Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Roque.Fake HDD

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 22.03.2012, 19:39   #16
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Update Malwarebytes und mach einen Fullscan.

Alt 23.03.2012, 09:09   #17
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.22.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Alexander :: ALEXANDER-PC [Administrator]

Schutz: Deaktiviert

23.03.2012 08:38:06
mbam-log-2012-03-23 (09-06-26).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 288167
Laufzeit: 28 Minute(n), 7 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Alexander\Desktop\RK_Quarantine\ldmtqETJLYi.exe.vir (Rogue.FakeHDD) -> Keine Aktion durchgeführt.
C:\_OTL\MovedFiles\03192012_145030\C_ProgramData\ldmtqETJLYi.exe (Rogue.FakeHDD) -> Keine Aktion durchgeführt.
C:\_OTL\MovedFiles\03192012_145030\C_ProgramData\vUlRhWJFi0bknB.exe (Trojan.FakeAlert) -> Keine Aktion durchgeführt.

(Ende)





Die Programme im Startmenü sind leider immer noch nicht abrufbar. Noch Ideen? ;-)
__________________


Geändert von Schalkefan (23.03.2012 um 09:16 Uhr)

Alt 23.03.2012, 13:13   #18
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Dowloade Dir bitte TDSSKiller.exe und speichere die Datei am Desktop.
  • Schließe alle laufenden Programme.
  • Trenne dich von Internet.
  • Deaktiviere deine AntiViren Software.
  • Starte TDSSkiller.exe mit Doppelklick.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Drücke auf Start scan.
    Mache während dem Scan nichts am Rechner
    1. Sollte das Tool keine Funde aufweisen, klicke Close um es zu schließen.
    2. Wurde etwas gefunden werden die Funde in Scan results - Select action for found objects angezeigt und geben 3 Auswahlmöglichkeiten.
      Gehe sicher das Cure ( default ) angehackt ist ! Drücke Continue --> Reboot.
  • Die Logfile ist nach dem Neustart auf deinem Systemlaufwerk ( meist C: ) unter TDSSKiller_version_date_time_log.txt zu finden.
  • Bitte poste mir den Inhalt hier in deinen Thread.
Bebilderte Anleitung zur Benutzung von TDSSKiller.
__________________

Alt 23.03.2012, 16:55   #19
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Hat nichts gefunden.
Und nun?

Gruß

Alt 23.03.2012, 19:15   #20
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Poste mir das Log.


Alt 24.03.2012, 10:04   #21
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



16:52:13.0939 4460 TDSS rootkit removing tool 2.7.22.0 Mar 21 2012 17:40:00
16:52:13.0953 4460 ============================================================
16:52:13.0953 4460 Current date / time: 2012/03/23 16:52:13.0953
16:52:13.0953 4460 SystemInfo:
16:52:13.0953 4460
16:52:13.0953 4460 OS Version: 6.1.7601 ServicePack: 1.0
16:52:13.0953 4460 Product type: Workstation
16:52:13.0953 4460 ComputerName: ALEXANDER-PC
16:52:13.0954 4460 UserName: Alexander
16:52:13.0954 4460 Windows directory: C:\windows
16:52:13.0954 4460 System windows directory: C:\windows
16:52:13.0954 4460 Running under WOW64
16:52:13.0954 4460 Processor architecture: Intel x64
16:52:13.0954 4460 Number of processors: 2
16:52:13.0954 4460 Page size: 0x1000
16:52:13.0954 4460 Boot type: Normal boot
16:52:13.0954 4460 ============================================================
16:52:14.0584 4460 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:52:14.0595 4460 \Device\Harddisk0\DR0:
16:52:14.0595 4460 MBR used
16:52:14.0595 4460 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
16:52:14.0595 4460 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x34BA1000
16:52:14.0629 4460 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x34C06000, BlocksNum 0x39FD800
16:52:14.0789 4460 Initialize success
16:52:14.0789 4460 ============================================================
16:52:21.0346 0744 ============================================================
16:52:21.0346 0744 Scan started
16:52:21.0346 0744 Mode: Manual;
16:52:21.0346 0744 ============================================================
16:52:22.0341 0744 1394ohci (a87d604aea360176311474c87a63bb88) C:\windows\system32\drivers\1394ohci.sys
16:52:22.0347 0744 1394ohci - ok
16:52:22.0578 0744 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\windows\system32\drivers\ACPI.sys
16:52:22.0587 0744 ACPI - ok
16:52:22.0877 0744 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\windows\system32\drivers\acpipmi.sys
16:52:22.0879 0744 AcpiPmi - ok
16:52:23.0093 0744 ACPIVPC (5bbff8b826ec38d32c26334e079c7efc) C:\windows\system32\DRIVERS\AcpiVpc.sys
16:52:23.0107 0744 ACPIVPC - ok
16:52:23.0449 0744 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:52:23.0450 0744 AdobeARMservice - ok
16:52:23.0715 0744 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\drivers\adp94xx.sys
16:52:23.0726 0744 adp94xx - ok
16:52:23.0940 0744 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\drivers\adpahci.sys
16:52:23.0962 0744 adpahci - ok
16:52:24.0095 0744 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\drivers\adpu320.sys
16:52:24.0104 0744 adpu320 - ok
16:52:24.0212 0744 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\windows\System32\aelupsvc.dll
16:52:24.0214 0744 AeLookupSvc - ok
16:52:24.0339 0744 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\windows\system32\drivers\afd.sys
16:52:24.0351 0744 AFD - ok
16:52:24.0463 0744 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\drivers\agp440.sys
16:52:24.0466 0744 agp440 - ok
16:52:24.0547 0744 ALG (3290d6946b5e30e70414990574883ddb) C:\windows\System32\alg.exe
16:52:24.0549 0744 ALG - ok
16:52:24.0641 0744 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\drivers\aliide.sys
16:52:24.0642 0744 aliide - ok
16:52:24.0741 0744 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\drivers\amdide.sys
16:52:24.0744 0744 amdide - ok
16:52:24.0857 0744 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\drivers\amdk8.sys
16:52:24.0860 0744 AmdK8 - ok
16:52:24.0989 0744 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\drivers\amdppm.sys
16:52:25.0001 0744 AmdPPM - ok
16:52:25.0137 0744 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\windows\system32\drivers\amdsata.sys
16:52:25.0147 0744 amdsata - ok
16:52:25.0288 0744 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\drivers\amdsbs.sys
16:52:25.0298 0744 amdsbs - ok
16:52:25.0434 0744 amdxata (540daf1cea6094886d72126fd7c33048) C:\windows\system32\drivers\amdxata.sys
16:52:25.0443 0744 amdxata - ok
16:52:25.0599 0744 AppID (89a69c3f2f319b43379399547526d952) C:\windows\system32\drivers\appid.sys
16:52:25.0613 0744 AppID - ok
16:52:25.0703 0744 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\windows\System32\appidsvc.dll
16:52:25.0714 0744 AppIDSvc - ok
16:52:25.0803 0744 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\windows\System32\appinfo.dll
16:52:25.0805 0744 Appinfo - ok
16:52:25.0924 0744 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\drivers\arc.sys
16:52:25.0928 0744 arc - ok
16:52:26.0037 0744 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\drivers\arcsas.sys
16:52:26.0041 0744 arcsas - ok
16:52:26.0169 0744 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
16:52:26.0179 0744 AsyncMac - ok
16:52:26.0329 0744 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\drivers\atapi.sys
16:52:26.0335 0744 atapi - ok
16:52:26.0857 0744 athr (782d36bad8ddbf008d02e055dbe70f82) C:\windows\system32\DRIVERS\athrx.sys
16:52:26.0964 0744 athr - ok
16:52:27.0210 0744 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
16:52:27.0234 0744 AudioEndpointBuilder - ok
16:52:27.0250 0744 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
16:52:27.0259 0744 AudioSrv - ok
16:52:27.0355 0744 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\windows\System32\AxInstSV.dll
16:52:27.0357 0744 AxInstSV - ok
16:52:27.0504 0744 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\drivers\bxvbda.sys
16:52:27.0521 0744 b06bdrv - ok
16:52:27.0651 0744 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
16:52:27.0668 0744 b57nd60a - ok
16:52:27.0781 0744 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\windows\System32\bdesvc.dll
16:52:27.0785 0744 BDESVC - ok
16:52:27.0921 0744 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
16:52:27.0934 0744 Beep - ok
16:52:28.0059 0744 BFE (82974d6a2fd19445cc5171fc378668a4) C:\windows\System32\bfe.dll
16:52:28.0075 0744 BFE - ok
16:52:28.0179 0744 BITS (1ea7969e3271cbc59e1730697dc74682) C:\windows\system32\qmgr.dll
16:52:28.0191 0744 BITS - ok
16:52:28.0332 0744 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
16:52:28.0340 0744 blbdrive - ok
16:52:28.0429 0744 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\windows\system32\DRIVERS\bowser.sys
16:52:28.0438 0744 bowser - ok
16:52:28.0521 0744 BPntDrv (aaa4f992f879977a000fe8b8c730cd2c) C:\windows\system32\drivers\BPntDrv.sys
16:52:28.0523 0744 BPntDrv - ok
16:52:28.0618 0744 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\drivers\BrFiltLo.sys
16:52:28.0621 0744 BrFiltLo - ok
16:52:28.0730 0744 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\drivers\BrFiltUp.sys
16:52:28.0737 0744 BrFiltUp - ok
16:52:28.0835 0744 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\windows\system32\DRIVERS\bridge.sys
16:52:28.0847 0744 BridgeMP - ok
16:52:28.0958 0744 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\windows\System32\browser.dll
16:52:28.0961 0744 Browser - ok
16:52:29.0166 0744 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
16:52:29.0176 0744 Brserid - ok
16:52:29.0275 0744 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
16:52:29.0291 0744 BrSerWdm - ok
16:52:29.0386 0744 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
16:52:29.0388 0744 BrUsbMdm - ok
16:52:29.0508 0744 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
16:52:29.0521 0744 BrUsbSer - ok
16:52:29.0624 0744 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
16:52:29.0634 0744 BthEnum - ok
16:52:29.0762 0744 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys
16:52:29.0769 0744 BTHMODEM - ok
16:52:29.0871 0744 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
16:52:29.0880 0744 BthPan - ok
16:52:30.0037 0744 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\windows\System32\Drivers\BTHport.sys
16:52:30.0071 0744 BTHPORT - ok
16:52:30.0151 0744 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\windows\system32\bthserv.dll
16:52:30.0154 0744 bthserv - ok
16:52:30.0307 0744 BTHUSB (f188b7394d81010767b6df3178519a37) C:\windows\System32\Drivers\BTHUSB.sys
16:52:30.0317 0744 BTHUSB - ok
16:52:30.0481 0744 BTWAMPFL (a0dfb69ade3444c78b17636fcf28e898) C:\windows\system32\DRIVERS\btwampfl.sys
16:52:30.0504 0744 BTWAMPFL - ok
16:52:30.0631 0744 btwaudio (7cf028ce78696882b327ff13d2dfa534) C:\windows\system32\drivers\btwaudio.sys
16:52:30.0640 0744 btwaudio - ok
16:52:30.0794 0744 btwavdt (3def2370e414b4e299673558ba171a51) C:\windows\system32\DRIVERS\btwavdt.sys
16:52:30.0800 0744 btwavdt - ok
16:52:31.0034 0744 btwdins (3d5e7fb2cb69a6186c7954c0859173f4) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
16:52:31.0049 0744 btwdins - ok
16:52:31.0149 0744 btwl2cap (346b4051b3d7ff70e8f027869b8eca6e) C:\windows\system32\DRIVERS\btwl2cap.sys
16:52:31.0162 0744 btwl2cap - ok
16:52:31.0256 0744 btwrchid (9937e0e4dfc0030560a6dfe9d3a94b39) C:\windows\system32\DRIVERS\btwrchid.sys
16:52:31.0258 0744 btwrchid - ok
16:52:31.0302 0744 catchme - ok
16:52:31.0436 0744 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
16:52:31.0440 0744 cdfs - ok
16:52:31.0579 0744 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\windows\system32\DRIVERS\cdrom.sys
16:52:31.0585 0744 cdrom - ok
16:52:31.0671 0744 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
16:52:31.0675 0744 CertPropSvc - ok
16:52:31.0786 0744 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\drivers\circlass.sys
16:52:31.0801 0744 circlass - ok
16:52:31.0893 0744 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
16:52:31.0902 0744 CLFS - ok
16:52:32.0048 0744 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:52:32.0058 0744 clr_optimization_v2.0.50727_32 - ok
16:52:32.0172 0744 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:52:32.0187 0744 clr_optimization_v2.0.50727_64 - ok
16:52:32.0313 0744 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:52:32.0321 0744 clr_optimization_v4.0.30319_32 - ok
16:52:32.0442 0744 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:52:32.0447 0744 clr_optimization_v4.0.30319_64 - ok
16:52:32.0586 0744 clwvd (50f92c943f18b070f166d019dfab3d9a) C:\windows\system32\DRIVERS\clwvd.sys
16:52:32.0599 0744 clwvd - ok
16:52:32.0694 0744 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
16:52:32.0696 0744 CmBatt - ok
16:52:32.0822 0744 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\drivers\cmdide.sys
16:52:32.0827 0744 cmdide - ok
16:52:33.0054 0744 CNG (c4943b6c962e4b82197542447ad599f4) C:\windows\system32\Drivers\cng.sys
16:52:33.0077 0744 CNG - ok
16:52:33.0207 0744 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\drivers\compbatt.sys
16:52:33.0214 0744 Compbatt - ok
16:52:33.0340 0744 CompositeBus (03edb043586cceba243d689bdda370a8) C:\windows\system32\DRIVERS\CompositeBus.sys
16:52:33.0353 0744 CompositeBus - ok
16:52:33.0429 0744 COMSysApp - ok
16:52:33.0614 0744 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\drivers\crcdisk.sys
16:52:33.0620 0744 crcdisk - ok
16:52:33.0696 0744 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\windows\system32\cryptsvc.dll
16:52:33.0700 0744 CryptSvc - ok
16:52:33.0894 0744 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
16:52:33.0918 0744 DcomLaunch - ok
16:52:34.0030 0744 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\windows\System32\defragsvc.dll
16:52:34.0039 0744 defragsvc - ok
16:52:34.0185 0744 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\windows\system32\Drivers\dfsc.sys
16:52:34.0198 0744 DfsC - ok
16:52:34.0306 0744 dg_ssudbus (388039f99ce8769024ee0438352aca99) C:\windows\system32\DRIVERS\ssudbus.sys
16:52:34.0310 0744 dg_ssudbus - ok
16:52:34.0407 0744 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\windows\system32\dhcpcore.dll
16:52:34.0415 0744 Dhcp - ok
16:52:34.0595 0744 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
16:52:34.0607 0744 discache - ok
16:52:34.0725 0744 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\drivers\disk.sys
16:52:34.0737 0744 Disk - ok
16:52:34.0824 0744 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\windows\System32\dnsrslvr.dll
16:52:34.0830 0744 Dnscache - ok
16:52:34.0980 0744 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\windows\System32\dot3svc.dll
16:52:35.0003 0744 dot3svc - ok
16:52:35.0076 0744 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\windows\system32\dps.dll
16:52:35.0081 0744 DPS - ok
16:52:35.0201 0744 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
16:52:35.0218 0744 drmkaud - ok
16:52:35.0376 0744 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\windows\System32\drivers\dxgkrnl.sys
16:52:35.0410 0744 DXGKrnl - ok
16:52:35.0493 0744 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\windows\System32\eapsvc.dll
16:52:35.0497 0744 EapHost - ok
16:52:35.0909 0744 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\drivers\evbda.sys
16:52:36.0000 0744 ebdrv - ok
16:52:36.0082 0744 EFS (c118a82cd78818c29ab228366ebf81c3) C:\windows\System32\lsass.exe
16:52:36.0086 0744 EFS - ok
16:52:36.0178 0744 EgisTec Service (2c1a297638e4319179a1112d4d6522b8) C:\Program Files (x86)\EgisTec BioExcess\EgisService.exe
16:52:36.0190 0744 EgisTec Service - ok
16:52:36.0258 0744 EgisTec Service Help (0ac3baa7df250c76dd9bcfc51565cb5f) C:\Program Files (x86)\EgisTec Port Locker\Egishlpsvc.exe
16:52:36.0264 0744 EgisTec Service Help - ok
16:52:36.0312 0744 EgisTec Ticket Service (7745aaffb61438c28c75e18ce98d4e64) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
16:52:36.0320 0744 EgisTec Ticket Service - ok
16:52:36.0447 0744 EgisTecFF (33708c6d915f8de734cf3abb0731515b) C:\windows\system32\DRIVERS\EgisTecFF.sys
16:52:36.0450 0744 EgisTecFF - ok
16:52:36.0735 0744 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\windows\ehome\ehRecvr.exe
16:52:36.0781 0744 ehRecvr - ok
16:52:36.0876 0744 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\windows\ehome\ehsched.exe
16:52:36.0878 0744 ehSched - ok
16:52:37.0021 0744 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\drivers\elxstor.sys
16:52:37.0044 0744 elxstor - ok
16:52:37.0236 0744 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\drivers\errdev.sys
16:52:37.0245 0744 ErrDev - ok
16:52:37.0363 0744 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\windows\system32\es.dll
16:52:37.0380 0744 EventSystem - ok
16:52:37.0491 0744 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
16:52:37.0514 0744 exfat - ok
16:52:37.0752 0744 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
16:52:37.0768 0744 fastfat - ok
16:52:37.0914 0744 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\windows\system32\fxssvc.exe
16:52:37.0930 0744 Fax - ok
16:52:38.0067 0744 fbfmon (3191aca33088ee2481044fc0db736442) C:\windows\system32\drivers\fbfmon.sys
16:52:38.0085 0744 fbfmon - ok
16:52:38.0183 0744 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\drivers\fdc.sys
16:52:38.0186 0744 fdc - ok
16:52:38.0282 0744 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\windows\system32\fdPHost.dll
16:52:38.0285 0744 fdPHost - ok
16:52:38.0428 0744 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\windows\system32\fdrespub.dll
16:52:38.0431 0744 FDResPub - ok
16:52:38.0505 0744 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
16:52:38.0508 0744 FileInfo - ok
16:52:38.0609 0744 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
16:52:38.0613 0744 Filetrace - ok
16:52:38.0710 0744 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\drivers\flpydisk.sys
16:52:38.0713 0744 flpydisk - ok
16:52:38.0865 0744 FltMgr (da6b67270fd9db3697b20fce94950741) C:\windows\system32\drivers\fltmgr.sys
16:52:38.0877 0744 FltMgr - ok
16:52:38.0985 0744 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\windows\system32\FntCache.dll
16:52:39.0021 0744 FontCache - ok
16:52:39.0105 0744 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:52:39.0121 0744 FontCache3.0.0.0 - ok
16:52:39.0239 0744 FPSensor (1899d0fb4c5ad0d6d0bfa258c54903f7) C:\windows\system32\Drivers\FPSensor.sys
16:52:39.0244 0744 FPSensor - ok
16:52:39.0316 0744 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
16:52:39.0331 0744 FsDepends - ok
16:52:39.0424 0744 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys
16:52:39.0439 0744 Fs_Rec - ok
16:52:39.0532 0744 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\windows\system32\DRIVERS\fvevol.sys
16:52:39.0538 0744 fvevol - ok
16:52:39.0648 0744 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\drivers\gagp30kx.sys
16:52:39.0662 0744 gagp30kx - ok
16:52:39.0849 0744 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\windows\System32\gpsvc.dll
16:52:39.0881 0744 gpsvc - ok
16:52:39.0992 0744 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:52:39.0997 0744 gupdate - ok
16:52:40.0017 0744 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:52:40.0020 0744 gupdatem - ok
16:52:40.0043 0744 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
16:52:40.0047 0744 gusvc - ok
16:52:40.0207 0744 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
16:52:40.0217 0744 hcw85cir - ok
16:52:40.0379 0744 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\windows\system32\drivers\HdAudio.sys
16:52:40.0390 0744 HdAudAddService - ok
16:52:40.0514 0744 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\windows\system32\DRIVERS\HDAudBus.sys
16:52:40.0525 0744 HDAudBus - ok
16:52:40.0631 0744 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\drivers\HidBatt.sys
16:52:40.0639 0744 HidBatt - ok
16:52:40.0756 0744 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\drivers\hidbth.sys
16:52:40.0767 0744 HidBth - ok
16:52:40.0871 0744 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\drivers\hidir.sys
16:52:40.0874 0744 HidIr - ok
16:52:41.0037 0744 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\windows\System32\hidserv.dll
16:52:41.0047 0744 hidserv - ok
16:52:41.0139 0744 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\windows\system32\drivers\hidusb.sys
16:52:41.0142 0744 HidUsb - ok
16:52:41.0256 0744 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\windows\system32\kmsvc.dll
16:52:41.0268 0744 hkmsvc - ok
16:52:41.0424 0744 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\windows\system32\ListSvc.dll
16:52:41.0447 0744 HomeGroupListener - ok
16:52:41.0624 0744 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\windows\system32\provsvc.dll
16:52:41.0631 0744 HomeGroupProvider - ok
16:52:41.0719 0744 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\windows\system32\drivers\HpSAMD.sys
16:52:41.0723 0744 HpSAMD - ok
16:52:41.0841 0744 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\windows\system32\drivers\HTTP.sys
16:52:41.0860 0744 HTTP - ok
16:52:42.0039 0744 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\windows\system32\drivers\hwpolicy.sys
16:52:42.0046 0744 hwpolicy - ok
16:52:42.0150 0744 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys
16:52:42.0154 0744 i8042prt - ok
16:52:42.0288 0744 iaStor (53cc5bf8b5a219119953c7abb19a7705) C:\windows\system32\DRIVERS\iaStor.sys
16:52:42.0296 0744 iaStor - ok
16:52:42.0470 0744 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\windows\system32\drivers\iaStorV.sys
16:52:42.0481 0744 iaStorV - ok
16:52:42.0626 0744 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:52:42.0648 0744 idsvc - ok
16:52:43.0902 0744 igfx (795c99dc4f574c97c03d0bb39cf099ee) C:\windows\system32\DRIVERS\igdkmd64.sys
16:52:44.0151 0744 igfx - ok
16:52:44.0254 0744 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\drivers\iirsp.sys
16:52:44.0257 0744 iirsp - ok
16:52:44.0348 0744 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\windows\System32\ikeext.dll
16:52:44.0374 0744 IKEEXT - ok
16:52:44.0705 0744 IntcAzAudAddService (03076f51af9f78a272cccde03e9340ce) C:\windows\system32\drivers\RTKVHD64.sys
16:52:44.0782 0744 IntcAzAudAddService - ok
16:52:45.0030 0744 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\windows\system32\DRIVERS\IntcDAud.sys
16:52:45.0039 0744 IntcDAud - ok
16:52:45.0154 0744 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\drivers\intelide.sys
16:52:45.0168 0744 intelide - ok
16:52:45.0293 0744 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
16:52:45.0305 0744 intelppm - ok
16:52:45.0412 0744 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\windows\system32\ipbusenum.dll
16:52:45.0418 0744 IPBusEnum - ok
16:52:45.0513 0744 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\windows\system32\DRIVERS\ipfltdrv.sys
16:52:45.0523 0744 IpFilterDriver - ok
16:52:45.0614 0744 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\windows\System32\iphlpsvc.dll
16:52:45.0627 0744 iphlpsvc - ok
16:52:45.0715 0744 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\windows\system32\drivers\IPMIDrv.sys
16:52:45.0727 0744 IPMIDRV - ok
16:52:45.0850 0744 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
16:52:45.0861 0744 IPNAT - ok
16:52:45.0950 0744 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
16:52:45.0952 0744 IRENUM - ok
16:52:46.0086 0744 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\drivers\isapnp.sys
16:52:46.0098 0744 isapnp - ok
16:52:46.0240 0744 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\windows\system32\drivers\msiscsi.sys
16:52:46.0263 0744 iScsiPrt - ok
16:52:46.0454 0744 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys
16:52:46.0464 0744 kbdclass - ok
16:52:46.0555 0744 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\windows\system32\drivers\kbdhid.sys
16:52:46.0568 0744 kbdhid - ok
16:52:46.0683 0744 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
16:52:46.0687 0744 KeyIso - ok
16:52:46.0843 0744 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\windows\system32\Drivers\ksecdd.sys
16:52:46.0847 0744 KSecDD - ok
16:52:46.0919 0744 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\windows\system32\Drivers\ksecpkg.sys
16:52:46.0924 0744 KSecPkg - ok
16:52:47.0029 0744 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
16:52:47.0032 0744 ksthunk - ok
16:52:47.0120 0744 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\windows\system32\msdtckrm.dll
16:52:47.0132 0744 KtmRm - ok
16:52:47.0223 0744 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\windows\System32\srvsvc.dll
16:52:47.0232 0744 LanmanServer - ok
16:52:47.0311 0744 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\windows\System32\wkssvc.dll
16:52:47.0318 0744 LanmanWorkstation - ok
16:52:47.0465 0744 LHDmgr (be166935083f9c38edfdc21b9a7a679b) C:\windows\system32\DRIVERS\LhdX64.sys
16:52:47.0472 0744 LHDmgr - ok
16:52:47.0555 0744 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
16:52:47.0558 0744 lltdio - ok
16:52:47.0644 0744 lltdsvc (c1185803384ab3feed115f79f109427f) C:\windows\System32\lltdsvc.dll
16:52:47.0654 0744 lltdsvc - ok
16:52:47.0732 0744 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\windows\System32\lmhsvc.dll
16:52:47.0740 0744 lmhosts - ok
16:52:47.0859 0744 LMS (2ed1786b7542cda261029f6b526edf44) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
16:52:47.0865 0744 LMS - ok
16:52:47.0984 0744 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\drivers\lsi_fc.sys
16:52:47.0994 0744 LSI_FC - ok
16:52:48.0120 0744 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\drivers\lsi_sas.sys
16:52:48.0130 0744 LSI_SAS - ok
16:52:48.0232 0744 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\drivers\lsi_sas2.sys
16:52:48.0235 0744 LSI_SAS2 - ok
16:52:48.0359 0744 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\drivers\lsi_scsi.sys
16:52:48.0369 0744 LSI_SCSI - ok
16:52:48.0546 0744 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
16:52:48.0560 0744 luafv - ok
16:52:48.0684 0744 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\windows\system32\drivers\mbam.sys
16:52:48.0700 0744 MBAMProtector - ok
16:52:48.0777 0744 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
16:52:48.0788 0744 MBAMService - ok
16:52:48.0823 0744 McMPFSvc - ok
16:52:48.0914 0744 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\windows\system32\Mcx2Svc.dll
16:52:48.0921 0744 Mcx2Svc - ok
16:52:49.0017 0744 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\drivers\megasas.sys
16:52:49.0029 0744 megasas - ok
16:52:49.0162 0744 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\drivers\MegaSR.sys
16:52:49.0179 0744 MegaSR - ok
16:52:49.0274 0744 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\windows\system32\DRIVERS\HECIx64.sys
16:52:49.0283 0744 MEIx64 - ok
16:52:49.0371 0744 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
16:52:49.0376 0744 MMCSS - ok
16:52:49.0554 0744 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
16:52:49.0566 0744 Modem - ok
16:52:49.0654 0744 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
16:52:49.0656 0744 monitor - ok
16:52:49.0778 0744 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys
16:52:49.0783 0744 mouclass - ok
16:52:49.0873 0744 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\drivers\mouhid.sys
16:52:49.0876 0744 mouhid - ok
16:52:49.0995 0744 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\windows\system32\drivers\mountmgr.sys
16:52:50.0007 0744 mountmgr - ok
16:52:50.0125 0744 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\windows\system32\drivers\mpio.sys
16:52:50.0143 0744 mpio - ok
16:52:50.0245 0744 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
16:52:50.0253 0744 mpsdrv - ok
16:52:50.0349 0744 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\windows\system32\mpssvc.dll
16:52:50.0378 0744 MpsSvc - ok
16:52:50.0463 0744 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\windows\system32\drivers\mrxdav.sys
16:52:50.0468 0744 MRxDAV - ok
16:52:50.0560 0744 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\windows\system32\DRIVERS\mrxsmb.sys
16:52:50.0571 0744 mrxsmb - ok
16:52:50.0693 0744 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\windows\system32\DRIVERS\mrxsmb10.sys
16:52:50.0715 0744 mrxsmb10 - ok
16:52:50.0843 0744 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\windows\system32\DRIVERS\mrxsmb20.sys
16:52:50.0852 0744 mrxsmb20 - ok
16:52:50.0967 0744 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\windows\system32\drivers\msahci.sys
16:52:50.0979 0744 msahci - ok
16:52:51.0103 0744 msdsm (db801a638d011b9633829eb6f663c900) C:\windows\system32\drivers\msdsm.sys
16:52:51.0114 0744 msdsm - ok
16:52:51.0197 0744 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\windows\System32\msdtc.exe
16:52:51.0211 0744 MSDTC - ok
16:52:51.0330 0744 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
16:52:51.0337 0744 Msfs - ok
16:52:51.0454 0744 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
16:52:51.0460 0744 mshidkmdf - ok
16:52:51.0551 0744 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\drivers\msisadrv.sys
16:52:51.0562 0744 msisadrv - ok
16:52:51.0679 0744 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\windows\system32\iscsiexe.dll
16:52:51.0691 0744 MSiSCSI - ok
16:52:51.0736 0744 msiserver - ok
16:52:51.0838 0744 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
16:52:51.0840 0744 MSKSSRV - ok
16:52:51.0927 0744 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
16:52:51.0930 0744 MSPCLOCK - ok
16:52:52.0076 0744 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
16:52:52.0085 0744 MSPQM - ok
16:52:52.0216 0744 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\windows\system32\drivers\MsRPC.sys
16:52:52.0239 0744 MsRPC - ok
16:52:52.0401 0744 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys
16:52:52.0403 0744 mssmbios - ok
16:52:52.0515 0744 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
16:52:52.0518 0744 MSTEE - ok
16:52:52.0638 0744 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\drivers\MTConfig.sys
16:52:52.0645 0744 MTConfig - ok
16:52:52.0731 0744 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
16:52:52.0750 0744 Mup - ok
16:52:52.0904 0744 mwlPSDFilter (9b1eac6faf6f37305e822f5588dc8056) C:\windows\system32\DRIVERS\mwlPSDFilter.sys
16:52:52.0913 0744 mwlPSDFilter - ok
16:52:52.0995 0744 mwlPSDNServ (ad55c1524b296280ed9c6e0d730d35da) C:\windows\system32\DRIVERS\mwlPSDNServ.sys
16:52:53.0011 0744 mwlPSDNServ - ok
16:52:53.0099 0744 mwlPSDVDisk (2b599e6ec8843637bdd62e7f8f3ba201) C:\windows\system32\DRIVERS\mwlPSDVDisk.sys
16:52:53.0107 0744 mwlPSDVDisk - ok
16:52:53.0202 0744 napagent (582ac6d9873e31dfa28a4547270862dd) C:\windows\system32\qagentRT.dll
16:52:53.0223 0744 napagent - ok
16:52:53.0368 0744 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
16:52:53.0390 0744 NativeWifiP - ok
16:52:53.0583 0744 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\windows\system32\drivers\ndis.sys
16:52:53.0629 0744 NDIS - ok
16:52:53.0742 0744 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
16:52:53.0755 0744 NdisCap - ok
16:52:53.0844 0744 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
16:52:53.0847 0744 NdisTapi - ok
16:52:53.0959 0744 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\windows\system32\DRIVERS\ndisuio.sys
16:52:53.0965 0744 Ndisuio - ok
16:52:54.0085 0744 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\windows\system32\DRIVERS\ndiswan.sys
16:52:54.0091 0744 NdisWan - ok
16:52:54.0187 0744 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\windows\system32\drivers\NDProxy.sys
16:52:54.0199 0744 NDProxy - ok
16:52:54.0295 0744 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
16:52:54.0309 0744 NetBIOS - ok
16:52:54.0416 0744 NetBT (09594d1089c523423b32a4229263f068) C:\windows\system32\DRIVERS\netbt.sys
16:52:54.0431 0744 NetBT - ok
16:52:54.0528 0744 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
16:52:54.0532 0744 Netlogon - ok
16:52:54.0620 0744 Netman (847d3ae376c0817161a14a82c8922a9e) C:\windows\System32\netman.dll
16:52:54.0632 0744 Netman - ok
16:52:54.0728 0744 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\windows\System32\netprofm.dll
16:52:54.0748 0744 netprofm - ok
16:52:54.0874 0744 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:52:54.0876 0744 NetTcpPortSharing - ok
16:52:55.0001 0744 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\drivers\nfrd960.sys
16:52:55.0018 0744 nfrd960 - ok
16:52:55.0113 0744 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\windows\System32\nlasvc.dll
16:52:55.0122 0744 NlaSvc - ok
16:52:55.0210 0744 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
16:52:55.0219 0744 Npfs - ok
16:52:55.0318 0744 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\windows\system32\nsisvc.dll
16:52:55.0322 0744 nsi - ok
16:52:55.0543 0744 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
16:52:55.0558 0744 nsiproxy - ok
16:52:55.0745 0744 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\windows\system32\drivers\Ntfs.sys
16:52:55.0795 0744 Ntfs - ok
16:52:55.0955 0744 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
16:52:55.0957 0744 Null - ok
16:52:56.0118 0744 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\windows\system32\drivers\nvraid.sys
16:52:56.0123 0744 nvraid - ok
16:52:56.0269 0744 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\windows\system32\drivers\nvstor.sys
16:52:56.0283 0744 nvstor - ok
16:52:56.0414 0744 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\drivers\nv_agp.sys
16:52:56.0425 0744 nv_agp - ok
16:52:56.0552 0744 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\drivers\ohci1394.sys
16:52:56.0568 0744 ohci1394 - ok
16:52:56.0711 0744 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
16:52:56.0720 0744 p2pimsvc - ok
16:52:56.0861 0744 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\windows\system32\p2psvc.dll
16:52:56.0871 0744 p2psvc - ok
16:52:57.0059 0744 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\drivers\parport.sys
16:52:57.0070 0744 Parport - ok
16:52:57.0163 0744 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\windows\system32\drivers\partmgr.sys
16:52:57.0174 0744 partmgr - ok
16:52:57.0259 0744 Partner Service (9665402b7fa59302d520ad845ddfc026) C:\ProgramData\Partner\Partner.exe
16:52:57.0282 0744 Partner Service - ok
16:52:57.0420 0744 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\windows\System32\pcasvc.dll
16:52:57.0427 0744 PcaSvc - ok
16:52:57.0540 0744 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\windows\system32\drivers\pci.sys
16:52:57.0550 0744 pci - ok
16:52:57.0675 0744 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\drivers\pciide.sys
16:52:57.0678 0744 pciide - ok
16:52:57.0785 0744 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\drivers\pcmcia.sys
16:52:57.0798 0744 pcmcia - ok
16:52:57.0914 0744 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
16:52:57.0922 0744 pcw - ok
16:52:58.0059 0744 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
16:52:58.0082 0744 PEAUTH - ok
16:52:58.0167 0744 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\windows\SysWow64\perfhost.exe
16:52:58.0176 0744 PerfHost - ok
16:52:58.0491 0744 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\windows\system32\pla.dll
16:52:58.0548 0744 pla - ok
16:52:58.0704 0744 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\windows\system32\umpnpmgr.dll
16:52:58.0715 0744 PlugPlay - ok
16:52:58.0861 0744 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\windows\system32\pnrpauto.dll
16:52:58.0867 0744 PNRPAutoReg - ok
16:52:58.0978 0744 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
16:52:58.0987 0744 PNRPsvc - ok
16:52:59.0181 0744 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\windows\System32\ipsecsvc.dll
16:52:59.0201 0744 PolicyAgent - ok
16:52:59.0337 0744 Power (6ba9d927dded70bd1a9caded45f8b184) C:\windows\system32\umpo.dll
16:52:59.0345 0744 Power - ok
16:52:59.0473 0744 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\windows\system32\DRIVERS\raspptp.sys
16:52:59.0482 0744 PptpMiniport - ok
16:52:59.0589 0744 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\drivers\processr.sys
16:52:59.0598 0744 Processor - ok
16:52:59.0671 0744 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\windows\system32\profsvc.dll
16:52:59.0679 0744 ProfSvc - ok
16:52:59.0761 0744 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
16:52:59.0765 0744 ProtectedStorage - ok
16:52:59.0872 0744 Psched (0557cf5a2556bd58e26384169d72438d) C:\windows\system32\DRIVERS\pacer.sys
16:52:59.0877 0744 Psched - ok
16:53:00.0113 0744 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\drivers\ql2300.sys
16:53:00.0170 0744 ql2300 - ok
16:53:00.0287 0744 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\drivers\ql40xx.sys
16:53:00.0297 0744 ql40xx - ok
16:53:00.0394 0744 QWAVE (906191634e99aea92c4816150bda3732) C:\windows\system32\qwave.dll
16:53:00.0412 0744 QWAVE - ok
16:53:00.0524 0744 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
16:53:00.0532 0744 QWAVEdrv - ok
16:53:00.0620 0744 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
16:53:00.0626 0744 RasAcd - ok
16:53:00.0731 0744 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
16:53:00.0737 0744 RasAgileVpn - ok
16:53:00.0809 0744 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\windows\System32\rasauto.dll
16:53:00.0823 0744 RasAuto - ok
16:53:00.0929 0744 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\windows\system32\DRIVERS\rasl2tp.sys
16:53:00.0936 0744 Rasl2tp - ok
16:53:01.0101 0744 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\windows\System32\rasmans.dll
16:53:01.0124 0744 RasMan - ok
16:53:01.0227 0744 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
16:53:01.0234 0744 RasPppoe - ok
16:53:01.0347 0744 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
16:53:01.0358 0744 RasSstp - ok
16:53:01.0482 0744 rdbss (77f665941019a1594d887a74f301fa2f) C:\windows\system32\DRIVERS\rdbss.sys
16:53:01.0505 0744 rdbss - ok
16:53:01.0639 0744 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\drivers\rdpbus.sys
16:53:01.0654 0744 rdpbus - ok
16:53:01.0747 0744 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
16:53:01.0750 0744 RDPCDD - ok
16:53:01.0884 0744 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
16:53:01.0889 0744 RDPENCDD - ok
16:53:01.0988 0744 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
16:53:01.0999 0744 RDPREFMP - ok
16:53:02.0124 0744 RDPWD (6d76e6433574b058adcb0c50df834492) C:\windows\system32\drivers\RDPWD.sys
16:53:02.0135 0744 RDPWD - ok
16:53:02.0239 0744 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\windows\system32\drivers\rdyboost.sys
16:53:02.0245 0744 rdyboost - ok
16:53:02.0350 0744 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\windows\System32\mprdim.dll
16:53:02.0356 0744 RemoteAccess - ok
16:53:02.0489 0744 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\windows\system32\regsvc.dll
16:53:02.0499 0744 RemoteRegistry - ok
16:53:02.0675 0744 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
16:53:02.0680 0744 RFCOMM - ok
16:53:02.0783 0744 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\windows\System32\RpcEpMap.dll
16:53:02.0788 0744 RpcEptMapper - ok
16:53:02.0886 0744 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\windows\system32\locator.exe
16:53:02.0893 0744 RpcLocator - ok
16:53:02.0995 0744 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
16:53:03.0008 0744 RpcSs - ok
16:53:03.0128 0744 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
16:53:03.0141 0744 rspndr - ok
16:53:03.0240 0744 RSUSBVSTOR (e54a5586a28d0630a79a68bbab84bfcf) C:\windows\system32\Drivers\RtsUVStor.sys
16:53:03.0248 0744 RSUSBVSTOR - ok
16:53:03.0369 0744 RTL8167 (20a466b9ea2bd828c0ec723f99b8cfe7) C:\windows\system32\DRIVERS\Rt64win7.sys
16:53:03.0379 0744 RTL8167 - ok
16:53:03.0517 0744 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
16:53:03.0521 0744 SamSs - ok
16:53:03.0752 0744 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\windows\system32\drivers\sbp2port.sys
16:53:03.0760 0744 sbp2port - ok
16:53:03.0831 0744 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\windows\System32\SCardSvr.dll
16:53:03.0844 0744 SCardSvr - ok
16:53:03.0942 0744 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\windows\system32\DRIVERS\scfilter.sys
16:53:03.0948 0744 scfilter - ok
16:53:04.0049 0744 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\windows\system32\schedsvc.dll
16:53:04.0074 0744 Schedule - ok
16:53:04.0228 0744 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
16:53:04.0231 0744 SCPolicySvc - ok
16:53:04.0460 0744 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\windows\System32\SDRSVC.dll
16:53:04.0471 0744 SDRSVC - ok
16:53:04.0603 0744 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
16:53:04.0615 0744 secdrv - ok
16:53:04.0684 0744 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\windows\system32\seclogon.dll
16:53:04.0697 0744 seclogon - ok
16:53:04.0801 0744 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\windows\system32\sens.dll
16:53:04.0807 0744 SENS - ok
16:53:04.0969 0744 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\windows\system32\sensrsvc.dll
16:53:04.0976 0744 SensrSvc - ok
16:53:05.0180 0744 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\drivers\serenum.sys
16:53:05.0187 0744 Serenum - ok
16:53:05.0338 0744 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\drivers\serial.sys
16:53:05.0349 0744 Serial - ok
16:53:05.0449 0744 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\drivers\sermouse.sys
16:53:05.0452 0744 sermouse - ok
16:53:05.0677 0744 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\windows\system32\sessenv.dll
16:53:05.0685 0744 SessionEnv - ok
16:53:05.0804 0744 sfdrv01 (a48b9f81d3c2ba989ae2d566747b4623) C:\windows\system32\drivers\sfdrv01.sys
16:53:05.0820 0744 sfdrv01 - ok
16:53:05.0905 0744 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\drivers\sffdisk.sys
16:53:05.0906 0744 sffdisk - ok
16:53:06.0005 0744 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\drivers\sffp_mmc.sys
16:53:06.0011 0744 sffp_mmc - ok
16:53:06.0083 0744 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\windows\system32\drivers\sffp_sd.sys
16:53:06.0086 0744 sffp_sd - ok
16:53:06.0176 0744 sfhlp02 (9e0ecda6c72c5d0d8cf3f0fba076422b) C:\windows\system32\drivers\sfhlp02.sys
16:53:06.0179 0744 sfhlp02 - ok
16:53:06.0284 0744 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\drivers\sfloppy.sys
16:53:06.0297 0744 sfloppy - ok
16:53:06.0404 0744 sfvfs02 (f65d13175ebf3fa49b1f7f948926a16e) C:\windows\system32\drivers\sfvfs02.sys
16:53:06.0411 0744 sfvfs02 - ok
16:53:06.0514 0744 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\windows\System32\ipnathlp.dll
16:53:06.0537 0744 SharedAccess - ok
16:53:06.0682 0744 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\windows\System32\shsvcs.dll
16:53:06.0692 0744 ShellHWDetection - ok
16:53:06.0809 0744 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\drivers\SiSRaid2.sys
16:53:06.0820 0744 SiSRaid2 - ok
16:53:07.0056 0744 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\drivers\sisraid4.sys
16:53:07.0065 0744 SiSRaid4 - ok
16:53:07.0269 0744 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
16:53:07.0286 0744 Smb - ok
16:53:07.0461 0744 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\windows\System32\snmptrap.exe
16:53:07.0471 0744 SNMPTRAP - ok
16:53:07.0566 0744 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
16:53:07.0569 0744 spldr - ok
16:53:07.0674 0744 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\windows\System32\spoolsv.exe
16:53:07.0687 0744 Spooler - ok
16:53:08.0065 0744 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\windows\system32\sppsvc.exe
16:53:08.0161 0744 sppsvc - ok
16:53:08.0292 0744 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\windows\system32\sppuinotify.dll
16:53:08.0303 0744 sppuinotify - ok
16:53:08.0542 0744 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\windows\system32\DRIVERS\srv.sys
16:53:08.0576 0744 srv - ok
16:53:08.0672 0744 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\windows\system32\DRIVERS\srv2.sys
16:53:08.0683 0744 srv2 - ok
16:53:08.0838 0744 srvnet (27e461f0be5bff5fc737328f749538c3) C:\windows\system32\DRIVERS\srvnet.sys
16:53:08.0843 0744 srvnet - ok
16:53:08.0947 0744 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\windows\System32\ssdpsrv.dll
16:53:08.0954 0744 SSDPSRV - ok
16:53:09.0111 0744 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\windows\system32\sstpsvc.dll
16:53:09.0123 0744 SstpSvc - ok
16:53:09.0208 0744 ssudmdm (ad42ca614e086bcadbd53fffc404ac24) C:\windows\system32\DRIVERS\ssudmdm.sys
16:53:09.0214 0744 ssudmdm - ok
16:53:09.0316 0744 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\drivers\stexstor.sys
16:53:09.0330 0744 stexstor - ok
16:53:09.0420 0744 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\windows\System32\wiaservc.dll
16:53:09.0440 0744 stisvc - ok
16:53:09.0585 0744 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys
16:53:09.0590 0744 swenum - ok
16:53:09.0688 0744 swprv (e08e46fdd841b7184194011ca1955a0b) C:\windows\System32\swprv.dll
16:53:09.0704 0744 swprv - ok
16:53:09.0823 0744 SynTP (08425cd92972c6430f350a9697f4a553) C:\windows\system32\DRIVERS\SynTP.sys
16:53:09.0880 0744 SynTP - ok
16:53:10.0049 0744 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\windows\system32\sysmain.dll
16:53:10.0105 0744 SysMain - ok
16:53:10.0230 0744 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\windows\System32\TabSvc.dll
16:53:10.0239 0744 TabletInputService - ok
16:53:10.0339 0744 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\windows\System32\tapisrv.dll
16:53:10.0349 0744 TapiSrv - ok
16:53:10.0427 0744 TBS (1be03ac720f4d302ea01d40f588162f6) C:\windows\System32\tbssvc.dll
16:53:10.0435 0744 TBS - ok
16:53:10.0730 0744 Tcpip (fc62769e7bff2896035aeed399108162) C:\windows\system32\drivers\tcpip.sys
16:53:10.0789 0744 Tcpip - ok
16:53:11.0030 0744 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\windows\system32\DRIVERS\tcpip.sys
16:53:11.0046 0744 TCPIP6 - ok
16:53:11.0259 0744 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\windows\system32\drivers\tcpipreg.sys
16:53:11.0264 0744 tcpipreg - ok
16:53:11.0348 0744 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
16:53:11.0351 0744 TDPIPE - ok
16:53:11.0452 0744 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\windows\system32\drivers\tdtcp.sys
16:53:11.0458 0744 TDTCP - ok
16:53:11.0570 0744 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\windows\system32\DRIVERS\tdx.sys
16:53:11.0577 0744 tdx - ok
16:53:11.0680 0744 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\windows\system32\DRIVERS\termdd.sys
16:53:11.0694 0744 TermDD - ok
16:53:11.0806 0744 TermService (2e648163254233755035b46dd7b89123) C:\windows\System32\termsrv.dll
16:53:11.0824 0744 TermService - ok
16:53:11.0943 0744 Themes (f0344071948d1a1fa732231785a0664c) C:\windows\system32\themeservice.dll
16:53:11.0949 0744 Themes - ok
16:53:12.0061 0744 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
16:53:12.0063 0744 THREADORDER - ok
16:53:12.0177 0744 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\windows\System32\trkwks.dll
16:53:12.0180 0744 TrkWks - ok
16:53:12.0253 0744 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\windows\servicing\TrustedInstaller.exe
16:53:12.0257 0744 TrustedInstaller - ok
16:53:12.0348 0744 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\windows\system32\DRIVERS\tssecsrv.sys
16:53:12.0363 0744 tssecsrv - ok
16:53:12.0446 0744 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\windows\system32\drivers\tsusbflt.sys
16:53:12.0450 0744 TsUsbFlt - ok
16:53:12.0569 0744 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\windows\system32\drivers\TsUsbGD.sys
16:53:12.0584 0744 TsUsbGD - ok
16:53:12.0705 0744 tunnel (3566a8daafa27af944f5d705eaa64894) C:\windows\system32\DRIVERS\tunnel.sys
16:53:12.0717 0744 tunnel - ok
16:53:12.0826 0744 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\drivers\uagp35.sys
16:53:12.0836 0744 uagp35 - ok
16:53:12.0965 0744 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\windows\system32\DRIVERS\udfs.sys
16:53:12.0974 0744 udfs - ok
16:53:13.0076 0744 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\windows\system32\UI0Detect.exe
16:53:13.0086 0744 UI0Detect - ok
16:53:13.0186 0744 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\drivers\uliagpkx.sys
16:53:13.0195 0744 uliagpkx - ok
16:53:13.0314 0744 umbus (dc54a574663a895c8763af0fa1ff7561) C:\windows\system32\DRIVERS\umbus.sys
16:53:13.0323 0744 umbus - ok
16:53:13.0405 0744 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\drivers\umpass.sys
16:53:13.0414 0744 UmPass - ok
16:53:13.0783 0744 UNS (7e5e1603d0ff2d240ae70295c5c3fefc) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
16:53:13.0804 0744 UNS - ok
16:53:13.0989 0744 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\windows\System32\upnphost.dll
16:53:13.0999 0744 upnphost - ok
16:53:14.0123 0744 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\windows\system32\DRIVERS\usbccgp.sys
16:53:14.0132 0744 usbccgp - ok
16:53:14.0344 0744 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\drivers\usbcir.sys
16:53:14.0355 0744 usbcir - ok
16:53:14.0471 0744 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\windows\system32\DRIVERS\usbehci.sys
16:53:14.0482 0744 usbehci - ok
16:53:14.0580 0744 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\windows\system32\DRIVERS\usbhub.sys
16:53:14.0589 0744 usbhub - ok
16:53:14.0690 0744 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\windows\system32\drivers\usbohci.sys
16:53:14.0705 0744 usbohci - ok
16:53:14.0833 0744 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys
16:53:14.0846 0744 usbprint - ok
16:53:14.0965 0744 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\windows\system32\DRIVERS\usbscan.sys
16:53:14.0977 0744 usbscan - ok
16:53:15.0084 0744 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\windows\system32\DRIVERS\USBSTOR.SYS
16:53:15.0100 0744 USBSTOR - ok
16:53:15.0313 0744 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\windows\system32\drivers\usbuhci.sys
16:53:15.0324 0744 usbuhci - ok
16:53:15.0531 0744 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\windows\system32\Drivers\usbvideo.sys
16:53:15.0554 0744 usbvideo - ok
16:53:15.0635 0744 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\windows\System32\uxsms.dll
16:53:15.0641 0744 UxSms - ok
16:53:15.0874 0744 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
16:53:15.0877 0744 VaultSvc - ok
16:53:15.0999 0744 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\drivers\vdrvroot.sys
16:53:16.0009 0744 vdrvroot - ok
16:53:16.0180 0744 vds (8d6b481601d01a456e75c3210f1830be) C:\windows\System32\vds.exe
16:53:16.0214 0744 vds - ok
16:53:16.0331 0744 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
16:53:16.0349 0744 vga - ok
16:53:16.0436 0744 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
16:53:16.0439 0744 VgaSave - ok
16:53:16.0566 0744 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\windows\system32\drivers\vhdmp.sys
16:53:16.0589 0744 vhdmp - ok
16:53:16.0797 0744 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\drivers\viaide.sys
16:53:16.0810 0744 viaide - ok
16:53:16.0968 0744 vm2uvcflt (5cb80afa98111fc6ed6e8702a0d7ac5b) C:\windows\system32\Drivers\vm2uvcflt.sys
16:53:16.0979 0744 vm2uvcflt - ok
16:53:17.0086 0744 vm332avs (d8bd0784aadce2aaee8f8e2c57a0bc7c) C:\windows\system32\Drivers\vm332avs.sys
16:53:17.0094 0744 vm332avs - ok
16:53:17.0209 0744 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\windows\system32\drivers\volmgr.sys
16:53:17.0224 0744 volmgr - ok
16:53:17.0343 0744 volmgrx (a255814907c89be58b79ef2f189b843b) C:\windows\system32\drivers\volmgrx.sys
16:53:17.0354 0744 volmgrx - ok
16:53:17.0502 0744 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\windows\system32\drivers\volsnap.sys
16:53:17.0513 0744 volsnap - ok
16:53:17.0628 0744 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\drivers\vsmraid.sys
16:53:17.0643 0744 vsmraid - ok
16:53:17.0838 0744 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\windows\system32\vssvc.exe
16:53:17.0896 0744 VSS - ok
16:53:18.0067 0744 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
16:53:18.0070 0744 vwifibus - ok
16:53:18.0333 0744 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
16:53:18.0347 0744 vwififlt - ok
16:53:18.0505 0744 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\windows\system32\DRIVERS\vwifimp.sys
16:53:18.0519 0744 vwifimp - ok
16:53:18.0607 0744 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\windows\system32\w32time.dll
16:53:18.0618 0744 W32Time - ok
16:53:18.0750 0744 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\drivers\wacompen.sys
16:53:18.0758 0744 WacomPen - ok
16:53:18.0880 0744 WANARP (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
16:53:18.0884 0744 WANARP - ok
16:53:18.0897 0744 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
16:53:18.0900 0744 Wanarpv6 - ok
16:53:19.0077 0744 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\windows\system32\wbengine.exe
16:53:19.0134 0744 wbengine - ok
16:53:19.0246 0744 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\windows\System32\wbiosrvc.dll
16:53:19.0255 0744 WbioSrvc - ok
16:53:19.0367 0744 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\windows\System32\wcncsvc.dll
16:53:19.0390 0744 wcncsvc - ok
16:53:19.0472 0744 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\windows\System32\WcsPlugInService.dll
16:53:19.0479 0744 WcsPlugInService - ok
16:53:19.0587 0744 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\drivers\wd.sys
16:53:19.0598 0744 Wd - ok
16:53:19.0809 0744 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
16:53:19.0832 0744 Wdf01000 - ok
16:53:20.0014 0744 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
16:53:20.0021 0744 WdiServiceHost - ok
16:53:20.0029 0744 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
16:53:20.0034 0744 WdiSystemHost - ok
16:53:20.0177 0744 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\windows\System32\webclnt.dll
16:53:20.0191 0744 WebClient - ok
16:53:20.0300 0744 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\windows\system32\wecsvc.dll
16:53:20.0312 0744 Wecsvc - ok
16:53:20.0332 0744 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\windows\System32\wercplsupport.dll
16:53:20.0338 0744 wercplsupport - ok
16:53:20.0427 0744 WerSvc (6d137963730144698cbd10f202e9f251) C:\windows\System32\WerSvc.dll
16:53:20.0434 0744 WerSvc - ok
16:53:20.0550 0744 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
16:53:20.0562 0744 WfpLwf - ok
16:53:20.0718 0744 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
16:53:20.0729 0744 WIMMount - ok
16:53:20.0763 0744 WinDefend - ok
16:53:20.0776 0744 WinHttpAutoProxySvc - ok
16:53:20.0885 0744 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\windows\system32\wbem\WMIsvc.dll
16:53:20.0891 0744 Winmgmt - ok
16:53:21.0191 0744 WinRM (bcb1310604aa415c4508708975b3931e) C:\windows\system32\WsmSvc.dll
16:53:21.0256 0744 WinRM - ok
16:53:21.0385 0744 WinUsb (fe88b288356e7b47b74b13372add906d) C:\windows\system32\DRIVERS\WinUsb.sys
16:53:21.0391 0744 WinUsb - ok
16:53:21.0541 0744 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\windows\System32\wlansvc.dll
16:53:21.0574 0744 Wlansvc - ok
16:53:21.0630 0744 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
16:53:21.0633 0744 wlcrasvc - ok
16:53:21.0743 0744 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
16:53:21.0761 0744 wlidsvc - ok
16:53:21.0844 0744 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys
16:53:21.0846 0744 WmiAcpi - ok
16:53:21.0981 0744 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\windows\system32\wbem\WmiApSrv.exe
16:53:21.0995 0744 wmiApSrv - ok
16:53:22.0026 0744 WMPNetworkSvc - ok
16:53:22.0084 0744 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\windows\System32\wpcsvc.dll
16:53:22.0090 0744 WPCSvc - ok
16:53:22.0177 0744 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\windows\system32\wpdbusenum.dll
16:53:22.0185 0744 WPDBusEnum - ok
16:53:22.0281 0744 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
16:53:22.0295 0744 ws2ifsl - ok
16:53:22.0398 0744 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\windows\system32\wscsvc.dll
16:53:22.0405 0744 wscsvc - ok
16:53:22.0516 0744 WSearch - ok
16:53:22.0773 0744 wsvd (83575c43b2bfe9ab0661a7f957e843c0) C:\windows\system32\DRIVERS\wsvd.sys
16:53:22.0784 0744 wsvd - ok
16:53:23.0210 0744 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\windows\system32\wuaueng.dll
16:53:23.0301 0744 wuauserv - ok
16:53:23.0417 0744 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\windows\system32\drivers\WudfPf.sys
16:53:23.0429 0744 WudfPf - ok
16:53:23.0521 0744 WUDFRd (cf8d590be3373029d57af80914190682) C:\windows\system32\DRIVERS\WUDFRd.sys
16:53:23.0527 0744 WUDFRd - ok
16:53:23.0598 0744 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\windows\System32\WUDFSvc.dll
16:53:23.0606 0744 wudfsvc - ok
16:53:23.0689 0744 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\windows\System32\wwansvc.dll
16:53:23.0699 0744 WwanSvc - ok
16:53:23.0744 0744 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
16:53:23.0758 0744 \Device\Harddisk0\DR0 - ok
16:53:23.0761 0744 Boot (0x1200) (692fd8199754071ae7bc1bd4a3921d3e) \Device\Harddisk0\DR0\Partition0
16:53:23.0762 0744 \Device\Harddisk0\DR0\Partition0 - ok
16:53:23.0767 0744 Boot (0x1200) (4f2e0028efe5d51d8124285bdc2b52bb) \Device\Harddisk0\DR0\Partition1
16:53:23.0768 0744 \Device\Harddisk0\DR0\Partition1 - ok
16:53:23.0801 0744 Boot (0x1200) (eb74dd17b2dba42b29008766026a173b) \Device\Harddisk0\DR0\Partition2
16:53:23.0834 0744 \Device\Harddisk0\DR0\Partition2 - ok
16:53:23.0835 0744 ============================================================
16:53:23.0835 0744 Scan finished
16:53:23.0835 0744 ============================================================
16:53:23.0856 1788 Detected object count: 0
16:53:23.0856 1788 Actual detected object count: 0
16:53:38.0802 2372 Deinitialize success

Alt 24.03.2012, 17:17   #22
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Jetzt ist nur noch das Sartmenü weg?

Alt 25.03.2012, 15:55   #23
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Ja genau. alles andere klappt bisher relativ problemlos.
Gruß

Alt 25.03.2012, 20:12   #24
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Mach bitte einmal einen Rechtsklick auf der Taskleiste, Eigenschaften
StartMenü, klicke Anpassen

Ganz unten unter Startmenügröße klicke auf Standardeinstellungen

Und versuche es nochmals.

Alt 26.03.2012, 07:53   #25
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Also die rechte leiste im startmenü, systemsteuerung netzwerk etc, wird dadurch jetzt wieder angezeigt. allerdings sind die ordner unter alle programme leider noch leer.
Gruß

Also die rechte leiste im startmenü, systemsteuerung netzwerk etc, wird dadurch jetzt wieder angezeigt. allerdings sind die ordner unter alle programme leider noch leer.
Gruß

Alt 26.03.2012, 12:59   #26
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Evtl sind deine Verknüpfungen hier:

C:\Users\[DEIN_NAME]\AppData\Local\Temp\smtmp

Sie müssen passend nach

C:\ProgramData\Microsoft\Windows\Start Menu\Programs

kopiert werden.

Alt 26.03.2012, 14:18   #27
Schalkefan
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Leider nein. Es gibt dort keinen Ordner smtmp oder ähnliches.

Alt 27.03.2012, 18:04   #28
Swisstreasure
/// Malwareteam
 
Roque.Fake HDD - Standard

Roque.Fake HDD



Leider bleibt Dir nur die Möglichkeit die Einträge manuel zu verknüpfen. Anders geht es nicht.

Antwort

Themen zu Roque.Fake HDD
administrator, aktion, anti-malware, appdata, downloaden, heuristiks/extra, heuristiks/shuriken, icreinstall, maleware, minute, pum.hijack.startmenu, registrierung, rogue.fakehdd, schonmal, software, speicher, tr/buzus.ealr, tr/fake.cx.172544, tr/roque.7570679, tr/roque.kdv.623395.1, tr/zaccess.h, trojaner, win32/adware.hddrescue.ab, win32/installcore.e, win32/kryptik.acun, win32/softonicdownloader.d




Ähnliche Themen: Roque.Fake HDD


  1. TR/Roque 1202798
    Plagegeister aller Art und deren Bekämpfung - 20.11.2013 (30)
  2. Zip Anhang mit TR/Roque.957311 geöffnet
    Log-Analyse und Auswertung - 28.04.2013 (15)
  3. TR/Zaccess.H & TR/Roque.7570679 & EXP/CVE-2012-1723
    Plagegeister aller Art und deren Bekämpfung - 19.10.2012 (3)
  4. Fake Virusscanner
    Plagegeister aller Art und deren Bekämpfung - 28.06.2012 (1)
  5. Verschlüsselungstrojaner TR/Roque.kdv.623395.1
    Log-Analyse und Auswertung - 23.05.2012 (6)
  6. verdacht auf fake ms
    Log-Analyse und Auswertung - 07.06.2011 (6)
  7. Fake Sicherheitscenter
    Plagegeister aller Art und deren Bekämpfung - 21.09.2010 (1)
  8. Trojaner TR/Fake.CX.172544, TR/Fake.bpp.174592, TR/buzus.ealr
    Plagegeister aller Art und deren Bekämpfung - 20.05.2010 (10)
  9. MSN is Fake mit virren
    Mülltonne - 21.06.2009 (2)
  10. Winlivechat Fake
    Plagegeister aller Art und deren Bekämpfung - 04.06.2009 (26)
  11. Fake.Alert
    Log-Analyse und Auswertung - 19.02.2009 (7)
  12. Fake AdobeReader
    Plagegeister aller Art und deren Bekämpfung - 13.10.2008 (4)
  13. fake-antivirenprogramm
    Log-Analyse und Auswertung - 22.08.2008 (1)
  14. Fake.Privdanger
    Log-Analyse und Auswertung - 04.06.2008 (8)
  15. bat.fake/privdanger
    Log-Analyse und Auswertung - 31.01.2008 (14)
  16. bat/fake.privdanger
    Log-Analyse und Auswertung - 10.01.2008 (3)
  17. BAT/Fake.Privdanger
    Log-Analyse und Auswertung - 29.10.2007 (16)

Zum Thema Roque.Fake HDD - Update Malwarebytes und mach einen Fullscan. - Roque.Fake HDD...
Archiv
Du betrachtest: Roque.Fake HDD auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.