Hard drive clusters are partly damaged

tomabien

Hallo,

ich hatte die Fehlermeldung "Hard drive clusters are partly damaged", fand viele Dateien nicht mehr, Bildschirmhintergrund war schwarz und es kamen ganz viele Fehlermeldungen. Habe dann bei der Suche nach Lösungen hier im Forum folgende Seite gefunden:

http://www.trojaner-board.de/108567-...or-andere.html

und ich habe die Anweisungen ausgeführt.

Log von Malwarebytes war:

Malwarebytes Anti-Malware (Test) 1.60.1.1000
www.malwarebytes.org

Datenbank Version: v2012.03.22.03

Windows 7 Service Pack 1 x86 NTFS (Abgesichertenmodus/Netzwerkfähig)
Internet Explorer 9.0.8112.16421
noto :: NOTO-PC [Administrator]

Schutz: Deaktiviert

22.03.2012 16:08:24
mbam-log-2012-03-22 (16-08-24).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 185835
Laufzeit: 3 Minute(n), 14 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|BeNNFxoTOFDUaV.exe (Trojan.FakeAlert) -> Daten: C:\ProgramData\BeNNFxoTOFDUaV.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|GrpConv (Trojan.Agent.Gen) -> Daten: grpconv -o -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Bösartig: (0) Gut: (1) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bösartig: (0) Gut: (1) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\ProgramData\BeNNFxoTOFDUaV.exe (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\1F4YgiGnRbZJxQ.exe (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\noto\AppData\Local\Temp\7tpHrwTdM3ELad.exe.tmp (Trojan.FakeAlert) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\System32\grpconv.exe (Trojan.Agent.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


TDSSKiller hat nichts gefunden. Der Log lautet:

6:20:23.0755 1428 TDSS rootkit removing tool 2.7.22.0 Mar 21 2012 17:40:00
16:20:23.0817 1428 ============================================================
16:20:23.0817 1428 Current date / time: 2012/03/22 16:20:23.0817
16:20:23.0817 1428 SystemInfo:
16:20:23.0817 1428
16:20:23.0817 1428 OS Version: 6.1.7601 ServicePack: 1.0
16:20:23.0817 1428 Product type: Workstation
16:20:23.0817 1428 ComputerName: NOTO-PC
16:20:23.0817 1428 UserName: noto
16:20:23.0817 1428 Windows directory: C:\Windows
16:20:23.0817 1428 System windows directory: C:\Windows
16:20:23.0817 1428 Processor architecture: Intel x86
16:20:23.0817 1428 Number of processors: 2
16:20:23.0817 1428 Page size: 0x1000
16:20:23.0817 1428 Boot type: Safe boot
16:20:23.0817 1428 ============================================================
16:20:24.0488 1428 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
16:20:24.0582 1428 \Device\Harddisk0\DR0:
16:20:24.0582 1428 MBR used
16:20:24.0582 1428 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
16:20:24.0582 1428 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x6F4D3000
16:20:24.0582 1428 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x6F505800, BlocksNum 0x5000000
16:20:24.0644 1428 Initialize success
16:20:24.0644 1428 ============================================================
16:20:40.0150 1464 ============================================================
16:20:40.0150 1464 Scan started
16:20:40.0150 1464 Mode: Manual;
16:20:40.0150 1464 ============================================================
16:20:40.0525 1464 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
16:20:40.0540 1464 1394ohci - ok
16:20:40.0618 1464 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
16:20:40.0618 1464 ACPI - ok
16:20:40.0665 1464 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
16:20:40.0665 1464 AcpiPmi - ok
16:20:40.0728 1464 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
16:20:40.0743 1464 adp94xx - ok
16:20:40.0790 1464 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
16:20:40.0790 1464 adpahci - ok
16:20:40.0821 1464 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
16:20:40.0821 1464 adpu320 - ok
16:20:40.0837 1464 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\Windows\System32\aelupsvc.dll
16:20:40.0852 1464 AeLookupSvc - ok
16:20:40.0899 1464 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\Windows\system32\drivers\afd.sys
16:20:40.0915 1464 AFD - ok
16:20:40.0977 1464 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
16:20:40.0977 1464 agp440 - ok
16:20:41.0024 1464 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
16:20:41.0024 1464 aic78xx - ok
16:20:41.0055 1464 ALG (18a54e132947cd98fea9accc57f98f13) C:\Windows\System32\alg.exe
16:20:41.0055 1464 ALG - ok
16:20:41.0071 1464 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
16:20:41.0071 1464 aliide - ok
16:20:41.0118 1464 AMD External Events Utility (60201ad353105d8c6796c1b69e6c49f0) C:\Windows\system32\atiesrxx.exe
16:20:41.0118 1464 AMD External Events Utility - ok
16:20:41.0133 1464 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
16:20:41.0133 1464 amdagp - ok
16:20:41.0196 1464 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
16:20:41.0196 1464 amdide - ok
16:20:41.0242 1464 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
16:20:41.0242 1464 AmdK8 - ok
16:20:41.0336 1464 amdkmdag (51610b74a9a1d84dc86fce1019beaff4) C:\Windows\system32\DRIVERS\atikmdag.sys
16:20:41.0383 1464 amdkmdag - ok
16:20:41.0430 1464 amdkmdap (cd1d86ab81eece67d7bd6f7ef9786ccc) C:\Windows\system32\DRIVERS\atikmpag.sys
16:20:41.0445 1464 amdkmdap - ok
16:20:41.0508 1464 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
16:20:41.0508 1464 AmdPPM - ok
16:20:41.0539 1464 amdsata (d320bf87125326f996d4904fe24300fc) C:\Windows\system32\drivers\amdsata.sys
16:20:41.0539 1464 amdsata - ok
16:20:41.0570 1464 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
16:20:41.0570 1464 amdsbs - ok
16:20:41.0586 1464 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\Windows\system32\drivers\amdxata.sys
16:20:41.0586 1464 amdxata - ok
16:20:41.0617 1464 Andbus (3e59df4984fbd6800d6621480b38a34e) C:\Windows\system32\DRIVERS\lgandbus.sys
16:20:41.0617 1464 Andbus - ok
16:20:41.0648 1464 AndDiag (8e0bf6f3b2c9c292bc7ce0de727cdd56) C:\Windows\system32\DRIVERS\lganddiag.sys
16:20:41.0648 1464 AndDiag - ok
16:20:41.0710 1464 AndGps (1d2c90e25483363d54b652898bbc8f2a) C:\Windows\system32\DRIVERS\lgandgps.sys
16:20:41.0710 1464 AndGps - ok
16:20:41.0726 1464 ANDModem (b1b06a95da2cac7fa19832c60c348c85) C:\Windows\system32\DRIVERS\lgandmodem.sys
16:20:41.0726 1464 ANDModem - ok
16:20:41.0742 1464 androidusb - ok
16:20:41.0804 1464 AntiVirSchedulerService (c27d46b06d340293670450fce9dfb166) C:\Program Files\Avira\AntiVir Desktop\sched.exe
16:20:41.0804 1464 AntiVirSchedulerService - ok
16:20:41.0820 1464 AntiVirService (72d90e56563165984224493069c69ed4) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
16:20:41.0820 1464 AntiVirService - ok
16:20:41.0866 1464 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
16:20:41.0866 1464 AppID - ok
16:20:41.0913 1464 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\Windows\System32\appidsvc.dll
16:20:41.0913 1464 AppIDSvc - ok
16:20:41.0944 1464 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\Windows\System32\appinfo.dll
16:20:41.0944 1464 Appinfo - ok
16:20:41.0991 1464 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
16:20:41.0991 1464 arc - ok
16:20:42.0007 1464 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
16:20:42.0007 1464 arcsas - ok
16:20:42.0054 1464 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
16:20:42.0054 1464 AsyncMac - ok
16:20:42.0069 1464 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
16:20:42.0069 1464 atapi - ok
16:20:42.0163 1464 AtiHdmiService (8df873d0587596c1d35a9cececc61da1) C:\Windows\system32\drivers\AtiHdmi.sys
16:20:42.0178 1464 AtiHdmiService - ok
16:20:42.0210 1464 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
16:20:42.0210 1464 AudioEndpointBuilder - ok
16:20:42.0225 1464 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\Windows\System32\Audiosrv.dll
16:20:42.0225 1464 Audiosrv - ok
16:20:42.0272 1464 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
16:20:42.0272 1464 avgntflt - ok
16:20:42.0288 1464 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
16:20:42.0303 1464 avipbb - ok
16:20:42.0350 1464 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\Windows\System32\AxInstSV.dll
16:20:42.0350 1464 AxInstSV - ok
16:20:42.0397 1464 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
16:20:42.0412 1464 b06bdrv - ok
16:20:42.0444 1464 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
16:20:42.0444 1464 b57nd60x - ok
16:20:42.0522 1464 BBSvc (483f1162eeebd10bf77fbb32db963370) C:\Program Files\Microsoft\BingBar\BBSvc.EXE
16:20:42.0522 1464 BBSvc - ok
16:20:42.0568 1464 BBUpdate (78779ee07231c658b483b1f38b5088df) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
16:20:42.0568 1464 BBUpdate - ok
16:20:42.0631 1464 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\Windows\System32\bdesvc.dll
16:20:42.0631 1464 BDESVC - ok
16:20:42.0662 1464 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
16:20:42.0662 1464 Beep - ok
16:20:42.0693 1464 BFE (1e2bac209d184bb851e1a187d8a29136) C:\Windows\System32\bfe.dll
16:20:42.0709 1464 BFE - ok
16:20:42.0724 1464 BITS (e585445d5021971fae10393f0f1c3961) C:\Windows\System32\qmgr.dll
16:20:42.0740 1464 BITS - ok
16:20:42.0756 1464 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
16:20:42.0756 1464 blbdrive - ok
16:20:42.0787 1464 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
16:20:42.0787 1464 bowser - ok
16:20:42.0849 1464 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:20:42.0849 1464 BrFiltLo - ok
16:20:42.0865 1464 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:20:42.0865 1464 BrFiltUp - ok
16:20:42.0896 1464 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\Windows\System32\browser.dll
16:20:42.0896 1464 Browser - ok
16:20:42.0927 1464 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
16:20:42.0927 1464 Brserid - ok
16:20:42.0958 1464 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
16:20:42.0958 1464 BrSerWdm - ok
16:20:42.0990 1464 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:20:42.0990 1464 BrUsbMdm - ok
16:20:43.0036 1464 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
16:20:43.0036 1464 BrUsbSer - ok
16:20:43.0068 1464 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
16:20:43.0068 1464 BTHMODEM - ok
16:20:43.0099 1464 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\Windows\system32\bthserv.dll
16:20:43.0099 1464 bthserv - ok
16:20:43.0114 1464 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
16:20:43.0114 1464 cdfs - ok
16:20:43.0177 1464 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\drivers\cdrom.sys
16:20:43.0177 1464 cdrom - ok
16:20:43.0239 1464 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
16:20:43.0239 1464 CertPropSvc - ok
16:20:43.0286 1464 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
16:20:43.0286 1464 circlass - ok
16:20:43.0317 1464 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
16:20:43.0317 1464 CLFS - ok
16:20:43.0380 1464 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:20:43.0380 1464 clr_optimization_v2.0.50727_32 - ok
16:20:43.0442 1464 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:20:43.0442 1464 clr_optimization_v4.0.30319_32 - ok
16:20:43.0489 1464 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
16:20:43.0504 1464 CmBatt - ok
16:20:43.0536 1464 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
16:20:43.0536 1464 cmdide - ok
16:20:43.0582 1464 CNG (6427525d76f61d0c519b008d3680e8e7) C:\Windows\system32\Drivers\cng.sys
16:20:43.0582 1464 CNG - ok
16:20:43.0598 1464 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
16:20:43.0598 1464 Compbatt - ok
16:20:43.0645 1464 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
16:20:43.0645 1464 CompositeBus - ok
16:20:43.0676 1464 COMSysApp - ok
16:20:43.0707 1464 cpuz132 - ok
16:20:43.0754 1464 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
16:20:43.0754 1464 crcdisk - ok
16:20:43.0801 1464 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\Windows\system32\cryptsvc.dll
16:20:43.0801 1464 CryptSvc - ok
16:20:43.0832 1464 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
16:20:43.0832 1464 DcomLaunch - ok
16:20:43.0863 1464 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\Windows\System32\defragsvc.dll
16:20:43.0863 1464 defragsvc - ok
16:20:43.0926 1464 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
16:20:43.0926 1464 DfsC - ok
16:20:43.0972 1464 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\Windows\system32\dhcpcore.dll
16:20:43.0972 1464 Dhcp - ok
16:20:44.0004 1464 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
16:20:44.0004 1464 discache - ok
16:20:44.0050 1464 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
16:20:44.0050 1464 Disk - ok
16:20:44.0066 1464 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\Windows\System32\dnsrslvr.dll
16:20:44.0066 1464 Dnscache - ok
16:20:44.0113 1464 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\Windows\System32\dot3svc.dll
16:20:44.0128 1464 dot3svc - ok
16:20:44.0144 1464 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\Windows\system32\dps.dll
16:20:44.0144 1464 DPS - ok
16:20:44.0191 1464 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
16:20:44.0191 1464 drmkaud - ok
16:20:44.0222 1464 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
16:20:44.0238 1464 DXGKrnl - ok
16:20:44.0269 1464 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\Windows\System32\eapsvc.dll
16:20:44.0269 1464 EapHost - ok
16:20:44.0378 1464 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
16:20:44.0409 1464 ebdrv - ok
16:20:44.0440 1464 EFS (81951f51e318aecc2d68559e47485cc4) C:\Windows\System32\lsass.exe
16:20:44.0440 1464 EFS - ok
16:20:44.0503 1464 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\Windows\ehome\ehRecvr.exe
16:20:44.0503 1464 ehRecvr - ok
16:20:44.0518 1464 ehSched (d389bff34f80caede417bf9d1507996a) C:\Windows\ehome\ehsched.exe
16:20:44.0518 1464 ehSched - ok
16:20:44.0612 1464 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
16:20:44.0612 1464 elxstor - ok
16:20:44.0643 1464 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
16:20:44.0643 1464 ErrDev - ok
16:20:44.0690 1464 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\Windows\system32\es.dll
16:20:44.0690 1464 EventSystem - ok
16:20:44.0706 1464 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
16:20:44.0706 1464 exfat - ok
16:20:44.0721 1464 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
16:20:44.0721 1464 fastfat - ok
16:20:44.0784 1464 Fax (967ea5b213e9984cbe270205df37755b) C:\Windows\system32\fxssvc.exe
16:20:44.0784 1464 Fax - ok
16:20:44.0830 1464 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
16:20:44.0830 1464 fdc - ok
16:20:44.0862 1464 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\Windows\system32\fdPHost.dll
16:20:44.0862 1464 fdPHost - ok
16:20:44.0877 1464 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\Windows\system32\fdrespub.dll
16:20:44.0877 1464 FDResPub - ok
16:20:44.0908 1464 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
16:20:44.0908 1464 FileInfo - ok
16:20:44.0955 1464 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
16:20:44.0955 1464 Filetrace - ok
16:20:44.0986 1464 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
16:20:44.0986 1464 flpydisk - ok
16:20:45.0002 1464 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
16:20:45.0018 1464 FltMgr - ok
16:20:45.0049 1464 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\Windows\system32\FntCache.dll
16:20:45.0049 1464 FontCache - ok
16:20:45.0096 1464 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
16:20:45.0111 1464 FontCache3.0.0.0 - ok
16:20:45.0174 1464 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
16:20:45.0174 1464 FsDepends - ok
16:20:45.0189 1464 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
16:20:45.0189 1464 Fs_Rec - ok
16:20:45.0236 1464 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
16:20:45.0236 1464 fvevol - ok
16:20:45.0267 1464 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:20:45.0267 1464 gagp30kx - ok
16:20:45.0298 1464 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\Windows\System32\gpsvc.dll
16:20:45.0314 1464 gpsvc - ok
16:20:45.0408 1464 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
16:20:45.0408 1464 gupdate - ok
16:20:45.0423 1464 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
16:20:45.0423 1464 gupdatem - ok
16:20:45.0439 1464 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
16:20:45.0439 1464 gusvc - ok
16:20:45.0501 1464 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
16:20:45.0501 1464 hcw85cir - ok
16:20:45.0532 1464 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
16:20:45.0532 1464 HdAudAddService - ok
16:20:45.0579 1464 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
16:20:45.0579 1464 HDAudBus - ok
16:20:45.0595 1464 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
16:20:45.0595 1464 HidBatt - ok
16:20:45.0610 1464 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
16:20:45.0610 1464 HidBth - ok
16:20:45.0673 1464 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
16:20:45.0673 1464 HidIr - ok
16:20:45.0720 1464 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\Windows\system32\hidserv.dll
16:20:45.0720 1464 hidserv - ok
16:20:45.0751 1464 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\drivers\hidusb.sys
16:20:45.0751 1464 HidUsb - ok
16:20:45.0766 1464 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\Windows\system32\kmsvc.dll
16:20:45.0766 1464 hkmsvc - ok
16:20:45.0798 1464 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\Windows\system32\ListSvc.dll
16:20:45.0798 1464 HomeGroupListener - ok
16:20:45.0829 1464 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\Windows\system32\provsvc.dll
16:20:45.0829 1464 HomeGroupProvider - ok
16:20:45.0876 1464 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
16:20:45.0891 1464 HpSAMD - ok
16:20:45.0938 1464 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
16:20:45.0938 1464 HTTP - ok
16:20:45.0954 1464 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
16:20:45.0954 1464 hwpolicy - ok
16:20:46.0016 1464 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
16:20:46.0016 1464 i8042prt - ok
16:20:46.0047 1464 iaStor (26541a068572f650a2fa490726fe81be) C:\Windows\system32\DRIVERS\iaStor.sys
16:20:46.0047 1464 iaStor - ok
16:20:46.0110 1464 IAStorDataMgrSvc (31a0e93cdf29007d6c6fffb632f375ed) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
16:20:46.0110 1464 IAStorDataMgrSvc - ok
16:20:46.0188 1464 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\Windows\system32\drivers\iaStorV.sys
16:20:46.0203 1464 iaStorV - ok
16:20:46.0281 1464 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
16:20:46.0297 1464 idsvc - ok
16:20:46.0390 1464 igfx (ad626f6964f4d364d226c39e06872dd3) C:\Windows\system32\DRIVERS\igdkmd32.sys
16:20:46.0437 1464 igfx - ok
16:20:46.0515 1464 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
16:20:46.0515 1464 iirsp - ok
16:20:46.0562 1464 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\Windows\System32\ikeext.dll
16:20:46.0562 1464 IKEEXT - ok
16:20:46.0656 1464 IntcAzAudAddService (f4427e5df32cde359b2e2e5512d18001) C:\Windows\system32\drivers\RTKVHDA.sys
16:20:46.0687 1464 IntcAzAudAddService - ok
16:20:46.0749 1464 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
16:20:46.0749 1464 intelide - ok
16:20:46.0796 1464 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
16:20:46.0796 1464 intelppm - ok
16:20:46.0812 1464 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\Windows\system32\ipbusenum.dll
16:20:46.0827 1464 IPBusEnum - ok
16:20:46.0843 1464 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:20:46.0843 1464 IpFilterDriver - ok
16:20:46.0874 1464 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\Windows\System32\iphlpsvc.dll
16:20:46.0890 1464 iphlpsvc - ok
16:20:46.0921 1464 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
16:20:46.0921 1464 IPMIDRV - ok
16:20:46.0983 1464 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
16:20:46.0983 1464 IPNAT - ok
16:20:47.0014 1464 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
16:20:47.0014 1464 IRENUM - ok
16:20:47.0030 1464 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
16:20:47.0030 1464 isapnp - ok
16:20:47.0046 1464 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
16:20:47.0061 1464 iScsiPrt - ok
16:20:47.0077 1464 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\drivers\kbdclass.sys
16:20:47.0077 1464 kbdclass - ok
16:20:47.0108 1464 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\drivers\kbdhid.sys
16:20:47.0108 1464 kbdhid - ok
16:20:47.0170 1464 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
16:20:47.0170 1464 KeyIso - ok
16:20:47.0202 1464 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\Windows\system32\Drivers\ksecdd.sys
16:20:47.0202 1464 KSecDD - ok
16:20:47.0233 1464 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\Windows\system32\Drivers\ksecpkg.sys
16:20:47.0233 1464 KSecPkg - ok
16:20:47.0264 1464 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\Windows\system32\msdtckrm.dll
16:20:47.0264 1464 KtmRm - ok
16:20:47.0295 1464 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\Windows\system32\srvsvc.dll
16:20:47.0295 1464 LanmanServer - ok
16:20:47.0358 1464 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\Windows\System32\wkssvc.dll
16:20:47.0358 1464 LanmanWorkstation - ok
16:20:47.0404 1464 LgBttPort (4dd47b5af0b24871ebb9efc012a7474e) C:\Windows\system32\DRIVERS\lgbtport.sys
16:20:47.0404 1464 LgBttPort - ok
16:20:47.0420 1464 lgbusenum (1d038ca6c529203087a990e5e97887b4) C:\Windows\system32\DRIVERS\lgbtbus.sys
16:20:47.0420 1464 lgbusenum - ok
16:20:47.0467 1464 LGVMODEM (26f1976a330195d62a6224c76968cf0d) C:\Windows\system32\DRIVERS\lgvmodem.sys
16:20:47.0467 1464 LGVMODEM - ok
16:20:47.0514 1464 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
16:20:47.0514 1464 lltdio - ok
16:20:47.0529 1464 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\Windows\System32\lltdsvc.dll
16:20:47.0545 1464 lltdsvc - ok
16:20:47.0576 1464 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\Windows\System32\lmhsvc.dll
16:20:47.0576 1464 lmhosts - ok
16:20:47.0623 1464 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:20:47.0623 1464 LSI_FC - ok
16:20:47.0654 1464 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:20:47.0654 1464 LSI_SAS - ok
16:20:47.0685 1464 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:20:47.0685 1464 LSI_SAS2 - ok
16:20:47.0732 1464 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:20:47.0732 1464 LSI_SCSI - ok
16:20:47.0748 1464 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
16:20:47.0748 1464 luafv - ok
16:20:47.0841 1464 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys
16:20:47.0841 1464 MBAMProtector - ok
16:20:47.0888 1464 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
16:20:47.0904 1464 MBAMService - ok
16:20:47.0950 1464 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\Windows\system32\Mcx2Svc.dll
16:20:47.0950 1464 Mcx2Svc - ok
16:20:47.0982 1464 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
16:20:47.0982 1464 megasas - ok
16:20:48.0044 1464 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
16:20:48.0044 1464 MegaSR - ok
16:20:48.0075 1464 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
16:20:48.0075 1464 MMCSS - ok
16:20:48.0091 1464 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
16:20:48.0091 1464 Modem - ok
16:20:48.0122 1464 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
16:20:48.0122 1464 monitor - ok
16:20:48.0138 1464 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\drivers\mouclass.sys
16:20:48.0138 1464 mouclass - ok
16:20:48.0169 1464 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
16:20:48.0169 1464 mouhid - ok
16:20:48.0184 1464 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
16:20:48.0184 1464 mountmgr - ok
16:20:48.0247 1464 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
16:20:48.0247 1464 mpio - ok
16:20:48.0278 1464 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
16:20:48.0294 1464 mpsdrv - ok
16:20:48.0309 1464 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\Windows\system32\mpssvc.dll
16:20:48.0325 1464 MpsSvc - ok
16:20:48.0356 1464 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
16:20:48.0356 1464 MRxDAV - ok
16:20:48.0418 1464 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:20:48.0418 1464 mrxsmb - ok
16:20:48.0450 1464 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:20:48.0465 1464 mrxsmb10 - ok
16:20:48.0496 1464 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:20:48.0496 1464 mrxsmb20 - ok
16:20:48.0528 1464 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
16:20:48.0528 1464 msahci - ok
16:20:48.0559 1464 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
16:20:48.0559 1464 msdsm - ok
16:20:48.0621 1464 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\Windows\System32\msdtc.exe
16:20:48.0621 1464 MSDTC - ok
16:20:48.0668 1464 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
16:20:48.0668 1464 Msfs - ok
16:20:48.0668 1464 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
16:20:48.0668 1464 mshidkmdf - ok
16:20:48.0699 1464 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
16:20:48.0699 1464 msisadrv - ok
16:20:48.0746 1464 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\Windows\system32\iscsiexe.dll
16:20:48.0746 1464 MSiSCSI - ok
16:20:48.0746 1464 msiserver - ok
16:20:48.0777 1464 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
16:20:48.0777 1464 MSKSSRV - ok
16:20:48.0840 1464 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
16:20:48.0840 1464 MSPCLOCK - ok
16:20:48.0855 1464 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
16:20:48.0855 1464 MSPQM - ok
16:20:48.0871 1464 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
16:20:48.0871 1464 MsRPC - ok
16:20:48.0902 1464 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
16:20:48.0902 1464 mssmbios - ok
16:20:48.0933 1464 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
16:20:48.0933 1464 MSTEE - ok
16:20:48.0949 1464 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
16:20:48.0949 1464 MTConfig - ok
16:20:49.0011 1464 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
16:20:49.0011 1464 Mup - ok
16:20:49.0042 1464 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\Windows\system32\qagentRT.dll
16:20:49.0042 1464 napagent - ok
16:20:49.0074 1464 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
16:20:49.0074 1464 NativeWifiP - ok
16:20:49.0105 1464 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
16:20:49.0120 1464 NDIS - ok
16:20:49.0167 1464 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
16:20:49.0167 1464 NdisCap - ok
16:20:49.0230 1464 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
16:20:49.0230 1464 NdisTapi - ok
16:20:49.0245 1464 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
16:20:49.0245 1464 Ndisuio - ok
16:20:49.0276 1464 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
16:20:49.0276 1464 NdisWan - ok
16:20:49.0308 1464 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
16:20:49.0308 1464 NDProxy - ok
16:20:49.0323 1464 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
16:20:49.0323 1464 NetBIOS - ok
16:20:49.0354 1464 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
16:20:49.0354 1464 NetBT - ok
16:20:49.0401 1464 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
16:20:49.0417 1464 Netlogon - ok
16:20:49.0448 1464 Netman (7cccfca7510684768da22092d1fa4db2) C:\Windows\System32\netman.dll
16:20:49.0448 1464 Netman - ok
16:20:49.0464 1464 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\Windows\System32\netprofm.dll
16:20:49.0464 1464 netprofm - ok
16:20:49.0526 1464 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:20:49.0526 1464 NetTcpPortSharing - ok
16:20:49.0588 1464 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
16:20:49.0588 1464 nfrd960 - ok
16:20:49.0651 1464 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\Windows\System32\nlasvc.dll
16:20:49.0651 1464 NlaSvc - ok
16:20:49.0682 1464 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
16:20:49.0682 1464 Npfs - ok
16:20:49.0713 1464 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\Windows\system32\nsisvc.dll
16:20:49.0713 1464 nsi - ok
16:20:49.0729 1464 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
16:20:49.0729 1464 nsiproxy - ok
16:20:49.0776 1464 Ntfs (81189c3d7763838e55c397759d49007a) C:\Windows\system32\drivers\Ntfs.sys
16:20:49.0776 1464 Ntfs - ok
16:20:49.0854 1464 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
16:20:49.0854 1464 Null - ok
16:20:49.0885 1464 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\Windows\system32\drivers\nvraid.sys
16:20:49.0885 1464 nvraid - ok
16:20:49.0900 1464 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\Windows\system32\drivers\nvstor.sys
16:20:49.0900 1464 nvstor - ok
16:20:49.0932 1464 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
16:20:49.0932 1464 nv_agp - ok
16:20:50.0025 1464 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
16:20:50.0041 1464 odserv - ok
16:20:50.0119 1464 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
16:20:50.0119 1464 ohci1394 - ok
16:20:50.0150 1464 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
16:20:50.0150 1464 ose - ok
16:20:50.0181 1464 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
16:20:50.0181 1464 p2pimsvc - ok
16:20:50.0197 1464 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\Windows\system32\p2psvc.dll
16:20:50.0197 1464 p2psvc - ok
16:20:50.0228 1464 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
16:20:50.0228 1464 Parport - ok
16:20:50.0244 1464 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
16:20:50.0244 1464 partmgr - ok
16:20:50.0306 1464 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
16:20:50.0306 1464 Parvdm - ok
16:20:50.0322 1464 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\Windows\System32\pcasvc.dll
16:20:50.0337 1464 PcaSvc - ok
16:20:50.0353 1464 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
16:20:50.0368 1464 pci - ok
16:20:50.0384 1464 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
16:20:50.0384 1464 pciide - ok
16:20:50.0415 1464 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
16:20:50.0415 1464 pcmcia - ok
16:20:50.0446 1464 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
16:20:50.0446 1464 pcw - ok
16:20:50.0509 1464 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
16:20:50.0524 1464 PEAUTH - ok
16:20:50.0587 1464 pla (414bba67a3ded1d28437eb66aeb8a720) C:\Windows\system32\pla.dll
16:20:50.0602 1464 pla - ok
16:20:50.0618 1464 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\Windows\system32\umpnpmgr.dll
16:20:50.0634 1464 PlugPlay - ok
16:20:50.0665 1464 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\Windows\system32\pnrpauto.dll
16:20:50.0665 1464 PNRPAutoReg - ok
16:20:50.0712 1464 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\Windows\system32\pnrpsvc.dll
16:20:50.0712 1464 PNRPsvc - ok
16:20:50.0743 1464 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\Windows\System32\ipsecsvc.dll
16:20:50.0743 1464 PolicyAgent - ok
16:20:50.0774 1464 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\Windows\system32\umpo.dll
16:20:50.0774 1464 Power - ok
16:20:50.0821 1464 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
16:20:50.0821 1464 PptpMiniport - ok
16:20:50.0852 1464 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
16:20:50.0852 1464 Processor - ok
16:20:50.0914 1464 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\Windows\system32\profsvc.dll
16:20:50.0914 1464 ProfSvc - ok
16:20:50.0946 1464 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
16:20:50.0946 1464 ProtectedStorage - ok
16:20:50.0961 1464 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
16:20:50.0961 1464 Psched - ok
16:20:51.0024 1464 PSI_SVC_2 (a6a7ad767bf5141665f5c675f671b3e1) c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
16:20:51.0024 1464 PSI_SVC_2 - ok
16:20:51.0086 1464 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
16:20:51.0102 1464 ql2300 - ok
16:20:51.0180 1464 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
16:20:51.0180 1464 ql40xx - ok
16:20:51.0211 1464 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\Windows\system32\qwave.dll
16:20:51.0211 1464 QWAVE - ok
16:20:51.0226 1464 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
16:20:51.0226 1464 QWAVEdrv - ok
16:20:51.0258 1464 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
16:20:51.0258 1464 RasAcd - ok
16:20:51.0289 1464 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:20:51.0304 1464 RasAgileVpn - ok
16:20:51.0336 1464 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\Windows\System32\rasauto.dll
16:20:51.0351 1464 RasAuto - ok
16:20:51.0367 1464 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:20:51.0367 1464 Rasl2tp - ok
16:20:51.0414 1464 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\Windows\System32\rasmans.dll
16:20:51.0414 1464 RasMan - ok
16:20:51.0429 1464 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
16:20:51.0445 1464 RasPppoe - ok
16:20:51.0476 1464 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
16:20:51.0476 1464 RasSstp - ok
16:20:51.0507 1464 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
16:20:51.0507 1464 rdbss - ok
16:20:51.0538 1464 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
16:20:51.0538 1464 rdpbus - ok
16:20:51.0585 1464 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:20:51.0585 1464 RDPCDD - ok
16:20:51.0601 1464 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
16:20:51.0601 1464 RDPENCDD - ok
16:20:51.0616 1464 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
16:20:51.0616 1464 RDPREFMP - ok
16:20:51.0648 1464 RDPWD (244c83332f44589ae98fc347f11b2693) C:\Windows\system32\drivers\RDPWD.sys
16:20:51.0648 1464 RDPWD - ok
16:20:51.0679 1464 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
16:20:51.0679 1464 rdyboost - ok
16:20:51.0694 1464 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\Windows\System32\mprdim.dll
16:20:51.0694 1464 RemoteAccess - ok
16:20:51.0757 1464 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\Windows\system32\regsvc.dll
16:20:51.0757 1464 RemoteRegistry - ok
16:20:51.0788 1464 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\Windows\System32\RpcEpMap.dll
16:20:51.0788 1464 RpcEptMapper - ok
16:20:51.0804 1464 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\Windows\system32\locator.exe
16:20:51.0804 1464 RpcLocator - ok
16:20:51.0819 1464 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\Windows\system32\rpcss.dll
16:20:51.0835 1464 RpcSs - ok
16:20:51.0866 1464 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
16:20:51.0866 1464 rspndr - ok
16:20:51.0913 1464 RTL8167 (bcebd5d1aabce4efb7597635e347c44b) C:\Windows\system32\DRIVERS\Rt86win7.sys
16:20:51.0913 1464 RTL8167 - ok
16:20:51.0991 1464 RTL8192su (51adef77e4c929535fd50da153774e79) C:\Windows\system32\DRIVERS\RTL8192su.sys
16:20:51.0991 1464 RTL8192su - ok
16:20:52.0022 1464 SamSs (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
16:20:52.0022 1464 SamSs - ok
16:20:52.0053 1464 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
16:20:52.0053 1464 sbp2port - ok
16:20:52.0100 1464 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\Windows\System32\SCardSvr.dll
16:20:52.0100 1464 SCardSvr - ok
16:20:52.0131 1464 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
16:20:52.0131 1464 scfilter - ok
16:20:52.0194 1464 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\Windows\system32\schedsvc.dll
16:20:52.0209 1464 Schedule - ok
16:20:52.0240 1464 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\Windows\System32\certprop.dll
16:20:52.0240 1464 SCPolicySvc - ok
16:20:52.0256 1464 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\Windows\System32\SDRSVC.dll
16:20:52.0256 1464 SDRSVC - ok
16:20:52.0303 1464 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
16:20:52.0303 1464 secdrv - ok
16:20:52.0318 1464 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\Windows\system32\seclogon.dll
16:20:52.0318 1464 seclogon - ok
16:20:52.0365 1464 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\Windows\System32\sens.dll
16:20:52.0365 1464 SENS - ok
16:20:52.0396 1464 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\Windows\system32\sensrsvc.dll
16:20:52.0396 1464 SensrSvc - ok
16:20:52.0412 1464 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
16:20:52.0412 1464 Serenum - ok
16:20:52.0428 1464 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
16:20:52.0428 1464 Serial - ok
16:20:52.0459 1464 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
16:20:52.0459 1464 sermouse - ok
16:20:52.0506 1464 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\Windows\system32\sessenv.dll
16:20:52.0506 1464 SessionEnv - ok
16:20:52.0552 1464 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
16:20:52.0552 1464 sffdisk - ok
16:20:52.0584 1464 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
16:20:52.0584 1464 sffp_mmc - ok
16:20:52.0599 1464 sffp_sd (a0708bbd07d245c06ff9de549ca47185) C:\Windows\system32\drivers\sffp_sd.sys
16:20:52.0599 1464 sffp_sd - ok
16:20:52.0630 1464 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
16:20:52.0630 1464 sfloppy - ok
16:20:52.0662 1464 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\Windows\System32\ipnathlp.dll
16:20:52.0662 1464 SharedAccess - ok
16:20:52.0708 1464 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\Windows\System32\shsvcs.dll
16:20:52.0708 1464 ShellHWDetection - ok
16:20:52.0786 1464 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
16:20:52.0786 1464 sisagp - ok
16:20:52.0818 1464 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:20:52.0818 1464 SiSRaid2 - ok
16:20:52.0849 1464 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
16:20:52.0849 1464 SiSRaid4 - ok
16:20:52.0880 1464 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
16:20:52.0880 1464 Smb - ok
16:20:52.0911 1464 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\Windows\System32\snmptrap.exe
16:20:52.0911 1464 SNMPTRAP - ok
16:20:52.0958 1464 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
16:20:52.0958 1464 spldr - ok
16:20:52.0989 1464 Spooler (866a43013535dc8587c258e43579c764) C:\Windows\System32\spoolsv.exe
16:20:53.0005 1464 Spooler - ok
16:20:53.0067 1464 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\Windows\system32\sppsvc.exe
16:20:53.0098 1464 sppsvc - ok
16:20:53.0130 1464 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\Windows\system32\sppuinotify.dll
16:20:53.0130 1464 sppuinotify - ok
16:20:53.0192 1464 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
16:20:53.0192 1464 srv - ok
16:20:53.0223 1464 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
16:20:53.0223 1464 srv2 - ok
16:20:53.0254 1464 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
16:20:53.0254 1464 srvnet - ok
16:20:53.0286 1464 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\Windows\System32\ssdpsrv.dll
16:20:53.0286 1464 SSDPSRV - ok
16:20:53.0317 1464 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
16:20:53.0317 1464 ssmdrv - ok
16:20:53.0364 1464 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\Windows\system32\sstpsvc.dll
16:20:53.0364 1464 SstpSvc - ok
16:20:53.0410 1464 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
16:20:53.0410 1464 stexstor - ok
16:20:53.0504 1464 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\Windows\System32\wiaservc.dll
16:20:53.0504 1464 StiSvc - ok
16:20:53.0520 1464 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
16:20:53.0535 1464 swenum - ok
16:20:53.0551 1464 swprv (a28bd92df340e57b024ba433165d34d7) C:\Windows\System32\swprv.dll
16:20:53.0551 1464 swprv - ok
16:20:53.0613 1464 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\Windows\system32\sysmain.dll
16:20:53.0613 1464 SysMain - ok
16:20:53.0676 1464 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\Windows\System32\TabSvc.dll
16:20:53.0676 1464 TabletInputService - ok
16:20:53.0707 1464 TapiSrv (613bf4820361543956909043a265c6ac) C:\Windows\System32\tapisrv.dll
16:20:53.0707 1464 TapiSrv - ok
16:20:53.0722 1464 TBS (b799d9fdb26111737f58288d8dc172d9) C:\Windows\System32\tbssvc.dll
16:20:53.0738 1464 TBS - ok
16:20:53.0785 1464 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
16:20:53.0800 1464 Tcpip - ok
16:20:53.0832 1464 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
16:20:53.0847 1464 TCPIP6 - ok
16:20:53.0878 1464 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
16:20:53.0878 1464 tcpipreg - ok
16:20:53.0925 1464 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
16:20:53.0925 1464 TDPIPE - ok
16:20:53.0956 1464 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\Windows\system32\drivers\tdtcp.sys
16:20:53.0972 1464 TDTCP - ok
16:20:53.0988 1464 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
16:20:53.0988 1464 tdx - ok
16:20:54.0034 1464 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
16:20:54.0034 1464 TermDD - ok
16:20:54.0066 1464 TermService (382c804c92811be57829d8e550a900e2) C:\Windows\System32\termsrv.dll
16:20:54.0066 1464 TermService - ok
16:20:54.0112 1464 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\Windows\system32\themeservice.dll
16:20:54.0112 1464 Themes - ok
16:20:54.0159 1464 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\Windows\system32\mmcss.dll
16:20:54.0159 1464 THREADORDER - ok
16:20:54.0175 1464 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\Windows\System32\trkwks.dll
16:20:54.0190 1464 TrkWks - ok
16:20:54.0206 1464 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\Windows\servicing\TrustedInstaller.exe
16:20:54.0206 1464 TrustedInstaller - ok
16:20:54.0237 1464 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:20:54.0237 1464 tssecsrv - ok
16:20:54.0284 1464 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
16:20:54.0284 1464 TsUsbFlt - ok
16:20:54.0346 1464 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
16:20:54.0362 1464 tunnel - ok
16:20:54.0393 1464 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
16:20:54.0393 1464 uagp35 - ok
16:20:54.0424 1464 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
16:20:54.0424 1464 udfs - ok
16:20:54.0471 1464 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\Windows\system32\UI0Detect.exe
16:20:54.0471 1464 UI0Detect - ok
16:20:54.0502 1464 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
16:20:54.0502 1464 uliagpkx - ok
16:20:54.0549 1464 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
16:20:54.0549 1464 umbus - ok
16:20:54.0580 1464 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
16:20:54.0580 1464 UmPass - ok
16:20:54.0612 1464 upnphost (833fbb672460efce8011d262175fad33) C:\Windows\System32\upnphost.dll
16:20:54.0612 1464 upnphost - ok
16:20:54.0627 1464 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) C:\Windows\system32\DRIVERS\usbccgp.sys
16:20:54.0627 1464 usbccgp - ok
16:20:54.0658 1464 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
16:20:54.0658 1464 usbcir - ok
16:20:54.0690 1464 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\Windows\system32\DRIVERS\usbehci.sys
16:20:54.0690 1464 usbehci - ok
16:20:54.0752 1464 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\Windows\system32\DRIVERS\usbhub.sys
16:20:54.0752 1464 usbhub - ok
16:20:54.0799 1464 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\drivers\usbohci.sys
16:20:54.0799 1464 usbohci - ok
16:20:54.0830 1464 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
16:20:54.0830 1464 usbprint - ok
16:20:54.0892 1464 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
16:20:54.0892 1464 usbscan - ok
16:20:54.0924 1464 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:20:54.0924 1464 USBSTOR - ok
16:20:54.0939 1464 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\Windows\system32\DRIVERS\usbuhci.sys
16:20:54.0939 1464 usbuhci - ok
16:20:54.0955 1464 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\Windows\System32\uxsms.dll
16:20:54.0970 1464 UxSms - ok
16:20:55.0017 1464 V0260VID (c90055bd2bb41443462ea715e0876b8d) C:\Windows\system32\DRIVERS\V0260Vid.sys
16:20:55.0017 1464 V0260VID - ok
16:20:55.0048 1464 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\Windows\system32\lsass.exe
16:20:55.0048 1464 VaultSvc - ok
16:20:55.0080 1464 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
16:20:55.0080 1464 vdrvroot - ok
16:20:55.0126 1464 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\Windows\System32\vds.exe
16:20:55.0126 1464 vds - ok
16:20:55.0158 1464 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
16:20:55.0158 1464 vga - ok
16:20:55.0189 1464 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
16:20:55.0189 1464 VgaSave - ok
16:20:55.0220 1464 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
16:20:55.0220 1464 vhdmp - ok
16:20:55.0282 1464 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
16:20:55.0282 1464 viaagp - ok
16:20:55.0314 1464 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
16:20:55.0314 1464 ViaC7 - ok
16:20:55.0345 1464 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
16:20:55.0345 1464 viaide - ok
16:20:55.0376 1464 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
16:20:55.0376 1464 volmgr - ok
16:20:55.0423 1464 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
16:20:55.0423 1464 volmgrx - ok
16:20:55.0454 1464 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
16:20:55.0454 1464 volsnap - ok
16:20:55.0501 1464 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
16:20:55.0501 1464 vsmraid - ok
16:20:55.0548 1464 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\Windows\system32\vssvc.exe
16:20:55.0563 1464 VSS - ok
16:20:55.0594 1464 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
16:20:55.0594 1464 vwifibus - ok
16:20:55.0626 1464 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
16:20:55.0626 1464 vwififlt - ok
16:20:55.0657 1464 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\Windows\system32\DRIVERS\vwifimp.sys
16:20:55.0672 1464 vwifimp - ok
16:20:55.0688 1464 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\Windows\system32\w32time.dll
16:20:55.0704 1464 W32Time - ok
16:20:55.0719 1464 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
16:20:55.0719 1464 WacomPen - ok
16:20:55.0782 1464 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
16:20:55.0782 1464 WANARP - ok
16:20:55.0797 1464 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
16:20:55.0797 1464 Wanarpv6 - ok
16:20:55.0860 1464 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\Windows\system32\Wat\WatAdminSvc.exe
16:20:55.0875 1464 WatAdminSvc - ok
16:20:55.0922 1464 wbengine (691e3285e53dca558e1a84667f13e15a) C:\Windows\system32\wbengine.exe
16:20:55.0938 1464 wbengine - ok
16:20:55.0984 1464 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\Windows\System32\wbiosrvc.dll
16:20:56.0000 1464 WbioSrvc - ok
16:20:56.0047 1464 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\Windows\System32\wcncsvc.dll
16:20:56.0047 1464 wcncsvc - ok
16:20:56.0062 1464 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\Windows\System32\WcsPlugInService.dll
16:20:56.0062 1464 WcsPlugInService - ok
16:20:56.0094 1464 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
16:20:56.0094 1464 Wd - ok
16:20:56.0125 1464 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
16:20:56.0125 1464 Wdf01000 - ok
16:20:56.0156 1464 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
16:20:56.0156 1464 WdiServiceHost - ok
16:20:56.0156 1464 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\Windows\system32\wdi.dll
16:20:56.0156 1464 WdiSystemHost - ok
16:20:56.0187 1464 WebClient (a9d880f97530d5b8fee278923349929d) C:\Windows\System32\webclnt.dll
16:20:56.0203 1464 WebClient - ok
16:20:56.0250 1464 Wecsvc (760f0afe937a77cff27153206534f275) C:\Windows\system32\wecsvc.dll
16:20:56.0250 1464 Wecsvc - ok
16:20:56.0281 1464 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\Windows\System32\wercplsupport.dll
16:20:56.0281 1464 wercplsupport - ok
16:20:56.0296 1464 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\Windows\System32\WerSvc.dll
16:20:56.0312 1464 WerSvc - ok
16:20:56.0343 1464 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
16:20:56.0343 1464 WfpLwf - ok
16:20:56.0359 1464 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
16:20:56.0359 1464 WIMMount - ok
16:20:56.0421 1464 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll
16:20:56.0437 1464 WinDefend - ok
16:20:56.0437 1464 WinHttpAutoProxySvc - ok
16:20:56.0468 1464 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\Windows\system32\wbem\WMIsvc.dll
16:20:56.0468 1464 Winmgmt - ok
16:20:56.0546 1464 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\Windows\system32\WsmSvc.dll
16:20:56.0562 1464 WinRM - ok
16:20:56.0608 1464 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\Windows\System32\wlansvc.dll
16:20:56.0624 1464 Wlansvc - ok
16:20:56.0655 1464 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
16:20:56.0655 1464 WmiAcpi - ok
16:20:56.0733 1464 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\Windows\system32\wbem\WmiApSrv.exe
16:20:56.0733 1464 wmiApSrv - ok
16:20:56.0796 1464 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe
16:20:56.0796 1464 WMPNetworkSvc - ok
16:20:56.0842 1464 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\Windows\System32\wpcsvc.dll
16:20:56.0842 1464 WPCSvc - ok
16:20:56.0874 1464 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\Windows\system32\wpdbusenum.dll
16:20:56.0874 1464 WPDBusEnum - ok
16:20:56.0936 1464 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
16:20:56.0936 1464 ws2ifsl - ok
16:20:56.0952 1464 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\Windows\System32\wscsvc.dll
16:20:56.0952 1464 wscsvc - ok
16:20:56.0967 1464 WSearch - ok
16:20:57.0014 1464 wuauserv (3026418a50c5b4761befa632cedb7406) C:\Windows\system32\wuaueng.dll
16:20:57.0030 1464 wuauserv - ok
16:20:57.0076 1464 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
16:20:57.0076 1464 WudfPf - ok
16:20:57.0123 1464 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:20:57.0123 1464 WUDFRd - ok
16:20:57.0154 1464 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\Windows\System32\WUDFSvc.dll
16:20:57.0170 1464 wudfsvc - ok
16:20:57.0186 1464 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\Windows\System32\wwansvc.dll
16:20:57.0217 1464 WwanSvc - ok
16:20:57.0248 1464 MBR (0x1B8) (c79b30cb8852157f6f908e4698cfe0d0) \Device\Harddisk0\DR0
16:20:59.0292 1464 \Device\Harddisk0\DR0 - ok
16:20:59.0307 1464 Boot (0x1200) (a96290b5401c2da5a08bb9471d76d503) \Device\Harddisk0\DR0\Partition0
16:20:59.0307 1464 \Device\Harddisk0\DR0\Partition0 - ok
16:20:59.0307 1464 Boot (0x1200) (046bbd7303f14eb983a3f0c302651470) \Device\Harddisk0\DR0\Partition1
16:20:59.0307 1464 \Device\Harddisk0\DR0\Partition1 - ok
16:20:59.0354 1464 Boot (0x1200) (376b50b18dd730f4a63e4b8227f4638c) \Device\Harddisk0\DR0\Partition2
16:20:59.0354 1464 \Device\Harddisk0\DR0\Partition2 - ok
16:20:59.0354 1464 ============================================================
16:20:59.0354 1464 Scan finished
16:20:59.0354 1464 ============================================================
16:20:59.0354 1456 Detected object count: 0
16:20:59.0354 1456 Actual detected object count: 0
16:21:05.0422 1424 Deinitialize success


Die Fehlermeldungen sind jetzt weg, aber der Bildschirmhintergrund ist immer noch schwarz und die Dateien weg.

Kann mir jemand weiterhelfen?
Danke