druecke [STRG]+[SHIFT]+[ESC]

emsisoft bzw a2.... auswaehlen und Task beenden.

dann versuchen zu deinstallieren.

Ich habe a2 und alles von emsisoft aus, kann es trotzdem nicht löschen : /

Versuche es im abgesicherten Modus

Was ist ein abgesicherter Modus, tut mir leid ich bin nicht sehr geläufig mit diesen Begriffen : /

http://www.trojaner-board.de/63335-w...s-starten.html

Danke! Hier die eset logfile:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=691c6bfdcf5dde4ab06145b0bc739ac3
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-16 08:00:55
# local_time=2012-09-16 09:00:55 (+0100, W. Europe Standard Time)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1280 16777215 100 0 19658866 19658866 0 0
# compatibility_mode=5893 16776574 100 94 19476602 100284274 0 0
# compatibility_mode=8192 67108863 100 0 210 210 0 0
# scanned=171562
# found=6
# cleaned=6
# scan_time=6432
C:\Qoobox\Quarantine\C\Windows\System32\Services.exe.vir Win64/Patched.B.Gen trojan (deleted - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\08272012_134945\C_Users\Konsz\AppData\Local\{dd0b6037-a9c2-e38b-9363-0614255749a0}\U\80000000.@ Win64/Sirefef.AL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\08272012_134945\C_Users\Konsz\AppData\Local\{dd0b6037-a9c2-e38b-9363-0614255749a0}\U\800000cb.@ Win64/Sirefef.AH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\08272012_134945\C_Users\Konsz\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\21f85fbd-47d43b54 Java/Exploit.CVE-2012-1723.AP trojan (deleted - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\08272012_134945\C_Windows\Installer\{dd0b6037-a9c2-e38b-9363-0614255749a0}\U\80000000.@ Win64/Sirefef.AL trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\08272012_134945\C_Windows\Installer\{dd0b6037-a9c2-e38b-9363-0614255749a0}\U\800000cb.@ Win64/Sirefef.AH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

TDSSKiller von Kaspersky

- Lade den TDSSKiller und entpacke das Archiv auf Deinen Desktop.
- Vergewissere Dich, dass die TDSSKiller.exe direkt auf dem Desktop liegt (nicht in einem Ordner auf dem Desktop).
- deaktiviere vorübergehend dein AntiVirus-Programm
- Starte die TDSSKiller.exe durch Doppelklick.
- Nach Beendigung der Arbeit schlägt das Tool vor, das System neu zu starten.
- Bestätige das ggfs. mit Y(es).
- Beim Hochfahren des Systems führt der Treiber alle geplanten Operationen aus löscht sich danach.
- Poste den Inhalt von C:\TDSSKiller.txt hier in den Thread.

Hier findest Du eine ausführlichere TDSSKiller Anleitung.

21:07:50.0242 3932 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
21:07:52.0244 3932 ============================================================
21:07:52.0244 3932 Current date / time: 2012/09/19 21:07:52.0243
21:07:52.0244 3932 SystemInfo:
21:07:52.0244 3932
21:07:52.0244 3932 OS Version: 6.1.7601 ServicePack: 1.0
21:07:52.0244 3932 Product type: Workstation
21:07:52.0244 3932 ComputerName: KONSZ-PC
21:07:52.0245 3932 UserName: Konsz
21:07:52.0245 3932 Windows directory: C:\Windows
21:07:52.0245 3932 System windows directory: C:\Windows
21:07:52.0245 3932 Running under WOW64
21:07:52.0245 3932 Processor architecture: Intel x64
21:07:52.0245 3932 Number of processors: 8
21:07:52.0245 3932 Page size: 0x1000
21:07:52.0245 3932 Boot type: Normal boot
21:07:52.0245 3932 ============================================================
21:07:52.0725 3932 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:07:52.0729 3932 ============================================================
21:07:52.0729 3932 \Device\Harddisk0\DR0:
21:07:52.0729 3932 MBR partitions:
21:07:52.0729 3932 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:07:52.0729 3932 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x53712800
21:07:52.0729 3932 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x53745000, BlocksNum 0x3C00000
21:07:52.0729 3932 ============================================================
21:07:52.0776 3932 C: <-> \Device\Harddisk0\DR0\Partition2
21:07:52.0828 3932 D: <-> \Device\Harddisk0\DR0\Partition3
21:07:52.0828 3932 ============================================================
21:07:52.0829 3932 Initialize success
21:07:52.0829 3932 ============================================================
21:07:56.0238 4960 ============================================================
21:07:56.0238 4960 Scan started
21:07:56.0238 4960 Mode: Manual;
21:07:56.0238 4960 ============================================================
21:07:56.0752 4960 ================ Scan system memory ========================
21:07:56.0752 4960 System memory - ok
21:07:56.0754 4960 ================ Scan services =============================
21:07:56.0978 4960 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
21:07:56.0980 4960 1394ohci - ok
21:07:57.0162 4960 [ 2D6434E957F7CFA0035C20890F77BBC6 ] a2acc C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys
21:07:57.0164 4960 a2acc - ok
21:07:57.0320 4960 [ 0D050186CF421131B43D00024BD9B8BB ] a2AntiMalware C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
21:07:57.0343 4960 a2AntiMalware - ok
21:07:57.0386 4960 [ 3044D0F3FEB9FFE8BC953D8F34B5B504 ] A2DDA C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys
21:07:57.0386 4960 A2DDA - ok
21:07:57.0419 4960 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
21:07:57.0424 4960 ACPI - ok
21:07:57.0447 4960 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
21:07:57.0448 4960 AcpiPmi - ok
21:07:57.0576 4960 [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:07:57.0578 4960 AdobeFlashPlayerUpdateSvc - ok
21:07:57.0622 4960 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
21:07:57.0629 4960 adp94xx - ok
21:07:57.0680 4960 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
21:07:57.0683 4960 adpahci - ok
21:07:57.0712 4960 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
21:07:57.0713 4960 adpu320 - ok
21:07:57.0749 4960 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
21:07:57.0750 4960 AeLookupSvc - ok
21:07:57.0790 4960 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
21:07:57.0793 4960 AFD - ok
21:07:57.0824 4960 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
21:07:57.0825 4960 agp440 - ok
21:07:57.0854 4960 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
21:07:57.0855 4960 ALG - ok
21:07:57.0893 4960 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
21:07:57.0893 4960 aliide - ok
21:07:57.0919 4960 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
21:07:57.0919 4960 amdide - ok
21:07:57.0933 4960 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
21:07:57.0934 4960 AmdK8 - ok
21:07:57.0972 4960 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
21:07:57.0973 4960 AmdPPM - ok
21:07:58.0015 4960 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
21:07:58.0016 4960 amdsata - ok
21:07:58.0043 4960 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
21:07:58.0045 4960 amdsbs - ok
21:07:58.0058 4960 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
21:07:58.0058 4960 amdxata - ok
21:07:58.0093 4960 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
21:07:58.0094 4960 AppID - ok
21:07:58.0118 4960 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
21:07:58.0119 4960 AppIDSvc - ok
21:07:58.0144 4960 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
21:07:58.0145 4960 Appinfo - ok
21:07:58.0192 4960 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
21:07:58.0193 4960 arc - ok
21:07:58.0207 4960 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
21:07:58.0208 4960 arcsas - ok
21:07:58.0306 4960 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
21:07:58.0308 4960 aspnet_state - ok
21:07:58.0347 4960 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
21:07:58.0348 4960 AsyncMac - ok
21:07:58.0395 4960 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
21:07:58.0396 4960 atapi - ok
21:07:58.0447 4960 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
21:07:58.0456 4960 AudioEndpointBuilder - ok
21:07:58.0472 4960 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
21:07:58.0481 4960 AudioSrv - ok
21:07:58.0556 4960 [ B2B3FCBA37671C853879DF7DDE8A839A ] AVP C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
21:07:58.0562 4960 AVP - ok
21:07:58.0597 4960 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
21:07:58.0600 4960 AxInstSV - ok
21:07:58.0645 4960 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
21:07:58.0651 4960 b06bdrv - ok
21:07:58.0684 4960 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
21:07:58.0687 4960 b57nd60a - ok
21:07:58.0720 4960 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
21:07:58.0722 4960 BDESVC - ok
21:07:58.0744 4960 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
21:07:58.0745 4960 Beep - ok
21:07:58.0803 4960 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
21:07:58.0811 4960 BFE - ok
21:07:58.0836 4960 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
21:07:58.0837 4960 blbdrive - ok
21:07:58.0916 4960 [ C620C59D46F43BEECC556F65E801312B ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
21:07:58.0926 4960 Bluetooth Device Monitor - ok
21:07:58.0970 4960 [ 5E5EDCCEEA4FA3FDF3A907AC204B5828 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
21:07:58.0977 4960 Bluetooth Media Service - ok
21:07:59.0037 4960 [ 826E65C945738CBD64F89EAE4406687F ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
21:07:59.0042 4960 Bluetooth OBEX Service - ok
21:07:59.0089 4960 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
21:07:59.0089 4960 bowser - ok
21:07:59.0121 4960 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
21:07:59.0121 4960 BrFiltLo - ok
21:07:59.0142 4960 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
21:07:59.0143 4960 BrFiltUp - ok
21:07:59.0171 4960 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
21:07:59.0172 4960 BridgeMP - ok
21:07:59.0243 4960 [ 8EF0D5C41EC907751B8429162B1239ED ] Browser C:\Windows\System32\browser.dll
21:07:59.0247 4960 Browser - ok
21:07:59.0278 4960 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
21:07:59.0281 4960 Brserid - ok
21:07:59.0315 4960 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
21:07:59.0316 4960 BrSerWdm - ok
21:07:59.0325 4960 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
21:07:59.0325 4960 BrUsbMdm - ok
21:07:59.0344 4960 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
21:07:59.0344 4960 BrUsbSer - ok
21:07:59.0373 4960 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
21:07:59.0374 4960 BthEnum - ok
21:07:59.0397 4960 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
21:07:59.0398 4960 BTHMODEM - ok
21:07:59.0428 4960 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
21:07:59.0429 4960 BthPan - ok
21:07:59.0496 4960 [ 0D25B6D300BA26A5F2C3B2A8E96B158B ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
21:07:59.0502 4960 BTHPORT - ok
21:07:59.0546 4960 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
21:07:59.0548 4960 bthserv - ok
21:07:59.0576 4960 [ 1F9912F8EC5BFA53432E71E150636A8A ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
21:07:59.0577 4960 BTHUSB - ok
21:07:59.0609 4960 [ 962BD3689E2C85F0BA97F3D7E7BA540B ] btmaux C:\Windows\system32\DRIVERS\btmaux.sys
21:07:59.0611 4960 btmaux - ok
21:07:59.0663 4960 [ EC1220B647F0D995DA5CAD4153454779 ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys
21:07:59.0665 4960 btmhsf - ok
21:07:59.0692 4960 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
21:07:59.0693 4960 cdfs - ok
21:07:59.0723 4960 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
21:07:59.0724 4960 cdrom - ok
21:07:59.0755 4960 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
21:07:59.0757 4960 CertPropSvc - ok
21:07:59.0786 4960 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
21:07:59.0787 4960 circlass - ok
21:07:59.0810 4960 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
21:07:59.0813 4960 CLFS - ok
21:07:59.0905 4960 [ 524DC3807CB1746225F9D26ADD19C319 ] CLKMSVC10_38F51D56 C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
21:07:59.0910 4960 CLKMSVC10_38F51D56 - ok
21:07:59.0966 4960 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:07:59.0967 4960 clr_optimization_v2.0.50727_32 - ok
21:07:59.0999 4960 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:08:00.0001 4960 clr_optimization_v2.0.50727_64 - ok
21:08:00.0068 4960 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:08:00.0071 4960 clr_optimization_v4.0.30319_32 - ok
21:08:00.0100 4960 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:08:00.0103 4960 clr_optimization_v4.0.30319_64 - ok
21:08:00.0113 4960 clwvd - ok
21:08:00.0143 4960 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
21:08:00.0144 4960 CmBatt - ok
21:08:00.0164 4960 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
21:08:00.0165 4960 cmdide - ok
21:08:00.0209 4960 [ C4943B6C962E4B82197542447AD599F4 ] CNG C:\Windows\system32\Drivers\cng.sys
21:08:00.0214 4960 CNG - ok
21:08:00.0250 4960 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
21:08:00.0251 4960 Compbatt - ok
21:08:00.0282 4960 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
21:08:00.0283 4960 CompositeBus - ok
21:08:00.0296 4960 COMSysApp - ok
21:08:00.0319 4960 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
21:08:00.0320 4960 crcdisk - ok
21:08:00.0359 4960 [ 15597883FBE9B056F276ADA3AD87D9AF ] CryptSvc C:\Windows\system32\cryptsvc.dll
21:08:00.0362 4960 CryptSvc - ok
21:08:00.0404 4960 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
21:08:00.0413 4960 DcomLaunch - ok
21:08:00.0440 4960 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
21:08:00.0444 4960 defragsvc - ok
21:08:00.0485 4960 [ 2B9A817DC1BDAD9CE5495099B6A7136A ] Desura Install Service C:\Program Files (x86)\Common Files\Desura\desura_service.exe
21:08:00.0487 4960 Desura Install Service - ok
21:08:00.0522 4960 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
21:08:00.0524 4960 DfsC - ok
21:08:00.0575 4960 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
21:08:00.0579 4960 Dhcp - ok
21:08:00.0607 4960 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
21:08:00.0608 4960 discache - ok
21:08:00.0656 4960 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
21:08:00.0658 4960 Disk - ok
21:08:00.0695 4960 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
21:08:00.0699 4960 Dnscache - ok
21:08:00.0729 4960 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
21:08:00.0733 4960 dot3svc - ok
21:08:00.0746 4960 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
21:08:00.0749 4960 DPS - ok
21:08:00.0792 4960 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
21:08:00.0793 4960 drmkaud - ok
21:08:00.0825 4960 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
21:08:00.0832 4960 DXGKrnl - ok
21:08:00.0852 4960 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
21:08:00.0853 4960 EapHost - ok
21:08:00.0938 4960 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
21:08:00.0959 4960 ebdrv - ok
21:08:00.0989 4960 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
21:08:00.0990 4960 EFS - ok
21:08:01.0050 4960 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
21:08:01.0060 4960 ehRecvr - ok
21:08:01.0069 4960 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
21:08:01.0071 4960 ehSched - ok
21:08:01.0109 4960 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
21:08:01.0114 4960 elxstor - ok
21:08:01.0131 4960 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
21:08:01.0132 4960 ErrDev - ok
21:08:01.0170 4960 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
21:08:01.0174 4960 EventSystem - ok
21:08:01.0293 4960 [ 8B6C9924B0D333DBF76086B8258A0891 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
21:08:01.0306 4960 EvtEng - ok
21:08:01.0371 4960 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
21:08:01.0373 4960 exfat - ok
21:08:01.0391 4960 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
21:08:01.0393 4960 fastfat - ok
21:08:01.0437 4960 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
21:08:01.0444 4960 Fax - ok
21:08:01.0472 4960 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
21:08:01.0473 4960 fdc - ok
21:08:01.0496 4960 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
21:08:01.0497 4960 fdPHost - ok
21:08:01.0512 4960 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
21:08:01.0514 4960 FDResPub - ok
21:08:01.0545 4960 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
21:08:01.0547 4960 FileInfo - ok
21:08:01.0556 4960 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
21:08:01.0557 4960 Filetrace - ok
21:08:01.0569 4960 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
21:08:01.0569 4960 flpydisk - ok
21:08:01.0593 4960 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
21:08:01.0596 4960 FltMgr - ok
21:08:01.0643 4960 [ B4447F606BB19FD8AD0BAFB59B90F5D9 ] FontCache C:\Windows\system32\FntCache.dll
21:08:01.0653 4960 FontCache - ok
21:08:01.0702 4960 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:08:01.0703 4960 FontCache3.0.0.0 - ok
21:08:01.0725 4960 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
21:08:01.0726 4960 FsDepends - ok
21:08:01.0764 4960 [ E95EF8547DE20CF0603557C0CF7A9462 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
21:08:01.0765 4960 Fs_Rec - ok
21:08:01.0842 4960 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
21:08:01.0847 4960 fvevol - ok
21:08:01.0892 4960 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
21:08:01.0893 4960 gagp30kx - ok
21:08:01.0934 4960 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
21:08:01.0946 4960 gpsvc - ok
21:08:01.0970 4960 gupdate - ok
21:08:01.0974 4960 gupdatem - ok
21:08:01.0992 4960 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
21:08:01.0993 4960 hamachi - ok
21:08:02.0116 4960 [ F10C3F2E002100BF8B797DCF283FEA7D ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
21:08:02.0135 4960 Hamachi2Svc - ok
21:08:02.0150 4960 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
21:08:02.0150 4960 hcw85cir - ok
21:08:02.0225 4960 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
21:08:02.0231 4960 HdAudAddService - ok
21:08:02.0250 4960 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
21:08:02.0252 4960 HDAudBus - ok
21:08:02.0283 4960 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
21:08:02.0284 4960 HidBatt - ok
21:08:02.0301 4960 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
21:08:02.0303 4960 HidBth - ok
21:08:02.0325 4960 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
21:08:02.0326 4960 HidIr - ok
21:08:02.0358 4960 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
21:08:02.0359 4960 hidserv - ok
21:08:02.0398 4960 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
21:08:02.0399 4960 HidUsb - ok
21:08:02.0426 4960 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
21:08:02.0429 4960 hkmsvc - ok
21:08:02.0447 4960 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
21:08:02.0451 4960 HomeGroupListener - ok
21:08:02.0477 4960 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
21:08:02.0481 4960 HomeGroupProvider - ok
21:08:02.0511 4960 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
21:08:02.0512 4960 HpSAMD - ok
21:08:02.0550 4960 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
21:08:02.0558 4960 HTTP - ok
21:08:02.0572 4960 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
21:08:02.0573 4960 hwpolicy - ok
21:08:02.0599 4960 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
21:08:02.0600 4960 i8042prt - ok
21:08:02.0624 4960 [ F7CE9BE72EDAC499B713ECA6DAE5D26F ] iaStor C:\Windows\system32\drivers\iaStor.sys
21:08:02.0629 4960 iaStor - ok
21:08:02.0693 4960 [ B25F192EA1F84A316EB7C19EFCCCF33D ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
21:08:02.0694 4960 IAStorDataMgrSvc - ok
21:08:02.0734 4960 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
21:08:02.0739 4960 iaStorV - ok
21:08:02.0761 4960 [ E44F0B4DC753C14930B8DC48BB7A1644 ] iBtFltCoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys
21:08:02.0763 4960 iBtFltCoex - ok
21:08:02.0808 4960 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:08:02.0817 4960 idsvc - ok
21:08:02.0852 4960 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
21:08:02.0852 4960 iirsp - ok
21:08:02.0885 4960 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
21:08:02.0889 4960 IKEEXT - ok
21:08:02.0967 4960 [ 3E3926F4FA7C9162C5C3EC6BF1E4F349 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
21:08:02.0980 4960 IntcAzAudAddService - ok
21:08:03.0000 4960 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
21:08:03.0000 4960 intelide - ok
21:08:03.0035 4960 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
21:08:03.0035 4960 intelppm - ok
21:08:03.0052 4960 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
21:08:03.0054 4960 IPBusEnum - ok
21:08:03.0068 4960 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:08:03.0068 4960 IpFilterDriver - ok
21:08:03.0108 4960 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
21:08:03.0118 4960 iphlpsvc - ok
21:08:03.0141 4960 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
21:08:03.0142 4960 IPMIDRV - ok
21:08:03.0175 4960 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
21:08:03.0176 4960 IPNAT - ok
21:08:03.0217 4960 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
21:08:03.0218 4960 IRENUM - ok
21:08:03.0239 4960 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
21:08:03.0240 4960 isapnp - ok
21:08:03.0264 4960 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
21:08:03.0266 4960 iScsiPrt - ok
21:08:03.0333 4960 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
21:08:03.0335 4960 kbdclass - ok
21:08:03.0371 4960 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
21:08:03.0371 4960 kbdhid - ok
21:08:03.0400 4960 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
21:08:03.0402 4960 KeyIso - ok
21:08:03.0449 4960 [ 8D7120743A0973CEAB548B475C9D4289 ] KL1 C:\Windows\system32\DRIVERS\kl1.sys
21:08:03.0454 4960 KL1 - ok
21:08:03.0496 4960 [ CD146D8E525D6EEBDCAF24120A8AB9CE ] kl2 C:\Windows\system32\DRIVERS\kl2.sys
21:08:03.0496 4960 kl2 - ok
21:08:03.0598 4960 [ C1786C2F8DE0F62E076F7EF8DEA4E87A ] KLIF C:\Windows\system32\DRIVERS\klif.sys
21:08:03.0604 4960 KLIF - ok
21:08:03.0635 4960 [ 2A64B3A9EED93A2E96537B67C079FC96 ] KLIM6 C:\Windows\system32\DRIVERS\klim6.sys
21:08:03.0636 4960 KLIM6 - ok
21:08:03.0653 4960 [ 9468D07E91BA136D82415F5DFC1FE168 ] klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys
21:08:03.0653 4960 klmouflt - ok
21:08:03.0681 4960 [ DA1E991A61CFDD755A589E206B97644B ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
21:08:03.0683 4960 KSecDD - ok
21:08:03.0700 4960 [ 7E33198D956943A4F11A5474C1E9106F ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
21:08:03.0702 4960 KSecPkg - ok
21:08:03.0725 4960 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
21:08:03.0727 4960 ksthunk - ok
21:08:03.0771 4960 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
21:08:03.0776 4960 KtmRm - ok
21:08:03.0824 4960 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
21:08:03.0828 4960 LanmanServer - ok
21:08:03.0848 4960 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
21:08:03.0852 4960 LanmanWorkstation - ok
21:08:03.0892 4960 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
21:08:03.0893 4960 lltdio - ok
21:08:03.0928 4960 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
21:08:03.0933 4960 lltdsvc - ok
21:08:03.0952 4960 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
21:08:03.0953 4960 lmhosts - ok
21:08:03.0985 4960 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
21:08:03.0986 4960 LSI_FC - ok
21:08:04.0017 4960 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
21:08:04.0018 4960 LSI_SAS - ok
21:08:04.0037 4960 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
21:08:04.0037 4960 LSI_SAS2 - ok
21:08:04.0050 4960 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
21:08:04.0051 4960 LSI_SCSI - ok
21:08:04.0087 4960 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
21:08:04.0088 4960 luafv - ok
21:08:04.0136 4960 [ D6E998F77727B58A0FB34777FF5942C4 ] lxdeCATSCustConnectService C:\Windows\system32\spool\DRIVERS\x64\3\\lxdeserv.exe
21:08:04.0137 4960 lxdeCATSCustConnectService - ok
21:08:04.0153 4960 lxde_device - ok
21:08:04.0182 4960 [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
21:08:04.0182 4960 MBAMProtector - ok
21:08:04.0230 4960 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
21:08:04.0240 4960 MBAMService - ok
21:08:04.0310 4960 [ F453D1E6D881E8F8717E20CCD4199E85 ] McComponentHostService C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe
21:08:04.0314 4960 McComponentHostService - ok
21:08:04.0353 4960 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
21:08:04.0357 4960 Mcx2Svc - ok
21:08:04.0383 4960 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
21:08:04.0384 4960 megasas - ok
21:08:04.0439 4960 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
21:08:04.0442 4960 MegaSR - ok
21:08:04.0492 4960 [ 1C6E73FC46B509EFF9D0086AA37132DF ] MEIx64 C:\Windows\system32\drivers\HECIx64.sys
21:08:04.0493 4960 MEIx64 - ok
21:08:04.0544 4960 [ 71C6748EE8DE938532057EF10B4B7E44 ] Micro Star SCM C:\Program Files (x86)\System Control Manager\MSIService.exe
21:08:04.0547 4960 Micro Star SCM - ok
21:08:04.0572 4960 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
21:08:04.0575 4960 MMCSS - ok
21:08:04.0592 4960 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
21:08:04.0593 4960 Modem - ok
21:08:04.0621 4960 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
21:08:04.0622 4960 monitor - ok
21:08:04.0660 4960 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
21:08:04.0661 4960 mouclass - ok
21:08:04.0698 4960 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
21:08:04.0699 4960 mouhid - ok
21:08:04.0727 4960 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
21:08:04.0729 4960 mountmgr - ok
21:08:04.0769 4960 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
21:08:04.0771 4960 MozillaMaintenance - ok
21:08:04.0790 4960 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
21:08:04.0792 4960 mpio - ok
21:08:04.0805 4960 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
21:08:04.0806 4960 mpsdrv - ok
21:08:04.0865 4960 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
21:08:04.0875 4960 MpsSvc - ok
21:08:04.0908 4960 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
21:08:04.0910 4960 MRxDAV - ok
21:08:04.0932 4960 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
21:08:04.0934 4960 mrxsmb - ok
21:08:04.0950 4960 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:08:04.0953 4960 mrxsmb10 - ok
21:08:04.0963 4960 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:08:04.0964 4960 mrxsmb20 - ok
21:08:04.0982 4960 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
21:08:04.0982 4960 msahci - ok
21:08:04.0999 4960 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
21:08:05.0000 4960 msdsm - ok
21:08:05.0028 4960 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
21:08:05.0030 4960 MSDTC - ok
21:08:05.0063 4960 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
21:08:05.0064 4960 Msfs - ok
21:08:05.0084 4960 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
21:08:05.0085 4960 mshidkmdf - ok
21:08:05.0102 4960 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
21:08:05.0102 4960 msisadrv - ok
21:08:05.0127 4960 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
21:08:05.0128 4960 MSiSCSI - ok
21:08:05.0131 4960 msiserver - ok
21:08:05.0164 4960 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
21:08:05.0166 4960 MSKSSRV - ok
21:08:05.0185 4960 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
21:08:05.0186 4960 MSPCLOCK - ok
21:08:05.0207 4960 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
21:08:05.0208 4960 MSPQM - ok
21:08:05.0248 4960 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
21:08:05.0254 4960 MsRPC - ok
21:08:05.0287 4960 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
21:08:05.0288 4960 mssmbios - ok
21:08:05.0302 4960 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
21:08:05.0302 4960 MSTEE - ok
21:08:05.0314 4960 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
21:08:05.0315 4960 MTConfig - ok
21:08:05.0333 4960 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
21:08:05.0334 4960 Mup - ok
21:08:05.0368 4960 [ 6ED8935257672F4CD04A88A0F3DE093D ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
21:08:05.0370 4960 MyWiFiDHCPDNS - ok
21:08:05.0398 4960 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
21:08:05.0403 4960 napagent - ok
21:08:05.0437 4960 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
21:08:05.0439 4960 NativeWifiP - ok
21:08:05.0488 4960 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
21:08:05.0495 4960 NDIS - ok
21:08:05.0523 4960 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
21:08:05.0524 4960 NdisCap - ok
21:08:05.0552 4960 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
21:08:05.0552 4960 NdisTapi - ok
21:08:05.0579 4960 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
21:08:05.0580 4960 Ndisuio - ok
21:08:05.0589 4960 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
21:08:05.0590 4960 NdisWan - ok
21:08:05.0605 4960 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
21:08:05.0606 4960 NDProxy - ok
21:08:05.0653 4960 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
21:08:05.0655 4960 NetBIOS - ok
21:08:05.0681 4960 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
21:08:05.0683 4960 NetBT - ok
21:08:05.0712 4960 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
21:08:05.0713 4960 Netlogon - ok
21:08:05.0754 4960 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
21:08:05.0759 4960 Netman - ok
21:08:05.0780 4960 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:05.0782 4960 NetMsmqActivator - ok
21:08:05.0791 4960 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:05.0793 4960 NetPipeActivator - ok
21:08:05.0803 4960 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
21:08:05.0808 4960 netprofm - ok
21:08:05.0813 4960 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:05.0815 4960 NetTcpActivator - ok
21:08:05.0819 4960 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
21:08:05.0821 4960 NetTcpPortSharing - ok
21:08:05.0979 4960 [ 5D262402B0634C998F8CBCEAD7DD8676 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys
21:08:06.0018 4960 NETwNs64 - ok
21:08:06.0044 4960 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
21:08:06.0045 4960 nfrd960 - ok
21:08:06.0077 4960 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
21:08:06.0079 4960 NlaSvc - ok
21:08:06.0102 4960 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
21:08:06.0103 4960 Npfs - ok
21:08:06.0128 4960 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
21:08:06.0129 4960 nsi - ok
21:08:06.0145 4960 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
21:08:06.0145 4960 nsiproxy - ok
21:08:06.0185 4960 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
21:08:06.0193 4960 Ntfs - ok
21:08:06.0219 4960 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
21:08:06.0220 4960 Null - ok
21:08:06.0252 4960 [ 786DB821BFD57C0551DBBE4F75384A7D ] nusb3hub C:\Windows\system32\drivers\nusb3hub.sys
21:08:06.0252 4960 nusb3hub - ok
21:08:06.0270 4960 [ DAA8005CAF745042BB427A1ED7433354 ] nusb3xhc C:\Windows\system32\drivers\nusb3xhc.sys
21:08:06.0272 4960 nusb3xhc - ok
21:08:06.0304 4960 [ E20ABD5B229760158F753CA90B97E090 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
21:08:06.0305 4960 NVHDA - ok
21:08:06.0530 4960 [ 589FEBA7A8E3EB0C3DF254ABABA3A257 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:08:06.0593 4960 nvlddmkm - ok
21:08:06.0617 4960 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
21:08:06.0618 4960 nvraid - ok
21:08:06.0648 4960 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
21:08:06.0651 4960 nvstor - ok
21:08:06.0689 4960 [ 03055FDFD0F9F17E95E27F6193CE4EB9 ] nvsvc C:\Windows\system32\nvvsvc.exe
21:08:06.0693 4960 nvsvc - ok
21:08:06.0752 4960 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
21:08:06.0754 4960 nv_agp - ok
21:08:06.0770 4960 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
21:08:06.0771 4960 ohci1394 - ok
21:08:06.0803 4960 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
21:08:06.0807 4960 p2pimsvc - ok
21:08:06.0830 4960 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
21:08:06.0835 4960 p2psvc - ok
21:08:06.0862 4960 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
21:08:06.0863 4960 Parport - ok
21:08:06.0884 4960 [ 871EADAC56B0A4C6512BBE32753CCF79 ] partmgr C:\Windows\system32\drivers\partmgr.sys
21:08:06.0885 4960 partmgr - ok
21:08:06.0911 4960 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
21:08:06.0914 4960 PcaSvc - ok
21:08:06.0935 4960 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
21:08:06.0937 4960 pci - ok
21:08:06.0968 4960 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
21:08:06.0968 4960 pciide - ok
21:08:06.0991 4960 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
21:08:06.0992 4960 pcmcia - ok
21:08:07.0015 4960 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
21:08:07.0015 4960 pcw - ok
21:08:07.0030 4960 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
21:08:07.0034 4960 PEAUTH - ok
21:08:07.0115 4960 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
21:08:07.0119 4960 PerfHost - ok
21:08:07.0207 4960 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
21:08:07.0221 4960 pla - ok
21:08:07.0274 4960 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
21:08:07.0279 4960 PlugPlay - ok
21:08:07.0291 4960 PnkBstrA - ok
21:08:07.0319 4960 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
21:08:07.0321 4960 PNRPAutoReg - ok
21:08:07.0336 4960 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
21:08:07.0340 4960 PNRPsvc - ok
21:08:07.0375 4960 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
21:08:07.0380 4960 PolicyAgent - ok
21:08:07.0410 4960 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
21:08:07.0413 4960 Power - ok
21:08:07.0455 4960 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
21:08:07.0457 4960 PptpMiniport - ok
21:08:07.0483 4960 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
21:08:07.0484 4960 Processor - ok
21:08:07.0508 4960 [ 5C78838B4D166D1A27DB3A8A820C799A ] ProfSvc C:\Windows\system32\profsvc.dll
21:08:07.0511 4960 ProfSvc - ok
21:08:07.0523 4960 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
21:08:07.0524 4960 ProtectedStorage - ok
21:08:07.0559 4960 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
21:08:07.0561 4960 Psched - ok
21:08:07.0619 4960 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
21:08:07.0632 4960 ql2300 - ok
21:08:07.0663 4960 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
21:08:07.0664 4960 ql40xx - ok
21:08:07.0693 4960 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
21:08:07.0697 4960 QWAVE - ok
21:08:07.0721 4960 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
21:08:07.0722 4960 QWAVEdrv - ok
21:08:07.0741 4960 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
21:08:07.0742 4960 RasAcd - ok
21:08:07.0774 4960 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
21:08:07.0775 4960 RasAgileVpn - ok
21:08:07.0797 4960 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
21:08:07.0800 4960 RasAuto - ok
21:08:07.0808 4960 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
21:08:07.0810 4960 Rasl2tp - ok
21:08:07.0825 4960 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
21:08:07.0830 4960 RasMan - ok
21:08:07.0855 4960 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
21:08:07.0856 4960 RasPppoe - ok
21:08:07.0889 4960 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
21:08:07.0891 4960 RasSstp - ok
21:08:07.0906 4960 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
21:08:07.0909 4960 rdbss - ok
21:08:07.0940 4960 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
21:08:07.0941 4960 rdpbus - ok
21:08:07.0970 4960 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
21:08:07.0970 4960 RDPCDD - ok
21:08:07.0984 4960 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
21:08:07.0984 4960 RDPENCDD - ok
21:08:07.0988 4960 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
21:08:07.0988 4960 RDPREFMP - ok
21:08:08.0002 4960 [ 15B66C206B5CB095BAB980553F38ED23 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
21:08:08.0003 4960 RDPWD - ok
21:08:08.0023 4960 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
21:08:08.0024 4960 rdyboost - ok
21:08:08.0092 4960 [ 189C5A8D2098E0AA14FD157A954B34FC ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
21:08:08.0104 4960 RegSrvc - ok
21:08:08.0132 4960 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
21:08:08.0134 4960 RemoteAccess - ok
21:08:08.0155 4960 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
21:08:08.0158 4960 RemoteRegistry - ok
21:08:08.0202 4960 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
21:08:08.0204 4960 RFCOMM - ok
21:08:08.0215 4960 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
21:08:08.0217 4960 RpcEptMapper - ok
21:08:08.0233 4960 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
21:08:08.0234 4960 RpcLocator - ok
21:08:08.0258 4960 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\System32\rpcss.dll
21:08:08.0264 4960 RpcSs - ok
21:08:08.0320 4960 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
21:08:08.0321 4960 rspndr - ok
21:08:08.0379 4960 [ E54A5586A28D0630A79A68BBAB84BFCF ] RSUSBVSTOR C:\Windows\System32\Drivers\RtsUVStor.sys
21:08:08.0383 4960 RSUSBVSTOR - ok
21:08:08.0421 4960 [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
21:08:08.0425 4960 RTL8167 - ok
21:08:08.0434 4960 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
21:08:08.0436 4960 SamSs - ok
21:08:08.0460 4960 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
21:08:08.0461 4960 sbp2port - ok
21:08:08.0496 4960 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
21:08:08.0500 4960 SCardSvr - ok
21:08:08.0532 4960 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
21:08:08.0534 4960 scfilter - ok
21:08:08.0567 4960 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
21:08:08.0578 4960 Schedule - ok
21:08:08.0600 4960 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
21:08:08.0601 4960 SCPolicySvc - ok
21:08:08.0626 4960 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
21:08:08.0628 4960 SDRSVC - ok
21:08:08.0647 4960 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
21:08:08.0647 4960 secdrv - ok
21:08:08.0661 4960 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
21:08:08.0662 4960 seclogon - ok
21:08:08.0671 4960 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
21:08:08.0673 4960 SENS - ok
21:08:08.0696 4960 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
21:08:08.0698 4960 SensrSvc - ok
21:08:08.0725 4960 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
21:08:08.0726 4960 Serenum - ok
21:08:08.0744 4960 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
21:08:08.0744 4960 Serial - ok
21:08:08.0782 4960 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
21:08:08.0783 4960 sermouse - ok
21:08:08.0805 4960 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
21:08:08.0807 4960 SessionEnv - ok
21:08:08.0823 4960 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
21:08:08.0823 4960 sffdisk - ok
21:08:08.0852 4960 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
21:08:08.0853 4960 sffp_mmc - ok
21:08:08.0862 4960 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
21:08:08.0863 4960 sffp_sd - ok
21:08:08.0887 4960 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
21:08:08.0888 4960 sfloppy - ok
21:08:08.0924 4960 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
21:08:08.0928 4960 SharedAccess - ok
21:08:08.0966 4960 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
21:08:08.0971 4960 ShellHWDetection - ok
21:08:09.0003 4960 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
21:08:09.0003 4960 SiSRaid2 - ok
21:08:09.0033 4960 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
21:08:09.0035 4960 SiSRaid4 - ok
21:08:09.0093 4960 [ A37740568718F245E818D0C5575B9AA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
21:08:09.0094 4960 SkypeUpdate - ok
21:08:09.0133 4960 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
21:08:09.0134 4960 Smb - ok
21:08:09.0178 4960 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
21:08:09.0180 4960 SNMPTRAP - ok
21:08:09.0198 4960 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
21:08:09.0199 4960 spldr - ok
21:08:09.0236 4960 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe
21:08:09.0242 4960 Spooler - ok
21:08:09.0332 4960 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
21:08:09.0377 4960 sppsvc - ok
21:08:09.0405 4960 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
21:08:09.0408 4960 sppuinotify - ok
21:08:09.0439 4960 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
21:08:09.0443 4960 srv - ok
21:08:09.0467 4960 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
21:08:09.0471 4960 srv2 - ok
21:08:09.0498 4960 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
21:08:09.0500 4960 srvnet - ok
21:08:09.0536 4960 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
21:08:09.0540 4960 SSDPSRV - ok
21:08:09.0549 4960 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
21:08:09.0552 4960 SstpSvc - ok
21:08:09.0569 4960 Steam Client Service - ok
21:08:09.0611 4960 [ 47A0A473AD1822E9E6C76E519BD0A023 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
21:08:09.0614 4960 Stereo Service - ok
21:08:09.0630 4960 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
21:08:09.0631 4960 stexstor - ok
21:08:09.0678 4960 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
21:08:09.0685 4960 stisvc - ok
21:08:09.0710 4960 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
21:08:09.0710 4960 swenum - ok
21:08:09.0741 4960 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
21:08:09.0747 4960 swprv - ok
21:08:09.0808 4960 [ F4DB1D9E6A42D491F0F8E21854301C0B ] SynTP C:\Windows\system32\drivers\SynTP.sys
21:08:09.0821 4960 SynTP - ok
21:08:09.0875 4960 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
21:08:09.0892 4960 SysMain - ok
21:08:09.0906 4960 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
21:08:09.0909 4960 TabletInputService - ok
21:08:09.0942 4960 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
21:08:09.0944 4960 TapiSrv - ok
21:08:09.0956 4960 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
21:08:09.0958 4960 TBS - ok
21:08:10.0030 4960 [ FC62769E7BFF2896035AEED399108162 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
21:08:10.0045 4960 Tcpip - ok
21:08:10.0096 4960 [ FC62769E7BFF2896035AEED399108162 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
21:08:10.0110 4960 TCPIP6 - ok
21:08:10.0144 4960 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
21:08:10.0145 4960 tcpipreg - ok
21:08:10.0167 4960 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
21:08:10.0168 4960 TDPIPE - ok
21:08:10.0172 4960 [ E4245BDA3190A582D55ED09E137401A9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
21:08:10.0173 4960 TDTCP - ok
21:08:10.0191 4960 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
21:08:10.0192 4960 tdx - ok
21:08:10.0224 4960 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
21:08:10.0225 4960 TermDD - ok
21:08:10.0260 4960 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
21:08:10.0266 4960 TermService - ok
21:08:10.0284 4960 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
21:08:10.0286 4960 Themes - ok
21:08:10.0317 4960 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
21:08:10.0318 4960 THREADORDER - ok
21:08:10.0336 4960 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
21:08:10.0339 4960 TrkWks - ok
21:08:10.0377 4960 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
21:08:10.0379 4960 TrustedInstaller - ok
21:08:10.0388 4960 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
21:08:10.0389 4960 tssecsrv - ok
21:08:10.0433 4960 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
21:08:10.0434 4960 TsUsbFlt - ok
21:08:10.0463 4960 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
21:08:10.0463 4960 TsUsbGD - ok
21:08:10.0487 4960 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
21:08:10.0489 4960 tunnel - ok
21:08:10.0508 4960 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
21:08:10.0509 4960 uagp35 - ok
21:08:10.0524 4960 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
21:08:10.0527 4960 udfs - ok
21:08:10.0547 4960 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
21:08:10.0549 4960 UI0Detect - ok
21:08:10.0572 4960 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
21:08:10.0573 4960 uliagpkx - ok
21:08:10.0597 4960 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
21:08:10.0598 4960 umbus - ok
21:08:10.0617 4960 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
21:08:10.0617 4960 UmPass - ok
21:08:10.0642 4960 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
21:08:10.0647 4960 upnphost - ok
21:08:10.0679 4960 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
21:08:10.0680 4960 usbccgp - ok
21:08:10.0716 4960 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
21:08:10.0717 4960 usbcir - ok
21:08:10.0734 4960 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
21:08:10.0735 4960 usbehci - ok
21:08:10.0767 4960 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
21:08:10.0770 4960 usbhub - ok
21:08:10.0801 4960 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
21:08:10.0801 4960 usbohci - ok
21:08:10.0820 4960 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
21:08:10.0821 4960 usbprint - ok
21:08:10.0855 4960 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
21:08:10.0856 4960 usbscan - ok
21:08:10.0887 4960 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:08:10.0888 4960 USBSTOR - ok
21:08:10.0903 4960 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
21:08:10.0903 4960 usbuhci - ok
21:08:10.0951 4960 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
21:08:10.0953 4960 usbvideo - ok
21:08:10.0988 4960 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
21:08:10.0990 4960 UxSms - ok
21:08:11.0012 4960 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
21:08:11.0015 4960 VaultSvc - ok
21:08:11.0048 4960 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
21:08:11.0049 4960 vdrvroot - ok
21:08:11.0083 4960 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
21:08:11.0094 4960 vds - ok
21:08:11.0129 4960 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
21:08:11.0130 4960 vga - ok
21:08:11.0146 4960 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
21:08:11.0147 4960 VgaSave - ok
21:08:11.0180 4960 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
21:08:11.0182 4960 vhdmp - ok
21:08:11.0210 4960 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
21:08:11.0211 4960 viaide - ok
21:08:11.0230 4960 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
21:08:11.0231 4960 volmgr - ok
21:08:11.0244 4960 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
21:08:11.0247 4960 volmgrx - ok
21:08:11.0276 4960 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
21:08:11.0279 4960 volsnap - ok
21:08:11.0338 4960 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
21:08:11.0340 4960 vsmraid - ok
21:08:11.0389 4960 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
21:08:11.0404 4960 VSS - ok
21:08:11.0428 4960 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
21:08:11.0429 4960 vwifibus - ok
21:08:11.0447 4960 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
21:08:11.0449 4960 vwififlt - ok
21:08:11.0474 4960 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
21:08:11.0475 4960 vwifimp - ok
21:08:11.0519 4960 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
21:08:11.0525 4960 W32Time - ok
21:08:11.0548 4960 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
21:08:11.0549 4960 WacomPen - ok
21:08:11.0584 4960 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
21:08:11.0586 4960 WANARP - ok
21:08:11.0594 4960 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
21:08:11.0596 4960 Wanarpv6 - ok
21:08:11.0646 4960 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
21:08:11.0660 4960 wbengine - ok
21:08:11.0683 4960 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
21:08:11.0687 4960 WbioSrvc - ok
21:08:11.0708 4960 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
21:08:11.0714 4960 wcncsvc - ok
21:08:11.0831 4960 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
21:08:11.0835 4960 WcsPlugInService - ok
21:08:11.0875 4960 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
21:08:11.0876 4960 Wd - ok
21:08:11.0925 4960 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
21:08:11.0929 4960 Wdf01000 - ok
21:08:11.0951 4960 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
21:08:11.0953 4960 WdiServiceHost - ok
21:08:11.0956 4960 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
21:08:11.0958 4960 WdiSystemHost - ok
21:08:11.0990 4960 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
21:08:11.0992 4960 WebClient - ok
21:08:12.0004 4960 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
21:08:12.0006 4960 Wecsvc - ok
21:08:12.0013 4960 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
21:08:12.0014 4960 wercplsupport - ok
21:08:12.0045 4960 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
21:08:12.0046 4960 WerSvc - ok
21:08:12.0071 4960 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
21:08:12.0071 4960 WfpLwf - ok
21:08:12.0081 4960 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
21:08:12.0082 4960 WIMMount - ok
21:08:12.0105 4960 WinDefend - ok
21:08:12.0109 4960 WinHttpAutoProxySvc - ok
21:08:12.0153 4960 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
21:08:12.0154 4960 Winmgmt - ok
21:08:12.0219 4960 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
21:08:12.0234 4960 WinRM - ok
21:08:12.0285 4960 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
21:08:12.0286 4960 WinUsb - ok
21:08:12.0326 4960 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
21:08:12.0333 4960 Wlansvc - ok
21:08:12.0387 4960 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
21:08:12.0389 4960 wlcrasvc - ok
21:08:12.0481 4960 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
21:08:12.0500 4960 wlidsvc - ok
21:08:12.0529 4960 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
21:08:12.0529 4960 WmiAcpi - ok
21:08:12.0558 4960 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
21:08:12.0559 4960 wmiApSrv - ok
21:08:12.0599 4960 WMPNetworkSvc - ok
21:08:12.0620 4960 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
21:08:12.0622 4960 WPCSvc - ok
21:08:12.0633 4960 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
21:08:12.0635 4960 WPDBusEnum - ok
21:08:12.0660 4960 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
21:08:12.0661 4960 ws2ifsl - ok
21:08:12.0704 4960 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
21:08:12.0710 4960 wscsvc - ok
21:08:12.0718 4960 WSearch - ok
21:08:12.0784 4960 [ 9DF12EDBC698B0BC353B3EF84861E430 ] wuauserv C:\Windows\system32\wuaueng.dll
21:08:12.0801 4960 wuauserv - ok
21:08:12.0823 4960 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
21:08:12.0825 4960 WudfPf - ok
21:08:12.0846 4960 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
21:08:12.0848 4960 WUDFRd - ok
21:08:12.0873 4960 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
21:08:12.0875 4960 wudfsvc - ok
21:08:12.0887 4960 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
21:08:12.0891 4960 WwanSvc - ok
21:08:12.0930 4960 ================ Scan global ===============================
21:08:12.0941 4960 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
21:08:12.0972 4960 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
21:08:12.0978 4960 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll
21:08:13.0004 4960 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
21:08:13.0029 4960 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
21:08:13.0032 4960 [Global] - ok
21:08:13.0032 4960 ================ Scan MBR ==================================
21:08:13.0039 4960 [ 4624822E540EC83CD0819525C65846BA ] \Device\Harddisk0\DR0
21:08:15.0038 4960 \Device\Harddisk0\DR0 - ok
21:08:15.0038 4960 ================ Scan VBR ==================================
21:08:15.0103 4960 [ 64285678C42F0E9EBA6AC68767E5BF0C ] \Device\Harddisk0\DR0\Partition1
21:08:15.0105 4960 \Device\Harddisk0\DR0\Partition1 - ok
21:08:15.0115 4960 [ 43D38949F48A2480AA31529943038D97 ] \Device\Harddisk0\DR0\Partition2
21:08:15.0118 4960 \Device\Harddisk0\DR0\Partition2 - ok
21:08:15.0151 4960 [ DED3B832743164D54EB4F3FD6FC238A9 ] \Device\Harddisk0\DR0\Partition3
21:08:15.0153 4960 \Device\Harddisk0\DR0\Partition3 - ok
21:08:15.0154 4960 ============================================================
21:08:15.0154 4960 Scan finished
21:08:15.0154 4960 ============================================================
21:08:15.0167 6768 Detected object count: 0
21:08:15.0167 6768 Actual detected object count: 0

1. Schritt

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktualisiere die Datenbank!
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

Malwarebytes Anti-Malware 1.65.0.1400
Malwarebytes : Free Anti-Malware download

Database version: v2012.09.24.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Konsz :: KONSZ-PC [administrator]

24.09.2012 19:21:57
mbam-log-2012-09-24 (19-21-57).txt

Scan type: Full scan (C:\|D:\|E:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 355829
Time elapsed: 38 minute(s), 12 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Java aktualisieren

Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

• Downloade dir bitte die neueste Java-Version von hier
• Speichere die jxpiinstall.exe
• Schließe alle laufenden Programme. Speziell deinen Browser.
• Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 7 ) herunter laden.
• Wenn die Installation beendet wurde
  Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
• Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

Nach dem Neustart

• Öffne erneut die Systemsteuerung --> Programme und klicke auf das Java Symbol.
• Im Reiter Allgemein, klicke unter Temporäre Internetdateien auf Einstellungen.
• Klicke auf Dateien löschen....
• Gehe sicher das überall ein Hacken gesetzt ist und klicke OK.
• Klicke erneut OK.

Dann so einstellen: http://www.trojaner-board.de/105213-...tellungen.html

Danach poste (kopieren und einfuegen) mir, was du hier angezeigt bekommst: PluginCheck



Java deaktivieren

Aufgrund derezeitigen Sicherheitsluecke:

http://www.trojaner-board.de/122961-...ktivieren.html

Danach poste mir (kopieren und einfuegen), was du hier angezeigt bekommst: PluginCheck

PluginCheck

Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen.
Überprüft wird: Browser, Flash, Java und Adobe Reader Version.

Firefox 15.0.1 ist aktuell

Flash (11,4,402,265) ist aktuell.

Java (1,7,0,7) ist aktuell.

Adobe Reader 10,0,0,396 ist veraltet!
Aktualisieren Sie bitte auf die neueste Version: 10,1,3


und ohne java:



PluginCheck

Der PluginCheck hilft die größten Sicherheitslücken beim Surfen im Internet zu schliessen.
Überprüft wird: Browser, Flash, Java und Adobe Reader Version.

Firefox 15.0.1 ist aktuell

Flash (11,4,402,265) ist aktuell.

Java ist Installiert aber nicht aktiviert.

Adobe Reader 10,0,0,396 ist veraltet!
Aktualisieren Sie bitte auf die neueste Version: 10,1,3



Zurück

Sehr gut!

damit bist Du entlassen!

adwCleaner entfernen

• Starte die adwcleaner.exe mit einem Doppelklick.
• Klicke auf Uninstall.
• Bestätige mit Ja.

Tool-Bereinigung mit OTL


Wir werden nun die CleanUp!-Funktion von OTL nutzen, um die meisten Programme, die wir zur Bereinigung installiert haben, wieder von Deinem System zu löschen.

• Bitte lade Dir (falls noch nicht vorhanden) OTL von OldTimer herunter.
• Speichere es auf Deinem Desktop.
• Doppelklick auf OTL.exe um das Programm auszuführen.
  Vista- und Windows 7-User starten mit Rechtsklick auf das Programm-Icon und wählen "Als Administrator ausführen".
• Klicke auf den Button "Bereinigung"
• OTL fragt eventuell nach einem Neustart.
  Sollte es dies tun, so lasse dies bitte zu.

Anmerkung: Nach dem Neustart werden OTL und andere Helferprogramme, die Du im Laufe der Bereinigung heruntergeladen hast, nicht mehr vorhanden sein. Sie wurden entfernt. Es ist daher Ok, wenn diese Programme nicht mehr vorhanden sind. Sollten noch welche übrig geblieben sein, lösche sie manuell.


Zurücksetzen der Sicherheitszonen

Lasse die Sicherheitszonen wieder zurücksetzen, da diese manipuliert wurden um den Browser für weitere Angriffe zu öffnen.
Gehe dabei so vor: http://www.trojaner-board.de/111805-...ecksetzen.html


Systemwiederherstellungen leeren

Damit der Rechner nicht mit einer infizierten Systemwiederherstellung erneut infiziert werden kann, muessen wir diese leeren. Dazu schalten wir sie einmal aus und dann wieder ein:
Systemwiederherstellung deaktivieren Tutorial fuer Windows XP, Windows Vista, Windows 7
Danach wieder aktivieren.


Aufräumen mit CCleaner

Lasse mit CCleaner (Download) (Anleitung) Fehler in der

• Registry beheben (mehrmals, solange bis keine Fehler mehr gefunden werden) und
• temporäre Dateien löschen.

Lektuere zum abarbeiten:
http://www.trojaner-board.de/90880-d...tallation.html
http://www.trojaner-board.de/105213-...tellungen.html
PluginCheck
http://www.trojaner-board.de/96344-a...-rechners.html
Secunia Online Software Inspector
http://www.trojaner-board.de/71715-k...iendungen.html
http://www.trojaner-board.de/83238-a...sschalten.html
PC wird immer langsamer - was tun?

Okay, erstmal danke für die tolle Hilfe : ) ich werde diese Website jedem weiterempfehlen, der probleme mit Trojanern oder sonstiger Malware hat.
Eine Kleinigkeit noch bevor ich mich endgültig erabschiede:
Ich weiß nicht wie ich die Sicherheitszonen bei Firefox zurücksetze, da ich dazu in dem verlinkten thread keine Anweisungen finden konnte... ich will ja nichts auf eigene Faust unternehmen und kaputt machen.

Das gibt es nur im IE.
IE ist Systembestandteil daher gilt das fuer ganz Windows.