Hallo
Ich habe mir heute den "GVU Trojaner" auf Kinox.to eingefangen.
Als ich die Seite aufmachte sprang wie immer auch das ein oder andere PopUp Fenster auf. Plötzlich hat sich mein Laptop aufgehangen und es erschien dieser "GVU Bescheid" auf dem ich aufgefordert wurde 100 Euro in 48 Std. zu bezahlen, da sonst mein Laptop weiter gesperrt bleiben würde und ich dann eine Strafverfolgung zu befürchten hätte. Außerdem schien auch meine Webcam angezapft gewesen zu sein, da links oben eine Aufnahme von mir, wie ich vor meinem Laptop sitze, zu sehen war. Da ich nicht auf meinen Desktop zugreifen konnte (bei normalen Neustart) hab ich meinen Laptop in gesichertem Modus hochgefahren und Avira durchlaufen lassen, was aber nichts ergeben hat. Nach weiterer Suche im Netz bin ich dann auf euch gestossen und hab mir, wie empfohlen, den OTL runtergeladen und durchlaufen lassen. Habe jetzt eine OTL.Txt und eine Extras.Txt Datei auf meinem USB Stick zwischengelagert, weis aber nicht was ich damit anfangen soll bzw. wie und ob ich euch das zukommen lassen soll. Meinen Namen hab ich, wenn ich alle gefunden habe, aus dem Protokoll gestrichen, so wie von euch empfohlen.
Ich wäre sehr dankbar wenn mir jemand bei meinem Problem helfen könnte!
Vielen Dank im Voraus
PS:Hab Windows 7 als Betriebssystem...
MfG Doppelgänger

wer illegale seiten nutzt, muss sich nicht wundern, die leute sind keine wohltäter, diew wollen kohle verdienen.
starte im abgesicherten modus mit netzwerk, führe aus:
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Starte bitte die
  OTL.exe
  .
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Kopiere nun den Inhalt in die
  Textbox.

activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
C:\Windows\system32\*.tsp
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         

• Schliesse bitte nun alle Programme. (Wichtig)
• Klicke nun bitte auf den Quick Scan Button.
• Kopiere
  nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Hi
Hab den OTL jetzt nochmal durchlaufen lassen mit dem Text den du mir oben gegeben hast, hab aber nur eine OTL.Txt Datei erhalten und keine Extra Datei wie beim ersten Durchlauf (hab die alten Datein leider gelöscht). Hab die neue OTL.Txt Datei auf meinem USB Stick. Sorry wegen der dummen Frage aber wie kann ich das jetzt hier hochladen.
Vielen Dank
MfG Doppelgänger

stick an ein internet fähiges gerät und log hier posten.
aber wie gesagt, du solltest ja im abgesicherten modus mit netzwerk starten, da hast du ja internet

HIER DIE OTL:TxT; DIE EXTRA.TxT HAB ICH LEIDER NICHT ERHALTEN...
KANN ES SEIN DAS ICH WAS FALSCH GEMACHT HABE?
VIELEN DANK FÜR'S HELFEN!!!
MFG DOPPELGÄNGER

Hab jetzt noch eine Systemwiederherstellung im abgesicherten Modus gemacht und mal den Malwarebytes, Anti-Malware durchlaufen lassen. Im Anhang noch der Bericht des letzten...
MFG Doppelgänger

Hi
Also ich kann jetzt meinen Laptop wieder ganz normal benutzen, heisst das er ist wieder sauber oder versteckt sich noch irgendwo etwas?
Vielen Dank im Voraus
MfG Doppelgänger

wofür schreibe ich anleitungen wenn du sowieso machst was du willst, dann kann ich meine zeit auch sinnvoller nutzen.
also, endweder mach das was da steht, oder sag mir das du eh machst was du willst, dann können wir das hier beenden.
download tdss killer:
http://www.trojaner-board.de/82358-t...entfernen.html
Klicke auf Change parameters
• Setze die Haken bei Verify driver digital signatures und Detect TDLFS file system
• Klick auf OK und anschließend auf Start scan
- bei funden erst mal immer skip wählen, log posten

Hallo
Hab heute nochmal den Malwarebytes Antimalware (direkt davor aktualisiert) durchlaufen lassen (Vollständiger Suchlauf, ohne CD/DVD Laufwerk).
Er hat nichts gefunden. Als Anhang noch das Ergebnis.
Kann es sein das noch was auf meinem Laptop drauf ist?
Vielen Dank fürs helfen.
MfG Doppelgänger

Sorry! Mach jetzt das was du geschrieben hast.
MfG Doppelgänger

Hab jetzt den Durchlauf gemacht. Kann beim Report aber leider nicht meinen Namen rauslöschen oder den Report speichern um ihn dann hochzuladen. Kannst du mir da bitte helfen?
Danke
PS: TDSSKiller zeigt keine Funde an
MfG Doppelgänger

Hi
Hab es doch noch geschafft. Im Anhang findest du die log vom TDSSKiller

Die Datei ist zu groß um sie hochzuladen. Kann ich die irgendwie teilen oder irgendetwas anderes tun?

01:01:55.0247 1136 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
01:01:55.0497 1136 ============================================================
01:01:55.0497 1136 Current date / time: 2012/11/14 01:01:55.0497
01:01:55.0497 1136 SystemInfo:
01:01:55.0497 1136
01:01:55.0497 1136 OS Version: 6.1.7600 ServicePack: 0.0
01:01:55.0497 1136 Product type: Workstation
01:01:55.0497 1136 ComputerName: xxx-PC
01:01:55.0497 1136 UserName: xxx
01:01:55.0497 1136 Windows directory: C:\windows
01:01:55.0497 1136 System windows directory: C:\windows
01:01:55.0497 1136 Processor architecture: Intel x86
01:01:55.0497 1136 Number of processors: 2
01:01:55.0497 1136 Page size: 0x1000
01:01:55.0497 1136 Boot type: Safe boot with network
01:01:55.0497 1136 ============================================================
01:01:56.0479 1136 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
01:01:56.0479 1136 ============================================================
01:01:56.0479 1136 \Device\Harddisk0\DR0:
01:01:56.0479 1136 MBR partitions:
01:01:56.0479 1136 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
01:01:56.0479 1136 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x34BA1000
01:01:56.0511 1136 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x34C06000, BlocksNum 0x39FD800
01:01:56.0511 1136 ============================================================
01:01:56.0557 1136 C: <-> \Device\Harddisk0\DR0\Partition2
01:01:56.0589 1136 D: <-> \Device\Harddisk0\DR0\Partition3
01:01:56.0589 1136 ============================================================
01:01:56.0589 1136 Initialize success
01:01:56.0589 1136 ============================================================
01:02:04.0903 1504 ============================================================
01:02:04.0903 1504 Scan started
01:02:04.0903 1504 Mode: Manual; SigCheck; TDLFS;
01:02:04.0903 1504 ============================================================
01:02:05.0559 1504 ================ Scan system memory ========================
01:02:05.0559 1504 System memory - ok
01:02:05.0559 1504 ================ Scan services =============================
01:02:05.0730 1504 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\windows\system32\DRIVERS\1394ohci.sys
01:02:05.0761 1504 1394ohci - ok
01:02:05.0808 1504 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\windows\system32\DRIVERS\ACPI.sys
01:02:05.0824 1504 ACPI - ok
01:02:05.0855 1504 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\windows\system32\DRIVERS\acpipmi.sys
01:02:05.0871 1504 AcpiPmi - ok
01:02:05.0917 1504 [ E4D3DD5A1FC4AEF696D34D4B97049343 ] ACPIVPC C:\windows\system32\DRIVERS\AcpiVpc.sys
01:02:05.0917 1504 ACPIVPC - ok
01:02:05.0964 1504 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\windows\system32\DRIVERS\adp94xx.sys
01:02:05.0980 1504 adp94xx - ok
01:02:06.0011 1504 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\windows\system32\DRIVERS\adpahci.sys
01:02:06.0027 1504 adpahci - ok
01:02:06.0042 1504 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\windows\system32\DRIVERS\adpu320.sys
01:02:06.0042 1504 adpu320 - ok
01:02:06.0073 1504 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
01:02:06.0089 1504 AeLookupSvc - ok
01:02:06.0136 1504 [ 0DB7A48388D54D154EBEC120461A0FCD ] AFD C:\windows\system32\drivers\afd.sys
01:02:06.0151 1504 AFD - ok
01:02:06.0198 1504 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\windows\system32\DRIVERS\agp440.sys
01:02:06.0198 1504 agp440 - ok
01:02:06.0229 1504 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\windows\system32\DRIVERS\djsvs.sys
01:02:06.0245 1504 aic78xx - ok
01:02:06.0292 1504 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\windows\System32\alg.exe
01:02:06.0307 1504 ALG - ok
01:02:06.0323 1504 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\windows\system32\DRIVERS\aliide.sys
01:02:06.0323 1504 aliide - ok
01:02:06.0370 1504 [ 925441EDF2EA096C082587D9FB8E1872 ] AMD External Events Utility C:\windows\system32\atiesrxx.exe
01:02:06.0385 1504 AMD External Events Utility - ok
01:02:06.0417 1504 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\windows\system32\DRIVERS\amdagp.sys
01:02:06.0432 1504 amdagp - ok
01:02:06.0448 1504 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\windows\system32\DRIVERS\amdide.sys
01:02:06.0463 1504 amdide - ok
01:02:06.0479 1504 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\windows\system32\DRIVERS\amdk8.sys
01:02:06.0495 1504 AmdK8 - ok
01:02:06.0635 1504 [ 70AF0409DE16E6EF7BE74F98652EFC37 ] amdkmdag C:\windows\system32\DRIVERS\atipmdag.sys
01:02:06.0697 1504 amdkmdag - ok
01:02:06.0744 1504 [ 0B484B58E0DCB55B8D74952B7D9E8AD2 ] amdkmdap C:\windows\system32\DRIVERS\atikmpag.sys
01:02:06.0760 1504 amdkmdap - ok
01:02:06.0791 1504 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\windows\system32\DRIVERS\amdppm.sys
01:02:06.0807 1504 AmdPPM - ok
01:02:06.0853 1504 [ 19CE906B4CDC11FC4FEF5745F33A63B6 ] amdsata C:\windows\system32\drivers\amdsata.sys
01:02:06.0869 1504 amdsata - ok
01:02:06.0900 1504 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\windows\system32\DRIVERS\amdsbs.sys
01:02:06.0900 1504 amdsbs - ok
01:02:06.0931 1504 [ 869E67D66BE326A5A9159FBA8746FA70 ] amdxata C:\windows\system32\drivers\amdxata.sys
01:02:06.0947 1504 amdxata - ok
01:02:07.0056 1504 [ 466A0D95960DAD3222C896D2CEA99993 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
01:02:07.0072 1504 AntiVirSchedulerService - ok
01:02:07.0119 1504 [ A489BE6BB0AA1FF406B488B60542314B ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
01:02:07.0119 1504 AntiVirService - ok
01:02:07.0165 1504 [ FD6D4BC1CF7D1FEC5A17588007ECAFB5 ] ApfiltrService C:\windows\system32\DRIVERS\Apfiltr.sys
01:02:07.0165 1504 ApfiltrService - ok
01:02:07.0212 1504 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\windows\system32\drivers\appid.sys
01:02:07.0228 1504 AppID - ok
01:02:07.0290 1504 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\windows\System32\appidsvc.dll
01:02:07.0306 1504 AppIDSvc - ok
01:02:07.0337 1504 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\windows\System32\appinfo.dll
01:02:07.0337 1504 Appinfo - ok
01:02:07.0431 1504 [ 20F6F19FE9E753F2780DC2FA083AD597 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
01:02:07.0446 1504 Apple Mobile Device - ok
01:02:07.0493 1504 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\windows\system32\DRIVERS\arc.sys
01:02:07.0493 1504 arc - ok
01:02:07.0509 1504 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\windows\system32\DRIVERS\arcsas.sys
01:02:07.0509 1504 arcsas - ok
01:02:07.0540 1504 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
01:02:07.0571 1504 AsyncMac - ok
01:02:07.0587 1504 [ 338C86357871C167A96AB976519BF59E ] atapi C:\windows\system32\DRIVERS\atapi.sys
01:02:07.0602 1504 atapi - ok
01:02:07.0649 1504 [ ACA01C43D065E546C6DC88EA669CECA6 ] AtiPcie C:\windows\system32\DRIVERS\AtiPcie.sys
01:02:07.0649 1504 AtiPcie - ok
01:02:07.0696 1504 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
01:02:07.0727 1504 AudioEndpointBuilder - ok
01:02:07.0743 1504 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\windows\System32\Audiosrv.dll
01:02:07.0774 1504 Audiosrv - ok
01:02:07.0836 1504 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\windows\system32\DRIVERS\avgntflt.sys
01:02:07.0836 1504 avgntflt - ok
01:02:07.0883 1504 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\windows\system32\DRIVERS\avipbb.sys
01:02:07.0899 1504 avipbb - ok
01:02:07.0914 1504 [ 53E56450DA16A1A7F0D002F511113F67 ] avkmgr C:\windows\system32\DRIVERS\avkmgr.sys
01:02:07.0930 1504 avkmgr - ok
01:02:07.0961 1504 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\windows\System32\AxInstSV.dll
01:02:07.0977 1504 AxInstSV - ok
01:02:08.0008 1504 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\windows\system32\DRIVERS\bxvbdx.sys
01:02:08.0023 1504 b06bdrv - ok
01:02:08.0086 1504 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\windows\system32\DRIVERS\b57nd60x.sys
01:02:08.0086 1504 b57nd60x - ok
01:02:08.0211 1504 [ 2ED050291BC1D7F9E322E328DB3AAECF ] BBSvc C:\Program Files\Microsoft\BingBar\BBSvc.EXE
01:02:08.0211 1504 BBSvc - ok
01:02:08.0242 1504 [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate C:\Program Files\Microsoft\BingBar\SeaPort.EXE
01:02:08.0257 1504 BBUpdate - ok
01:02:08.0335 1504 [ CDA161020BF75B12728AE394196AD991 ] BCM43XX C:\windows\system32\DRIVERS\bcmwl6.sys
01:02:08.0382 1504 BCM43XX - ok
01:02:08.0460 1504 [ 6163664C7E9CD110AF70180C126C3FDC ] BcmSqlStartupSvc C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
01:02:08.0460 1504 BcmSqlStartupSvc - ok
01:02:08.0523 1504 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\windows\System32\bdesvc.dll
01:02:08.0538 1504 BDESVC - ok
01:02:08.0569 1504 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\windows\system32\drivers\Beep.sys
01:02:08.0601 1504 Beep - ok
01:02:08.0647 1504 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\windows\System32\bfe.dll
01:02:08.0663 1504 BFE - ok
01:02:08.0710 1504 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\windows\System32\qmgr.dll
01:02:08.0741 1504 BITS - ok
01:02:08.0741 1504 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
01:02:08.0757 1504 blbdrive - ok
01:02:08.0835 1504 [ F2060A34C8A75BC24A9222EB4F8C07BD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
01:02:08.0850 1504 Bonjour Service - ok
01:02:08.0881 1504 [ 9A5C671B7FBAE4865149BB11F59B91B2 ] bowser C:\windows\system32\DRIVERS\bowser.sys
01:02:08.0881 1504 bowser - ok
01:02:08.0913 1504 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\windows\system32\DRIVERS\BrFiltLo.sys
01:02:08.0928 1504 BrFiltLo - ok
01:02:08.0928 1504 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\windows\system32\DRIVERS\BrFiltUp.sys
01:02:08.0944 1504 BrFiltUp - ok
01:02:08.0975 1504 [ B35BB97B6DD9913093579F5C83962636 ] Bridge0 C:\windows\system32\drivers\WDBridge.sys
01:02:08.0975 1504 Bridge0 - ok
01:02:09.0006 1504 [ A0E691DC6589D4D2CBE373171D1A49E5 ] Browser C:\windows\System32\browser.dll
01:02:09.0022 1504 Browser - ok
01:02:09.0037 1504 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\windows\System32\Drivers\Brserid.sys
01:02:09.0053 1504 Brserid - ok
01:02:09.0069 1504 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
01:02:09.0084 1504 BrSerWdm - ok
01:02:09.0100 1504 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
01:02:09.0115 1504 BrUsbMdm - ok
01:02:09.0115 1504 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
01:02:09.0131 1504 BrUsbSer - ok
01:02:09.0193 1504 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\windows\system32\drivers\BthEnum.sys
01:02:09.0209 1504 BthEnum - ok
01:02:09.0225 1504 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys
01:02:09.0240 1504 BTHMODEM - ok
01:02:09.0256 1504 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\windows\system32\DRIVERS\bthpan.sys
01:02:09.0256 1504 BthPan - ok
01:02:09.0287 1504 [ 04CEDA17A195924070B01174CB1F9AF8 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys
01:02:09.0303 1504 BTHPORT - ok
01:02:09.0334 1504 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\windows\system32\bthserv.dll
01:02:09.0349 1504 bthserv - ok
01:02:09.0381 1504 [ 80E6384BEEC03B8BD45EDEA29802D657 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys
01:02:09.0381 1504 BTHUSB - ok
01:02:09.0412 1504 [ CE5833C144CA6623BCBDE93B188AA850 ] btwaudio C:\windows\system32\drivers\btwaudio.sys
01:02:09.0427 1504 btwaudio - ok
01:02:09.0443 1504 [ AF9148C3E844131AC954CB53FF43D971 ] btwavdt C:\windows\system32\drivers\btwavdt.sys
01:02:09.0443 1504 btwavdt - ok
01:02:09.0537 1504 [ F55C99818FD1EACFC7784958A8592536 ] btwdins C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
01:02:09.0552 1504 btwdins - ok
01:02:09.0599 1504 [ AAFD7CB76BA61FBB08E302DA208C974A ] btwl2cap C:\windows\system32\DRIVERS\btwl2cap.sys
01:02:09.0599 1504 btwl2cap - ok
01:02:09.0599 1504 [ 480B3D195854B2E55299CDDDDC50BCF9 ] btwrchid C:\windows\system32\DRIVERS\btwrchid.sys
01:02:09.0615 1504 btwrchid - ok
01:02:09.0646 1504 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
01:02:09.0661 1504 cdfs - ok
01:02:09.0708 1504 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
01:02:09.0724 1504 cdrom - ok
01:02:09.0755 1504 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\windows\System32\certprop.dll
01:02:09.0786 1504 CertPropSvc - ok
01:02:09.0802 1504 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\windows\system32\DRIVERS\circlass.sys
01:02:09.0802 1504 circlass - ok
01:02:09.0833 1504 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\windows\system32\CLFS.sys
01:02:09.0849 1504 CLFS - ok
01:02:09.0942 1504 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:02:09.0958 1504 clr_optimization_v2.0.50727_32 - ok
01:02:10.0036 1504 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
01:02:10.0051 1504 clr_optimization_v4.0.30319_32 - ok
01:02:10.0051 1504 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
01:02:10.0067 1504 CmBatt - ok
01:02:10.0098 1504 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\windows\system32\DRIVERS\cmdide.sys
01:02:10.0098 1504 cmdide - ok
01:02:10.0161 1504 [ DB5E008B3744DD60C8498CBBF2A1CFA6 ] CNG C:\windows\system32\Drivers\cng.sys
01:02:10.0176 1504 CNG - ok
01:02:10.0239 1504 [ 38B2B74DD1515CF70E8E33AB3A16CA07 ] CnxtHdAudService C:\windows\system32\drivers\CHDRT32.sys
01:02:10.0254 1504 CnxtHdAudService - ok
01:02:10.0285 1504 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\windows\system32\DRIVERS\compbatt.sys
01:02:10.0301 1504 Compbatt - ok
01:02:10.0332 1504 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys
01:02:10.0348 1504 CompositeBus - ok
01:02:10.0363 1504 COMSysApp - ok
01:02:10.0379 1504 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\windows\system32\DRIVERS\crcdisk.sys
01:02:10.0395 1504 crcdisk - ok
01:02:10.0457 1504 [ F2FDE6C8DBAAD44CC58D1E07E4AF4EED ] CryptSvc C:\windows\system32\cryptsvc.dll
01:02:10.0457 1504 CryptSvc - ok
01:02:10.0488 1504 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\windows\system32\rpcss.dll
01:02:10.0519 1504 DcomLaunch - ok
01:02:10.0551 1504 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\windows\System32\defragsvc.dll
01:02:10.0566 1504 defragsvc - ok
01:02:10.0597 1504 [ 83D1ECEA8FAAE75604C0FA49AC7AD996 ] DfsC C:\windows\system32\Drivers\dfsc.sys
01:02:10.0597 1504 DfsC - ok
01:02:10.0644 1504 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\windows\system32\dhcpcore.dll
01:02:10.0660 1504 Dhcp - ok
01:02:10.0675 1504 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\windows\system32\drivers\discache.sys
01:02:10.0707 1504 discache - ok
01:02:10.0753 1504 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\windows\system32\DRIVERS\disk.sys
01:02:10.0769 1504 Disk - ok
01:02:10.0785 1504 [ B15BE77A2BACF9C3177D27518AFE26A9 ] Dnscache C:\windows\System32\dnsrslvr.dll
01:02:10.0800 1504 Dnscache - ok
01:02:10.0847 1504 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\windows\System32\dot3svc.dll
01:02:10.0878 1504 dot3svc - ok
01:02:10.0894 1504 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\windows\system32\dps.dll
01:02:10.0925 1504 DPS - ok
01:02:10.0956 1504 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
01:02:10.0972 1504 drmkaud - ok
01:02:11.0003 1504 [ 1679A4669326CB1A67CC95658D273234 ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
01:02:11.0019 1504 DXGKrnl - ok
01:02:11.0050 1504 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\windows\System32\eapsvc.dll
01:02:11.0081 1504 EapHost - ok
01:02:11.0175 1504 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\windows\system32\DRIVERS\evbdx.sys
01:02:11.0221 1504 ebdrv - ok
01:02:11.0237 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] EFS C:\windows\System32\lsass.exe
01:02:11.0253 1504 EFS - ok
01:02:11.0331 1504 [ 1697C39978CD69F6FBC15302EDCECE1F ] ehRecvr C:\windows\ehome\ehRecvr.exe
01:02:11.0346 1504 ehRecvr - ok
01:02:11.0377 1504 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\windows\ehome\ehsched.exe
01:02:11.0393 1504 ehSched - ok
01:02:11.0440 1504 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\windows\system32\DRIVERS\elxstor.sys
01:02:11.0455 1504 elxstor - ok
01:02:11.0471 1504 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\windows\system32\DRIVERS\errdev.sys
01:02:11.0487 1504 ErrDev - ok
01:02:11.0533 1504 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\windows\system32\es.dll
01:02:11.0565 1504 EventSystem - ok
01:02:11.0580 1504 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\windows\system32\drivers\exfat.sys
01:02:11.0611 1504 exfat - ok
01:02:11.0643 1504 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\windows\system32\drivers\fastfat.sys
01:02:11.0674 1504 fastfat - ok
01:02:11.0721 1504 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\windows\system32\fxssvc.exe
01:02:11.0736 1504 Fax - ok
01:02:11.0767 1504 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\windows\system32\DRIVERS\fdc.sys
01:02:11.0767 1504 fdc - ok
01:02:11.0799 1504 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\windows\system32\fdPHost.dll
01:02:11.0830 1504 fdPHost - ok
01:02:11.0845 1504 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\windows\system32\fdrespub.dll
01:02:11.0861 1504 FDResPub - ok
01:02:11.0892 1504 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
01:02:11.0892 1504 FileInfo - ok
01:02:11.0908 1504 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\windows\system32\drivers\filetrace.sys
01:02:11.0923 1504 Filetrace - ok
01:02:11.0939 1504 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\windows\system32\DRIVERS\flpydisk.sys
01:02:11.0955 1504 flpydisk - ok
01:02:11.0970 1504 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
01:02:11.0986 1504 FltMgr - ok
01:02:12.0048 1504 [ 7FE4995528A7529A761875151EE3D512 ] FontCache C:\windows\system32\FntCache.dll
01:02:12.0064 1504 FontCache - ok
01:02:12.0142 1504 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
01:02:12.0142 1504 FontCache3.0.0.0 - ok
01:02:12.0157 1504 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\windows\system32\drivers\FsDepends.sys
01:02:12.0173 1504 FsDepends - ok
01:02:12.0204 1504 [ 500A9814FD9446A8126858A5A7F7D273 ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
01:02:12.0204 1504 Fs_Rec - ok
01:02:12.0251 1504 [ DAFBD9FE39197495AED6D51F3B85B5D2 ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
01:02:12.0267 1504 fvevol - ok
01:02:12.0298 1504 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\windows\system32\DRIVERS\gagp30kx.sys
01:02:12.0313 1504 gagp30kx - ok
01:02:12.0345 1504 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
01:02:12.0360 1504 GEARAspiWDM - ok
01:02:12.0376 1504 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\windows\System32\gpsvc.dll
01:02:12.0407 1504 gpsvc - ok
01:02:12.0423 1504 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
01:02:12.0423 1504 hcw85cir - ok
01:02:12.0454 1504 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
01:02:12.0469 1504 HdAudAddService - ok
01:02:12.0501 1504 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys
01:02:12.0516 1504 HDAudBus - ok
01:02:12.0532 1504 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\windows\system32\DRIVERS\HidBatt.sys
01:02:12.0547 1504 HidBatt - ok
01:02:12.0563 1504 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\windows\system32\DRIVERS\hidbth.sys
01:02:12.0563 1504 HidBth - ok
01:02:12.0579 1504 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\windows\system32\DRIVERS\hidir.sys
01:02:12.0594 1504 HidIr - ok
01:02:12.0641 1504 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\windows\system32\hidserv.dll
01:02:12.0657 1504 hidserv - ok
01:02:12.0719 1504 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
01:02:12.0735 1504 HidUsb - ok
01:02:12.0735 1504 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\windows\system32\kmsvc.dll
01:02:12.0766 1504 hkmsvc - ok
01:02:12.0781 1504 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\windows\system32\ListSvc.dll
01:02:12.0797 1504 HomeGroupListener - ok
01:02:12.0813 1504 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\windows\system32\provsvc.dll
01:02:12.0828 1504 HomeGroupProvider - ok
01:02:12.0875 1504 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\windows\system32\DRIVERS\HpSAMD.sys
01:02:12.0891 1504 HpSAMD - ok
01:02:12.0922 1504 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\windows\system32\drivers\HTTP.sys
01:02:12.0953 1504 HTTP - ok
01:02:12.0953 1504 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
01:02:12.0969 1504 hwpolicy - ok
01:02:13.0031 1504 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys
01:02:13.0047 1504 i8042prt - ok
01:02:13.0062 1504 [ 71F1A494FEDF4B33C02C4A6A28D6D9E9 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
01:02:13.0078 1504 iaStorV - ok
01:02:13.0125 1504 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
01:02:13.0140 1504 idsvc - ok
01:02:13.0249 1504 [ AD626F6964F4D364D226C39E06872DD3 ] igfx C:\windows\system32\DRIVERS\igdkmd32.sys
01:02:13.0312 1504 igfx - ok
01:02:13.0374 1504 [ D951D20153E51928F9DB2227D6FF5C7A ] IGRS C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
01:02:13.0374 1504 IGRS - ok
01:02:13.0405 1504 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\windows\system32\DRIVERS\iirsp.sys
01:02:13.0421 1504 iirsp - ok
01:02:13.0468 1504 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\windows\System32\ikeext.dll
01:02:13.0499 1504 IKEEXT - ok
01:02:13.0515 1504 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\windows\system32\DRIVERS\intelide.sys
01:02:13.0530 1504 intelide - ok
01:02:13.0561 1504 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
01:02:13.0577 1504 intelppm - ok
01:02:13.0608 1504 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\windows\system32\ipbusenum.dll
01:02:13.0624 1504 IPBusEnum - ok
01:02:13.0655 1504 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
01:02:13.0671 1504 IpFilterDriver - ok
01:02:13.0717 1504 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
01:02:13.0749 1504 iphlpsvc - ok
01:02:13.0764 1504 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\windows\system32\DRIVERS\IPMIDrv.sys
01:02:13.0764 1504 IPMIDRV - ok
01:02:13.0795 1504 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\windows\system32\drivers\ipnat.sys
01:02:13.0827 1504 IPNAT - ok
01:02:13.0889 1504 [ B84A28B3984185EDA8867541AF14CDDB ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
01:02:13.0905 1504 iPod Service - ok
01:02:13.0920 1504 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\windows\system32\drivers\irenum.sys
01:02:13.0936 1504 IRENUM - ok
01:02:13.0983 1504 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\windows\system32\DRIVERS\isapnp.sys
01:02:13.0983 1504 isapnp - ok
01:02:14.0014 1504 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\windows\system32\DRIVERS\msiscsi.sys
01:02:14.0029 1504 iScsiPrt - ok
01:02:14.0061 1504 [ C4C95805B85BCE1EB9D20F4A02FC5F9B ] k57nd60x C:\windows\system32\DRIVERS\k57nd60x.sys
01:02:14.0076 1504 k57nd60x - ok
01:02:14.0107 1504 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
01:02:14.0107 1504 kbdclass - ok
01:02:14.0139 1504 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
01:02:14.0154 1504 kbdhid - ok
01:02:14.0170 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] KeyIso C:\windows\system32\lsass.exe
01:02:14.0185 1504 KeyIso - ok
01:02:14.0232 1504 [ 52FC17C8589F11747D01D3CF592673D0 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
01:02:14.0232 1504 KSecDD - ok
01:02:14.0263 1504 [ 3E5474B03568CFAB834DA3C38E8C9EFA ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
01:02:14.0279 1504 KSecPkg - ok
01:02:14.0310 1504 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\windows\system32\msdtckrm.dll
01:02:14.0326 1504 KtmRm - ok
01:02:14.0373 1504 [ 3705B2273E8EFC9A707864AB7324B614 ] L1C C:\windows\system32\DRIVERS\L1C62x86.sys
01:02:14.0373 1504 L1C - ok
01:02:14.0419 1504 [ 8F6BF790D3168224C16F2AF68A84438C ] LanmanServer C:\windows\system32\srvsvc.dll
01:02:14.0435 1504 LanmanServer - ok
01:02:14.0482 1504 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\windows\System32\wkssvc.dll
01:02:14.0497 1504 LanmanWorkstation - ok
01:02:14.0544 1504 [ 7FCB3EC66361F157BCD5B5C33CE2AC16 ] Lenovo ReadyComm AppSvc C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
01:02:14.0560 1504 Lenovo ReadyComm AppSvc - ok
01:02:14.0591 1504 [ 04D9897EAAAE535C4B7DD61574F1A021 ] Lenovo ReadyComm ConnSvc C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
01:02:14.0607 1504 Lenovo ReadyComm ConnSvc - ok
01:02:14.0653 1504 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
01:02:14.0669 1504 lltdio - ok
01:02:14.0716 1504 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\windows\System32\lltdsvc.dll
01:02:14.0731 1504 lltdsvc - ok
01:02:14.0747 1504 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\windows\System32\lmhsvc.dll
01:02:14.0778 1504 lmhosts - ok
01:02:14.0809 1504 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\windows\system32\DRIVERS\lsi_fc.sys
01:02:14.0825 1504 LSI_FC - ok
01:02:14.0825 1504 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\windows\system32\DRIVERS\lsi_sas.sys
01:02:14.0841 1504 LSI_SAS - ok
01:02:14.0856 1504 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\windows\system32\DRIVERS\lsi_sas2.sys
01:02:14.0872 1504 LSI_SAS2 - ok
01:02:14.0887 1504 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\windows\system32\DRIVERS\lsi_scsi.sys
01:02:14.0887 1504 LSI_SCSI - ok
01:02:14.0919 1504 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\windows\system32\drivers\luafv.sys
01:02:14.0934 1504 luafv - ok
01:02:14.0981 1504 [ 500D089CE760D83DA2B6CBA681AA9949 ] MBAMProtector C:\windows\system32\drivers\mbam.sys
01:02:14.0997 1504 MBAMProtector - ok
01:02:15.0043 1504 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
01:02:15.0059 1504 MBAMScheduler - ok
01:02:15.0090 1504 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
01:02:15.0106 1504 MBAMService - ok
01:02:15.0184 1504 [ AAC3B33BA020D2AF530D694A5A920180 ] McAfee SiteAdvisor Service C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
01:02:15.0199 1504 McAfee SiteAdvisor Service - ok
01:02:15.0277 1504 [ 652D2AFB3E0785C7158CD71496811A58 ] mcmscsvc C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
01:02:15.0293 1504 mcmscsvc - ok
01:02:15.0402 1504 [ 2DBD66025339C2540EFECFFBB5EB2380 ] McNASvc c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
01:02:15.0449 1504 McNASvc - ok
01:02:15.0496 1504 [ 2916D5FAE4B8637A957888EAC3CE3534 ] McODS C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
01:02:15.0511 1504 McODS - ok
01:02:15.0527 1504 [ 447FA93BB3E0AD783B1AD39B60C843E8 ] McProxy c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
01:02:15.0543 1504 McProxy - ok
01:02:15.0558 1504 [ 5C4260CA6B57F18ECFA6522B745D1129 ] McShield C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
01:02:15.0574 1504 McShield - ok
01:02:15.0589 1504 [ A6DFA048299D05BDDB08FC59FFE090F6 ] McSysmon C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
01:02:15.0605 1504 McSysmon - ok
01:02:15.0636 1504 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
01:02:15.0636 1504 Mcx2Svc - ok
01:02:15.0683 1504 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\windows\system32\DRIVERS\megasas.sys
01:02:15.0683 1504 megasas - ok
01:02:15.0714 1504 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\windows\system32\DRIVERS\MegaSR.sys
01:02:15.0730 1504 MegaSR - ok
01:02:15.0761 1504 [ 64B96DE8C492BD435372D9130A535F1D ] mfeavfk C:\windows\system32\drivers\mfeavfk.sys
01:02:15.0777 1504 mfeavfk - ok
01:02:15.0792 1504 [ 078E87A89D36CC3516F19D5FB518BDDC ] mfebopk C:\windows\system32\drivers\mfebopk.sys
01:02:15.0792 1504 mfebopk - ok
01:02:15.0808 1504 [ 168C565101FD5B9DB694EFDEC91FAFA9 ] mfehidk C:\windows\system32\drivers\mfehidk.sys
01:02:15.0823 1504 mfehidk - ok
01:02:15.0823 1504 [ F7488FABF1DC4CED93BE36907EBC4749 ] mferkdk C:\windows\system32\drivers\mferkdk.sys
01:02:15.0839 1504 mferkdk - ok
01:02:15.0839 1504 [ 63DD7B6D8A31DCE0298E86DE3873D013 ] mfesmfk C:\windows\system32\drivers\mfesmfk.sys
01:02:15.0855 1504 mfesmfk - ok
01:02:15.0886 1504 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\windows\system32\mmcss.dll
01:02:15.0901 1504 MMCSS - ok
01:02:15.0917 1504 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\windows\system32\drivers\modem.sys
01:02:15.0933 1504 Modem - ok
01:02:15.0979 1504 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\windows\system32\DRIVERS\monitor.sys
01:02:15.0995 1504 monitor - ok
01:02:16.0026 1504 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
01:02:16.0042 1504 mouclass - ok
01:02:16.0073 1504 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
01:02:16.0073 1504 mouhid - ok
01:02:16.0104 1504 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\windows\system32\drivers\mountmgr.sys
01:02:16.0104 1504 mountmgr - ok
01:02:16.0182 1504 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
01:02:16.0198 1504 MozillaMaintenance - ok
01:02:16.0213 1504 [ 95675C3398DCC084C8D1DC35CC4E9E01 ] MPFP C:\windows\system32\Drivers\Mpfp.sys
01:02:16.0229 1504 MPFP - ok
01:02:16.0291 1504 [ DFC0623E02C35F33971EBE3B7D23AC5E ] MpfService C:\Program Files\McAfee\MPF\MPFSrv.exe
01:02:16.0307 1504 MpfService - ok
01:02:16.0338 1504 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\windows\system32\DRIVERS\mpio.sys
01:02:16.0338 1504 mpio - ok
01:02:16.0354 1504 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
01:02:16.0369 1504 mpsdrv - ok
01:02:16.0432 1504 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\windows\system32\mpssvc.dll
01:02:16.0463 1504 MpsSvc - ok
01:02:16.0494 1504 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
01:02:16.0510 1504 MRxDAV - ok
01:02:16.0557 1504 [ CA7570E42522E24324A12161DB14EC02 ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
01:02:16.0557 1504 mrxsmb - ok
01:02:16.0603 1504 [ F965C3AB2B2AE5C378F4562486E35051 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
01:02:16.0619 1504 mrxsmb10 - ok
01:02:16.0635 1504 [ 25C38264A3C72594DD21D355D70D7A5D ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
01:02:16.0650 1504 mrxsmb20 - ok
01:02:16.0666 1504 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\windows\system32\DRIVERS\msahci.sys
01:02:16.0681 1504 msahci - ok
01:02:16.0713 1504 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\windows\system32\DRIVERS\msdsm.sys
01:02:16.0728 1504 msdsm - ok
01:02:16.0759 1504 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\windows\System32\msdtc.exe
01:02:16.0775 1504 MSDTC - ok
01:02:16.0775 1504 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\windows\system32\drivers\Msfs.sys
01:02:16.0806 1504 Msfs - ok
01:02:16.0822 1504 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
01:02:16.0853 1504 mshidkmdf - ok
01:02:16.0869 1504 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\windows\system32\DRIVERS\msisadrv.sys
01:02:16.0884 1504 msisadrv - ok
01:02:16.0915 1504 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\windows\system32\iscsiexe.dll
01:02:16.0931 1504 MSiSCSI - ok
01:02:16.0947 1504 msiserver - ok
01:02:16.0978 1504 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
01:02:16.0993 1504 MSKSSRV - ok
01:02:17.0009 1504 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
01:02:17.0040 1504 MSPCLOCK - ok
01:02:17.0056 1504 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
01:02:17.0071 1504 MSPQM - ok
01:02:17.0087 1504 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\windows\system32\drivers\MsRPC.sys
01:02:17.0103 1504 MsRPC - ok
01:02:17.0118 1504 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys
01:02:17.0134 1504 mssmbios - ok
01:02:17.0181 1504 MSSQL$MSSMLBIZ - ok
01:02:17.0212 1504 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe
01:02:17.0227 1504 MSSQLServerADHelper - ok
01:02:17.0259 1504 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
01:02:17.0290 1504 MSTEE - ok
01:02:17.0290 1504 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\windows\system32\DRIVERS\MTConfig.sys
01:02:17.0305 1504 MTConfig - ok
01:02:17.0321 1504 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\windows\system32\Drivers\mup.sys
01:02:17.0321 1504 Mup - ok
01:02:17.0352 1504 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\windows\system32\qagentRT.dll
01:02:17.0383 1504 napagent - ok
01:02:17.0446 1504 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
01:02:17.0461 1504 NativeWifiP - ok
01:02:17.0524 1504 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\windows\system32\drivers\ndis.sys
01:02:17.0539 1504 NDIS - ok
01:02:17.0571 1504 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
01:02:17.0602 1504 NdisCap - ok
01:02:17.0633 1504 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
01:02:17.0649 1504 NdisTapi - ok
01:02:17.0711 1504 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
01:02:17.0727 1504 Ndisuio - ok
01:02:17.0742 1504 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
01:02:17.0758 1504 NdisWan - ok
01:02:17.0773 1504 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
01:02:17.0805 1504 NDProxy - ok
01:02:17.0836 1504 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
01:02:17.0851 1504 NetBIOS - ok
01:02:17.0867 1504 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
01:02:17.0898 1504 NetBT - ok
01:02:17.0914 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] Netlogon C:\windows\system32\lsass.exe
01:02:17.0914 1504 Netlogon - ok
01:02:17.0976 1504 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\windows\System32\netman.dll
01:02:17.0992 1504 Netman - ok
01:02:18.0007 1504 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\windows\System32\netprofm.dll
01:02:18.0039 1504 netprofm - ok
01:02:18.0070 1504 [ FE2AA5A684B0DD9B1FAE57B7817C198B ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
01:02:18.0070 1504 NetTcpPortSharing - ok
01:02:18.0179 1504 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\windows\system32\DRIVERS\netw5v32.sys
01:02:18.0241 1504 netw5v32 - ok
01:02:18.0273 1504 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\windows\system32\DRIVERS\nfrd960.sys
01:02:18.0273 1504 nfrd960 - ok
01:02:18.0304 1504 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\windows\System32\nlasvc.dll
01:02:18.0335 1504 NlaSvc - ok
01:02:18.0351 1504 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\windows\system32\drivers\Npfs.sys
01:02:18.0382 1504 Npfs - ok
01:02:18.0397 1504 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\windows\system32\nsisvc.dll
01:02:18.0429 1504 nsi - ok
01:02:18.0429 1504 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
01:02:18.0460 1504 nsiproxy - ok
01:02:18.0538 1504 [ 5126C5402C730C2A953275D8497A4715 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
01:02:18.0553 1504 Ntfs - ok
01:02:18.0585 1504 [ F9756A98D69098DCA8945D62858A812C ] Null C:\windows\system32\drivers\Null.sys
01:02:18.0616 1504 Null - ok
01:02:18.0647 1504 [ F1B0BED906F97E16F6D0C3629D2F21C6 ] nvraid C:\windows\system32\drivers\nvraid.sys
01:02:18.0647 1504 nvraid - ok
01:02:18.0663 1504 [ 4520B63899E867F354EE012D34E11536 ] nvstor C:\windows\system32\drivers\nvstor.sys
01:02:18.0678 1504 nvstor - ok
01:02:18.0709 1504 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\windows\system32\DRIVERS\nv_agp.sys
01:02:18.0725 1504 nv_agp - ok
01:02:18.0803 1504 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
01:02:18.0819 1504 odserv - ok
01:02:18.0850 1504 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\windows\system32\DRIVERS\ohci1394.sys
01:02:18.0850 1504 ohci1394 - ok
01:02:18.0881 1504 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
01:02:18.0881 1504 ose - ok
01:02:18.0912 1504 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\windows\system32\pnrpsvc.dll
01:02:18.0928 1504 p2pimsvc - ok
01:02:18.0959 1504 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\windows\system32\p2psvc.dll
01:02:18.0975 1504 p2psvc - ok
01:02:19.0006 1504 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\windows\system32\DRIVERS\parport.sys
01:02:19.0006 1504 Parport - ok
01:02:19.0037 1504 [ 66D3415C159741ADE7038A277EFFF99F ] partmgr C:\windows\system32\drivers\partmgr.sys
01:02:19.0053 1504 partmgr - ok
01:02:19.0068 1504 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\windows\system32\DRIVERS\parvdm.sys
01:02:19.0068 1504 Parvdm - ok
01:02:19.0084 1504 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\windows\System32\pcasvc.dll
01:02:19.0099 1504 PcaSvc - ok
01:02:19.0131 1504 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\windows\system32\DRIVERS\pci.sys
01:02:19.0146 1504 pci - ok
01:02:19.0177 1504 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\windows\system32\DRIVERS\pciide.sys
01:02:19.0177 1504 pciide - ok
01:02:19.0209 1504 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\windows\system32\DRIVERS\pcmcia.sys
01:02:19.0224 1504 pcmcia - ok
01:02:19.0240 1504 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\windows\system32\drivers\pcw.sys
01:02:19.0255 1504 pcw - ok
01:02:19.0287 1504 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\windows\system32\drivers\peauth.sys
01:02:19.0318 1504 PEAUTH - ok
01:02:19.0380 1504 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\windows\system32\pla.dll
01:02:19.0427 1504 pla - ok
01:02:19.0474 1504 [ 71DEF5EC79774C798342D0EA16E41780 ] PlugPlay C:\windows\system32\umpnpmgr.dll
01:02:19.0489 1504 PlugPlay - ok
01:02:19.0505 1504 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
01:02:19.0505 1504 PNRPAutoReg - ok
01:02:19.0521 1504 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\windows\system32\pnrpsvc.dll
01:02:19.0536 1504 PNRPsvc - ok
01:02:19.0567 1504 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
01:02:19.0599 1504 PolicyAgent - ok
01:02:19.0645 1504 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\windows\system32\umpo.dll
01:02:19.0677 1504 Power - ok
01:02:19.0708 1504 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
01:02:19.0739 1504 PptpMiniport - ok
01:02:19.0755 1504 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\windows\system32\DRIVERS\processr.sys
01:02:19.0770 1504 Processor - ok
01:02:19.0801 1504 [ AEA3BDBDBA667AA6F678CB38907E4F5E ] ProfSvc C:\windows\system32\profsvc.dll
01:02:19.0817 1504 ProfSvc - ok
01:02:19.0833 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] ProtectedStorage C:\windows\system32\lsass.exe
01:02:19.0848 1504 ProtectedStorage - ok
01:02:19.0879 1504 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\windows\system32\DRIVERS\pacer.sys
01:02:19.0895 1504 Psched - ok
01:02:19.0911 1504 PS_MDP - ok
01:02:19.0942 1504 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\windows\system32\DRIVERS\ql2300.sys
01:02:19.0973 1504 ql2300 - ok
01:02:19.0989 1504 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\windows\system32\DRIVERS\ql40xx.sys
01:02:20.0004 1504 ql40xx - ok
01:02:20.0020 1504 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\windows\system32\qwave.dll
01:02:20.0035 1504 QWAVE - ok
01:02:20.0051 1504 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
01:02:20.0067 1504 QWAVEdrv - ok
01:02:20.0082 1504 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
01:02:20.0098 1504 RasAcd - ok
01:02:20.0129 1504 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
01:02:20.0145 1504 RasAgileVpn - ok
01:02:20.0176 1504 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\windows\System32\rasauto.dll
01:02:20.0191 1504 RasAuto - ok
01:02:20.0223 1504 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
01:02:20.0238 1504 Rasl2tp - ok
01:02:20.0269 1504 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\windows\System32\rasmans.dll
01:02:20.0285 1504 RasMan - ok
01:02:20.0316 1504 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
01:02:20.0332 1504 RasPppoe - ok
01:02:20.0363 1504 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
01:02:20.0379 1504 RasSstp - ok
01:02:20.0410 1504 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
01:02:20.0425 1504 rdbss - ok
01:02:20.0457 1504 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\windows\system32\DRIVERS\rdpbus.sys
01:02:20.0457 1504 rdpbus - ok
01:02:20.0472 1504 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
01:02:20.0488 1504 RDPCDD - ok
01:02:20.0535 1504 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
01:02:20.0550 1504 RDPENCDD - ok
01:02:20.0566 1504 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
01:02:20.0581 1504 RDPREFMP - ok
01:02:20.0613 1504 [ C5B8D47A4688DE9D335204EA757C2240 ] RDPWD C:\windows\system32\drivers\RDPWD.sys
01:02:20.0628 1504 RDPWD - ok
01:02:20.0659 1504 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
01:02:20.0675 1504 rdyboost - ok
01:02:20.0675 1504 ReadyComm.DirectRouter - ok
01:02:20.0706 1504 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\windows\System32\mprdim.dll
01:02:20.0737 1504 RemoteAccess - ok
01:02:20.0769 1504 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\windows\system32\regsvc.dll
01:02:20.0784 1504 RemoteRegistry - ok
01:02:20.0815 1504 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys
01:02:20.0831 1504 RFCOMM - ok
01:02:20.0862 1504 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
01:02:20.0893 1504 RpcEptMapper - ok
01:02:20.0925 1504 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\windows\system32\locator.exe
01:02:20.0925 1504 RpcLocator - ok
01:02:20.0956 1504 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\windows\system32\rpcss.dll
01:02:20.0987 1504 RpcSs - ok
01:02:21.0003 1504 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
01:02:21.0018 1504 rspndr - ok
01:02:21.0065 1504 [ 5BEF0FD9B6E57BBC6F7920E3118AE108 ] RSUSBSTOR C:\windows\system32\Drivers\RtsUStor.sys
01:02:21.0081 1504 RSUSBSTOR - ok
01:02:21.0096 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] SamSs C:\windows\system32\lsass.exe
01:02:21.0112 1504 SamSs - ok
01:02:21.0143 1504 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\windows\system32\DRIVERS\sbp2port.sys
01:02:21.0143 1504 sbp2port - ok
01:02:21.0174 1504 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\windows\System32\SCardSvr.dll
01:02:21.0190 1504 SCardSvr - ok
01:02:21.0205 1504 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
01:02:21.0221 1504 scfilter - ok
01:02:21.0268 1504 [ DF1E5C82E4D09CF8105CC644980C4803 ] Schedule C:\windows\system32\schedsvc.dll
01:02:21.0283 1504 Schedule - ok
01:02:21.0299 1504 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\windows\System32\certprop.dll
01:02:21.0330 1504 SCPolicySvc - ok
01:02:21.0346 1504 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\windows\System32\SDRSVC.dll
01:02:21.0346 1504 SDRSVC - ok
01:02:21.0393 1504 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\windows\system32\drivers\secdrv.sys
01:02:21.0424 1504 secdrv - ok
01:02:21.0439 1504 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\windows\system32\seclogon.dll
01:02:21.0455 1504 seclogon - ok
01:02:21.0486 1504 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\windows\System32\sens.dll
01:02:21.0517 1504 SENS - ok
01:02:21.0533 1504 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\windows\system32\sensrsvc.dll
01:02:21.0549 1504 SensrSvc - ok
01:02:21.0549 1504 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\windows\system32\DRIVERS\serenum.sys
01:02:21.0564 1504 Serenum - ok
01:02:21.0595 1504 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\windows\system32\DRIVERS\serial.sys
01:02:21.0611 1504 Serial - ok
01:02:21.0611 1504 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\windows\system32\DRIVERS\sermouse.sys
01:02:21.0627 1504 sermouse - ok
01:02:21.0658 1504 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\windows\system32\sessenv.dll
01:02:21.0673 1504 SessionEnv - ok
01:02:21.0689 1504 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\windows\system32\DRIVERS\sffdisk.sys
01:02:21.0705 1504 sffdisk - ok
01:02:21.0720 1504 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\windows\system32\DRIVERS\sffp_mmc.sys
01:02:21.0736 1504 sffp_mmc - ok
01:02:21.0751 1504 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\windows\system32\DRIVERS\sffp_sd.sys
01:02:21.0751 1504 sffp_sd - ok
01:02:21.0767 1504 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\windows\system32\DRIVERS\sfloppy.sys
01:02:21.0783 1504 sfloppy - ok
01:02:21.0798 1504 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\windows\System32\ipnathlp.dll
01:02:21.0829 1504 SharedAccess - ok
01:02:21.0861 1504 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\windows\System32\shsvcs.dll
01:02:21.0876 1504 ShellHWDetection - ok
01:02:21.0892 1504 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\windows\system32\DRIVERS\sisagp.sys
01:02:21.0907 1504 sisagp - ok
01:02:21.0939 1504 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\windows\system32\DRIVERS\SiSRaid2.sys
01:02:21.0954 1504 SiSRaid2 - ok
01:02:21.0970 1504 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\windows\system32\DRIVERS\sisraid4.sys
01:02:21.0985 1504 SiSRaid4 - ok
01:02:22.0017 1504 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\windows\system32\DRIVERS\smb.sys
01:02:22.0032 1504 Smb - ok
01:02:22.0079 1504 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\windows\System32\snmptrap.exe
01:02:22.0095 1504 SNMPTRAP - ok
01:02:22.0095 1504 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\windows\system32\drivers\spldr.sys
01:02:22.0110 1504 spldr - ok
01:02:22.0157 1504 [ E17323B0AA9FB3FF9945731D736EDA2F ] Spooler C:\windows\System32\spoolsv.exe
01:02:22.0173 1504 Spooler - ok
01:02:22.0251 1504 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\windows\system32\sppsvc.exe
01:02:22.0297 1504 sppsvc - ok
01:02:22.0313 1504 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\windows\system32\sppuinotify.dll
01:02:22.0329 1504 sppuinotify - ok
01:02:22.0375 1504 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
01:02:22.0391 1504 SQLBrowser - ok
01:02:22.0422 1504 [ D89083C4EB02DACA8F944B0E05E57F9D ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
01:02:22.0438 1504 SQLWriter - ok
01:02:22.0453 1504 [ C4A027B8C0BD3FC0699F41FA5E9E0C87 ] srv C:\windows\system32\DRIVERS\srv.sys
01:02:22.0469 1504 srv - ok
01:02:22.0485 1504 [ 414BB592CAD8A79649D01F9D94318FB3 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
01:02:22.0500 1504 srv2 - ok
01:02:22.0516 1504 [ FF207D67700AA18242AAF985D3E7D8F4 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
01:02:22.0531 1504 srvnet - ok
01:02:22.0563 1504 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
01:02:22.0578 1504 SSDPSRV - ok
01:02:22.0625 1504 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\windows\system32\DRIVERS\ssmdrv.sys
01:02:22.0625 1504 ssmdrv - ok
01:02:22.0641 1504 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\windows\system32\sstpsvc.dll
01:02:22.0672 1504 SstpSvc - ok
01:02:22.0719 1504 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\windows\system32\DRIVERS\stexstor.sys
01:02:22.0734 1504 stexstor - ok
01:02:22.0781 1504 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\windows\System32\wiaservc.dll
01:02:22.0797 1504 StiSvc - ok
01:02:22.0843 1504 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\windows\system32\DRIVERS\swenum.sys
01:02:22.0859 1504 swenum - ok
01:02:22.0875 1504 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\windows\System32\swprv.dll
01:02:22.0906 1504 swprv - ok
01:02:22.0953 1504 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\windows\system32\sysmain.dll
01:02:22.0968 1504 SysMain - ok
01:02:22.0984 1504 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\windows\System32\TabSvc.dll
01:02:22.0999 1504 TabletInputService - ok
01:02:23.0015 1504 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\windows\System32\tapisrv.dll
01:02:23.0046 1504 TapiSrv - ok
01:02:23.0062 1504 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\windows\System32\tbssvc.dll
01:02:23.0077 1504 TBS - ok
01:02:23.0140 1504 [ 55E9965552741F3850CB22CBBA9671ED ] Tcpip C:\windows\system32\drivers\tcpip.sys
01:02:23.0171 1504 Tcpip - ok
01:02:23.0218 1504 [ 55E9965552741F3850CB22CBBA9671ED ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
01:02:23.0249 1504 TCPIP6 - ok
01:02:23.0280 1504 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
01:02:23.0311 1504 tcpipreg - ok
01:02:23.0327 1504 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
01:02:23.0327 1504 TDPIPE - ok
01:02:23.0358 1504 [ 7156308896D34EA75A582F9A09E50C17 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
01:02:23.0374 1504 TDTCP - ok
01:02:23.0389 1504 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\windows\system32\DRIVERS\tdx.sys
01:02:23.0421 1504 tdx - ok
01:02:23.0436 1504 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys
01:02:23.0452 1504 TermDD - ok
01:02:23.0467 1504 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\windows\System32\termsrv.dll
01:02:23.0499 1504 TermService - ok
01:02:23.0514 1504 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\windows\system32\themeservice.dll
01:02:23.0530 1504 Themes - ok
01:02:23.0545 1504 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\windows\system32\mmcss.dll
01:02:23.0577 1504 THREADORDER - ok
01:02:23.0608 1504 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\windows\System32\trkwks.dll
01:02:23.0623 1504 TrkWks - ok
01:02:23.0686 1504 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
01:02:23.0686 1504 TrustedInstaller - ok
01:02:23.0717 1504 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
01:02:23.0733 1504 tssecsrv - ok
01:02:23.0764 1504 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
01:02:23.0795 1504 tunnel - ok
01:02:23.0826 1504 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\windows\system32\DRIVERS\uagp35.sys
01:02:23.0842 1504 uagp35 - ok
01:02:23.0842 1504 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\windows\system32\DRIVERS\udfs.sys
01:02:23.0873 1504 udfs - ok
01:02:23.0904 1504 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\windows\system32\UI0Detect.exe
01:02:23.0904 1504 UI0Detect - ok
01:02:23.0935 1504 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\windows\system32\DRIVERS\uliagpkx.sys
01:02:23.0935 1504 uliagpkx - ok
01:02:23.0967 1504 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\windows\system32\DRIVERS\umbus.sys
01:02:23.0982 1504 umbus - ok
01:02:23.0982 1504 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\windows\system32\DRIVERS\umpass.sys
01:02:23.0998 1504 UmPass - ok
01:02:24.0013 1504 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\windows\System32\upnphost.dll
01:02:24.0045 1504 upnphost - ok
01:02:24.0107 1504 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\windows\system32\Drivers\usbaapl.sys
01:02:24.0123 1504 USBAAPL - ok
01:02:24.0154 1504 [ C31AE588E403042632DC796CF09E30B0 ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
01:02:24.0169 1504 usbccgp - ok
01:02:24.0185 1504 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\windows\system32\DRIVERS\usbcir.sys
01:02:24.0201 1504 usbcir - ok
01:02:24.0232 1504 [ E4C436D914768CE965D5E659BA7EEBD8 ] usbehci C:\windows\system32\DRIVERS\usbehci.sys
01:02:24.0232 1504 usbehci - ok
01:02:24.0279 1504 [ E5B14557793164DB879EE56F5B59C3E2 ] usbfilter C:\windows\system32\DRIVERS\usbfilter.sys
01:02:24.0279 1504 usbfilter - ok
01:02:24.0325 1504 [ BDCD7156EC37448F08633FD899823620 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
01:02:24.0341 1504 usbhub - ok
01:02:24.0388 1504 [ EB2D819A639015253C871CDA09D91D58 ] usbohci C:\windows\system32\DRIVERS\usbohci.sys
01:02:24.0403 1504 usbohci - ok
01:02:24.0435 1504 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
01:02:24.0435 1504 usbprint - ok
01:02:24.0481 1504 [ 6E90FC65F27AE98FFFB0741CEFE75679 ] usbsmi C:\windows\system32\DRIVERS\SMIksdrv.sys
01:02:24.0481 1504 usbsmi - ok
01:02:24.0513 1504 [ 1C4287739A93594E57E2A9E6A3ED7353 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
01:02:24.0528 1504 USBSTOR - ok
01:02:24.0575 1504 [ 22480BF4E5A09192E5E30BA4DDE79FA4 ] usbuhci C:\windows\system32\drivers\usbuhci.sys
01:02:24.0575 1504 usbuhci - ok
01:02:24.0606 1504 [ B5F6A992D996282B7FAE7048E50AF83A ] usbvideo C:\windows\System32\Drivers\usbvideo.sys
01:02:24.0606 1504 usbvideo - ok
01:02:24.0637 1504 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\windows\System32\uxsms.dll
01:02:24.0653 1504 UxSms - ok
01:02:24.0669 1504 [ C2243FF9E9AAD0C30E8B1A0914DA15B6 ] VaultSvc C:\windows\system32\lsass.exe
01:02:24.0669 1504 VaultSvc - ok
01:02:24.0700 1504 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\windows\system32\DRIVERS\vdrvroot.sys
01:02:24.0700 1504 vdrvroot - ok
01:02:24.0731 1504 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\windows\System32\vds.exe
01:02:24.0747 1504 vds - ok
01:02:24.0778 1504 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\windows\system32\DRIVERS\vgapnp.sys
01:02:24.0793 1504 vga - ok
01:02:24.0809 1504 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\windows\System32\drivers\vga.sys
01:02:24.0825 1504 VgaSave - ok
01:02:24.0840 1504 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\windows\system32\DRIVERS\vhdmp.sys
01:02:24.0856 1504 vhdmp - ok
01:02:24.0871 1504 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\windows\system32\DRIVERS\viaagp.sys
01:02:24.0887 1504 viaagp - ok
01:02:24.0887 1504 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\windows\system32\DRIVERS\viac7.sys
01:02:24.0903 1504 ViaC7 - ok
01:02:24.0918 1504 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\windows\system32\DRIVERS\viaide.sys
01:02:24.0934 1504 viaide - ok
01:02:24.0949 1504 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\windows\system32\DRIVERS\volmgr.sys
01:02:24.0949 1504 volmgr - ok
01:02:24.0981 1504 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\windows\system32\drivers\volmgrx.sys
01:02:24.0996 1504 volmgrx - ok
01:02:25.0027 1504 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\windows\system32\DRIVERS\volsnap.sys
01:02:25.0027 1504 volsnap - ok
01:02:25.0074 1504 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\windows\system32\DRIVERS\vsmraid.sys
01:02:25.0074 1504 vsmraid - ok
01:02:25.0121 1504 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\windows\system32\vssvc.exe
01:02:25.0152 1504 VSS - ok
01:02:25.0168 1504 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
01:02:25.0168 1504 vwifibus - ok
01:02:25.0199 1504 [ 7090D3436EEB4E7DA3373090A23448F7 ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
01:02:25.0215 1504 vwififlt - ok
01:02:25.0246 1504 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\windows\system32\w32time.dll
01:02:25.0277 1504 W32Time - ok
01:02:25.0293 1504 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\windows\system32\DRIVERS\wacompen.sys
01:02:25.0308 1504 WacomPen - ok
01:02:25.0324 1504 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
01:02:25.0339 1504 WANARP - ok
01:02:25.0355 1504 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
01:02:25.0371 1504 Wanarpv6 - ok
01:02:25.0433 1504 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\windows\system32\wbengine.exe
01:02:25.0449 1504 wbengine - ok
01:02:25.0464 1504 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
01:02:25.0480 1504 WbioSrvc - ok
01:02:25.0527 1504 [ 6D9B75275C3E3A5F51AEF81AFFADB2B6 ] wcncsvc C:\windows\System32\wcncsvc.dll
01:02:25.0542 1504 wcncsvc - ok
01:02:25.0558 1504 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
01:02:25.0558 1504 WcsPlugInService - ok
01:02:25.0589 1504 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\windows\system32\DRIVERS\wd.sys
01:02:25.0589 1504 Wd - ok
01:02:25.0605 1504 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
01:02:25.0620 1504 Wdf01000 - ok
01:02:25.0636 1504 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\windows\system32\wdi.dll
01:02:25.0651 1504 WdiServiceHost - ok
01:02:25.0651 1504 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\windows\system32\wdi.dll
01:02:25.0667 1504 WdiSystemHost - ok
01:02:25.0698 1504 [ EA4E9DD00E69B35F9BD3D39ACB113E3F ] wdmirror C:\windows\system32\DRIVERS\WDMirror.sys
01:02:25.0698 1504 wdmirror - ok
01:02:25.0729 1504 [ BB5EC38F8D4600119B4720BC5D4211F1 ] WebClient C:\windows\System32\webclnt.dll
01:02:25.0745 1504 WebClient - ok
01:02:25.0776 1504 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\windows\system32\wecsvc.dll
01:02:25.0792 1504 Wecsvc - ok
01:02:25.0807 1504 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\windows\System32\wercplsupport.dll
01:02:25.0839 1504 wercplsupport - ok
01:02:25.0870 1504 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\windows\System32\WerSvc.dll
01:02:25.0901 1504 WerSvc - ok
01:02:25.0917 1504 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
01:02:25.0948 1504 WfpLwf - ok
01:02:25.0963 1504 [ F9AD3A5E3FD7E0BDB18B8202B0FDD4E4 ] WimFltr C:\windows\system32\DRIVERS\wimfltr.sys
01:02:25.0979 1504 WimFltr - ok
01:02:25.0995 1504 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\windows\system32\drivers\wimmount.sys
01:02:25.0995 1504 WIMMount - ok
01:02:26.0057 1504 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
01:02:26.0073 1504 WinDefend - ok
01:02:26.0088 1504 WinHttpAutoProxySvc - ok
01:02:26.0135 1504 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
01:02:26.0151 1504 Winmgmt - ok
01:02:26.0197 1504 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\windows\system32\WsmSvc.dll
01:02:26.0229 1504 WinRM - ok
01:02:26.0291 1504 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\windows\System32\wlansvc.dll
01:02:26.0307 1504 Wlansvc - ok
01:02:26.0322 1504 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys
01:02:26.0338 1504 WmiAcpi - ok
01:02:26.0353 1504 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
01:02:26.0369 1504 wmiApSrv - ok
01:02:26.0447 1504 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
01:02:26.0478 1504 WMPNetworkSvc - ok
01:02:26.0494 1504 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\windows\System32\wpcsvc.dll
01:02:26.0509 1504 WPCSvc - ok
01:02:26.0525 1504 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
01:02:26.0541 1504 WPDBusEnum - ok
01:02:26.0572 1504 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
01:02:26.0587 1504 ws2ifsl - ok
01:02:26.0603 1504 [ A661A76333057B383A06E65F0073222F ] wscsvc C:\windows\System32\wscsvc.dll
01:02:26.0619 1504 wscsvc - ok
01:02:26.0619 1504 WSearch - ok
01:02:26.0665 1504 [ BAEDC491374DEFD5E76336901D6D397D ] wsvd C:\windows\system32\DRIVERS\wsvd.sys
01:02:26.0665 1504 wsvd - ok
01:02:26.0728 1504 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\windows\system32\wuaueng.dll
01:02:26.0775 1504 wuauserv - ok
01:02:26.0790 1504 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\windows\system32\drivers\WudfPf.sys
01:02:26.0821 1504 WudfPf - ok
01:02:26.0853 1504 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
01:02:26.0884 1504 WUDFRd - ok
01:02:26.0915 1504 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\windows\System32\WUDFSvc.dll
01:02:26.0931 1504 wudfsvc - ok
01:02:26.0946 1504 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\windows\System32\wwansvc.dll
01:02:26.0962 1504 WwanSvc - ok
01:02:26.0993 1504 ================ Scan global ===============================
01:02:27.0024 1504 [ 9A595DF601070DA78C40481120DD2C06 ] C:\windows\system32\basesrv.dll
01:02:27.0055 1504 [ 43B34CADB516800794BDF486E493ED32 ] C:\windows\system32\winsrv.dll
01:02:27.0071 1504 [ 43B34CADB516800794BDF486E493ED32 ] C:\windows\system32\winsrv.dll
01:02:27.0071 1504 [ 364455805E64882844EE9ACB72522830 ] C:\windows\system32\sxssrv.dll
01:02:27.0102 1504 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\windows\system32\services.exe
01:02:27.0102 1504 [Global] - ok
01:02:27.0102 1504 ================ Scan MBR ==================================
01:02:27.0118 1504 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
01:02:27.0555 1504 \Device\Harddisk0\DR0 - ok
01:02:27.0555 1504 ================ Scan VBR ==================================
01:02:27.0555 1504 [ 75896E11913F3940BC31D0BAE13F9766 ] \Device\Harddisk0\DR0\Partition1
01:02:27.0555 1504 \Device\Harddisk0\DR0\Partition1 - ok
01:02:27.0586 1504 [ 4AD90760B871589BB843A030B6E34AAC ] \Device\Harddisk0\DR0\Partition2
01:02:27.0586 1504 \Device\Harddisk0\DR0\Partition2 - ok
01:02:27.0617 1504 [ 7726BAAED51A393C1BE168BE226010F9 ] \Device\Harddisk0\DR0\Partition3
01:02:27.0633 1504 \Device\Harddisk0\DR0\Partition3 - ok
01:02:27.0633 1504 ============================================================
01:02:27.0633 1504 Scan finished
01:02:27.0633 1504 ============================================================
01:02:27.0633 1996 Detected object count: 0
01:02:27.0633 1996 Actual detected object count: 0
01:08:35.0077 1928 Deinitialize success

sorry anders hab ich es nicht reingekriegt...
MfG Doppelgänger

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2


WICHTIG - Speichere Combofix auf deinem Desktop

• Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo
Hab mein Avira und McAfee deinstalliert und vom Laptop entfernen lassen, doch ComboFix zeigt mir an, dass sie immernoch aktiv sind. Hatte beide Programme bei "Programme und Funktionen" deinstalliert, danach entfernt und den Laptop neu gestartet und trotzdem kommt noch die Meldung.
Soll ich den Suchlauf trotzdem machen oder lieber nicht?
Danke
MfG Doppelgänger

du brauchst es nicht zu deinstalieren, wobei, 2 av programme auf einem pc sowieso nicht gut sind, instaliere eines von beiden, deaktiviere dann den hintergrund wächter, und starte combofix, warnmeldung dann mit ok bestätigen damit cf weiter läuft

Hi
So hab ComboFix ausgeführt. Anbei die log
MfG Doppelgänger

lade den CCleaner standard:
CCleaner Download - CCleaner 3.24.1850
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.