1844 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
15:17:47.0113 1844 PptpMiniport - ok
15:17:47.0132 1844 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
15:17:47.0134 1844 Processor - ok
15:17:47.0228 1844 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
15:17:47.0230 1844 Psched - ok
15:17:47.0275 1844 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
15:17:47.0315 1844 ql2300 - ok
15:17:47.0327 1844 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
15:17:47.0329 1844 ql40xx - ok
15:17:47.0360 1844 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
15:17:47.0361 1844 QWAVEdrv - ok
15:17:47.0386 1844 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
15:17:47.0387 1844 RasAcd - ok
15:17:47.0449 1844 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
15:17:47.0451 1844 RasAgileVpn - ok
15:17:47.0518 1844 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:17:47.0521 1844 Rasl2tp - ok
15:17:47.0539 1844 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
15:17:47.0541 1844 RasPppoe - ok
15:17:47.0605 1844 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
15:17:47.0607 1844 RasSstp - ok
15:17:47.0664 1844 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
15:17:47.0668 1844 rdbss - ok
15:17:47.0720 1844 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
15:17:47.0721 1844 rdpbus - ok
15:17:47.0736 1844 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:17:47.0737 1844 RDPCDD - ok
15:17:47.0808 1844 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
15:17:47.0811 1844 RDPDR - ok
15:17:47.0821 1844 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
15:17:47.0822 1844 RDPENCDD - ok
15:17:47.0853 1844 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
15:17:47.0855 1844 RDPREFMP - ok
15:17:47.0926 1844 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
15:17:47.0928 1844 RdpVideoMiniport - ok
15:17:47.0984 1844 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
15:17:47.0988 1844 RDPWD - ok
15:17:48.0044 1844 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
15:17:48.0047 1844 rdyboost - ok
15:17:48.0121 1844 RimUsb (7b04c9843921ab1f695fb395422c5360) C:\Windows\system32\Drivers\RimUsb_AMD64.sys
15:17:48.0123 1844 RimUsb - ok
15:17:48.0200 1844 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
15:17:48.0202 1844 rspndr - ok
15:17:48.0344 1844 RSUSBVSTOR (e57fac2cdb73f06586ed2ed310b80932) C:\Windows\system32\Drivers\RtsUVStor.sys
15:17:48.0346 1844 RSUSBVSTOR - ok
15:17:48.0405 1844 RTL8167 (6d3c7e7d82d3dc92dc2a8b0df9f20f8a) C:\Windows\system32\DRIVERS\Rt64win7.sys
15:17:48.0408 1844 RTL8167 - ok
15:17:48.0463 1844 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
15:17:48.0464 1844 s3cap - ok
15:17:48.0528 1844 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
15:17:48.0531 1844 sbp2port - ok
15:17:48.0591 1844 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
15:17:48.0593 1844 scfilter - ok
15:17:48.0613 1844 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
15:17:48.0614 1844 secdrv - ok
15:17:48.0635 1844 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
15:17:48.0636 1844 Serenum - ok
15:17:48.0654 1844 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
15:17:48.0656 1844 Serial - ok
15:17:48.0705 1844 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
15:17:48.0707 1844 sermouse - ok
15:17:48.0759 1844 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
15:17:48.0761 1844 sffdisk - ok
15:17:48.0775 1844 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
15:17:48.0776 1844 sffp_mmc - ok
15:17:48.0794 1844 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
15:17:48.0797 1844 sffp_sd - ok
15:17:48.0804 1844 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
15:17:48.0806 1844 sfloppy - ok
15:17:48.0831 1844 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
15:17:48.0832 1844 SiSRaid2 - ok
15:17:48.0853 1844 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
15:17:48.0855 1844 SiSRaid4 - ok
15:17:48.0888 1844 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
15:17:48.0890 1844 Smb - ok
15:17:48.0961 1844 snapman (ed46ec5dc276570908fc4d9de0628c71) C:\Windows\system32\DRIVERS\snapman.sys
15:17:48.0964 1844 snapman - ok
15:17:48.0989 1844 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
15:17:48.0990 1844 spldr - ok
15:17:49.0056 1844 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
15:17:49.0061 1844 srv - ok
15:17:49.0103 1844 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
15:17:49.0108 1844 srv2 - ok
15:17:49.0201 1844 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
15:17:49.0204 1844 srvnet - ok
15:17:49.0269 1844 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
15:17:49.0271 1844 stexstor - ok
15:17:49.0335 1844 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
15:17:49.0336 1844 storflt - ok
15:17:49.0352 1844 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
15:17:49.0353 1844 storvsc - ok
15:17:49.0374 1844 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
15:17:49.0375 1844 swenum - ok
15:17:49.0387 1844 Synth3dVsc - ok
15:17:49.0513 1844 Tcpip (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\drivers\tcpip.sys
15:17:49.0559 1844 Tcpip - ok
15:17:49.0647 1844 TCPIP6 (f0e98c00a09fdf791525829a1d14240f) C:\Windows\system32\DRIVERS\tcpip.sys
15:17:49.0659 1844 TCPIP6 - ok
15:17:49.0748 1844 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
15:17:49.0751 1844 tcpipreg - ok
15:17:49.0773 1844 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
15:17:49.0774 1844 TDPIPE - ok
15:17:49.0854 1844 tdrpman (969bad6a9a5b6de983a8b2b84276ceb0) C:\Windows\system32\DRIVERS\tdrpman.sys
15:17:49.0884 1844 tdrpman - ok
15:17:49.0893 1844 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
15:17:49.0895 1844 TDTCP - ok
15:17:49.0995 1844 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
15:17:49.0998 1844 tdx - ok
15:17:50.0014 1844 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
15:17:50.0015 1844 TermDD - ok
15:17:50.0055 1844 timounter (990447334615a0db84f620e1426dcfe0) C:\Windows\system32\DRIVERS\timntr.sys
15:17:50.0067 1844 timounter - ok
15:17:50.0102 1844 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:17:50.0104 1844 tssecsrv - ok
15:17:50.0137 1844 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
15:17:50.0139 1844 TsUsbFlt - ok
15:17:50.0147 1844 tsusbhub - ok
15:17:50.0224 1844 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
15:17:50.0227 1844 tunnel - ok
15:17:50.0299 1844 TurboB (b355581a9da34c92e2dbafa410d2f829) C:\Windows\system32\DRIVERS\TurboB.sys
15:17:50.0300 1844 TurboB - ok
15:17:50.0328 1844 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
15:17:50.0330 1844 uagp35 - ok
15:17:50.0381 1844 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
15:17:50.0386 1844 udfs - ok
15:17:50.0460 1844 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
15:17:50.0462 1844 uliagpkx - ok
15:17:50.0534 1844 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
15:17:50.0536 1844 umbus - ok
15:17:50.0551 1844 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
15:17:50.0552 1844 UmPass - ok
15:17:50.0613 1844 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
15:17:50.0615 1844 USBAAPL64 - ok
15:17:50.0646 1844 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
15:17:50.0648 1844 usbccgp - ok
15:17:50.0701 1844 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
15:17:50.0703 1844 usbcir - ok
15:17:50.0723 1844 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
15:17:50.0725 1844 usbehci - ok
15:17:50.0753 1844 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
15:17:50.0757 1844 usbhub - ok
15:17:50.0788 1844 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
15:17:50.0790 1844 usbohci - ok
15:17:50.0812 1844 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
15:17:50.0813 1844 usbprint - ok
15:17:50.0832 1844 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:17:50.0833 1844 USBSTOR - ok
15:17:50.0842 1844 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
15:17:50.0843 1844 usbuhci - ok
15:17:50.0900 1844 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
15:17:50.0903 1844 usbvideo - ok
15:17:50.0954 1844 VClone (f15bad7727722902ec821c2eccfb4801) C:\Windows\system32\DRIVERS\VClone.sys
15:17:50.0956 1844 VClone - ok
15:17:51.0009 1844 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
15:17:51.0010 1844 vdrvroot - ok
15:17:51.0022 1844 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
15:17:51.0024 1844 vga - ok
15:17:51.0042 1844 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
15:17:51.0045 1844 VgaSave - ok
15:17:51.0084 1844 VGPU - ok
15:17:51.0237 1844 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
15:17:51.0239 1844 vhdmp - ok
15:17:51.0266 1844 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
15:17:51.0268 1844 viaide - ok
15:17:51.0335 1844 vididr (4065ec01ae001c4db4a9a85cc1767d99) C:\Windows\system32\DRIVERS\vididr.sys
15:17:51.0338 1844 vididr - ok
15:17:51.0394 1844 vidsflt58 (6dc5d9a5bba6a858d06b7abefba1a1e6) C:\Windows\system32\DRIVERS\vsflt58.sys
15:17:51.0396 1844 vidsflt58 - ok
15:17:51.0413 1844 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
15:17:51.0416 1844 vmbus - ok
15:17:51.0441 1844 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
15:17:51.0443 1844 VMBusHID - ok
15:17:51.0464 1844 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
15:17:51.0465 1844 volmgr - ok
15:17:51.0532 1844 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
15:17:51.0535 1844 volmgrx - ok
15:17:51.0554 1844 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
15:17:51.0557 1844 volsnap - ok
15:17:51.0617 1844 vpcbus (b4a73ca4ef9a02b9738cea9ad5fe5917) C:\Windows\system32\DRIVERS\vpchbus.sys
15:17:51.0619 1844 vpcbus - ok
15:17:51.0735 1844 vpcnfltr (e675fb2b48c54f09895482e2253b289c) C:\Windows\system32\DRIVERS\vpcnfltr.sys
15:17:51.0737 1844 vpcnfltr - ok
15:17:51.0810 1844 vpcusb (5fb42082b0d19a0268705f1dd343df20) C:\Windows\system32\DRIVERS\vpcusb.sys
15:17:51.0812 1844 vpcusb - ok
15:17:51.0867 1844 vpcvmm (207b6539799cc1c112661a9b620dd233) C:\Windows\system32\drivers\vpcvmm.sys
15:17:51.0869 1844 vpcvmm - ok
15:17:51.0887 1844 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
15:17:51.0890 1844 vsmraid - ok
15:17:51.0908 1844 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
15:17:51.0909 1844 vwifibus - ok
15:17:51.0961 1844 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
15:17:51.0962 1844 vwififlt - ok
15:17:51.0987 1844 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
15:17:51.0989 1844 WacomPen - ok
15:17:52.0041 1844 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:17:52.0043 1844 WANARP - ok
15:17:52.0071 1844 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
15:17:52.0072 1844 Wanarpv6 - ok
15:17:52.0089 1844 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
15:17:52.0091 1844 Wd - ok
15:17:52.0164 1844 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
15:17:52.0172 1844 Wdf01000 - ok
15:17:52.0255 1844 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
15:17:52.0256 1844 WfpLwf - ok
15:17:52.0319 1844 WimFltr (52ded146e4797e6ccf94799e8e22bb2a) C:\Windows\system32\DRIVERS\wimfltr.sys
15:17:52.0322 1844 WimFltr - ok
15:17:52.0347 1844 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
15:17:52.0348 1844 WIMMount - ok
15:17:52.0469 1844 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
15:17:52.0470 1844 WmiAcpi - ok
15:17:52.0537 1844 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
15:17:52.0538 1844 ws2ifsl - ok
15:17:52.0598 1844 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
15:17:52.0600 1844 WudfPf - ok
15:17:52.0627 1844 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:17:52.0631 1844 WUDFRd - ok
15:17:52.0689 1844 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
15:17:52.0702 1844 \Device\Harddisk0\DR0 - ok
15:17:52.0705 1844 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk1\DR1
15:17:52.0709 1844 \Device\Harddisk1\DR1 - ok
15:17:52.0712 1844 Boot (0x1200) (770e2b232568326d69c2504bfda85bb5) \Device\Harddisk0\DR0\Partition0
15:17:52.0713 1844 \Device\Harddisk0\DR0\Partition0 - ok
15:17:52.0730 1844 Boot (0x1200) (0f73afeb4c2756c7ab4a2ee12e4ae6b6) \Device\Harddisk0\DR0\Partition1
15:17:52.0731 1844 \Device\Harddisk0\DR0\Partition1 - ok
15:17:52.0733 1844 Boot (0x1200) (6c844673b145924ca4f2427e100a3739) \Device\Harddisk1\DR1\Partition0
15:17:52.0734 1844 \Device\Harddisk1\DR1\Partition0 - ok
15:17:52.0737 1844 Boot (0x1200) (14b6cff2c6cb76c48199016b6bcde6ff) \Device\Harddisk1\DR1\Partition1
15:17:52.0739 1844 \Device\Harddisk1\DR1\Partition1 - ok
15:17:52.0739 1844 ============================================================
15:17:52.0739 1844 Scan finished
15:17:52.0739 1844 ============================================================
15:17:52.0747 3888 Detected object count: 0
15:17:52.0747 3888 Actual detected object count: 0

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop.

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.